New Entrant Safety Audit: The First-Year Compliance Guide for New Carriers

Every New Carrier Gets One

There is a common misunderstanding among people starting a trucking company: that the FMCSA safety audit is something that happens to carriers who do something wrong. It isn't. The New Entrant Safety Assurance Program under 49 CFR Part 385, Subpart D applies to every carrier that gets a USDOT number and begins interstate operations. You are not selected for it. You are enrolled in it the moment your registration activates.

The audit is not a roadside inspection and it is not a crash investigation. It is a documentation review, and that distinction matters more than anything else in this article. An auditor is not evaluating whether you are a safe driver or whether your equipment looks good. They are evaluating whether you have systems that produce records, and whether those records exist when asked for. New carriers rarely fail because they were unsafe. They fail because nobody was keeping the file.

This guide covers the whole audit: what it is, when it happens, what changed in 2026, all six areas an auditor reviews, the violations that fail you on the spot, and what to do if you get a failing result.

What the Audit Actually Reviews

The safety audit is a review of your safety management systems and a sample of your required records, assessed against the Federal Motor Carrier Safety Regulations and the recordkeeping requirements in Appendix A to Part 385. It covers six areas:

1. Driver qualification (Part 391 and Part 383)
2. Drug and alcohol testing (Part 382)
3. Hours of service (Part 395)
4. Vehicle maintenance and inspection (Part 396)
5. Accident register (Part 390)
6. Insurance and financial responsibility (Part 387)

Audits may be conducted on site or remotely. Remote audits have become routine, which in practice means you will be asked to produce documents on a deadline rather than hand a folder to someone standing in your office. If your records live in a filing cabinet at a yard you visit twice a week, or in a shoebox, or in one person's email, that deadline is where the trouble starts.

One thing the audit is not: a safety rating. A new entrant audit does not produce a Satisfactory, Conditional, or Unsatisfactory rating the way a full compliance review does. It produces a pass or a fail against your basic safety management controls.

When It Happens

Two timeframes matter, and they are frequently confused.

The audit itself. Under 49 CFR 385.307, FMCSA conducts the safety audit once you have been operating long enough to have records worth evaluating, a period the regulation describes as "generally at least 3 months." The agency's target is to complete the audit within your first 12 months of operation. So the practical window is roughly month three through month twelve. You will get advance notice, but not a lot of it, and the notice arrives at the contact information in your registration record. Keeping that contact record current is not a formality.

The new entrant period. Separately, you remain in new entrant status for 18 months, during which FMCSA monitors your roadside inspection and crash data to confirm your safety management controls are actually working. Passing the audit does not end this monitoring. It continues, and poor roadside performance during the period can still put your registration at risk.

The gap between those two numbers is where new carriers get complacent. The audit is not the finish line. It is a checkpoint inside a longer probation.

What Changed: MC Numbers Are Gone and Motus Is Live

If you are reading older guidance about starting a carrier, some of it is now wrong. Two structural changes landed recently.

MC numbers no longer exist for new applicants. As of October 1, 2025, FMCSA stopped issuing MC, MX, and FF docket numbers. The USDOT number is now the sole identifier for every entity registered with the agency, with a suffix indicating the type of authority held (carrier, broker, freight forwarder). Existing MC numbers were not retroactively replaced, but no new ones are being issued. If a service is offering to get you an MC number, that is a signal about the service, not about the requirement.

Motus replaced the legacy registration systems. On May 19, 2026, FMCSA launched Motus, its new USDOT Registration System, consolidating what used to be a fragmented set of legacy portals. Registration, operating authority designation, and insurance filing now run through a single application flow rather than the old two-step process with a separate OP-1 filing.

For a new carrier, the practical effects are: one application instead of two, one identifier instead of two, and enhanced identity verification on the front end. For an existing carrier, there is an action item that is easy to miss, which is claiming your USDOT number inside Motus and verifying your company information so you retain control of your own registration record. Carriers who never claim their record can find themselves unable to update it when they need to, and an out-of-date registration record is exactly how a carrier misses its audit notice.

The 16 Violations That Fail You Instantly

This is the part of the regulation most new carriers have never read, and it is the part that should shape how you set up your operation.

Under 49 CFR 385.321(b), there are 16 violations that constitute automatic failure of the safety audit. A single one of them fails you. It does not matter how clean the rest of your records are. There is no weighing, no partial credit, and no discretion.

#	Regulation	Violation
1	382.115(a) / 382.115(b)	Failing to implement an alcohol and/or controlled substances testing program
2	382.201	Using a driver known to have an alcohol content of 0.04 or greater
3	382.211	Using a driver who has refused to submit to an alcohol or controlled substances test
4	382.215	Using a driver known to have tested positive for a controlled substance
5	382.305	Failing to implement a random controlled substances and/or alcohol testing program
6	383.3(a) / 383.23(a)	Knowingly using a driver who does not possess a valid CDL
7	383.37(b)	Knowingly allowing a driver to operate a CMV with a suspended, revoked, or canceled CDL
8	383.51(a)	Knowingly allowing a disqualified driver to operate a CMV
9	387.7(a)	Operating without the required minimum levels of financial responsibility
10	387.31(a)	Operating a passenger carrying vehicle without required minimum financial responsibility
11	391.15(a)	Knowingly using a disqualified driver
12	391.11(b)(4)	Knowingly using a physically unqualified driver
13	395.8(a)	Failing to require drivers to make records of duty status
14	396.9(c)(2)	Operating a CMV declared out of service before repairs were made
15	396.11(a)(3)	Failing to correct out-of-service defects listed on a driver vehicle inspection report
16	396.17(a)	Using a CMV that has not been periodically inspected

Two of these, items 13 and 16, are evaluated against a threshold: the automatic failure applies when the violation appears in 51% or more of the records examined. The other fourteen require only a single instance.

Now count them by category. Five are driver qualification failures (items 6, 7, 8, 11, and 12). Five more are drug and alcohol program failures (items 1 through 5). Ten of the sixteen automatic failures are things a properly maintained driver file would have caught before the driver ever touched a truck.

That is the argument for treating driver qualification as your first system rather than your last. Not because it is the biggest part of the audit by page count, but because it is where the highest concentration of unrecoverable failures lives.

Driver Qualification: Where New Carriers Lose

Every driver you employ needs a qualification file, and it needs to be built before they drive, not reconstructed before the audit. Auditors are experienced at spotting reconstruction. Documents dated in a suspicious cluster, signatures in the same fresh ink, an MVR pulled last Tuesday for a driver hired eight months ago: these tell a story, and it is not a flattering one.

Here is what belongs in the file, with the regulation that requires it.

The employment application (391.21). A complete application covering the previous 10 years of employment history, with all three years of commercial driving history accounted for. Incomplete applications are among the most-cited findings in DOT audits generally, and the usual failure is not a missing application but one whose timeline does not hold together. The rule asks for employer names, dates, and reasons for leaving; auditors read the result as a timeline and expect the years accounted for. "Unemployed" is a perfectly acceptable entry for a gap. A hole in the dates is an invitation to dig.

A copy of the CDL. Current, unexpired, with the correct class and any endorsements the job requires. Check the expiration date against your calendar, not against your memory.

The pre-employment MVR (391.23). You must obtain a motor vehicle record from every state where the driver held a license in the past three years, and you must request it within 30 days of the date of hire. Missing the 30-day window is itself the violation, even if you eventually pull the record.

The annual MVR and review (391.25). Once a year, on a rolling 12-month cycle from the last review, you pull a fresh MVR and document a review of it. The review note needs the reviewer's name and the date of the review; the signature requirement came out of the rule in the 2022 amendments, though most carriers still sign as a matter of habit. An MVR sitting in a file with no evidence anyone looked at it does not satisfy the rule. Our guide to FMCSA MVR requirements covers the timing traps in more depth.

The previous employer inquiry (391.23). You must investigate the driver's safety performance history with every DOT-regulated employer from the past three years, and you must make good faith efforts to do so. This is the single most-cited FMCSA violation, and it is the one new carriers most often skip because the previous employer never responds. Non-response is not a defense. Documentation of your attempts is. Log every call, every fax, every email, with dates.

Clearinghouse queries (382.701). A full query before hire and a limited query annually thereafter. Since January 6, 2023, the Clearinghouse has replaced the old drug and alcohol portion of the previous employer inquiry for the three-year lookback period, so the Clearinghouse query is not an addition to the employment verification process, it is a substitution for part of it. If a limited query indicates information exists, you must run a full query within 24 hours; miss that window and the driver comes off safety-sensitive duty until the full query comes back clear. See our Clearinghouse guide for the query mechanics.

The medical examiner's certificate (391.41, 391.43, 391.45). The driver must be medically certified by an examiner listed on the National Registry. How this certification is verified has changed, and the paper card in your file may no longer be the operative proof. Our article on DOT physical requirements and certification changes explains what to keep and what now flows through the state licensing agency.

The road test certificate or equivalent (391.31, 391.33). You either administer a road test and issue a certificate, or you accept an equivalent under 391.33: a valid CDL, or a road test certificate issued within the past three years. One caveat and one habit: a CDL cannot stand in for the road test if the driver will pull doubles or triples or drive a tank vehicle, and whatever equivalent you accept, keep a copy of it in the file.

One item to note for anyone working from older checklists: the annual list of violations certification formerly required under 391.27 was repealed effective May 9, 2022. If a template you downloaded still includes it, the template predates the change.

For the full document-by-document breakdown, including retention rules after a driver leaves, see our complete guide to FMCSA driver qualification files and our breakdown of the most common DOT audit violations.

Your Drug and Alcohol Program

Five automatic failures live here, and the most common one for new carriers is the simplest: not having a program at all before putting a driver to work.

Pre-employment testing (382.301). A negative drug test result must be in hand before the driver performs any safety-sensitive function. Not ordered. Not pending. Received and negative.

A random testing pool. You must be enrolled in a random testing consortium or operate your own pool, with selections made throughout the year. For 2026, FMCSA has kept the rates unchanged: 50% for controlled substances and 10% for alcohol, calculated against your average number of driver positions. Owner-operators and single-driver carriers are not exempt. You still need to be in a pool, which for a one-driver operation means joining a consortium.

A designated employer representative. You must name a DER who can receive test results and immediately remove a driver from safety-sensitive duty. For a small carrier this is usually the owner, but it needs to be documented, not assumed.

Post-accident, reasonable suspicion, return-to-duty, and follow-up testing policies. Written, distributed to drivers, with signed receipt acknowledgments retained.

A Clearinghouse account. Registered, with queries running, and with your consortium or third-party administrator properly designated if you use one.

The pattern in this section is that every requirement has a paper artifact. The policy exists only if the signed acknowledgment exists. The pool membership exists only if the consortium agreement exists. Build the artifact when you build the process.

The Other Four Areas

These matter, and failing them fails the audit, but they are more familiar territory for most people entering trucking.

Hours of Service and ELDs

Drivers must make records of duty status, and 395.8(a) becomes an automatic failure when the deficiency appears in 51% or more of the records examined. If you are ELD-regulated, you need a registered device, drivers trained to use it, and the ability to produce logs on demand. Keep supporting documents (bills of lading, fuel receipts, dispatch records) for six months, because auditors use them to test whether your logs are honest. Short-haul exceptions exist, but if you claim one, keep the time records that substantiate it.

Vehicle Maintenance and Inspections

Three of the automatic failures are here. You need annual periodic inspection records for every vehicle (396.17), driver vehicle inspection reports with documented correction of any defects (396.11), and an absolute rule that out-of-service vehicles do not move until repaired (396.9). Maintain a file per vehicle covering identification, maintenance schedule, and repair history, and retain it for the period the regulation requires.

The Accident Register

Under 390.15(b), you must maintain an accident register covering the past three years, recording the date, city and state, driver name, number of injuries and fatalities, and whether hazardous materials were released. Two things trip new carriers here. First, "no accidents" still requires a register, an empty one, produced on request. A blank register is an answer. A shrug is a finding. Second, the DOT definition of a recordable accident is specific (a fatality, an injury requiring immediate medical treatment away from the scene, or disabling damage requiring a tow), and it is not the same as your insurance company's definition of a claim.

Insurance and Financial Responsibility

Operating without the required minimum coverage is an automatic failure under 387.7(a). For for-hire carriers of general freight in vehicles with a GVWR of 10,001 pounds or more, the minimum is $750,000. Hazardous materials carriers face higher tiers, $1,000,000 for oil and materials listed in 172.101 and $5,000,000 for certain bulk hazardous materials. Passenger carriers are covered separately under 387.33, at $5,000,000 for vehicles seating 16 or more and $1,500,000 for vehicles seating 15 or fewer.

The requirement is not just that coverage exists. It is that the filing is active with FMCSA. Coverage that lapsed in the agency's records, even briefly, even while you were actually insured, is a compliance problem.

What Happens If You Fail

Failing does not immediately end your business, but it starts a clock that does.

You receive written notice that your USDOT new entrant registration will be revoked and your operations placed out of service unless you take the corrective actions specified in the notice. Under 385.319(c), the deadlines are:

• 60 days for most carriers.
• 45 days for carriers transporting hazardous materials in quantities requiring placarding, and for passenger carriers operating vehicles designed to transport 9 to 15 passengers (including the driver) for direct compensation.

The corrective action plan is not a promise to do better. It has to demonstrate that you have actually fixed the underlying deficiency, with evidence: the completed files, the executed consortium agreement, the corrected inspection records, the written policies with signed acknowledgments. A plan that describes intentions gets rejected. A plan that attaches proof gets accepted.

Miss the deadline and your new entrant registration is revoked and your operations are placed out of service. At that point you are not fixing a file. You are not operating.

There is also the money. FMCSA civil penalties for most Part 382 and Parts 390 through 399 violations run up to $19,246 per violation, with recordkeeping deficiencies assessed up to $1,584 per day and capped at $15,846. Worth knowing for 2026: FMCSA published no inflation adjustment this year, because the government shutdown prevented the Bureau of Labor Statistics from producing the October 2025 CPI-U data the adjustment formula depends on. The 2025 amounts remain in effect. They are current, not stale.

The Day-One Checklist

If you are standing up a carrier right now, this is the order that keeps you out of trouble.

Before you haul anything:

• USDOT number active in Motus, company information verified, contact details correct
• Operating authority granted and insurance filing active with FMCSA
• Written drug and alcohol testing policy, distributed, with signed driver acknowledgments
• Random testing consortium enrollment executed
• Clearinghouse account registered, TPA designated if you use one
• DER named in writing

Before each driver's first dispatch:

• Completed 391.21 application with 10 years of employment history and no unexplained gaps
• Copy of current CDL with required endorsements
• Pre-employment Clearinghouse full query, returned clear
• Negative pre-employment drug test result in hand
• Current medical examiner's certificate, examiner verified on the National Registry
• Road test certificate or documented equivalent
• MVR requested (within 30 days of hire) and previous employer inquiries sent with attempts logged

Ongoing, on a calendar somebody owns:

• Annual MVR and documented review, per driver, on a rolling 12-month cycle
• Annual limited Clearinghouse query, per driver
• Medical certificate expirations tracked ahead of the date
• Random testing selections executed throughout the year, not batched in December
• Annual vehicle inspections current
• Accident register maintained, even if empty

Build the File Right the First Time

The uncomfortable truth about the new entrant audit is that almost nothing on that checklist is difficult. Every item is a specific document with a specific deadline. Carriers do not fail because the requirements are obscure. They fail because in the first year of a trucking company, the person responsible for compliance is also driving, dispatching, invoicing, and chasing fuel cards, and the file is the thing that waits until tomorrow. Then the audit notice arrives, and tomorrow is over.

Reconstructing a year of driver files under a deadline is worse in every way than building them correctly as you go. It costs more time, it produces obvious gaps, and some of the gaps cannot be closed retroactively. An MVR you should have pulled within 30 days of hire cannot be pulled late and made timely.

This is where a system beats memory. Core Compliance gives every driver a structured file with each required document tracked by type and expiration date, flags what is missing before it becomes a finding, and surfaces the rolling deadlines on your dashboard with a weekly digest every Monday and escalating alerts at 10, 5, and 1 day out. When the audit notice arrives, the answer to "produce your driver qualification files" is a few clicks, not a few weeks.

Start your free trial today. No credit card required.