New Entrant Safety Audit: What FMCSA Checks in Your First 12 Months

A new USDOT number comes with a probation period. For the first 18 months FMCSA treats you as a new entrant, and somewhere inside that window an auditor will ask to see your records. If you haul property, the rules say that audit should happen within 12 months after you receive your USDOT number. Nothing about it is a surprise: the regulation lists what the auditor looks at, which violations fail you on the spot, and how long you get to fix a failed audit. This guide walks through all of it in the order a carrier with one or a few trucks will meet it.

If you are still between MC approval and your first load, our checklist of the last compliance steps before you can run your first load covers what has to be in place before the truck moves. Everything below is about proving, months later, that it stayed in place.

The new entrant period and when the audit happens

Under 49 CFR 385.307, once a new carrier meets its pre-operational requirements it “will be subject to the new entrant safety monitoring procedures for a period of 18 months.” During that period FMCSA does two things. It watches your roadside inspection results, and it runs a safety audit on your operation.

The timing comes from the definitions in 49 CFR 385.3: “A safety audit must be performed on a new entrant’s operations within 12 months after receipt of its US DOT number for motor carriers of property and 120 days for motor carriers of passengers.” FMCSA’s New Entrant Safety Assurance Program page puts it more simply: the audit happens “Within 12 months after beginning operations.”

There is also a floor. Section 385.307(b) says the audit is run once you have been operating long enough “to have sufficient records to allow the agency to evaluate the adequacy of its basic safety management controls,” and that this “will generally be at least 3 months.” In practice that means the audit looks back at real logs, real inspection reports and real driver files, not at a binder you assembled the week before.

The audit “will generally be conducted at the new entrant’s business premises” (385.315), and it is performed by an individual certified to do safety audits (385.313). Under 385.307(c), all records required for the audit “shall be made available for inspection upon request.” Your notice from FMCSA or your state partner will say how and where to deliver them; follow that notice rather than any general description, including this one.

What the audit is, and what it is not

Section 385.309 gives the audit two purposes: educational and technical assistance for the new entrant, and gathering the safety data FMCSA needs to judge whether your basic safety management controls are adequate. The auditor reviews the findings with you when the audit ends. That does not make the result soft. A failed audit starts a clock that ends with revocation if you do nothing.

The audit also does not give you a safety rating. Section 385.317 says plainly: “A safety audit will not result in a safety fitness determination.” Ratings come from a compliance review, which is a different, deeper investigation. A new entrant can get a compliance review instead of an audit (385.335), and in that case it still stays in the 18-month monitoring period.

The five areas the auditor reviews

According to 49 CFR 385.311, the audit is “a review of the new entrant’s safety management systems and a sample of required records.” The listed areas “include, but are not limited to” driver qualification, driver duty status, vehicle maintenance, the accident register, and controlled substances and alcohol testing. Hazardous materials rules are added if you haul hazmat. Here is what each area means in records.

Driver qualification

Every driver needs a qualification file, including you if you drive your own truck. The audit criteria list “Failing to maintain driver qualification file on each driver employed” (391.51(a)), a missing driving record inquiry in the file (391.51(b)(2)), and a missing medical examiner’s certificate in the file (391.51(b)(6)) as critical violations. Using a driver who was not medically examined and certified, or whose exam is older than 24 months, is also on the list (391.45). Our guide on how to set up a driver qualification file goes through the file document by document.

Hours of service and records of duty status

The auditor samples your logs. The criteria count as critical any failure to require a driver to prepare or submit a record of duty status (395.8(a)), false duty status reports (395.8(e)(1)), and “Failing to preserve a driver’s record of duty status or supporting documents for 6 months” (395.8(k)(1)). The driving limits themselves are checked too: the 10-hour off-duty rule, the 14th hour, the 11-hour driving limit, the 30-minute break, and the 60 or 70 hour limits (395.3). Tampering with an ELD and failing to retain ELD data are acute violations, which weigh more.

Vehicle maintenance

Expect questions about three record sets. Maintenance and inspection records for each vehicle (“Failing to keep minimum records of inspection and vehicle maintenance,” 396.3(b)). Driver vehicle inspection reports (396.11(a)). And the periodic, usually annual, inspection for every vehicle you operate (396.17(a)). If a driver wrote up an out-of-service defect and the truck ran again before it was fixed, that is a single violation the regulation treats as an automatic failure, covered below.

Accident register

You keep a register of recordable accidents and copies of the accident reports required by states, other agencies or insurers. Missing those copies is a critical violation under 390.15(b)(2). A register with no entries is fine if you had no recordable accidents. Not having one is the problem.

Drug and alcohol testing

This is the area where new carriers lose the most, because two of its violations fail the audit on a single occurrence. Under 49 CFR 382.115(a), domestic employers “must implement the requirements of this part on the date the employer begins commercial motor vehicle operations.” Not after the first load, not when the audit letter comes. The auditor checks that you had a testing program, that you received a negative pre-employment drug test result before the driver started (382.301(a)), that you have a random testing program (382.305), and that post-accident tests were done when required (382.303).

Owner-operators often assume random testing cannot apply to a company of one. It does. Section 382.103(b) says an employer who employs only himself or herself as a driver “shall implement a random alcohol and controlled substances testing program of two or more covered employees in the random testing selection pool.” That is what a consortium is for; see do I need to join a D&A consortium as a new owner-operator. The Clearinghouse side, including the pre-employment and annual queries, is covered in our guide to Clearinghouse queries.

The 16 violations that fail the audit automatically

49 CFR 385.321(b) is the part of the rule to read twice. It says “A new entrant will automatically fail a safety audit if found in violation of any one of the following 16 regulations.” For 14 of them, one occurrence is enough. Two of them need a violation rate of 51% or more of the records examined.

Area	Automatic failure	Rule
Drug and alcohol	No alcohol and/or controlled substances testing program	382.115
Drug and alcohol	No random testing program	382.305
Drug and alcohol	Using a driver known to have an alcohol content of 0.04 or greater	382.201
Drug and alcohol	Using a driver who refused a required test	382.211
Drug and alcohol	Using a driver known to have tested positive	382.215
Driver	Knowingly using a driver without a valid CDL	383.3(a), 383.23(a)
Driver	Knowingly letting a driver operate with a disqualified CLP or CDL	383.37(b)
Driver	Knowingly letting a disqualified driver drive	383.51(a), 391.15(a)
Driver	Knowingly using a physically unqualified driver	391.11(b)(4)
Insurance	Operating without the required minimum financial responsibility	387.7(a), 387.31(a) for passengers
Hours of service	Failing to require a driver to make a record of duty status (51% threshold)	395.8(a)
Vehicle	Operating a vehicle declared out of service before repairs are made	396.9(c)(2)
Vehicle	Not correcting out-of-service defects listed on a DVIR before the vehicle runs again	396.11(a)(3)
Vehicle	Using a vehicle that was not periodically inspected (51% threshold)	396.17(a)

Some rows above combine two regulations, which is why the table is shorter than the list of 16. Read the list as a description of habits, not paperwork. Most of these are about putting a driver or a truck on the road when you knew, or should have known, it should not be there.

How the audit is scored when nothing fails automatically

Passing the list above is not the same as passing the audit. Appendix A to Part 385 explains the rest of the scoring. The auditor sorts violations into six factors: general (parts 387 and 390), driver (382, 383 and 391), operational (392 and 395), vehicle (393, 396 and roadside inspection data), hazardous materials, and accidents.

• Points per violation. Each instance of noncompliance with an acute regulation costs 1.5 points. Each instance with a critical regulation costs 1 point.
• Factor result. For factors 1 through 5, three or more points in a factor means you do not have basic safety management controls for that factor.
• Overall result. Inadequate controls in at least three separate factors means the audit finds your safety management controls inadequate, and corrective action is required.
• Roadside inspections count. If you had at least three roadside inspections in the 12 months before the audit and your vehicle out-of-service rate is 34% or higher, one point is added to the vehicle factor.
• Accidents count. The accident factor is used only if you had two or more recordable accidents in the 12 months before the audit. It fails above 1.7 recordable accidents per million miles for urban carriers and 1.5 for everyone else.

The arithmetic matters for small carriers. Two missed pre-employment results in a driver file and a missing medical card add up to three points in the driver factor on their own, which is enough to fail that factor. One sloppy area rarely fails an audit; three sloppy areas do.

After the audit: pass, fail and the corrective action clock

Under 49 CFR 385.319, FMCSA sends written notice “not later than 45 days after completion of the safety audit.”

• Pass. The notice says you have adequate basic safety management controls. Monitoring continues for the rest of the 18 months.
• Fail. The notice says your new entrant registration “will be revoked and its operations placed out-of-service unless it takes the actions specified in the notice.” Most property carriers get 60 days from the date of the notice. Passenger carriers and certain hazmat carriers get 45.
• Extension. FMCSA may add up to another 60 days to the 60-day period if you are making a good faith effort (385.323).
• No acceptable response. Registration is revoked and an out-of-service order takes effect on day 61 from the notice date, or day 46 on the shorter track (385.325).

If you think the auditor got it wrong, 385.327 lets you ask the Field Administrator of your FMCSA Service Center for an administrative review. The request has to explain the error and list the issues in dispute with supporting documents. Timing is the trap: you have 90 days to ask, but if you want a decision before the out-of-service order takes effect, you must ask “no later than 15 days from the date of the notice.”

A carrier whose registration is revoked after a failed audit can reapply no sooner than 30 days after revocation, must show the deficiencies were corrected, and starts the 18-month monitoring cycle again (385.329T, the version currently in force).

What can bring the audit forward, or end your registration without one

The 12-month timeline is the normal case. Section 385.308 lists actions, “identified through roadside inspections or by any other means,” that can get a new entrant an expedited audit, a compliance review, or a demand for a written corrective action response. Among them: using a driver without a valid CDL, running a vehicle placed out of service without the repair, using a driver who tested positive or refused a test, operating without the required insurance, and a driver or vehicle out-of-service rate of 50% or more based on at least three inspections in 90 consecutive days. If FMCSA demands a written response and you do not answer within 30 days, your registration is revoked.

Refusing the audit is worse than failing it. Under 385.337, a carrier that refuses gets written notice and 10 days to agree in writing. If it does not, registration is revoked and interstate operations are placed out of service “on the 11th day from the service date of the notice.”

A records checklist to keep from the first load

None of this needs to be built when the audit notice arrives. It needs to exist from day one and be kept current. For a carrier with one truck, the working list looks like this:

• Insurance. Proof of the required financial responsibility kept at your principal place of business (387.7(d) is a critical violation when it is missing).
• Drug and alcohol program. Proof the program started when operations started, enrollment in a random pool, every pre-employment result received before the driver’s first safety-sensitive work, and Clearinghouse query records.
• Driver qualification file for each driver, yourself included, with the driving record inquiry and a current medical examiner’s certificate.
• Records of duty status and supporting documents, kept for at least 6 months, plus your ELD data.
• Vehicle file for each truck and trailer: maintenance and inspection records, driver vehicle inspection reports, proof of repair for anything written up, and the current periodic inspection.
• Accident register and copies of any required accident reports.

For the longer picture beyond the audit, our trucking compliance checklist for 2026 lists the recurring filings and renewals that sit around these records.

When the 18 months end

If you had an audit within the period and you are not under an out-of-service order or an open corrective action notice, FMCSA “will remove the new entrant designation and notify the new entrant in writing that its registration has become permanent” (385.333). After that you are evaluated like any other carrier. If no audit happened by the end of 18 months through no fault of yours, you keep operating as a new entrant until one is done.

Where MyQuickStart fits

The drug and alcohol area is the one we work in. Our DOT drug testing service covers pre-employment and random pool enrollment, post-accident, reasonable suspicion and return-to-duty testing, and Clearinghouse compliance and reporting. If you would rather hand the Clearinghouse paperwork off, our Federal Clearinghouse service covers registration for employers and CDL drivers, annual limited query plan setup, and full and limited query support. Logs, maintenance files and driver files stay with you, and the checklist above is the place to start.