DOT Compliance Checklist: Every Requirement Mapped to a Role

Key takeaways

• Most DOT audit failures come from unclear ownership, not missing documents, so assign every FMCSA requirement to one named role.
• Your compliance binder needs five record groups: driver qualification files, drug and alcohol records, hours of service, maintenance files, and insurance.
• Safety managers own annual MVR reviews, Clearinghouse queries, 391.23 safety performance history, and quarterly internal file audits.
• Drivers must supply a current CDL, medical certificate, and three-year employment history at hire, then keep medical cards and DVIRs current afterward.
• Below 30 trucks, the owner personally holds most checklist roles and should outsource random testing to a CTPA consortium.

Most DOT audit failures come from unclear ownership, not missing documents: everyone assumed someone else filed the MVR or closed out the road test. This DOT compliance checklist assigns every FMCSA requirement, from Part 391 driver qualification files to Part 382 Clearinghouse queries, to a specific role with the exact document and retention period, so nothing falls between the safety manager, dispatcher, driver, and owner.

What is a DOT compliance checklist and who should own it?

A DOT compliance checklist is a list of every FMCSA requirement your carrier must meet, paired with the document that proves it and the retention period attached to it. For a motor carrier running 31-220 trucks, the core of that list lives in 49 CFR 391, which defines the driver qualification file, and 391.23, which governs safety performance history checks on new hires (49 CFR Part 391).

Why most audit findings are ownership failures, not missing paperwork

Documents rarely go missing on their own. They go missing because nobody was named as the person responsible for collecting them, and a DQ file with three owners has none.

At a carrier your size, the accountable roles are the safety or compliance manager, the driver, the dispatcher or operations role, and in smaller fleets, the owner directly. Map each requirement to one name, and the checklist starts catching failures before an auditor does. Tools like net360 handle the verification step, but the ownership map is yours to build first.

Which FMCSA requirements belong in your DOT compliance binder checklist?

Your binder needs five record groups: driver qualification files, drug and alcohol program records, hours of service documentation, vehicle maintenance files, and insurance. Each has a retention period under the Federal Motor Carrier Safety Regulations, and an auditor will ask for all five. The table below is the core of any DOT compliance checklist.

Record group	Regulation	Retention period
Driver qualification file	49 CFR 391	While employed + 3 years
Drug and alcohol records	Part 382	Varies by record type
Hours of service / RODS	Part 395	6 months
Maintenance and inspection	Part 396	While carrier controls the vehicle + 1 year
Insurance (MCS-90, policies)	Part 387	Current + 3 years

DQ file contents under 49 CFR 391

Every DQ file needs the application, prior employment verification, MVR, road test certificate, medical certificate, and annual review. Section 391.23 requires documented prior-employer inquiries covering three years of safety history. Missing 391.23 documentation is one of the most common audit findings for carriers your size.

Drug and alcohol records under Part 382

Keep the Clearinghouse query records, pre-employment test results, positive test and SAP evaluation records, and your annual MIS summary. Retention runs from two to five years depending on record type, so file by category, not by driver folder alone.

Maintenance and inspection records under Part 396

File annual inspection certificates, DVIRs, and repair orders for every unit. Records stay for one year after the vehicle leaves your control, and 396.17 annual inspections require the inspector's qualification documentation on file.

Ownership of each record group is covered in the sections that follow, and verification software like net360 (terms) handles the 391.23 requests that slow most binders down.

What does the safety manager own on a DOT compliance review checklist?

The safety manager owns the ongoing monitoring side of the DOT compliance checklist: annual MVR reviews, Clearinghouse queries, the investigation and employment history requirements under 391.23, and the internal audits that catch gaps before FMCSA does. If a document in the DQ file has a review cycle attached to it, it belongs to this role.

Annual MVR review and Clearinghouse queries

Every driver needs an MVR reviewed at least once every 12 months, plus a full query in the FMCSA Drug and Alcohol Clearinghouse before the first drive and annually after that. The FMCSA's Part 382 drug and alcohol program rules also set retention periods for these records, so the safety manager should track not just whether the query happened but where the record lives.

Safety performance history under 391.23

When you hire a CDL driver, 391.23 requires you to request the safety performance history from prior DOT-regulated employers covering the previous three years, then follow up with the two most recent employers if responses are missing. The safety manager documents each request, each response, and each deadline, because during an audit the paper trail matters as much as the information itself.

Quarterly internal file audits

Pull a sample of DQ files each quarter and check them against a fixed list: current MVR, Clearinghouse query date, medical certificate, and any 391.23 records for recent hires. A quarterly cadence keeps a single missing document from multiplying across your fleet, and it gives you a defensible answer when a reviewer asks who verified what and when.

What does the driver own on a DOT driver compliance checklist?

Your compliance binder can be perfect on the day a driver signs, and still fail an audit 90 days later if the driver stops holding up their side. Under 49 CFR 391.11 and 391.43, several documents expire on the driver's watch, not yours.

Documents drivers must supply at onboarding

At hire, the driver hands you a current CDL, a valid DOT medical certificate (the long-form plus the card), and a list of prior employers going back three years for the 391.23 verification. They also self-certify their off-duty hours and sign the Clearinghouse consent and drug and alcohol release forms. If any of these arrive expired or incomplete, the driver cannot start until they are fixed.

Ongoing driver obligations after hire

After hire, drivers must keep their medical card current and turn in a copy before the old one expires, report any CDL suspension, conviction, or Clearinghouse violation promptly, and complete a vehicle inspection report (DVIR) every day they drive. Hours-of-service accuracy in the ELD is a driver responsibility; falsifying logs is a driver violation even if nobody at the carrier told them to. A good practice is a renewal calendar the driver signs, so the medical card lapse lands on their acknowledgment, not your oversight.

What does the dispatcher or operations role own?

Dispatch and operations own three things on the checklist: monitoring hours of service, supporting ELD data retention, and keeping out-of-service or disqualified drivers off the board. None of these are paperwork tasks. They are daily decisions that determine whether a violation happens at all.

HOS and ELD monitoring

The dispatcher watches remaining drive time and flags drivers who risk a violation before it happens. When an ELD malfunctions, ops coordinates the paper recordkeeping and the repair timeline. Retention itself is a records function, but dispatch supplies the context an auditor asks for: who drove what, when, and why a defect was reported late.

Keeping disqualified drivers off the board

If a driver lands out of service, ops removes them from dispatch the same day and documents the date. Vehicle condition reports feed the same loop: under FMCSA Part 396, drivers report defects and carriers must document the repair before the truck rolls again.

What does an owner-operator or small fleet owner own personally?

Below 30 trucks, most checklist roles collapse into you. You sign the annual driver qualification review, order the pre-employment Clearinghouse query, schedule the drug test before the CDL driver's first dispatch, and maintain the DQ file to 391.23 standards. Nobody else is accountable, so a missed document is a missed document you caused.

When you are the safety manager and the driver

You cannot investigate your own post-accident test or run a neutral reasonable-suspicion determination. For those two items, plan for outside help before you need it. Everything else, MVRs, PSP records, medical certificates, road test forms, stays on your desk on a fixed calendar.

What to outsource: CTPAs, consultants, software

A third-party administrator (CTPA) handles random testing pools and consortium membership, which most single-truck operators cannot run alone. A compliance consultant can audit your DQ files annually. Software like Tenstreet or net360 automates verification requests; at 0-30 trucks, a spreadsheet plus a CTPA usually covers the rest.

How do you run a DOT compliance audit checklist internally before FMCSA does?

Monthly, quarterly, and annual audit cadence

Run a monthly spot check: pull 5-10% of active DQ files and verify the three items that expire fastest, which are MVRs, medical certificates, and Clearinghouse queries. Quarterly, review every file end to end against 391.23 and confirm each document in your binder matches what the driver signed. Annually, tie the review to recertification: updated CDL, MVR, and list of violations for every driver.

FMCSA's own record retention guidance in Part 390 Appendix A tells you how long each document must survive an audit, so score against retention, not just presence.

Scoring findings and closing gaps

Score each file as pass, minor (missing one non-critical document), or major (expired medical card, missing Clearinghouse query, or driver operating without a complete file). Track majors to closure within 30 days and log who fixed what. If the same gap appears in two consecutive quarters, the fix is a process change, not another reminder.

Where does verification and onboarding software fit in the checklist?

Software covers three checklist items well: the 391.23 employment verification requests to prior carriers, the Clearinghouse full query and consent workflow, and collecting signed documents into the DQ file before day one. It cannot decide whether a driver is qualified, spot a questionable safety history that needs a human call, or fix a DQ file that was incomplete before the driver started. Anything requiring judgment stays with you.

What net360 automates and what it does not

net360 automates FMCSA-compliant employment verification requests and onboarding document collection, cutting verification from weeks to hours. It does not replace your safety manager's review of PSP and MVR results, and it will not chase a prior carrier that never responds. If your bottleneck is verification volume, that gap is small. If your bottleneck is DQ file organization across 200 drivers, you need a broader records system.

Comparing net360, Tenstreet, and FileFlo on the same criteria

Run all three through the same test: does it send 391.23 requests, handle Clearinghouse consent, and file documents into an auditable record? net360 focuses narrowly on verification and onboarding. Tenstreet is broader driver-management software. FileFlo leans toward document management. Pick by where your checklist actually fails.

FAQ

How long do I have to keep DOT driver qualification files after a driver leaves?

Keep the complete DQ file for three years after the driver's employment ends, per 49 CFR 391. That includes the application, MVRs, road test certificate, medical certificate, and 391.23 safety history documentation. Mark the separation date on the folder when the driver leaves, because an auditor can ask for records covering anyone employed during the review period.

What happens if I fail a DOT compliance audit?

FMCSA issues a safety rating, typically conditional or unsatisfactory, and a notice of violations with corrective action deadlines. You must submit a written corrective action plan, upgrade the rating through a follow-up review, or face an out-of-service order. Most failures trace to DQ file gaps and missing 391.23 records, which is why quarterly internal audits score findings as pass, minor, or major.

Do owner-operators need a drug and alcohol consortium?

Yes, if you hold a CDL and operate in interstate commerce. You cannot run random testing on yourself, so FMCSA requires membership in a third-party administrator's consortium that places you in a random testing pool. The CTPA also handles your Clearinghouse queries and pre-employment testing. Single-truck operators cannot self-administer any part of a Part 382 program.

How often do I need to run Clearinghouse queries on drivers?

Run a full query in the FMCSA Drug and Alcohol Clearinghouse before a CDL driver's first dispatch, then at least once every 12 months afterward. The safety manager tracks the query date and where the resulting record is filed, since retention runs two to five years depending on record type. Drivers must sign an electronic consent before each query.

What is the difference between a DOT compliance review and a focused audit?

A compliance review is a full-carrier audit covering all six safety factors: driver qualification, hours of service, vehicle maintenance, drug and alcohol programs, hazardous materials, and CRD data. A focused audit examines a single area, usually triggered by a specific violation or complaint. Your binder should pass the full review, because a focused audit can expand into one.