Sixteen Violations Fail the New Entrant Audit Outright. Ten Are Driver Records.

Sixteen regulations end a new entrant safety audit on their own. Ten of them sit on the driver side — five in part 382, five in parts 383 and 391 — and each of those ten is proved or disproved out of records you assembled in your first months of operating.

The list lives at 49 CFR 385.321(b): “A new entrant will automatically fail a safety audit if found in violation of any one of the following 16 regulations.” Fourteen of the sixteen rows in that table read “Single occurrence.” Two do not, and the difference is the single most misquoted thing about this audit.

The rest of the audit is not scored the way a compliance review is scored either. Appendix A to part 385 assesses points per instance. Appendix B — the compliance review that produces a safety rating — assesses acute violations per instance but critical violations per pattern. Same list of acute and critical regulations, different arithmetic, and appendix A is harsher on exactly the records this site is about.

What is the New Entrant Safety Assurance Program, and are you in it?

If you registered for a USDOT number to start interstate operations and you are not Mexico-domiciled, you are in it. 49 CFR 385.3 defines new entrant registration as the registration “granted a new entrant before it can begin interstate operations in an 18-month monitoring period.” Subpart D applies to carriers domiciled in the United States and Canada.

385.307 makes those 18 months two things at once. Paragraph (a) puts your roadside safety performance under close monitoring for the whole period, before and after the audit. Paragraph (b) sets the audit itself. Paragraph (c) is the sentence carriers forget until the request arrives: “All records and documents required for the safety audit shall be made available for inspection upon request by an individual certified under FMCSA regulations to perform safety audits.”

Roadside monitoring can also pull the audit forward. 385.308(a) lists seven things that, discovered “through roadside inspections or by any other means,” may get you an expedited safety audit, a compliance review, or a demand for a written response demonstrating corrective action. Three are driver-side: a driver without a valid CDL (including one “falsified, revoked, expired, or missing a required endorsement”), a driver who tests positive or refuses a required test, and a driver or vehicle out-of-service rate of 50 percent or more across at least three inspections in a consecutive 90-day period. Miss the 30-day deadline on that written response and 385.308(d) revokes the registration without any audit at all.

When does the safety audit happen?

Somewhere between month three and month twelve for a property carrier, and inside 120 days if you haul passengers. Those two figures are not in subpart D’s operative sections. They sit inside the 385.3 definition: a safety audit “must be performed on a new entrant’s operations within 12 months after receipt of its US DOT number for motor carriers of property and 120 days for motor carriers of passengers.” The near end of the window is 385.307(b): the audit comes once the carrier “has been in operation for enough time to have sufficient records,” a period that “will generally be at least 3 months.” FMCSA’s 2015 off-site audit notice attributes the tightened outer deadlines to Section 32102 of MAP-21 (80 FR 37039).

Two structural notes. The audit “will generally be conducted at the new entrant’s business premises” (385.315), but since 2015 FMCSA has also run off-site audits where the carrier submits documentation remotely — and the 2015 notice records that when an automatic failure violation under 385.321 turns up in the submitted records, the carrier “will automatically fail the new entrant safety audit and be placed into the corrective action process.” Sending documents in is not a softer route. And a compliance review can substitute entirely: under 385.335, if FMCSA runs one and issues a safety fitness determination, no safety audit is required, though the 18-month monitoring period continues regardless.

What does the safety audit examine?

Your safety management systems plus a sample of required records, across five named areas. 385.311 says the audit “will consist of a review of the new entrant’s safety management systems and a sample of required records to assess compliance with the FMCSRs, applicable HMRs and related record-keeping requirements as specified in appendix A of this part,” and lists the areas as driver qualification, driver duty status, vehicle maintenance, accident register, and controlled substances and alcohol use and testing requirements — prefaced “include, but are not limited to.” Appendix A II(c) says the same thing from the auditor’s side: “Documents such as those contained in the driver qualification files, records of duty status, vehicle maintenance records, and other records are reviewed for compliance with the FMCSRs and HMRs.”

What the auditor looks for inside those documents is narrower than “everything in the regulations.” Appendix A III(a) says FMCSA “gathers information by reviewing a motor carrier’s compliance with ‘acute’ and ‘critical’ regulations,” and III(d) then points somewhere carriers do not expect: “The list of the acute and critical regulations… is included in Appendix B, VII.” The list is shared with the compliance review; only the scoring is separate. Acute regulations are those where noncompliance is “so severe as to require immediate corrective actions” by a motor carrier regardless of overall basic safety management controls; critical regulations are those where noncompliance “relates to management and/or operational controls.”

Note what the audit does not do. 385.317: “A safety audit will not result in a safety fitness determination. Safety fitness determinations follow completion of a compliance review.” You will not come out of this with a Satisfactory rating, and 385.309 says the purpose includes providing “educational and technical assistance to the new entrant.” That framing is real, and it does not soften 385.321.

Which violations fail the audit automatically?

These sixteen, and the third column is the part that gets misquoted. The table below reproduces the structure of the table to 385.321(b): the regulation, and the guideline for determining automatic failure.

Count the driver-side rows: 1 through 5 are the part 382 program, and 6, 7, 8, 11 and 12 are CDL validity, disqualification and physical qualification. Ten of sixteen. Two are insurance, four are vehicles and hours.

Why do 395.8(a) and 396.17(a) work differently?

Because FMCSA deliberately built a rate test into those two and said so in the rulemaking. When the agency raised the automatic-failure list from 11 regulations to 16 in the 2008 final rule, it answered a comment that single-vehicle and single-driver triggers unfairly disadvantage larger carriers:

“Although 14 of the 16 regulatory violations (numbers 1-12, 14 and 15 in the table to Sec. 385.321(b)) would trigger automatic failure of the safety audit based on a single occurrence of the violation, two of the violations will include thresholds… in the case of Sec. Sec. 395.8(a) and 396.17(a), the Agency will require a violation threshold of 51% to cause automatic failure of the safety audit.” — 73 FR 76472, at 76476

The rule spells out the arithmetic — automatic failure requires that “the driver did not prepare a record of duty status in more than half of the trips examined, or the carrier failed to perform periodic inspections on more than half of the fleet vehicles examined” — and says what happens below the line: “Violation rates of 50% or less will be taken into consideration in the overall assessment of the carrier’s compliance with applicable regulations.” Below 51 percent is not a pass on those two regulations. It is a finding scored the normal way, under appendix A, alongside everything else.

Practical translation: two missing logs out of thirty examined will not automatically fail you. One driver running on a lapsed medical certificate will, because 391.11(b)(4) is row 12 and row 12 says single occurrence.

How is the rest of the audit scored, and why is it not the compliance-review math?

Appendix A assesses 1.5 points for each instance of an acute violation and 1 point for each instance of a critical one. A factor fails at three points. Three failed factors fail the audit. Every one of those rules differs from the appendix B rules people quote from compliance-review guidance.

Appendix A III(g) and (h): “For each instance of noncompliance with an acute regulation, 1.5 points will be assessed” and “For each instance of noncompliance with a critical regulation, 1 point will be assessed.” Section C fails a factor where “the combined violations of acute and or critical regulations for each factor is equal to three or more points.” Section IV(a) fails the carrier overall on inadequate controls “in at least three separate factors.” Side by side:

The row that matters for driver files is the second one. Under appendix B, three qualification files missing the same required document is one pattern of noncompliance with 391.51 — one point. Under appendix A, the text assesses a point for each instance, so the same three files are three points and Factor 2 is gone. Cheaper per document at a compliance review than at a safety audit, which is the opposite of what most new carriers assume, and it is why a first-year carrier cannot safely reason from compliance-review war stories.

Two appendix A inputs owe nothing to your paperwork. Section A: with at least three vehicle inspections recorded in MCMIS in the twelve months before the audit, a vehicle out-of-service rate of 34 percent or higher adds one point to the Vehicle Factor. Section B: the recordable accident rate applies only where the carrier had two or more recordable accidents in the same 12 months — inadequate above 1.7 per million miles for a carrier operating entirely within a 100 air-mile radius, above 1.5 for everyone else — though FMCSA “will continue to consider preventability” where a new entrant contests the factor with compelling evidence.

What does the auditor ask for on the driver side?

Files, not assurances. These are the driver-side acute and critical regulations from appendix B, VII, mapped onto the document that answers each one. The hiring sequence that produces them is in the DOT compliance checklist for hiring.

What happens if you fail?

A written notice, a corrective action window, and an out-of-service order on a fixed date if you let the window close. 385.321(a) is the hinge: failures of safety management practices “consist of a lack of basic safety management controls as described in Appendix A of this part or failure to comply with one or more of the regulations set forth in paragraph (b),” and either “will result in a notice to a new entrant that its USDOT new entrant registration will be revoked.”

385.319(c) sets the notice at no later than 45 days after audit completion, and splits the corrective action deadline:

The rest of the machinery, in the order you would meet it:

• Extensions. 385.323: FMCSA may extend the 60-day period by up to another 60 days where you are “making a good faith effort to remedy” your practices, and the 45-day period by up to 10 days where you have submitted evidence and the agency needs more time to evaluate it.
• Acceptance, or not. 385.325: evidence acceptable to FMCSA inside the window gets written notice that your registration will not be revoked. Otherwise paragraph (b) revokes it and issues an out-of-service order on day 61, day 46, or the day after an extension expires, and paragraph (c) bars interstate operation from that date.
• Administrative review. 385.327: the request goes to the Field Administrator of the appropriate FMCSA Service Center, must explain the error you believe FMCSA made, and must list the disputed issues. You have 90 days — but if you want a decision before the out-of-service prohibitions bite, 385.327(d) says submit no later than 15 days from the notice date. The Field Administrator’s decision “constitutes the final Agency action.”
• Refusing the audit. 385.337: you get 10 days from the service date to agree in writing to permit it, or registration is revoked and operations placed out of service on the 11th day.
• Re-application. 385.329: no sooner than 30 days after revocation, with evidence that the deficiencies are corrected — and the 18-month monitoring cycle starts over from the date the re-filed application is approved.

Civil penalties run on a separate track and are inflation-adjusted: 385.331 and 385.337 both point at 49 U.S.C. 521(b)(2)(A) “as adjusted for inflation by 49 CFR part 386, appendix B.” Do not price your exposure from a figure in any article, this one included — pull the current schedule from part 386, appendix B on ecfr.gov.

If you pass, 385.319(b) gives you written notice within the same 45 days and monitoring continues for the balance of the 18 months. At the end, 385.333(a) removes the new entrant designation and makes your registration permanent, provided an audit has been performed and you are not under an outstanding order. From then on you are evaluated like any other carrier — which is where CSA scoring starts to matter more than the audit ever did.

What passing the audit does not tell you

Every record the auditor opened is a record somebody was legally required to create. The MVR is convictions a court entered. The certificate is one examiner’s finding on one day. The pre-employment negative is a specimen on a date. The qualification file proves the file exists. Pass the audit and what you have demonstrated is that your documentation system works — which is close to what the audit is defined to measure. 385.3 defines safety management controls as “the systems, policies, programs, practices, and procedures used by a motor carrier to ensure compliance with applicable safety and hazardous materials regulations.”

None of it reaches the thing that decides whether a first-year carrier survives its first year. A driver who takes the truck and stops answering the phone produces no MVR entry and no inspection. A driver who leaves a trailer at a customer’s dock generates a phone call, not a federal record. The mandated investigation does not close the gap either: 391.23 asks previous employers about identification, employment dates, accidents and part 382 history — see the safety performance history request and DOT employment verification — and none of those fields asks whether the driver was reliable. A fleet in its first 18 months has the least margin for a hire like that and the shortest history of its own to reason from.

That is the layer cdlscan exists for: reviews written by carriers who actually employed the driver, tied to the period they employed him, covering behavior the federal record has no field for. A name search takes seconds, so it fits in the same sitting as the MVR request rather than adding a step to a process you are still learning. Any carrier can contribute one.

Say the boundary plainly, because a new entrant has the least room to get this wrong: this sits on top of the required record, never in place of any part of it. The qualification file under 391.51, the investigations under 391.23, the MVR inquiries under 391.23 and 391.25, the Clearinghouse query under 382.701 and the pre-employment test under 382.301 are legally required, and nothing here discharges any of them. No federal rule recognizes peer review data as a substitute for any item the safety audit examines, and no auditor will accept it as one. If you intend to rely on third-party information about a candidate as a factor in a hiring decision, ask the provider which category of information they consider it under the Fair Credit Reporting Act, and confirm the obligations with your own counsel before you build it into a process.

Frequently asked questions