FMCSA correspondence // 49 CFR Part 385
Four kinds of letters come from FMCSA. One of them is yours. What you do in the next 48 hours decides the rest.
Your USDOT number · No account · No charge
The deadline on your letter is a date, not a threat. Work backward from it. Set your own three days earlier.
Step one
People call all four an audit. The stakes are not the same. Read the header before you do anything else.
49 CFR 385 Subpart D
The first-year systems check on every new carrier. Often a state trooper or DPS officer runs it, not a federal investigator.
A targeted document review, done remotely. A named list of records, uploaded. Nobody comes to your office.
An investigator looks hard at one or two problem areas. Drug and alcohol, or driver files, or hours.
49 CFR 385.3
The full onsite examination, across every safety factor. This is the one people picture when they say audit.
Most carriers are never rated at all. Unrated is normal, and fine in shipper contracts. Only a comprehensive review assigns one.
Ratings come from a specific, knowable list of violations, not from general messiness.
Step two
Boring on purpose. Boring is what calm looks like.
Confirm the letter is real.
Check the Correspondence section of your FMCSA portal. Never the phone number printed in the letter.
Read it twice. Calendar the deadline.
Note exactly what they asked for and in what format. Set your own deadline three days earlier.
Appoint one point of contact.
One person talks to FMCSA, collects documents, and keeps the master list. One clear voice starts ahead.
Triage into three piles.
Have it and current. Have it but stale, fixed honestly and dated today. Do not have it, written down.
Call your consortium or TPA today.
Ask for the enrollment certificate, driver roster, testing history, and random-selection records. If you are unsure you have one, start here.
Call your insurance agent.
Confirm your filings are active and get current certificates. A lapse turns an audit ugly all by itself.
Decide about an attorney.
Get one if the review follows a fatal crash, you are already Conditional, or the letter names enforcement action.
All seven done, and you have one point of contact, a dated list and a plan that works back from the date on your letter.
The one rule
Investigators cross-check. Inspection reports against roadside history. Log data against fuel receipts and tolls. Ink dates against printer metadata.
A missing record is a violation with a fine. A false record is fraud, a different kind of exposure.
49 CFR 390.35
Missing costs money. Fake costs everything.
The short list
Ratings are not assigned for messiness. A small cluster of violations accounts for most carriers' worst days.
The regulations call them acute and critical. Appendix B to Part 385
Never seeing the letter
Not in any regulation, and the most preventable failure here. No response is treated as a failed audit.
No drug and alcohol testing program
The thing almost everybody forgets to set up.
Using a driver who is disqualified
Suspended CDL, failed test, or expired medical certificate.
No periodic inspection on a vehicle
49 CFR 396.17Per unit, not per company. The trailer behind the building counts.
Operating without required insurance
Filings active, certificates current. A two-minute call answers it.
False logs
49 CFR 390.35See the one rule above. This is the pile you never fix with a printer.
Nothing on that list says alphabetized. Current contact info, systems that exist, qualified drivers, honest paper. That is the whole strategy.
Asked the week the letter lands
How long do I have to respond to an FMCSA audit letter?
The date is printed on your letter. A new entrant notice typically gives about 20 days; an offsite request names its own upload deadline.
How do I know the letter is real?
Both mistakes happen: treating a real notice as junk, and treating a fake as real. Verify through the Correspondence section of your FMCSA portal.
What is the difference between a safety audit and a compliance review?
A new entrant safety audit checks that your systems exist in year one. A compliance review examines how you run, and can set a rating.
What actually fails carriers at an FMCSA audit?
Never seeing the letter, no drug and alcohol program, an unqualified driver, no periodic inspection, no insurance, or false logs.
Before you start pulling files
The investigator opened your record before the letter was mailed. Roadside history, crashes, BASIC scores, filings. Read it the same way.
Free · No account · Reads the public FMCSA record
Clear about who we are
Or have it built for you
The Audit-Ready Setup, $499 once. From your USDOT number and the records you send, FileFlo builds your gap report, each driver's file checked against the rule, and an audit packet organized to the regulations, with a sealed inspector link. It includes your first 30 days of Core.
Your 14 calendar days start once we have your USDOT number, the name of at least one driver and one usable record, and they never pause. If your files are not organized and audit-retrievable by the end of them, the $499 comes back.
Send the records you have: phone photos, scans, a ZIP, each driver's own phone link, or your cloud folder imported with a click.
You approve what goes out. Nothing reaches your drivers until you switch it on.
After the first 30 days, Core is $199 a month for 1 to 15 trucks, or Fleet $399 a month for 16 to 50 trucks, if you continue.
The button opens a short request form, and a person at FileFlo answers in writing with the terms.
Who wrote this
This page is Chapter 1 of The FMCSA Audit Survival Guide, compressed. The book is written by Chad Griffith, founder of FileFlo.
Chad Griffith founded FileFlo after running compliance in the trucking industry, at a Part 135 and Part 145 operation, and in AI safety and defense technology.
The whole thing, free
This page is Chapter 1, compressed. The book is the other ten chapters, the 90-day plan, and every checklist.
Take the book. Free.
Every chapter, every appendix. A confirm email first, then the link to the PDF.
Delivered free to your inbox · Unsubscribe anytime
The paperback is $29.99 on Amazon if you want it on the desk. The PDF is the same book, whole.