Cypress handles ongoing compliance for our customers. This guide explains why month six is the right moment to look honestly at the compliance file and what an auditor's eye actually examines — not a DIY walkthrough of the file room.

Why month six is the right moment to look honestly

Year-one carriers operate inside the New Entrant monitoring window. The Safety Audit notice arrives sometime between months six and eighteen for most operations. The records that audit examines are the records being created right now — driver qualification files, hours-of-service logs and supporting documents, maintenance receipts, drug-program documentation. Patterns that were set in week one are still in place at week twenty-six. If the file room is sloppy, it has been sloppy for half a year, and the records that get pulled at audit reflect the practice, not the intent.

Three things make a month-six look-back valuable. Patterns are visible by month six in a way they were not at month two — the way records get created has stabilized, for better or worse. The cost of fixing gaps is still small: a missing previous-employer inquiry can be obtained, an annual MVR can be pulled, a maintenance receipt can be located. Six months later, those same gaps are six months older, more visible to an auditor, and harder to remediate cleanly. And the audit notice is no longer hypothetical — it could arrive any day, and the response window after the notice is too short to build the file from scratch.

The stakes are uneven across categories. A missing previous-employer inquiry on a single driver is a discrete fix. A pattern of DVIRs that show defects with no matching repair records is a structural finding that takes longer to remediate and produces a more serious audit outcome. An expired drug-and-alcohol consortium membership is a regulatory exposure that surfaces immediately when the auditor checks. The mid-year look exists to find these before someone with subpoena power finds them.

What a clean compliance file actually looks like

When Cypress runs ongoing compliance for a customer, an auditor's eye on the file at month six should find these markers across the six categories:

  • Driver qualification files complete from date of hire for every driver, including the owner-driver. Application, current MVR (initial plus annual), unexpired medical certificate, documented previous-employer inquiries, pre-employment drug test, pre-employment Clearinghouse query, annual certification of violations, road-test certificate or CDL equivalent. The most common missing item is the annual MVR — easy to forget on a small fleet, immediately citable.
  • HOS records intact for the full operational history. ELD logs covering the audit window with supporting documents (bills of lading, fuel receipts, tolls), log edits annotated with reasons, any HOS violations addressed through coaching or operational change. ELD setups that only retain six months of supporting-document detail are a recurring problem when the audit window is longer than that.
  • Maintenance file reconciled. Annual inspection certificate current for each truck, preventive-maintenance schedule documented and followed, repair receipts retained, DVIR-flagged defects matched to repair records. Gaps between reported defects and repair documentation are among the most common audit findings.
  • Drug and alcohol program current. C/TPA consortium membership active, documentation of pre-employment and random tests, annual Clearinghouse limited query for each driver, return-to-duty documentation if applicable.
  • IFTA, IRP, HVUT, UCR, MCS-150 all current. Quarterly IFTA returns filed on time, current IFTA decals displayed, IRP apportioned plates current, HVUT 2290 filed with a stamped Schedule 1 on file, UCR current for the year, MCS-150 update within the biennial cycle.
  • Insurance and authority clean on the federal record. BMC-91 active on FMCSA's L&I system, certificate of insurance reflects current coverage, BOC-3 designation active, MC and USDOT both showing active in SAFER.

Where this goes wrong

Three failure modes account for most month-six findings. First is silent drift: the carrier ran the first quarter cleanly, then operational pressure compressed the file-room discipline, and by month six the new-driver hires from the spring are missing previous-employer inquiries or annual MVRs that should have been pulled. Second is DVIR-to-repair disconnects: drivers flagged defects on Driver Vehicle Inspection Reports, the repair happened, but the repair invoice was never matched to the DVIR and the file shows defects sitting unresolved. Third is consortium lapse: the C/TPA membership renewal came due, the renewal notice went to an out-of-date email, and the program is technically suspended even though the random testing continued on schedule — a paperwork gap that an auditor will find immediately.

A subtler failure: the carrier has all the documents but cannot produce them on request. Audit-ready is not just having the records; it is being able to assemble the file for a specific driver over a specific window in minutes, not days.

How Cypress handles this

Cypress runs the compliance file continuously rather than as a once-a-year self-audit. The DQF gaps, the missing annual MVRs, the disconnect between DVIRs and repair receipts, the C/TPA renewal — those are categories we monitor on a rolling basis because we are running the carrier's authority paperwork, the MCS-150, the BOC-3, the IRP, the IFTA, and the drug-and-alcohol program as one operation. When the audit notice arrives, the file is already organized in the format the auditor will ask for, and the response window is for confirming and submitting, not for building.

Per Cypress's direct-build posture, the regulatory record goes from our system directly to FMCSA, the state DMVs, the IRS, and the C/TPA partner. The carrier's compliance data does not flow through a third-party aggregator that may also serve carriers competing with our customers for the same loads.

Get this done

If you would rather have your ongoing compliance — DQFs, maintenance file, HOS retention, drug-and-alcohol program, IFTA, IRP, HVUT, UCR, MCS-150, BOC-3, and insurance filings — handled as one operation rather than as a once-a-year reckoning, Cypress Authority Services is the sister brand that runs that work for Dispatch Rail customers.

Cypress Authority Services is a sister brand operated by the same team that runs Dispatch Rail.