Ask ten fleet owners what their DOT compliance program looks like and most will describe a filing cabinet, a shared drive, or a binder that gets pulled out right before an audit. That is not a compliance program. It is evidence that one might exist somewhere. A real DOT compliance program is a system with phases, owners, and a rhythm, not a folder of documents you hope covers whatever an investigator asks for. At Prime Fleet Management, we built our work around a five-phase framework because compliance that only shows up when someone asks for it is not compliance. It is paperwork.
Why a Filing Cabinet Is Not a System
There is an important difference between a company that can pass an audit and a company that is always audit ready. The first spends the week before a compliance review scrambling to reconstruct driver files, chase down missing medical cards, and hope the CSA data looks better than it did last month. The second never has to scramble, because compliance is not an event, it is a standing operation with the same discipline as dispatch or maintenance. Building that operation takes more than a checklist. It takes a structure that covers the entire lifecycle of a compliance program, from the day you determine what applies to your fleet through every driver and vehicle that enters your operation after. That is what the PFM Framework maps out: five phases, in order, each one building on the last.
Phase 1: Plan
Before a single file gets built, a fleet has to know what actually applies to it. Plan is where PFM maps applicability, which vehicles and drivers fall under FMCSA jurisdiction, assesses risk across your specific operation, classifies drivers and equipment correctly, and writes the policies, SOPs, and compliance calendar the rest of the program runs on. Skip this phase and everything downstream is guesswork. A construction fleet running a mix of pickups, dump trucks, and one or two tractor-trailers has different applicability questions than a food distribution fleet running box trucks on tight delivery windows, and Plan is where those differences get sorted out before they become violations.
Phase 2: Build
Once the plan exists, Build is where it gets installed. This is Driver Qualification Files assembled correctly the first time, a drug and alcohol program that meets DOT testing requirements, vehicle files that match what inspectors expect to see, training documentation, and the recordkeeping infrastructure that makes every phase after this one possible. Build is detailed, unglamorous work, and it is also where the most common violations start: a missing DQF element, a drug and alcohol program that is technically in place but poorly documented, a vehicle file that is a folder of receipts instead of a maintained record.
Phase 3: Manage
A compliance program is not a one-time build, it is an ongoing operation, and Manage is where most fleets quietly fail. Hours of service monitoring, expiration tracking, CDL and medical card renewals, inspection follow-up, and driver coaching all live here. This is also where the gap between monitoring and managing shows up most clearly, a gap we have written about in detail in Monitoring Compliance Is Not Managing It. Medical certifications are a good example of what is at stake. In April 2025, FMCSA voided more than 15,000 medical certificates after two Houston-based medical examiners were found falsifying exams, both of whom had been active on the National Registry the entire time. A fleet that was simply monitoring, glancing at a spreadsheet of expiration dates, would have had no way to catch that its drivers’ certifications were compromised at the source. A fleet that was actually managing the process would have caught it.
Phase 4: Improve
Compliance data is only useful if someone is reading it. Improve is where PFM turns CSA trends, inspection results, and violation patterns into corrective action, using root cause analysis instead of one-off fixes and filing DataQs when inspection data is wrong instead of just living with it. This phase depends on understanding how your CSA score actually works, which we break down in CSA Scores Demystified, because you cannot improve a number you do not understand. KPI reporting closes the loop, turning enforcement data into decisions instead of dread.
Phase 5: Sustain
The last phase is the one that keeps the other four from decaying. Sustain is about building a culture where compliance is everyone’s job, not just the person who gets blamed when something goes wrong. That means ongoing training, clear accountability, and, for a lot of fleets, an outsourced compliance team that carries the operational weight so an owner-operator or a small back office does not have to become full-time compliance staff to stay audit ready. This is the phase where the framework becomes durable instead of something a fleet did once and let lapse.
One System, Not a Menu
These five phases are not services to pick and choose from. A fleet with strong DQFs and no HOS monitoring is exposed in a different place than a fleet with tight monitoring and no corrective action process. The framework works because it is sequential and connected: Plan sets the direction, Build installs the system, Manage runs it day to day, Improve makes it smarter, and Sustain makes it last. Whether you are running a single truck or a fleet of 100, the framework does not change. Only the intensity does.
Not sure where your compliance program actually has gaps? PFM’s free DOT Compliance Assessment shows you in 15 minutes: 22 questions across five FMCSA categories, and a 12-page report that maps every gap by category, plus your maximum penalty exposure in one number. It is yours to keep whether you hire PFM or not. Book your free assessment and find out where your compliance program actually stands.
