Operator Compliance Audit Checklist: What HGV Fleets Must Evidence

An operator compliance audit is not a tidy-folder exercise. It tests whether the systems promised on the operator’s licence actually control vehicles, trailers, drivers and transport work. The Traffic Commissioners’ audit guidance was updated on 14 August 2026, so an old checklist may now miss required evidence or use the wrong sample.

The guidance does not say that every operator must buy a routine independent audit. It explains what an acceptable audit should cover, particularly where an audit is offered as an undertaking to a Traffic Commissioner. An operator should still use the framework to test readiness before commissioning an auditor.

Start with the audit’s independence and scope

The person or organisation conducting the audit must be independent and able to report accurately without pressure. Payment must not depend on a successful result. The guidance also warns against the same person or branch providing advice and then auditing that advice.

Before work starts, agree in writing:

• which operator licence and operating centres are in scope;
• the audit date and evidence period;
• vehicle, trailer and driver populations;
• whether evidence will be viewed on site, remotely or both;
• the auditor’s qualifications, current professional development and industry experience;
• how findings, actions and the final declaration will be reported.

Do not share personal Vehicle Operator Licensing login credentials. The guidance allows screen sharing and, at the operator’s discretion and risk, controlled access to online compliance systems.

Build the sample correctly

The official framework gives minimum sample sizes. For fleets with one to three vehicles, all vehicle records should be checked. For four to 20 vehicles, the minimum is three; for 21 to 49, four; and for fleets of 50 or more, 10 per cent. Trailer samples follow a separate scale. Driver records are all drivers for a one-to-three-vehicle operation, four for fleets of four to 20, five for 21 to 49, and 10 per cent for 50 or more.

These are minimums, not a reason to exclude known problem areas. Maintenance sampling should cover every provider and equipment type and at least four scheduled PMIs. Driver records should normally cover at least the previous three months and represent different operations, including tramping, local work and any mix of domestic and EU rules.

Evidence the business and management controls

Prepare the operator licence, current vehicle and driver lists, operating-centre evidence, conditions and undertakings, and an explanation of the work performed. Check that the details on VOL match reality, including directors, vehicles, centres and maintenance providers.

The auditor will also look at management maturity. Useful evidence includes organisational responsibilities, employment and agency contracts, driver recruitment and assessment, OCRS reviews, and proof that bonus arrangements do not encourage unsafe or unlawful work.

For standard licences, the transport manager must be able to show continuous and effective management. An external transport manager should have a contract with the individual, evidence of attendance and involvement, and current CPD. Counter-signed PMIs and documented infringement debriefs carry more weight than a statement that the manager is “available by phone”.

Prepare driver, hours and working-time records

The driver sample should connect recruitment, licence checking, induction, CPC/DQC monitoring, training, medical declarations and any eyesight procedure. Agency drivers need the same operational control, not a lighter file because an agency supplied them.

For drivers’ hours and working time, assemble download schedules, fleet and individual infringement reports, missing-mile or card-withdrawn reports, WTD reports, manual records, follow-up letters and evidence of support or discipline. Keep the legal regimes distinct: tachograph records, drivers’ hours and road transport working time interact, but they are not one rule.

Prepare the maintenance trail end to end

For each sampled asset, make it possible to follow:

1. the forward planner and declared inspection frequency;
2. the PMI and brake-performance evidence;
3. driver defect or nil-defect reports;
4. repair authorisation and rectification evidence;
5. VOR and return-to-service decisions;
6. first-use checks for bought or hired assets;
7. maintenance-provider reviews and contracts;
8. recurring defect, prohibition and MOT performance review.

Digital systems can help operators retrieve connected records, but software does not make an incomplete process compliant. HauliK’s O-licence record workflows can support checks, defects and fleet dates; tachograph analysis, professional audits and engineering inspection remain separate responsibilities.

Run a pre-audit retrieval test

Choose one driver, vehicle and trailer without warning and time how long it takes to retrieve the full evidence chain. Record missing documents, conflicting dates and items that exist only in a private inbox. Assign each gap an owner and deadline, but do not backfill a record as though it existed at the original time.

The final audit should state where evidence was absent. The official guidance says phrases such as “the operator verbally advised” carry little weight. A credible adverse finding is more useful than a reassuring report that cannot withstand scrutiny.

Frequently asked questions

Is an independent audit a legal requirement for every operator?

Not as a universal routine requirement. Operators must have effective systems; the Traffic Commissioners’ document explains acceptable audit scope and is particularly important where an audit is an undertaking or used as mitigation.

Can the audit be fully remote?

Elements can be remote, but the guidance says audits should generally be conducted in person at the operator’s premises. The auditor must be able to inspect complete, readable evidence and verify the people interviewed.

Does passing an audit guarantee no regulatory action?

No. An audit is a snapshot and does not transfer the operator’s responsibilities. An inadequate or misleading audit may not be accepted by a Traffic Commissioner.

What should happen after the report?

Create a corrective-action register with evidence, owners, deadlines and verification. Re-test the failed control rather than closing an action because a document has been uploaded.