Transport compliance reporting: a guide for UK managers

A regulator-ready transport compliance report must prove three things: that documented systems exist, that those systems are actively used, and that the transport manager exercises continuous and effective responsibility over transport operations. Holding a CPC qualification is not sufficient on its own. Traffic Commissioners and DVSA inspectors will look for dated evidence of oversight, closed-out defect trails, and a live action log with named owners.

Minimum evidence regulators expect to see:

  • Preventative maintenance inspection (PMI) sheets, brake test results, and defect close-out records
  • Tachograph download schedules and analysis showing infringement review
  • Driver licence validity checks and Driver CPC records
  • Evidence of management oversight: meeting notes, sign-offs, site visit logs
  • A tracked action log with owners, deadlines, and verification evidence for every finding

Three actions to make your file audit-ready within seven days:

  1. Pull the last four PMI sheets for each vehicle and confirm each has a signed close-out for every defect recorded.
  2. Check your tachograph download log against the statutory schedule and identify any overdue downloads.
  3. Open a simple action log, list every open compliance gap you are aware of, assign an owner and a deadline, and date-stamp the entry today.

Table of Contents

Which regulators and rules govern transport compliance reporting in the UK?

Four bodies set the framework within which all transport compliance reporting in Great Britain and Northern Ireland operates.

  • DVSA (Driver and Vehicle Standards Agency): Conducts roadside checks, targeted site visits, and formal operator compliance audits. DVSA feeds findings into the Operator Compliance Risk Score (OCRS), which Traffic Commissioners use when assessing operator repute.
  • Traffic Commissioners (England, Wales, and Scotland): Quasi-judicial regulators who grant, vary, and revoke standard operator licences. They call operators to public inquiry when compliance evidence is inadequate and can disqualify transport managers.
  • Department for Transport (DfT): Sets the primary legislation and statutory guidance framework, including the Goods Vehicles (Licensing of Operators) Act 1995 and the Public Passenger Vehicles Act 1981. DfT also publishes the Guide to Maintaining Roadworthiness in collaboration with DVSA.
  • Department for Infrastructure Northern Ireland (DfI NI): Performs the Traffic Commissioner function for Northern Ireland under separate but closely aligned legislation. Operators licensed in Northern Ireland report to DfI NI rather than to the Traffic Commissioners for Great Britain, though the practical compliance standards are materially the same.

Operator licensing is the mechanism through which these bodies exercise oversight. A standard operator licence is a condition of trading, and its continuation depends on the operator demonstrating good repute, financial standing, and professional competence. Transport compliance reporting is the primary means by which an operator evidences all three to a regulator. The Statutory Document No. 3 on Transport Managers sets out in detail how Traffic Commissioners assess whether a transport manager is meeting the statutory duty.

Sector bodies such as Logistics UK publish annual compliance reports that provide useful benchmarking data on industry-wide prohibition rates, annual test pass rates, and OCRS distribution. These are not regulatory documents, but they give transport managers a calibration point when assessing whether their own performance indicators are within an acceptable range.

Operators with vehicles that cross into the Republic of Ireland should also be aware that vehicle identity and registration compliance requirements differ at the border. The NCT compliance standards for Irish-registered vehicles provide a useful reference for any cross-border fleet management considerations.

What do inspectors and Traffic Commissioners actually look for?

Two statutory tests underpin every compliance assessment a Traffic Commissioner conducts: good repute and continuous and effective responsibility.

Good repute is assessed by reference to the operator’s and transport manager’s compliance history, including convictions, prohibitions, OCRS scores, and the quality of systems in place. Continuous and effective responsibility requires the transport manager to be actively managing transport operations, not merely holding a nominal role. Statutory Document No. 3 is explicit that delegation does not remove ultimate legal responsibility from the named transport manager.

Evidence checklist: what passes and what fails

Evidence area Passes Fails
PMI records Signed, dated, defects noted and closed out Unsigned, undated, or defects with no close-out
Defect reports Continuous sequence, nil reports included Gaps in sequence, defects not actioned
Tachograph downloads On schedule, infringements reviewed and actioned Overdue downloads, no infringement analysis
Driver licence checks Dated DVLA checks at regular intervals No record of checks, expired licences undetected
Driver CPC records Current periodic training records on file Records absent or out of date
Management oversight Meeting notes, sign-offs, site visit logs No documented evidence of manager involvement
Action log Named owners, deadlines, closed-out with evidence Open findings with no owner or deadline

Regulators value systems that are actively used to mitigate risk over static archives assembled only after an inquiry is notified. Reports that show trend analysis and corrective actions carry materially more weight than those that simply list records held.

Records every compliance report must cover and how long to keep them

The statutory retention minima are not uniform across record types. GOV.UK guidance sets out three distinct periods that every transport manager must apply.

Statutory minimum: 15 months for vehicle maintenance records, PMI sheets, and driver defect reports. Drivers’ hours records must be retained for at least 12 months. Working time records where applicable must be kept for at least 24 months.

Keeping records only to the statutory minimum provides a defensible baseline, but additional documentation extending beyond the minimum period may strengthen evidence when a Traffic Commissioner examines vehicle condition over time.

Record type Statutory minimum Typical audit sample Acceptable formats
PMI sheets The statutory minimum period applies A typical audit sample includes multiple scheduled PMIs per vehicle Paper (signed), electronic with audit trail
Brake test results The statutory minimum period applies Included within the PMI sample Roller brake test printout or electronic record
Daily defect reports The statutory minimum period applies The sample often covers the previous few months Paper, scanned, or electronic with timestamp
Tachograph downloads 12 months (drivers’ hours) Previous 3 months of analysis Digital files with download log
Driver licence checks No single statutory period; best practice is 6-monthly All current drivers DVLA check printout or portal record
Driver CPC records Duration of employment plus 15 months All current drivers JAUPT certificates or DVSA portal records
Working time records 24 months Previous 6 months Payroll system export or dedicated records
VOL (Vehicle Operator Licence) record Current and accurate at all times Full vehicle and operating centre list VOL portal screenshot or printed extract

Operator compliance audit guidance specifies that maintenance samples should cover a period including at least four scheduled PMIs, and driver record samples should cover not less than the previous three months. Where OCRS indicators or recent prohibitions suggest elevated risk, auditors are expected to extend those samples.

How to prepare a compliance report and when an independent audit is required

Assembling a regulator-ready report follows a defined sequence. Skipping steps, particularly scope definition and severity rating, produces a document that looks incomplete to a Traffic Commissioner.

Step-by-step reporting workflow:

  1. Define scope and reference period. State which vehicles, operating centres, and record types are covered, and the date range examined.
  2. Identify the auditor and confirm independence. The auditor must not be employed by or financially dependent on the operator. Their CV, methodology statement, and a signed declaration that the report honestly reflects the operator’s position must be included.
  3. Select evidence samples. Apply the minimum sample sizes: four PMIs per vehicle, three months of driver records. Increase samples where risk indicators are present.
  4. Examine and record findings. Document each finding with the specific record or system it relates to, the evidence reviewed, and the gap identified.
  5. Apply a severity rating to each finding. A three-tier scale is standard: Critical (immediate risk to roadworthiness or licence), Major (systemic gap requiring prompt action), and Minor (isolated or administrative).
  6. Produce the action log. Each finding generates an action log entry with a named owner, a deadline, and a description of the evidence required to close it.
  7. Issue the draft report for management review. The transport manager and operator should review findings before the final version is issued.
  8. Close out actions and update the log. As each action is completed, attach dated evidence and mark the entry closed. A completed audit with a closed-out action log is one of the most useful exhibits in front of a Traffic Commissioner.

When is an independent audit required or advisable?

  • Following a DVSA prohibition or a series of prohibitions within a short period
  • When OCRS moves into the amber or red band
  • As part of undertakings given to a Traffic Commissioner at or following a public inquiry
  • Proactively, when a new transport manager is appointed or significant operational changes occur
  • Where internal audit capacity is limited and an objective assessment is needed

Action log template:

Finding ref Description Severity Owner Deadline Evidence to close Status
— Three PMI sheets unsigned Major Fleet Manager 7 days Signed copies or retrospective countersignature with explanation Open
— Two tachograph downloads overdue Critical Transport Manager 7 days Download log showing completion Open
— Driver CPC record missing for one driver Minor HR / TM 60 days JAUPT certificate on file Open

How to structure a compliance report that meets regulator expectations

A well-structured report reduces the time a Traffic Commissioner or DVSA examiner spends locating evidence, which in turn reduces the risk of a finding being missed or misread. The following template headings reflect what operator compliance audit guidance requires.

Recommended report structure:

  • Cover page: Operator name, licence number, operating centre(s), audit date, auditor name and contact details
  • Auditor declaration: Signed statement that the report is a true reflection of the operator’s position; auditor CV attached as Appendix A
  • Executive summary: Risk posture, number of findings by severity, top three remedial actions, and recommended review date
  • Scope and methodology: Vehicles and record types covered, reference period, sample sizes, how evidence was examined (on-site, remote, or hybrid)
  • Findings: Each finding numbered, described, rated by severity, and cross-referenced to the relevant record or system
  • Recommended corrective actions: Specific, measurable actions linked to each finding
  • Action log: As per the template above, with owner, deadline, and evidence required
  • Appendix A: Auditor CV and independence statement
  • Appendix B: Sample record list (vehicle registrations, driver names, date ranges examined)
  • Appendix C: Closed-out evidence (signed PMIs, download logs, licence check records)

Example executive summary statement:

“This audit identified two Critical findings relating to overdue tachograph downloads and one Major finding relating to unsigned PMI records. The operator’s overall risk posture is assessed as Amber. The three immediate remedial actions are: (1) complete all overdue tachograph downloads within seven days; (2) obtain signed PMI records or provide a documented explanation for the gap; (3) implement a weekly download compliance check with a named owner. A follow-up review is recommended within 60 days.”

Appendix checklist for digital evidence:

  • Each digital record should carry a visible date and time stamp
  • Electronic PMI and defect records must show a clear audit trail from inspection through to sign-off after repair
  • Tachograph analysis files should be exported from the analysis software in a format that shows the analysis date and analyst name
  • Scanned paper records should be named consistently (e.g. vehicle registration, record type, date) so auditors can locate them without a directory

Pro Tip: When presenting a digital evidence bundle to a Traffic Commissioner, include a one-page index that maps each appendix item to the finding it closes. Examiners process large bundles quickly, and a clear index prevents a closed finding from being treated as still open.

Preparing for inspections: what DVSA and Traffic Commissioners will check

DVSA site visits and Traffic Commissioner public inquiries follow a predictable pattern. Knowing what inspectors prioritise allows you to direct preparation effort where it has the greatest impact on outcome.

Inspection checklist:

  • Maintenance planner: current, displayed, with PMI dates set at least six months in advance and annual test dates included
  • PMI records: complete sequence, signed, defects noted and closed out with a verifiable repair trail
  • Defect close-out trail: a continuous pathway from driver defect report through authorised repair to signed vehicle return to service. Traffic Commissioners check for proof of this closed-loop defect pathway; a missing link is a common cause of enforcement action
  • Tachograph download log: all vehicles and drivers downloaded within the required intervals, infringement analysis completed and actioned
  • Driver files: licence validity, Driver CPC, working time records, and any relevant medical declarations
  • VOL accuracy: vehicles, operating centres, and transport manager details match the current licence record
  • MOT and tax status: current for all vehicles on the licence

Common red flags that trigger enforcement action:

  • Gaps in the PMI sequence, particularly around periods when a vehicle was off the road
  • Defect reports with no corresponding repair record or return-to-service sign-off
  • Tachograph downloads that are consistently late or missing for specific drivers
  • Driver licence checks that have not been repeated at regular intervals
  • A maintenance planner that has not been updated to reflect actual inspection dates
  • VOL records that do not reflect the current fleet or operating centre

Pro Tip: When presenting a closed-out action log at an inspection or hearing, attach the dated evidence for each closed item directly behind the relevant action log entry. A Traffic Commissioner who can turn from the finding to the evidence in one movement is far more likely to treat the matter as resolved than one who has to search through a separate bundle.

Daily, weekly, and monthly reporting routines and the KPIs that matter

Continuous and effective responsibility is demonstrated through documented routine, not through occasional audits. The following schedule maps tasks to frequency, owner, and evidence type.

Frequency Task Owner Evidence produced
Daily Walkaround check completed and defect report submitted Driver Signed defect report (nil or defect noted)
Daily Defect reports reviewed and actioned Transport Manager / Supervisor Signed review, repair instruction if required
Weekly Tachograph download check: confirm all due downloads completed Transport Manager Download log, updated weekly
Weekly Infringement review: analyse downloaded data and debrief drivers Transport Manager Infringement report, driver debrief record
Monthly Driver licence validity check for all active drivers Transport Manager / HR DVLA check record, dated
Monthly Maintenance planner review: confirm upcoming PMIs and annual tests Transport Manager Updated planner, signed off
Monthly Defect trend analysis: review recurring defect types by vehicle Transport Manager Trend summary, corrective action noted
Quarterly Driver CPC record review Transport Manager / HR Updated training records
Quarterly OCRS review and comparison against previous quarter Transport Manager OCRS printout, commentary note

KPIs to include in a compliance dashboard:

  • Defect close-out rate within 24 hours (target: 100% for safety-critical defects)
  • Tachograph download lateness rate (target: zero overdue downloads in any rolling 28-day period)
  • Annual test first-time pass rate (industry benchmark data is available from Logistics UK sector reports)
  • PMI completion rate against planner (target: 100% on schedule)
  • Driver licence check currency (target: all drivers checked within the last six months)
  • OCRS band movement: green, amber, or red, tracked quarter by quarter

Trend analysis is what separates a compliance dashboard from a simple record-keeping log. A Traffic Commissioner reviewing a report that shows a declining defect close-out rate over three months, with a documented corrective action and a subsequent improvement, is seeing evidence of active management. That narrative is far more persuasive than a clean record with no documented history of how it was achieved.

How continuous compliance platforms support audit readiness

Manual compliance management across a mixed fleet generates significant administrative load, and the risk of a record gap increases with fleet size and operational complexity. Purpose-built compliance platforms address this by automating data collection, creating closed-loop workflows, and producing audit-ready evidence bundles on demand.

Capabilities to look for in a compliance platform:

  • Automated tachograph download scheduling and lateness alerts
  • DVLA driver licence and entitlement checks integrated into the driver record
  • MOT and tax status monitoring with configurable notification routing
  • Digital defect reporting with a timestamped audit trail from report through repair to return-to-service sign-off
  • Document capture and version-controlled storage for PMI sheets, brake test results, and Driver CPC certificates
  • Role-based access so that drivers, supervisors, and transport managers each see and action only what is relevant to their function
  • Escalation rules that route unresolved findings to a named manager after a defined period
  • Case management workflows that mirror the action log structure described in this guide

Velocerta is built specifically for regulated transport organisations operating under these requirements. The platform integrates with DVLA and DVSA data sources to provide continuous vehicle compliance monitoring, including tax and MOT status, with all alerts subject to human review before any enforcement workflow is triggered. This prevents the automatic suspensions that can arise from unreviewed data anomalies, and it creates a documented decision trail that satisfies the auditor independence and evidence-quality standards described in this guide.

For fleet operators managing large or mixed fleets, Velocerta’s role-based access and configurable escalation rules mean that the transport manager retains oversight without needing to process every data point manually. The platform’s case management module maps directly to the action log structure, with named owners, deadlines, and evidence attachments for each open finding. For local authority fleet teams, the same audit trail supports both internal governance requirements and external regulatory scrutiny.

Key takeaways

Effective transport compliance reporting requires documented systems, active use of those systems, and a closed-loop action log that demonstrates continuous and effective responsibility to Traffic Commissioners and DVSA.

Point Details
Statutory retention minima Maintenance records: 15 months; drivers’ hours: 12 months; working time records: 24 months.
Minimum audit sample sizes Cover at least four scheduled PMIs per vehicle and three months of driver records; extend samples where OCRS indicates elevated risk.
Closed-loop defect trail Every defect report must have a corresponding repair record and a signed return-to-service; gaps are a primary cause of enforcement action.
Action log discipline Every finding needs a named owner, a deadline, and dated evidence attached when closed; an open log with no evidence is worse than no audit at all.
Velocerta for audit readiness Velocerta’s continuous monitoring, human-reviewed alerts, and case management workflows produce the closed-loop evidence trail regulators expect.

Why compliance reporting should be a living workflow, not a filing exercise

The most common mistake transport managers make is treating compliance reporting as a periodic exercise rather than a continuous operational discipline. A report assembled in the week before an inspection, drawing on records that have not been actively reviewed for months, rarely withstands scrutiny. Traffic Commissioners are experienced at identifying the difference between a file that has been maintained in real time and one that has been reconstructed.

The practical implication is that the daily and weekly routines described in this guide are not optional extras. They are the mechanism by which continuous and effective responsibility is demonstrated. A transport manager who can show a Traffic Commissioner twelve months of weekly download logs, monthly defect trend summaries, and a rolling action log with closed-out entries is presenting the strongest possible evidence of active oversight, regardless of what the OCRS score says on the day.

Delegation is legitimate and often necessary, particularly in larger operations. The statutory framework explicitly acknowledges that transport manager functions are often delivered by a team. What it does not permit is delegation without documented oversight. The transport manager must be able to show that they reviewed the outputs of delegated tasks, that they identified and actioned shortcomings, and that they maintained access to the relevant records. Meeting notes, countersigned reports, and dated sign-offs on maintenance planners are the practical tools for evidencing this.

For operators managing contracted-out maintenance, the oversight obligation is the same. Contracts should specify inspection intervals, record formats, and the operator’s right to audit the contractor’s work. Regular compliance audits of contracted maintenance providers, with findings documented and actioned, are a direct requirement of the transport manager’s general responsibilities under Statutory Document No. 3.

A realistic timeline for getting a compliance file into good order: a focused week can close the most obvious gaps in record sequences and produce a draft action log. A month of consistent routine will establish the daily and weekly disciplines. A quarter of documented trend analysis and closed-out actions will produce the kind of evidence file that a Traffic Commissioner would regard as demonstrating genuine active management.

Velocerta gives you a regulator-ready evidence file, continuously

Transport managers who rely on manual spreadsheets and paper files to assemble a compliance bundle face a significant time cost at exactly the moment when speed matters most: when a DVSA notice arrives or a public inquiry is called. Velocerta removes that bottleneck by maintaining a continuously updated, audit-ready evidence file as a by-product of normal operational workflows.

The platform’s DVLA and DVSA integrations monitor vehicle tax, MOT status, and driver entitlement in real time. Every alert passes through human review before triggering an enforcement workflow, which means your team acts on verified information rather than data anomalies. Document capture, version-controlled PMI records, and timestamped defect trails are stored in a structured case management system that maps directly to the action log format Traffic Commissioners expect to see. Role-based access means drivers, supervisors, and transport managers each interact with the system at the appropriate level, and escalation rules route unresolved findings to the right person automatically.

For taxi and private-hire operators, commercial fleet managers, and community transport providers, Velocerta’s compliance monitoring platform is designed to meet the specific evidence standards described in this guide. To see how the platform works in practice for your fleet type, visit the taxi and private-hire solutions page or request a demonstration directly.

Authoritative sources and further reading

The following official documents and guidance should be kept as standing references for any transport compliance officer or transport manager in the UK and Northern Ireland.

  • Statutory Document No. 3: Transport Managers (Senior Traffic Commissioner, Version 17.0, March 2025): The primary reference for how Traffic Commissioners assess transport manager repute, continuous and effective responsibility, and the general responsibilities expected of a nominated transport manager. Consult this document when preparing for a public inquiry or reviewing your oversight evidence.
  • Operator Compliance Audits guidance (GOV.UK): Sets out the independence requirements, report structure, sample sizes, and action log standards that regulators expect from a formal compliance audit. Use this when commissioning or conducting an independent audit.
  • Guide to Maintaining Roadworthiness (DVSA / DfT): The definitive reference for maintenance systems, defect reporting procedures, inspection intervals, and electronic record standards. Use this when reviewing your PMI and defect management processes.
  • Being a Road Transport Manager: Your Responsibilities (GOV.UK): Summarises the statutory retention periods for maintenance, drivers’ hours, and working time records. A useful quick reference for compliance officers setting up or auditing record retention policies.
  • Goods Vehicle Operator Licensing: Guidance (GOV.UK): Covers the operator licensing framework, including the conditions attached to a standard licence and the consequences of non-compliance. Relevant when assessing whether a compliance gap puts the licence itself at risk.
  • Logistics UK Compliance Reports: Published annually, these provide sector-level data on prohibition rates, annual test pass rates, and OCRS distribution. Useful for benchmarking your own KPIs against industry norms, though they carry no regulatory authority.
  • Velocerta compliance resources: Practical articles covering maintenance record management, audit preparation, and fleet compliance monitoring for regulated transport organisations in the UK.

Recommended