Regulatory reporting for delivery operations comes down to a short, specific list: driver qualification files if your vans cross a weight threshold, written food safety specifications if you ship anything perishable, injury records if you employ more than ten people, and a USDOT registration if you run vehicles over 10,001 pounds. Most small shippers owe fewer filings than they fear. What catches them out is not knowing which ones apply, or being unable to produce the paperwork on the day somebody asks for it.
That second failure is the expensive one. Almost none of these obligations involve mailing a form to Washington every quarter. They are recordkeeping duties. You keep the file, and you hand it over when a regulator, an insurer or a customer’s food safety auditor asks. The report is the record. If you want to know who those askers are and what a visit from them actually looks like, that is the subject of our guide to regulatory oversight for delivery operations. This page covers the other half: what you have to be holding when they arrive.
Boost customer satisfaction with just a few clicks
Most-Loved Features:
- On-demand drivers
- Real-time GPS tracking
- Delivery confirmation photos
- Over 50% of customers report a smoother delivery experience
Key takeaways
Regulatory reporting for a business that delivers is mostly recordkeeping on demand, not scheduled filing. Four record sets cover the great majority of small shippers.
The thresholds matter more than the rules. Vehicle weight, headcount and annual revenue each switch a whole obligation on or off.
A vehicle at 10,001 pounds GVWR or above pulls you into federal motor carrier territory, including a USDOT number for interstate work and a driver qualification file for every driver.
Food shippers under roughly $500,000 in average annual revenue are exempt from the FSMA sanitary transport rule entirely; above it, written specifications must be kept for 12 months after a carrier contract ends.
Employers with ten or fewer people are partially exempt from OSHA injury logs, but never exempt from reporting a fatality, hospitalization, amputation or loss of an eye.
Federal regulation costs firms with under 50 employees an average of $14,700 per employee per year, and disorganized records are where a large share of that goes.
What counts as regulatory reporting when you deliver your own orders
A bakery that sells over a counter has one compliance surface. The same bakery running three vans has four, because putting goods on the road brings in agencies that have no interest in your storefront at all. The Department of Transportation cares about the vehicle and the person driving it. The FDA cares about what happens to food between your door and the customer’s. OSHA cares about the loading dock. Your state and city care about registration, zoning and, increasingly, emissions.
None of them share records with each other, and none of them will tell you which of their rules you have crossed into until you have crossed into it. So the practical definition of regulatory reporting for delivery operations is this: the set of documents you are legally required to be able to produce about your vehicles, your drivers, your goods in transit and your workplace, plus the deadlines attached to the handful that do have to be filed on a date.
The cost of getting this wrong is not evenly distributed. Per-employee regulatory compliance costs run to roughly $14,700 a year at firms with fewer than 50 employees, against a much lower figure at large ones. Small operations pay more per head because they carry the same paperwork with none of the specialist staff.
The four record sets a delivery operation has to keep
Almost everything a small shipper owes falls into one of four buckets. The table below is the whole map, with the threshold that switches each one on and how long the paperwork has to survive.
| Record set | Who can demand it | What triggers it | Retention |
|---|---|---|---|
| Driver qualification file | FMCSA / state police | Vehicle at 10,001+ lbs GVWR | Employment plus 3 years |
| USDOT registration | FMCSA / state DOT | Interstate at 10,001+ lbs GVWR; intrastate varies | Kept current; biennial update |
| Sanitary transport records | FDA / customer auditors | Shipping food above ~$500k revenue | Up to 12 months |
| Injury and illness records | OSHA / state plan | More than 10 employees | 5 years |
Work down the trigger column first. If none of them apply to you, your regulatory reporting obligations as a delivery operation are close to nil, and you can spend the effort on the licensing and food-handling requirements that attach to your business generally rather than to your vans.
Driver qualification files and DOT reporting requirements
The number that decides your exposure is gross vehicle weight rating, and the line sits at 10,001 pounds. A Transit Connect or a Sprinter 2500 sits below it. A box truck, a Sprinter 3500 or a loaded cargo van with an upfit can sit above it, which surprises owners who assume “no CDL” means “no DOT.”
For interstate work, a USDOT number is required at 10,001 pounds GVWR and above. For work that stays inside one state, it depends where you are: Massachusetts and Washington both apply the same 10,001-pound threshold to intrastate vehicles, while around 24 states let you run up to 26,000 pounds intrastate without one.
Cross that line and every driver needs a qualification file. The FMCSA requires one for non-CDL drivers of vehicles between 10,001 and 26,000 pounds, not just for CDL holders, and it contains:
The driver’s employment application.
A motor vehicle record pulled at hire, and reviewed again every year.
A current medical examiner’s certificate.
Safety performance history from previous employers.
Drug and Alcohol Clearinghouse query results.
These files are kept for the length of employment plus three years afterwards. The three-year tail is the part people miss. A driver who left eighteen months ago still has a file you are required to hold, and a roadside inspection or an insurance audit can ask for it.
Food safety records under the FSMA sanitary transport rule
If you ship anything that has to stay cold, clean or separated, the FDA’s Sanitary Transportation of Human and Animal Food rule applies to you as the shipper, including when you are also the carrier, which is the normal case for a business running its own deliveries.
There is a clean exemption at the bottom. Operations with less than $500,000 in average annual revenue, calculated on a rolling three-year basis, are exempt from the rule outright. Not on a longer timeline. Exempt.
Above that line, the shipper’s job is to write down the conditions the food has to travel under and keep proof that you did. That means temperature requirements, sanitation expectations for the vehicle, and handling instructions, specified in writing for every load. Retention runs to no more than 12 months depending on the record type, and written specifications given to a carrier are held for 12 months after that carrier contract ends.
In practice, wholesale buyers enforce this harder than the FDA does. A grocery or hospital account will ask for your temperature logs during onboarding, and a gap in them costs you the contract long before it costs you a citation.
OSHA injury records and the ten-employee exemption
Loading is where delivery operations get hurt, so OSHA’s recordkeeping rule is the third bucket. The threshold is headcount: employers with ten or fewer employees at all times during the previous calendar year are partially exempt from routinely keeping the OSHA 300 log, the 300A annual summary and the 301 incident report.
Partially is the operative word, and two carve-outs survive the exemption:
A work-related fatality, in-patient hospitalization, amputation or loss of an eye must be reported to OSHA regardless of how few people you employ.
If OSHA or the Bureau of Labor Statistics writes to you asking for records as part of a survey, you have to keep and supply them.
Above ten employees, the 300A summary is the one item on this whole page with a fixed calendar date: it is posted in the workplace from February 1 to April 30 covering the prior year.
A regulatory reporting calendar for delivery operations
Most of the work is triggered by events rather than dates, which is precisely why it slips. A workable calendar has four recurring entries and one standing rule.
Annually, on each driver’s hire anniversary. Pull a fresh motor vehicle record and file the review. This is the single most commonly missed item in a driver qualification file.
February 1 to April 30. Post the OSHA 300A summary, if you are above the headcount threshold.
Every two years. Update your USDOT registration. The biennial update is required even when nothing about the business has changed, and letting it lapse deactivates the number.
Quarterly. Spot-check that temperature logs and delivery confirmations actually exist for a handful of random loads. Finding the gap yourself is free.
The standing rule: whenever a driver leaves, move the file to a dated archive rather than deleting it, and set the destruction date three years out.
How to produce compliance documentation without hiring for it
None of this justifies a compliance hire at a ten-van operation. It justifies making the records a by-product of work you already do.
Temperature and proof-of-delivery records are the clearest example. If drivers are already capturing delivery confirmations in whatever software runs your routes, the timestamped record you need for FSMA purposes is generated by the delivery itself rather than written up afterwards from memory. The same logic applies to driver files: a shared folder per driver, created on their first day with a calendar reminder for the annual MVR pull, holds up in an audit far better than a filing cabinet somebody reconstructs under pressure.
Two habits do most of the work:
Keep one document per driver and one per vehicle, not one per rule. Regulators ask about a person or a truck, never about a regulation in the abstract.
Date everything at creation. A record with no date on it is treated as no record at all.
What happens when you cannot produce the records
The failure mode is rarely a surprise fine. It is a roadside inspection that turns into an out-of-service order because a medical certificate has expired, or a wholesale customer’s annual audit that you cannot pass, or an insurer repricing your policy after a claim exposes a gap in driver files. The paperwork problem becomes an operations problem.
Who turns up, what prompts them, and how an inspection of a delivery operation actually unfolds from first contact to close-out is covered in detail in our companion guide to which agencies watch your deliveries. Read it alongside this one: knowing what to keep is only useful if you also know who is going to ask.
Frequently asked questions
Do I need a USDOT number for a cargo van?
Only if its gross vehicle weight rating is 10,001 pounds or more. Most standard cargo vans fall below that; heavy-duty and upfitted models often do not. Check the rating plate in the door frame rather than the curb weight, and check your state’s intrastate threshold separately if you never cross a state line.
Does the FSMA transport rule apply if I deliver my own food products?
Yes, if your average annual revenue over the preceding three years is $500,000 or more. Being your own carrier does not remove the shipper obligations. It means you hold both sets.
How long do I have to keep driver records after someone quits?
Three years from the end of employment for the qualification file. Drug and alcohol testing records have their own, longer retention periods depending on the result.
Is regulatory reporting the same as compliance reporting?
They overlap but are not identical. Regulatory reporting is what an authority can require of you. Internal compliance reporting is the management routine you build to make sure the regulatory side never catches you short.
