AuditRunway

1. One-liner

Gets a brand-new trucking carrier audit-ready — assembles the safety-audit binder and runs the clearinghouse clock before FMCSA shows up.

2. Trend signal — why now?

Every company that pulls a new USDOT number gets a 12-month clock: FMCSA runs a New Entrant Safety Audit, and if the paperwork isn’t there you fail. The volume is enormous and renewing — ~55,000 new USDOT numbers were issued in the first half of 2025 alone (FreightWaves / FMCSA registration data, 2025). That’s a fresh cohort of terrified one-truck operators every single month, most of whom have never seen a driver qualification file.

The enforcement is real and getting sharper. FMCSA cited 2,696 carriers in 2025 for failing to run a pre-employment clearinghouse query, average penalty $7,736 (TruckComplianceHQ, 2026). Missing an alcohol/controlled-substances testing program is an automatic audit failure (FMCSA New Entrant Safety Assurance Program). After a fail you get a Corrective Action Plan window “as few as 10 days,” and FMCSA revokes your authority on day 46 or 61 if the response isn’t accepted (FMCSA CAP guidance).

The reason now is right: the new-entrant list and every carrier’s contact info live in a free, daily-updated public FMCSA Census file with a Socrata API (DOT Open Data). So the exact list of people who just started their audit clock — with phone and email — is a government download. Cheap LLMs can now turn a pile of uploaded PDFs (CDL, med card, insurance, testing consortium enrollment) into a labeled, auditor-ready binder plus a CAP draft. That combination — free targeting data + AI document assembly — did not exist as a self-serve product two years ago.

Provenance:

• Signal 1 (demand): New one-truck carriers routinely “overlook the drug and alcohol program until the audit notice arrives”; auto-fail on missing testing program; CAP due in 10–15 days — FMCSA New Entrant program / MotorCarrierHQ, 2026 — 2026-07-05
• Signal 2 (feasibility): FMCSA Census file is free, updated daily, exposed via Socrata API with carrier contact info — DOT Open Data Portal — 2026-07-05
• Signal 3 (economic): ~55,000 new USDOT numbers in H1 2025; established paid compliance market (Foley, DISA, J.J. Keller charging for clearinghouse/audit services); FMCSA modernizing registration via Motus — FreightWaves, 2025 — 2026-07-05 Category: Workflow automation

3. The opportunity

The incumbents in FMCSA compliance — Foley, DISA, J.J. Keller, Simplex, MotorCarrierHQ — are high-touch consortium/C-TPA services. You call a rep, you get enrolled in a drug-testing program, they run your queries, and you pay for the relationship. That model works, but it’s built for someone who already knows they need help and is willing to talk to a salesperson. It’s opaque on price and it treats the safety audit as a service engagement, not a self-serve checklist.

What nobody sells cleanly is a cheap, self-serve product that walks a first-year carrier from “I just got my DOT number” to “I passed the audit” — a living checklist that knows the 14 automatic-failure items, ingests your documents, tells you exactly what’s missing, keeps your clearinghouse and annual-query dates, and — if you fail — drafts the Corrective Action Plan. The audit is a known, finite, document-shaped task with a hard deadline. That’s the ideal shape for AI-assisted assembly. The 10× isn’t “cheaper C-TPA” — it’s turning a stressful, ambiguous, “did I forget something” ordeal into a green-checkmark progress bar that a solo operator finishes at 11pm on their phone.

4. Target market

• Primary customer: Owner of a brand-new US motor carrier — one truck to ~10 trucks — inside their first 12 months under a USDOT number. Ex-company-driver who just went independent, or a small family trucking startup. They have authority, insurance, and a truck, but no compliance staff.
• Why they buy: They’re scared of the audit and they know it. In their words (paraphrased from industry guidance and forums): they “overlook the drug and alcohol program until the audit notice arrives,” feel the document list is “overwhelming,” and don’t realize a one-truck operation still needs driver-qualification files, HOS records, and maintenance logs. When the notice comes they may have “as little as 48 hours” to get ready.
• Rough TAM reasoning: ~100K+ new USDOT numbers a year; even excluding brokers, freight-forwarders, and chameleon re-registrations, a realistic serviceable new-entrant cohort is comfortably 50K–70K carriers/year that face an audit. At $40–80/mo for a 6–12 month engagement, that’s a renewing top-of-funnel measured in the tens of thousands.
• Why now for them: The clock starts the day they register — not when they feel ready. Enforcement is tightening (clearinghouse is now “one of the first records reviewed” in audits), and registration is churning through FMCSA’s new Motus system, which is generating confusion and search traffic.

5. Product sketch (MVP)

• Guided audit checklist mapped to the New Entrant Safety Audit’s six review areas and the 14 automatic-failure items — each item is a “done / missing / at-risk” line.
• Document upload + AI labeling: drop in a CDL, medical card, insurance filing, testing-consortium enrollment, MCS-150, roadside inspection — the AI classifies each, files it into the right binder slot, and flags expirations.
• Gap report: a plain-English “here’s what will make you fail” list, ranked by severity, with the exact regulation cited.
• Compliance calendar: annual clearinghouse query date, med-card and CDL expirations, MCS-150 biennial update, drug-testing random-pool cadence — with reminders.
• Audit binder export: one-click, auditor-ready PDF binder organized the way FMCSA expects it.
• Corrective Action Plan drafter: if they fail, generate a CAP draft from the failure notice + their now-fixed documents.
• “Do I have a testing program?” wizard: the #1 auto-fail — walk them to enroll in a consortium (affiliate/referral revenue) if they don’t have one.

6. AI angle — what’s load-bearing

Remove the AI and this is a static PDF checklist — which is exactly what already floats around for free and nobody follows. The AI is load-bearing in three places: (1) document understanding — turning a phone photo of a med card or a messy insurance PDF into a classified, dated, validated binder entry; (2) gap reasoning — reading the carrier’s uploaded set against the audit rules and producing a specific, cited “you will fail on X” list rather than a generic checklist; and (3) the CAP drafter — generating a defensible corrective-action narrative from a failure notice plus the fixed documents. The value is collapsing “read 40 pages of FMCSA guidance and hope you didn’t miss the one auto-fail” into “upload what you have, get told exactly what’s missing.”

7. Localization angle

N/A — this is a US-only regulatory play. The wedge is the specificity of FMCSA rules and the free US Census dataset. There is no localization angle; a “global” version would be a different product per country’s transport regulator. That’s fine — the US new-entrant cohort alone clears the $1–5M ARR bar.

8. Business model — path to $1M–$5M ARR

• Pricing: $49/mo self-serve tier (checklist + document AI + calendar + binder export); $99/mo “audit-ready” tier adding CAP drafter and priority support. Optionally a one-time $199 “audit-week” sprint pack for people who wait until the notice arrives.
• ACV: Realistic engagement is 6–12 months (the clock runs 12; some churn after passing). Blended ~$400–600/customer over the engagement, plus consortium referral commissions.
• To $1M ARR: ~1,700 active paying carriers at ~$50/mo. Against a 50K+/year new-entrant funnel, that’s ~3% capture of a single year’s cohort — very achievable.
• To $5M ARR: ~8,000 active carriers, i.e. ~12–15% of the annual cohort, plus the $99 tier mix and consortium/insurance affiliate revenue. Requires expanding beyond new-entrants into ongoing small-fleet compliance (recurring annual queries, biennial updates) so customers don’t churn the day they pass — turning a one-year event into a multi-year subscription.
• Expansion path: new-entrant audit (year 1) → ongoing compliance calendar + query automation (years 2+) → per-driver add-ons as the fleet grows → referral fees from testing consortiums and insurance.

9. Go-to-market wedge — first 100 customers

• The list is a government download. Pull the FMCSA Census file daily via the Socrata API, filter to carriers whose USDOT number was issued in the last 30–60 days, get name + phone + email. This is the single best cold-outreach list I’ve seen for a compliance product — it’s literally “people whose audit clock just started.”
• Cold email + SMS the fresh cohort: “You got your DOT number [date]. Your safety audit is due within 12 months — here’s the free 14-item checklist that trips up most one-truck carriers.” Lead with the free gap-check, upsell the subscription. Even a 2–3% conversion on a few thousand fresh registrations a month gets you to 100 fast.
• Own the search intent: new carriers Google “new entrant safety audit checklist” and “what happens if I fail my DOT audit” in a panic. A genuinely useful free checklist tool captures the exact bottom-of-funnel moment (this is content, but tied to a free interactive tool, not generic blogging).
• Partner with the front door: authority-registration services, ELD vendors, and trucking-insurance agents all touch the carrier at day zero and have no interest in doing audit prep. Referral partnership — they hand off the audit headache, you rev-share.
• Trucking forums and YouTube/TikTok “how I started my trucking company” creators already have the audience mid-panic; sponsor or tool-drop.

10. Build complexity — justification

Medium. Off-the-shelf: the web app, document-classification via a vision-capable LLM, the Census API pull. Custom work is the domain encoding — accurately mapping the audit’s review areas, the 14 automatic-failure items, and the CAP requirements into checklist logic that’s correct, because a wrong “you’re fine” is a lawsuit-adjacent problem. That’s rules discipline plus a compliance advisor, not novel engineering. A small team ships a credible v1 in ~10–14 weeks.

11. Gating checklist

Gate	Pass?	Note
Legal in target market	✅	Helping carriers comply with public FMCSA rules using public data.
Ethical — no harm / dark patterns	✅	Genuinely reduces failures; must be careful not to imply guaranteed pass.
Market exists (evidence above)	✅	55K new numbers/H1 2025, paid incumbents, cited penalties.
1–5 person team can build this	✅	Web app + LLM doc handling + rules engine.
Launchable with <$50K / ₹40L	✅	No inventory, no data licensing; main cost is a compliance advisor’s time.

12. Feasibility score

Axis	Weight	Score	Notes
Problem intensity	20	16/20	Hard deadline, auto-fail items, authority revocation on the line. Not daily pain, but acute and high-stakes during the window.
Demand evidence	15	12/15	Large renewing cohort, paid incumbents, cited penalties, active search intent. Docked because most direct “voice” is via industry guides, not verbatim buyer quotes.
Build feasibility	15	12/15	Standard stack + LLM; the risk is correctness of the compliance logic, not engineering novelty.
Distribution clarity	15	13/15	Best-in-class: the exact prospect list with contact info is a free daily government file.
Revenue mechanics	15	11/15	Pricing works; main risk is churn-after-pass — must convert the event into an ongoing subscription.
Time to first revenue	10	8/10	Cold outreach to a live list can close in weeks; a $199 audit-week pack monetizes panic immediately.
Defensibility	10	4/10	Rules and data are public; moat is execution, brand at the day-zero moment, and referral relationships. Copyable.
Total	100	76/100

13. Qualitative modifiers

Founder-fit tags

domain-expertise-required (someone must own FMCSA new-entrant rules cold, or advise closely) · sales-heavy (cold outreach + referral-partner deals drive the first 1,000).

Key assumptions to validate (3–5)

1. Assumption: New-entrant carriers will pay ~$50/mo rather than white-knuckle it or DIY off free checklists. How to test: Cold-email 500 carriers from the last 30 days of Census data with a free gap-check; measure signup → paid conversion.
2. Assumption: The FMCSA Census file reliably includes usable email/phone for fresh new-entrant carriers at sufficient volume. How to test: Pull 2 weeks of Census data, quantify % with valid contact info and clean new-entrant timestamps.
3. Assumption: Customers don’t all churn the moment they pass the audit. How to test: Interview 20 second-year small carriers on willingness to keep paying for ongoing query/expiration automation.
4. Assumption: We can encode the audit logic accurately enough that “you’re audit-ready” is trustworthy. How to test: Have a DOT compliance consultant grade the tool’s gap-report against 15 real (anonymized) audit outcomes.

Risk flags

1. Accuracy / liability risk: Telling someone they’ll pass and then they fail — or hallucinating a rule — is reputationally and legally serious. Requires human-reviewed rules and careful “not legal advice / not a guarantee” framing.
2. Platform/regulatory-change risk: FMCSA’s Motus migration and any move to mandatory processes could shift the audit mechanics; the rules layer must be maintainable, not hard-coded once.
3. Churn / one-time-event risk: If the product stays a year-one-only tool, LTV caps out; the whole $5M path depends on converting the audit event into a durable small-fleet compliance subscription.
4. Incumbent response: Foley/DISA/J.J. Keller could ship a cheaper self-serve tier; the defense is speed, day-zero brand, and owning the free-checklist search moment before they bother.

14. Structured verdict

Score:                  76/100
Verdict:                GO
Confidence:             Medium
Best-fit builder:       Technical founder + FMCSA/DOT compliance advisor; comfortable with cold outreach
Time to revenue:        6–10 weeks (cold outreach to live Census list + $199 audit-week pack)
Capital to launch:      $8–20K ($ mostly compliance-advisor time + LLM/API costs)
Top 3 assumptions to validate first:
  1. Paid conversion from a free gap-check on fresh Census-list carriers (email 500, measure signup→paid)
  2. Census file yields usable contact info + clean new-entrant timestamps at volume (2-week pull, quantify)
  3. Retention past the audit (interview 20 second-year small carriers on ongoing-compliance willingness-to-pay)
Kill criteria:
  - Abandon if <2% of 500 cold-emailed fresh new-entrants convert to a paid or trial signup
  - Abandon if the Census file's contact/timestamp quality is too poor to target the fresh cohort reliably
  - Abandon if a compliance advisor can't get the gap-report to trustworthy accuracy without per-customer manual review

15. Next step — 1-week validation sprint

• Day 1–2: Pull the FMCSA Census file, filter to carriers registered in the last 30 days, and measure how many have valid email/phone. This alone proves or kills the distribution thesis.
• Day 3–4: Stand up a one-page “free new-entrant audit gap-check” (upload your docs, get a list of what’s missing) — even if the “AI” is a human behind the curtain for week one. Cold-email/SMS 500 fresh carriers.
• Day 5: Decide go / no-go on: did ≥2% start the gap-check, and did ≥5 of those say “yes, I’d pay $49/mo for this”? A falsifiable number, not a vibe.