← Back to Blog

Preparing for a PHMSA Hazmat Compliance Audit

By Sagan Labs AI · April 6, 2026 · 6 min read

A PHMSA audit reviews systems and records while an inspection is operational and checks the floor against written procedure. Both concentrate on the same three high-frequency findings: classification errors, packaging selection, and missing or incorrect emergency response information.

Inspect a dangerous goods package in 3 seconds.

DG Inspector reads your package photo and shipping paper, classifies the contents against IATA, IMDG, 49 CFR and ADR, and flags compliance gaps before they ground your freight.

Try DG Inspector Free →

A PHMSA audit and a PHMSA inspection aren't the same thing, and preparing for the wrong one leaves a real gap: an audit focuses on your systems, records, and procedures, while an inspection is operational — inspectors visit facilities, observe activities, and verify that written procedures match what actually happens on the floor (DOT Operating Authority).

Routine vs. Triggered Reviews

Not every review happens on the same schedule or for the same reason. Some are routine, scheduled as part of ongoing regulatory oversight to confirm continued compliance year over year. Others are targeted — triggered by an incident, accident, release, complaint, or a prior violation, where regulators are specifically trying to determine whether a compliance failure contributed to what happened (DOT Operating Authority). A shipper's audit history and incident record shapes which type of review they're more likely to face next.

What Inspectors Actually Check

During an operational inspection, expect inspectors to question workers directly, check for safety issues on-site, perform personal qualification checks against training records, review calibrated equipment and confirm employees know how to use it, and verify that the reports and procedures being followed match what's documented (CHEMTREC). This is where a gap between written procedure and actual practice gets found — not in the paperwork alone.

The Top Risk Areas

Regulators consistently flag the same categories of failure across audits: improper or missing hazmat classification, poor packaging or container selection, and missing or incorrect emergency response information (CHEMTREC). These three categories are worth auditing internally before a regulator does it for you — they're the highest-frequency findings, not edge cases.

Documentation That Must Be Ready in Advance

Training records are a specific, checkable requirement: under 49 CFR §172.700, employees must be trained in general awareness, function-specific training, security awareness, and safety training, with documentation retained and renewed on a three-year cycle (CHEMTREC). An auditor asking for proof of current training is one of the most common and easiest-to-fail requests if records aren't centrally organized.

Documentation readiness in general is the single biggest lever a shipper controls before an audit — records, procedures, and compliance program evidence are exactly what auditors are there to review first (Shea WS).

During the Audit: What Actually Matters

Honesty matters more than polish once an audit is underway — when PHMSA asks questions, answering honestly rather than attempting to hide or minimize an issue is consistently the guidance from compliance professionals who've been through the process (Arcwood Environmental). Operators should also understand the inspector's planned schedule in advance, deliver any required safety orientation, and communicate PPE requirements specific to the areas or products being inspected.

Building an Internal Audit Habit

The shippers who handle PHMSA audits with the least disruption are the ones already running informal internal reviews against the same top-risk categories regulators check: classification accuracy, packaging selection, and emergency response information completeness. Waiting for the actual audit to discover a classification gap is the expensive way to find it.

How Inspection Software Helps

DG inspection software that maintains a continuously current, timestamped audit trail — classification decisions, training records, emergency response documentation — turns "prepare for an audit" into "produce records that already exist," rather than a scramble to reconstruct compliance history under time pressure.

The Bottom Line

A PHMSA audit is a systems-and-records review, while a PHMSA inspection is operational — and both check the same three high-risk categories: classification, packaging, and emergency response information. The shippers who fare best treat documentation readiness as a continuous practice, not a pre-audit scramble, and answer regulator questions honestly rather than defensively.

Sources:

Ready to stop guessing at compliance?

DG Inspector turns hours of manual regulation lookup into a 3-second scan. Free to try, no credit card.

Start Free →

Keep reading

Or head back to the blog index or the DG Inspector home page.