Legal & ComplianceAugust 4, 2026·7 min read

How Long Should Brokers Keep Carrier Vetting Records? What the Law Says and What Smart Brokers Do

Most freight brokers know they are supposed to keep carrier vetting records. Far fewer know exactly how long, what to keep, or why the answer changed significantly in May 2026.

The Supreme Court's unanimous ruling in Montgomery v. Caribe Transport II, LLC removed a legal defense that brokers had relied on for years. Before the ruling, brokers in many circuits could argue that federal law preempted state-level negligent hiring claims outright. That defense is now gone in all 50 states. Negligent selection claims can reach a jury, and what a jury sees is whatever documentation a broker can produce.

That makes record retention a front-line business issue, not a back-office task.

What Federal Law Actually Requires

The baseline for broker record retention comes from 49 CFR Part 379, the FMCSA's "Preservation of Records" regulation. It applies explicitly to both motor carriers and brokers.

The minimum retention periods that matter most for carrier vetting are:

Record TypeMinimum Retention Period
Transportation service agreementsUntil expiration
Operating authorities and exemptionsUntil expiration or cancellation
Insurance policies and schedulesUntil expiration plus 1 year
Records of claims (personal injury, property damage)3 years
General financial and accounting records3 years after discontinuing use
Transaction records (loads, rate confirmations, BOLs, PODs)3 years

The regulation also requires that records be protected from destruction, unauthorized access, and data corruption. Digital records are explicitly permitted as long as they "accurately reflect all of the information in the record and remain accessible in a form that can be accurately reproduced later for reference." Three years is the floor. It is not the ceiling.

Why Three Years Is No Longer Enough

Here is the problem with treating the federal minimum as the target: litigation timelines do not respect it.

Personal injury claims from trucking accidents can take years to file and years more to resolve. Statutes of limitations for negligence claims vary by state, and some run as long as six years. In wrongful death cases, the clock may not start until a minor plaintiff reaches adulthood. A carrier vetting record that was legally destroyed at the three-year mark may be exactly what a plaintiff's attorney requests in discovery five years after the load moved.

Post-Montgomery, legal counsel across the industry has converged on a consistent recommendation: retain carrier vetting records for a minimum of seven years, with many advising indefinite retention for records tied to any load that resulted in an accident, injury, or claim. The practical translation: if a load ever touches a claim, those records should never be deleted.

"Document retention practices need to include fact intensive vetting protocols focused on vetting, FMCSA data limitations, and proximate cause boundaries."

What Records Should Actually Be Kept

The federal regulation sets the categories. Post-Montgomery legal guidance tells you what those categories mean in practice for carrier vetting specifically. Here is what a defensible file looks like for each carrier relationship:

At the time of onboarding
  • FMCSA authority verification (with timestamp)
  • Certificate of insurance, including coverage limits and effective dates
  • Safety rating and CSA BASIC score review
  • Carrier identity confirmation
  • Any disqualifying data reviewed and the decision rationale documented
At the time of each load
  • Authority status at the moment of booking (not pulled weeks earlier)
  • Insurance currency confirmed against a current certificate
  • Rate confirmation and load tender
  • Bill of lading and proof of delivery
Ongoing monitoring
  • Any authority revocations or lapses
  • Insurance cancellations or lapses
  • Safety rating changes
  • Out-of-service orders

The word that keeps appearing in post-ruling legal guidance is "contemporaneous." A record created at the moment of the decision carries significantly more legal weight than one reconstructed after a claim arrives. Spreadsheets updated retroactively, emails assembled into a folder after an incident, or rep memory offered in a deposition are not contemporaneous records. They are reconstructions, and opposing counsel will treat them accordingly.

The Difference Between Checking and Documenting

Many brokers check FMCSA SAFER. Far fewer document that they checked it, when they checked it, what they saw, and what decision they made as a result.

Checking and documenting are not the same thing.

A SAFER lookup confirms that a carrier held active authority at some point. It does not prove you looked at it before booking this specific load. It does not capture the CSA scores you reviewed. It does not show that you saw a conditional safety rating and made a deliberate decision. Without a timestamped record of the check, the check may as well not have happened from a legal standpoint.

This is why the architecture of how records are created matters as much as what records are kept. A system that builds the vetting record automatically as the load moves, with timestamps attached to each step, produces contemporaneous documentation. A system that requires someone to manually log what they checked after the fact does not.

What Smart Brokers Are Doing Now

The brokerages that are ahead of this are treating the post-Montgomery environment as an operations problem, not a legal one. The legal exposure is real, but the solution is operational: build the record as the work happens.

01
Formalize a written carrier selection policy
A documented protocol referencing objective safety criteria, with defined disqualifying events and escalation procedures for adverse data, gives a broker something to point to in discovery. An informal process gives a plaintiff's attorney something to attack.
02
Move vetting out of email and spreadsheets
Email threads and manually updated spreadsheets are not auditable records. They are reconstructions waiting to happen. A connected system that captures each vetting step with a timestamp is the difference between a defensible record and a vulnerable one.
03
Extend retention periods beyond the federal minimum
The three-year floor is a compliance baseline, not a litigation strategy. Seven years is the emerging industry standard for general records. Records tied to any load that resulted in an incident should be retained indefinitely or until all claims are fully resolved.
04
Build continuous monitoring into the workflow
A carrier that passed your checks at onboarding may not pass them today. Authority can be revoked, insurance can lapse, and safety ratings can change. Monitoring after onboarding is increasingly considered part of reasonable care, not an optional extra.
05
Establish a litigation hold process
When an incident occurs, every record related to that carrier and that load needs to be preserved immediately. A litigation hold process that can be triggered quickly, before records are routinely purged, is a basic risk management requirement.

The Bottom Line

The federal minimum for broker record retention is three years. The litigation reality is closer to seven, with indefinite retention for any load tied to a claim. The legal standard post-Montgomery is "reasonable care," and what reasonable care looks like in a deposition is a timestamped, traceable record of every vetting step taken at the moment it was taken.

Brokers who treat carrier vetting as a checkbox are exposed. Brokers who treat it as a documented, auditable process are protected.

The records you keep today are the defense you have tomorrow.

This post is for informational purposes only and does not constitute legal advice. Consult qualified legal counsel regarding your specific compliance obligations.

Built for the Post-Montgomery World

RoxVault: Your Evidence-Grade Vetting Record

RoxVault creates a timestamped, retrievable compliance record for every carrier you dispatch. DOT number, safety rating, insurance verification, inspection history, and approval decision, all documented at the moment of vetting. If you are ever named in a negligent hiring claim, RoxVault is your evidence of reasonable diligence.

Timestamped vetting records at every dispatch
Insurance currency verification built in
FMCSA safety score and inspection history
Out-of-service rate tracking
Carrier approval audit trail
Exportable compliance reports for legal defense