Ontario CVOR Safety Program: What MTO Actually Audits

If you operate a commercial motor vehicle over 4,500 kg, a tow truck of any weight, a bus seating 10 or more passengers, an accessible or school purposes vehicle, or an out-of-country plated unit running in Ontario — you are subject to the CVOR system. That means a written, enforced, and documented safety program is not optional.

If your "safety program" is a binder that hasn't been touched since onboarding, you are not audit-ready — you're just hoping the Ministry doesn't show up.

The Regulatory Stack MTO Uses to Evaluate You

Before walking through what your program needs, know which legislation an auditor will be referencing when they assess your operation:

• Highway Traffic Act (HTA) — the core provincial statute covering driver licensing, vehicle standards, inspections, hours of service, and operator obligations
• Ontario Regulation 555/06 — maximum driving limits and off-duty requirements for commercial drivers
• Ontario Regulation 424/97 — governs CVOR records, safety ratings, and Ministry intervention actions
• Ontario Regulation 199/07 — sets daily inspection standards under the Commercial Vehicle Inspection Program
• Ontario Regulation 174/22 — defines which vehicle classes require inspections and at what intervals
• National Safety Code (NSC) — the federal/provincial framework for uniform commercial vehicle safety standards across Canada
• DriveON — Ontario's current vehicle inspection program, which replaced MVIS and operates with digital oversight and mobile capability at certified inspection stations

These are not background reading. These are the documents an MTO auditor has open when they're reviewing your files.

Assign Your Compliance Officer — On Paper

Every carrier must formally designate a Compliance Officer. This is not optional, and it cannot be informal.

That person needs documented working knowledge of:

• The Highway Traffic Act (HTA) and its commercial vehicle provisions
• Ontario Regulation 555/06 (Hours of Service daily and cycle limits)
• National Safety Code (NSC) standards across all 15 elements
• Your company's own internal policies and discipline procedures

Their responsibilities must appear in a formal job description or organizational chart — not just understood by word of mouth. During an audit, MTO will ask who owns compliance. If the answer is vague, that's an immediate red flag.

The 7 Policies You Must Have in Writing

Carriers are required to maintain written policies in these areas. "We handle it case by case" is not a policy.

Mandatory policies include:

• Hours of Service — ELD use, Cycle 1 and Cycle 2 limits, the 160 km radius exemption criteria, and what happens when a driver has an ELD malfunction
• Preventative Maintenance — Maintenance intervals, defect reporting steps, who authorizes repairs, and how those records are filed. If your vehicles are subject to DriveON inspections, your policy must reflect current PMVI requirements under Ontario Regulation 174/22
• Trip Inspection — Schedule 1 daily inspection procedures, major vs. minor defect classification, and how reports are linked back to the vehicle maintenance file
• Driver Qualification and Conduct — Hiring standards, what goes in a driver file, and a step-based progressive discipline structure
• Accident and Incident Reporting — Timelines for driver reporting, internal investigation steps, and file retention minimums
• Dangerous Goods (if applicable) — TDG shipping document requirements, 3-year certificate renewal, CANUTEC registration, and emergency response procedures
• Progressive Discipline — Written, verbal, suspension, and termination steps with documentation requirements at every stage

Each policy must be reviewed at minimum once per year, updated when legislation changes, and re-signed by affected drivers and staff. A policy version log tracking revision dates and approvals is not optional — it's what makes your policy defensible.

Document Control Is What Separates a Real Program From a Paper One

Your compliance documents need to be organized, indexed, retained for the required period, and retrievable quickly during an enforcement visit.

Key retention minimums to build your system around:

• Bills of Lading and Waybills — 12 months minimum, linked to dispatch or route records
• TDG shipping documents — 2 years after the date of transport
• Driver qualification files, training records — minimum 5 years from training date; abstracts minimum 2 years with evidence of annual review
• HOS logs and supporting documents — minimum 6 months, accessible at the principal place of business
• Vehicle maintenance records — minimum 2 years while the vehicle is in service; 6 months after the vehicle leaves your control

Digital systems must be backed up. Paper systems must be indexed. Either way, if a Ministry auditor asks for a specific record and you can't produce it within a reasonable timeframe, it counts against you.

Internal Audits Are Not Optional

Carriers must conduct structured internal audits at least semi-annually. Your audit needs to review:

• Driver qualification files
• Vehicle maintenance records
• HOS logs and supporting documents
• Policy compliance across inspections, training, and reporting
• CVOR performance metrics — collisions, convictions, and roadside inspection results

Every audit must produce a written summary identifying gaps found, corrective actions taken, who is responsible, and a completion timeline. That report gets retained as part of your safety program and reviewed by management.

Safety Meetings Need Paper Trails

Monthly or quarterly safety meetings are part of your compliance record. Every meeting must be documented with the date, topics covered, attendee names and signatures, any handouts used, and action items.

A folder of unsigned agendas does not count. MTO wants to see that real people were in the room and that specific issues were addressed.

Using a Consultant Doesn't Transfer Your Liability

Some carriers hire third-party consultants to support audits or build out compliance systems — that's a legitimate tool. But under Ontario's CVOR framework, the carrier always retains full legal responsibility for implementing and enforcing the program.

A consultant can write your policies, train your team, and flag your gaps. They cannot own your compliance. Make sure any engagement is formalized through a written Scope of Work that defines deliverables, timelines, and access requirements — and make sure your internal team is actually following through.

Quick Self-Audit: 10 Things MTO Will Look For

Run through this before your next internal review — or before MTO shows up first:

• A designated Compliance Officer is assigned with responsibilities clearly documented
• A written Safety Program is in place, tailored to your operation and reviewed annually
• All company policies are current, documented, and signed by drivers and relevant staff
• A policy review and communication schedule is documented and followed (at minimum annually)
• Safety meetings are held regularly with attendee signatures and topics on record
• A formal internal audit process exists and runs at least semi-annually
• Shipping documents are correctly completed, retained, and accessible during transport and audits
• Dangerous goods documentation is in compliance, including valid TDG certificates (if applicable)
• A structured document control system is in place for storing and retrieving compliance records
• Any consultants are formally engaged with a signed Scope of Work and do not control operations

Inconsistent or inactive systems will not hold up under audit, insurance review, or legal scrutiny. Build systems you can defend — and follow them consistently. To get the complete, audit-proof system for your fleet, grab the full 102-page manual at www.carriersafetymanual.ca.