Does OSHA require me to have a written policy for employees driving personal vehicles for work?

OSHA has no specific standard covering on-road work driving. Liability exposure comes through the General Duty Clause (OSH Act §5(a)(1)), which requires employers to address recognized hazards. A written gray-fleet policy is the practical evidence that you've done so. Confirm your obligations with OSHA and your legal counsel.

Do FMCSA rules apply to employees driving personal vehicles on company business?

The FMCSA's regulations under 49 CFR Part 391 cover motor carriers operating commercial motor vehicles (CMVs) in interstate commerce — generally vehicles at or above the GVWR/GCWR thresholds defined in 49 CFR 390.5. Most employees running errands in personal passenger cars fall below those thresholds and outside those rules. Confirm your specific vehicles and operations with FMCSA or legal counsel.

What driver checks should a gray-fleet policy require?

At minimum: annual license verification, proof of personal auto insurance at a company-specified minimum coverage level, and confirmation that the vehicle passes a basic roadworthiness check. For FMCSA-regulated carriers, 49 CFR 391.25 requires an annual MVR pull and dated review. For non-regulated fleets, annual MVR review is best practice — confirm requirements with your insurer and counsel.

Can I use a defensive driving course as part of a gray-fleet compliance program?

Yes. OSHA's recommended practices for employer motor-vehicle safety (the 'Guidelines for Employers to Reduce Motor Vehicle Crashes') use 'should' language around driver training. Completing an approved defensive driving course and documenting it is a concrete step toward demonstrating hazard mitigation under the General Duty Clause.

What's the difference between a company-vehicle policy and a gray-fleet policy?

A company-vehicle policy governs cars the business owns or leases. A gray-fleet policy governs employees using their own vehicles on company business — it must address personal insurance adequacy, vehicle roadworthiness, license status, mileage reimbursement rates, and training, because the employer has no direct control over the asset.

Personal Vehicle for Work Policy: The Gray-Fleet Document You're Missing

Every employer sending staff on errands in personal cars needs an employee driving personal vehicle for work policy. Here's what to include — and why.

If you have a company-vehicle policy but no written rules for employees driving their own cars on company business, you have a gap. That gap is your gray fleet — and it's one of the most common unmanaged liability exposures in small and mid-sized organizations.

This post gives you the core components of an employee driving personal vehicle for work policy, explains the legal hooks that make it matter, and points you toward the supporting programs that complete the picture.

For the companion document covering employer-owned vehicles, see our company vehicle use policy template.

What is a gray fleet?

A gray fleet is any personal vehicle driven on company business — a sales rep taking a client to lunch, a field technician driving to a job site in their own truck, or an office manager running to the bank on behalf of the company. If the trip is reasonably connected to work and you haven't issued a company car, the vehicle is gray fleet.

The employer still carries significant exposure. An at-fault crash during a work errand can become an employer liability event under respondeat superior doctrine — yet unlike a company vehicle, you have no direct control over that car's condition, insurance level, or the driver's current license status.

A written policy closes the information gap and demonstrates that you've addressed the hazard. That matters for OSHA, for your commercial auto insurer, and in any post-accident legal proceeding.

The legal hooks you need to know

OSHA's General Duty Clause

OSHA has no specific standard for on-road work driving. However, the OSH Act §5(a)(1) — the General Duty Clause — requires employers to address recognized hazards. Motor-vehicle incidents are consistently among the leading causes of work-related fatalities, and OSHA's own recommended practices (published as Guidelines for Employers to Reduce Motor Vehicle Crashes) use "should" language around driver-screening and training programs. A written policy is your documentary evidence that you've taken the hazard seriously.

See our dedicated post on OSHA driving safety requirements for the full picture.

FMCSA Part 391 (for regulated fleets)

If any of your gray-fleet trips involve vehicles meeting the CMV definition under 49 CFR 390.5 (broadly: 10,001+ lb GVWR, or vehicles designed to carry certain passenger counts, or placarded HazMat) in interstate commerce, the FMCSA's driver-qualification rules — including the annual MVR review required by 49 CFR 391.25 — apply. Most personal-car errands fall below these thresholds, but confirm your specific operations and vehicles with counsel before assuming you're out of scope.

Disclaimer: Traffic, employment, and fleet-safety law varies by state and operation type and changes frequently. Nothing here is legal advice. Confirm your specific obligations with OSHA (https://www.osha.gov), FMCSA (https://www.fmcsa.dot.gov), your commercial auto insurer, and qualified legal counsel before finalizing any policy.

Core elements of a gray-fleet policy

1. Driver eligibility and license verification

Require employees to hold a valid driver's license for the class of vehicle they'll drive before any work-related driving is authorized.
Pull a Motor Vehicle Record (MVR) before authorization and at least annually thereafter. For FMCSA-regulated carriers, annual MVR review is legally required (49 CFR 391.25); for everyone else, it's strong best practice.
Define disqualifying violations — recent DUI/DWI, reckless driving, license suspension — and the process for removing authorization.

Our guide to MVR monitoring for fleets explains how to build this process without significant overhead.

2. Personal auto insurance requirements

Specify a minimum coverage level employees must carry on any vehicle used for work purposes (e.g., liability limits). Coordinate this floor with your commercial auto and umbrella insurers.
Require annual proof of insurance submission — a declarations page or certificate showing the current policy period and coverage limits.
Clarify whether the company carries non-owned auto liability coverage and what that coverage does (and doesn't) protect.

3. Vehicle roadworthiness

Because you don't own the vehicle, you can't inspect it directly. Your policy should require employees to certify annually (and immediately after any crash) that:

The vehicle passes state inspection requirements (registration current, safety systems functional).
Tires, brakes, lights, and windshield are in serviceable condition.
Any crash damage that affects roadworthiness has been repaired before further work use.

4. Mileage reimbursement

State whether you reimburse at the current IRS standard mileage rate, an alternative rate, or by another method. (The IRS rate is updated periodically — confirm the current rate at irs.gov before publishing or distributing your policy.)
Define what qualifies as reimbursable mileage (commute does not count under most interpretations; travel between work sites does).
Specify the documentation required for a reimbursement claim (date, purpose, start/end locations, odometer or mapping tool output).

5. Driver training

Require completion of an approved defensive driving course before authorization for regular gray-fleet driving, and periodically thereafter (annually or every two to three years is common).
Keep completion records. If you ever face a post-accident inquiry, documentation of training is a concrete mitigant.

For options on how to deliver training at scale, see our overview of corporate defensive driving courses online.

6. Incident reporting

Require employees to report any crash — regardless of fault or apparent damage level — within 24 hours.
Define the review process: who receives the report, whether an MVR re-pull is triggered, and when authorization may be suspended pending review.

Putting it together

A gray-fleet policy doesn't need to be a legal treatise — it needs to be clear, consistently enforced, and updated when law or best practice changes. The sections above give you a workable skeleton; your legal and insurance advisors should review the final document.

The organizations most exposed are the ones who assume that because they don't own the cars, they have no fleet obligations. That assumption is the gap this document is designed to close.

Rules, thresholds, and agency guidance referenced above can change. Always verify current requirements with OSHA, FMCSA, your state labor/transportation agency, and qualified legal counsel before finalizing and distributing your policy.