Published May 22, 2026
What's Actually in a Sales Tax Risk Analysis (And Why Smart Businesses Get One)
All posts
Most business owners are not thinking about sales tax. They are thinking about growth — new customers, new markets, new products. Sales tax is the kind of thing that lives on the to-do list indefinitely, right up until the moment it becomes a problem.
A sales tax risk analysis exists for exactly that gap. It is not a punishment for getting it wrong. It is a way to find out where you actually stand before a state tax authority finds out for you.
Here is what the process actually looks like, what you walk away with, and why it is worth doing even if you suspect everything is fine.
There are a few common situations that bring businesses to this conversation.
You have been growing fast. Sales have crossed into new states, you may have added remote employees, or you started using a third-party fulfillment center. Any of these can create a tax obligation you did not know existed. Economic nexus thresholds — typically $100,000 in sales to buyers in a state — can be crossed without anyone on your team noticing.
You are preparing to sell or raise capital. This is one of the most common triggers. Investors and acquirers ask about tax liabilities during due diligence. Unresolved sales tax exposure can affect your valuation or slow down a deal. Coming in with a clean, documented analysis is far better than scrambling to explain it during negotiations.
You are not sure what you do not know. Some businesses have been operating for years, collecting tax in the states where they started, but never reassessing as the business evolved. The rules have changed significantly since 2018, and a lot has likely changed in your business too. A risk analysis gives you a current, accurate picture.
The process starts before any spreadsheet is opened. You will fill out a questionnaire that helps us understand your business at a high level — roughly how much you sell, in what volume of transactions, which states you are already registered in, and what you are selling. That last part matters because taxability rules vary. Software, food, clothing, digital services, candy — every category has its own treatment, and it is different in every state.
From there, you provide your transactional sales data for the time period we are analyzing. We take that data, apply the current nexus rules for all applicable states, and calculate your actual exposure. Not a rough guess — a documented range with estimated tax liability, penalties, and interest broken down by state.
The output is a detailed spreadsheet summary plus, when it is helpful, a state-by-state PDF that walks through the specific rules, threshold dates, and how far you exceeded any threshold in each state.
Here is where it gets specific. Every state falls into one of a handful of categories in your report:
For every state where there is potential liability, you get a calculated range. Not a single number, because sales tax rates vary down to the local district level, but a realistic window that tells you what the exposure actually looks like.
In one example, a company came in not knowing what to expect and walked away with a report showing $7,500 to $10,000 in total estimated tax across all states where they had exposure — with a maximum audit risk of around $14,000 even if every single state audited them simultaneously. That kind of clarity is useful. A business owner or CFO can look at that number and make a real decision: is this material? What is the smartest next step?
In another case, the exposure was significantly larger — around $5.4 million across 22 states, with the business only registered in 10. That is a different conversation, and a different set of decisions. But even then, the analysis made it manageable. The total was broken down by state, with liability isolated to each jurisdiction, because each state's tax authority only audits its own piece. The numbers that felt catastrophic at first became a set of individual problems that could each be addressed.
One detail that surprises a lot of people: there is a difference between when you have nexus and when you were required to start collecting.
Most states build a lag into their legislation. Once you cross an economic nexus threshold, you have a window — sometimes the end of that quarter, sometimes 30 or 60 days — before the collection obligation kicks in. The analysis accounts for this. Tax liability is calculated from the date you were legally required to collect, not from the moment you technically had nexus. It is a meaningful distinction and it is built into every number we give you.
A lot of what makes this useful is not the spreadsheet — it is the conversation around the spreadsheet.
When your analysis is complete, our projects team reviews it internally, then walks you through it on a call. Not to read you numbers you could read yourself, but to answer questions, explain what matters most, help you understand the options, and make sure nothing is confusing or alarming without context.
If next steps are needed — registering in new states, addressing historical liability through a Voluntary Disclosure Agreement, or getting help with ongoing filings — you will be connected to the right people on our team to make that happen. A VDA, for instance, can significantly limit the look-back period a state can examine and waive penalties for businesses that come forward voluntarily. It is the kind of thing that is worth knowing about before you register directly.
The analysis tells you where you stand. The team helps you decide what to do about it.
The risk analysis is not a permanent fix. It is a current snapshot. Your nexus footprint changes as your business changes — new employees in new states, new sales channels, new products with different taxability rules. Adding a channel like Amazon Marketplace might bring in new revenue that does not create additional tax liability (because the marketplace handles collection), but it can still affect the date when you cross an economic nexus threshold in a state.
A general rule: revisiting your analysis every one to three years makes sense for most businesses, or sooner if something significant changes in your operations.
It is straightforward. You will need:
That is it. You do not need to be a tax expert coming in. The whole point is that we do the analysis and bring the expertise.
The risk analysis is a valuable tool we offer clients, designed to give you a documented, accurate picture of your sales tax exposure — past and present — along with the guidance to understand what it means for your business.
If you are not sure whether you need one, the first step is a conversation. Our sales tax consultants offer a free "What's Next" call where you can talk through your situation, ask questions, and get a clear sense of whether a risk analysis makes sense for you right now.
Most businesses that go through it tell us the same thing: they feel better knowing. Even when the numbers are bigger than expected, having a real answer is less stressful than the uncertainty of not knowing.
Schedule your free "What's Next" call here.
A sales tax risk analysis is a structured review of your business's sales tax obligations, conducted to identify where you may be non-compliant, underexposed, or at risk of an audit before a state tax authority identifies the issue for you. It examines where your business has nexus, whether you are registered in the right states, how your products are classified for tax purposes, whether your exemption certificates are current and complete, and whether the tax you have been collecting and remitting accurately reflects what the law requires. The goal is not to find fault — it is to give you an honest picture of where you actually stand so you can address issues proactively and on your own terms.
A thorough sales tax risk analysis typically covers five core areas. First, a nexus review — mapping every state where your business has a physical or economic connection and comparing that against where you are currently registered. Second, a taxability review — evaluating whether the products and services you sell are correctly classified in each state where you operate. Third, an exemption certificate audit — checking whether certificates on file are valid, complete, and not expired. Fourth, a filing and remittance review — verifying that returns have been filed on time and that the amounts remitted match what was collected. And fifth, a liability estimate — quantifying the potential exposure in any state where gaps are identified, so you understand the financial stakes before deciding how to respond.
The most common indicators of sales tax exposure include: selling into states where you have not registered but may have crossed the economic nexus threshold, having remote employees or inventory stored in states where you are not currently filing, selling products whose taxability varies by state without having reviewed each state's rules, accepting exemption certificates from customers without validating them, and having never conducted a formal nexus review despite significant business growth. Many businesses have exposure they are unaware of precisely because sales tax obligations expand silently — triggered by growth decisions like hiring, warehousing, and entering new markets — without anyone noticing until an audit or a state notice surfaces the issue.
States use several methods to identify businesses for audit. Common triggers include discrepancies between sales reported on state returns and data received from third-party sources like marketplace platforms or payment processors, failing to file returns or filing inconsistently, registering for payroll tax in a state but not for sales tax, having a business license or permit in a state with no corresponding sales tax registration, and being identified through data-sharing programs between states. In 2026, states are increasingly using AI-driven matching systems to cross-reference data and flag businesses that appear to have nexus but are not filing. The most effective way to avoid an audit is to address known gaps proactively — before the state's systems identify them for you.
Sales tax exposure refers to the total financial liability a business could face if a state were to audit its sales tax compliance for a given period. It includes the uncollected or unremitted tax itself, plus penalties — which typically range from 5% to 25% of the unpaid amount — plus interest that accrues from the original due date. Exposure can exist in states where a business has nexus but is not registered, in transactions where the wrong tax rate was applied, and in exempt sales that lack valid documentation. Quantifying exposure is one of the most important outputs of a sales tax risk analysis, because it allows a business to make informed decisions about how to remediate the issue — whether through voluntary disclosure, direct registration, or other compliance pathways.
The cost of a sales tax risk analysis varies depending on the size of the business, the number of states involved, and the complexity of the products or services being reviewed. For small to mid-sized businesses operating in a handful of states, a risk analysis may range from a few hundred to a few thousand dollars. For larger businesses with multi-state operations, complex product lines, or significant historical exposure, the investment can be higher — but it is almost always significantly less than the penalties, interest, and legal costs that result from an undetected compliance problem discovered during a state audit. Many sales tax consultants offer an initial assessment at a fixed fee, with remediation services priced separately based on what the analysis uncovers.
Once the analysis is complete, you receive a clear picture of your compliance status — what is in order, what is not, and what the financial stakes are in each area of concern. From there, the response depends on what was found. If you are unregistered in states where you have nexus, the next step is typically registration and prospective compliance, sometimes combined with a Voluntary Disclosure Agreement to address historical exposure with reduced penalties. If taxability classifications are incorrect, those are corrected before the next filing cycle. If exemption certificates are missing or expired, a remediation process is put in place to collect them. In cases where everything looks clean, the analysis gives you documented confidence that your compliance position is sound — which has real value if you are ever audited or going through a business acquisition.
We care about your data – privacy policy
