An audit notice arrives, and the lookback can span years. Auditors rarely review every transaction. They test a sample, calculate an error rate, then project that rate across the whole audit period. One misclassified sample sale can multiply into a five-figure assessment.
Preparation controls that outcome. This checklist covers what auditors ask for, how the process works stage by stage, how far back a state can reach, and how to fix exposure before it becomes an assessment. The rules flow from the 2018 South Dakota v. Wayfair decision, which let states tax remote sellers with no physical presence (Supreme Court opinion, No. 17-494).
What Is a Sales Tax Audit?
A sales tax audit is a state review verifying that a business correctly collected, reported, and remitted sales tax. Auditors examine returns, invoices, and certificates for gaps. In practice, the review almost always covers use tax too, so a “sales tax audit” is really a sales and use tax audit. Use tax is the buyer’s obligation on untaxed purchases, and auditors dig into purchase records to find it.
What Triggers a Sales Tax Audit?
Audits are triggered by data mismatches the state can see, not by bad luck. States match your sales tax returns against income tax filings, 1099-K reports, and industry benchmarks. A gap flags you. The ranked red flags below show what draws an auditor and how serious each signal is.
| Red flag | Why it flags you | Severity |
|---|---|---|
| Nexus without registration | Open-ended lookback applies; no statute of limitations runs where no return was filed (Tex. Tax Code §111.201, Texas Comptroller) | Critical |
| Revenue vs. tax discrepancies | Sales tax returns that undershoot income tax or 1099-K figures signal underreporting (cross-agency matching) | High |
| High exemption or deduction ratio | Large exempt sales invite certificate testing, the most common audit adjustment | High |
| Inconsistent or late filings | Missing, amended, or late returns show weak controls | Medium |
| Industry targeting | States run sweeps of cash-heavy, construction, and ecommerce sellers | Medium |
| Prior audit with findings | A previous assessment raises re-audit odds | Medium |
| Customer complaints or whistleblower tips | Disgruntled employees, customers, or competitors report | Medium |
| Random or statistical selection | States audit a share of registrants regardless of behavior | Low |
For a deeper look at how these risks compound, see Commenda’s guide to sales tax audits.
How Does the Sales Tax Audit Process Work?
A sales tax audit runs through nine stages, from notice to appeal, each with strict state-specific deadlines. Missing a deadline can forfeit your right to contest findings. The table maps every stage, what happens, and your move at that step.
| Stage | What happens | Your move |
|---|---|---|
| 1. Audit notice | State issues written notice naming the audit period and tax types | Note every deadline; confirm scope |
| 2. Engagement and scheduling | Auditor assigned; entrance conference set | Assign one point of contact |
| 3. Records request | Auditor lists returns, ledgers, certificates, invoices | Gather and organize before delivery |
| 4. Fieldwork | Records reviewed, on-site or remotely | Provide only what is requested |
| 5. Sampling and projection | Sample period tested, error rate extrapolated | Clean up sample-period documents first |
| 6. Preliminary findings | Auditor shares proposed adjustments | Review line by line |
| 7. Response and negotiation | You contest and supply late certificates | Cure deficiencies with valid documents |
| 8. Final assessment | Formal bill of tax, penalty, and interest issued | Verify the math and the period |
| 9. Appeal or protest | Administrative appeal, then possible litigation | File before the strict deadline |
How Does Audit Sampling Work and Why Does It Magnify Liability?
Auditors review a sample period, compute an error rate from it, then project that rate across the entire audit period. So one misclassified sample transaction does not cost you one sale of tax. It multiplies across every month in scope. That is why cleaning up sample-period documentation, especially exemption certificates, delivers the biggest return on your prep time.
How Far Back Can a Sales Tax Audit Go?
Most states look back 3 to 4 years for filed returns, but no statute of limitations applies where returns were never filed or fraud is involved. The trap is unregistered nexus: a business that crossed a threshold years ago and never registered faces open-ended lookback to the date nexus began. The table shows representative state windows with their statutory sources.
| State | Standard lookback | No-limit exception | Source |
|---|---|---|---|
| California | 3 years (return filed) | 8 years if no return; unlimited for fraud | Rev. & Tax. Code §6487, CDTFA |
| Texas | 4 years | Unlimited for no return, fraud, or 25%+ gross error | Tax Code §111.201, Texas Comptroller |
| New York | 3 years | Unlimited if no return or fraudulent return filed | Tax Law §1147, NY Senate |
| Florida | 3 years | Unlimited for nonpayment, no filing, or fraud | Fla. Stat. §95.091(3), Florida Legislature |
| Georgia | 3 years (6 years for 25%+ understatement) | No limit for fraud or unfiled returns | Georgia DOR |
Commenda tracks these windows on its sales tax audit statute of limitations page.
Sales Tax Audit Checklist: What Should You Prepare?
Prepare seven things before an auditor arrives: documents, filings, nexus, exemption certificates, reconciliations, error fixes, and the fieldwork itself. Each item below covers the why, the how, and the state variation.
1. Gather the Documents Auditors Request
Auditors request a standard document set for the full audit period. Assemble each one in organized, searchable, reconcilable form:
- Sales tax returns for the audit period
- Financial statements (profit and loss statements and balance sheets)
- General ledger with detailed transactions
- Sales and purchase invoices and receipts
- Resale and exemption certificates
- Bank statements matching deposits to reported sales
- POS (point of sale) system reports
Retain records at least through the statute-of-limitations period plus a buffer. Four years is a common floor, and seven is safer. Digital, searchable files cut audit friction because auditors increasingly accept electronic data. See Commenda’s sales and use tax form resource for filing records.
2. Review Your Sales Tax Filings and Registrations
Verify tax rates by jurisdiction, confirm every taxable sale was reported, and reconcile returns to your accounting records. Then confirm you are registered in every state where you file. A filing without a matching registration, or a registration without filings, both draw questions. Fix mismatches before the auditor pulls the thread.
3. Confirm Where You Have Nexus
Nexus is your obligation to collect tax in a state. Physical nexus comes from offices, employees, contractors, trade shows, or inventory, including FBA (Fulfillment by Amazon) stock and 3PL (third-party logistics) warehouses. Economic nexus comes from sales volume after Wayfair (2018). Thresholds vary by state and keep changing.
| State | Economic nexus threshold | Source |
|---|---|---|
| South Dakota | $100,000 gross sales; 200-transaction prong removed effective July 1, 2023 | South Dakota DOR bulletin |
| California | $500,000 in sales, no transaction count, since April 1, 2019 (AB 147) | CDTFA Wayfair page |
| Texas | $500,000 in the trailing 12 months, no transaction count, since 2019 | Texas Comptroller |
| New York | $500,000 AND more than 100 transactions, both required | Tax Law §1101(b)(8), NY Senate |
Do not assume one universal number. A nexus study is the foundational step that surfaces hidden exposure. Use the US nexus exposure guide for current thresholds, and read Commenda on sales tax compliance for multi-state businesses.
4. Validate Exemption Certificates
Missing or expired certificates convert exempt sales into assessed tax, and this is the most common audit adjustment. If you cannot produce a valid certificate, the auditor taxes that sale as if it were taxable. Collect certificates at the first sale, validate every field, match them to the customer, and track expirations. Rules vary: some states never expire certificates, others require renewal. Many states let you cure gaps by collecting certificates during the audit. See Commenda’s exemption certificate guide.
5. Reconcile Sales, Purchases, and Use Tax Accruals
Match reported revenue to invoices, receipts, and bank deposits. Cross-check tax collected against tax remitted. Then self-assess use tax on untaxed purchases, fixed assets, supplies, and inventory withdrawn for your own use. Use tax on purchase records often produces a larger adjustment than the sales side, because so few businesses self-assess it.
6. Fix Common Errors Before the Auditor Finds Them
Correct these common mistakes now, while cure is cheap:
- Under-reported taxable sales
- Uncollected tax in nexus states
- Wrong tax rates by jurisdiction
- Missing or invalid exemption certificates
- Untaxed shipping and handling where the state requires it
- Product or service misclassification (SaaS taxability varies widely by state)
Collecting tax but never remitting it is a sharper red flag than not collecting at all, because the state sees trust-fund money it never received.
7. Manage the Fieldwork and Auditor Visit
Assign one point of contact and a dedicated workspace with the requested records. Provide only what is asked for, and pre-review the sample period so no surprise surfaces mid-audit. Fieldwork is increasingly remote and electronic, so prepare clean data files, not just paper. A calm, organized handoff narrows the scope of questions.
What Is the Difference Between Sales Tax and Use Tax?
Sales tax is collected by the seller at the point of sale and remitted to the state. Use tax is owed by the buyer on taxable purchases where no sales tax was collected, such as out-of-state or online buys from non-collecting sellers. Use tax is the most overlooked audit liability. That is why auditors examine your purchase records and fixed-asset ledger, not only your sales.
What Should Ecommerce Sellers Know About Sales Tax Audits?
Marketplace facilitators (Amazon, eBay, Etsy, Walmart) collect and remit sales tax on your behalf, but you often still owe registration and filings. Direct-channel sales stay your responsibility and count toward nexus. Shopify is a platform, not a marketplace facilitator, so Shopify sellers remain responsible for collecting and remitting their own tax. Reconcile every platform report against your returns, and track multi-state exposure across all channels combined.
What If You Find Exposure Before the Audit? VDAs and Penalty Abatement
A Voluntary Disclosure Agreement (VDA) lets an unregistered business come forward before the state makes contact. A VDA typically caps the lookback at 3 to 4 years and waives penalties, even where the state could otherwise reach back indefinitely under exceptions like Texas Tax Code §111.201 (Texas Comptroller). The timing rule is strict: a VDA is generally unavailable once the state has sent an audit notice. After assessment, penalty abatement can still reduce penalties for reasonable cause, though interest is rarely waived. Run a nexus study first, so you find exposure while the VDA door is still open.
How Do You Reduce Sales Tax Audit Risk?
File on time everywhere you have nexus, run an internal sales tax audit at least annually, and automate rate determination and filing. An internal audit reconciles collected versus remitted tax, reviews your nexus footprint, validates the certificate library, and sample-tests taxability decisions. High-growth ecommerce sellers should do this quarterly. Sales tax automation software tracks rate and nexus changes so errors never reach a return. A single-channel US-only seller may be fine with a point solution. A multi-state or multi-entity business gets more certainty from a managed sales tax solution that consolidates one audit trail.
How Commenda Helps You Stay Audit-Ready
Commenda’s global indirect tax platform gives controllers certainty that their sales and use tax is handled. It tracks physical and economic nexus across every state, manages registrations and filings, and stores and validates exemption certificates, the single most common audit adjustment. It connects to your stack through 100+ ERP, API, and custom integrations, so one clean audit trail replaces scattered spreadsheets.
Check current thresholds in the US nexus exposure guide, and look up rates with the Commenda sales tax calculator. The calculator returns rates; the nexus guide tells you where you owe.
Book a demo call to get your free nexus exposure assessment.
