Most B2B sellers treat exemption certificates as a formality. A customer claims they are buying for resale, the rep collects a form, the deal closes. That works fine until an auditor arrives and asks to see the certificate behind every untaxed transaction in a four-year window.
The liability sits with the seller, not the buyer. If a certificate is invalid, the seller owes the uncollected tax plus interest and penalties, regardless of what the customer told them. And the way auditors calculate that liability is what makes certificate problems so expensive: they sample your records, find the error rate, and project it across the full audit period. A 15% error rate in a 100-transaction sample applied to $3 million in exempt sales over three years produces $450,000 in assessed deficiencies before penalties and interest. A handful of paperwork gaps becomes a six-figure number through that extrapolation alone.
Missing certificates are the most straightforward. A sale was coded exempt in the system, but there is nothing on file to support it. This happens most often when a customer verbally claims exempt status, the rep overrides the tax, and the paperwork never follows.
Expired certificates are the most avoidable. Florida exemption certificates expire five years from issuance under Fla. Stat. §212.084. Other states have no hard expiration but expect periodic re-verification. A certificate that was valid when collected can be worthless at audit time if it lapsed midway through the period under review.
Incomplete certificates are defective on their face: missing buyer name, blank address, no tax ID, unsigned, or no stated reason for exemption. These defects are easy to catch at intake and almost impossible to fix years later.
Wrong form for the wrong state scales as a problem with geographic expansion. The MTC Uniform Certificate is accepted in 36 states with varying conditions. The SST certificate covers 24 member jurisdictions. States outside those frameworks require their own forms. Using the MTC certificate for a Texas customer when Form 01-339 is required is the same as having nothing on file.
Certificate-to-transaction mismatch is the failure auditors find in sophisticated operations. A resale certificate does not cover manufacturing, nonprofit, government, or project exemptions. If a customer's certificate claims resale but the items were used in production, the exemption fails even if the certificate itself looks complete.
Because expiration rules differ by state, a seller operating in multiple jurisdictions cannot apply a single renewal schedule to their entire certificate library.
Sellers who accept an invalid certificate in good faith are generally protected from liability, but good faith has real requirements. It means the certificate appeared valid on its face and was collected at or near the time of the sale, from a buyer whose business plausibly supported the exemption claimed.
It does not protect a seller who accepted a certificate with visible defects. It does not protect a certificate collected after the audit notice arrived. And in states that require it, failing to verify the buyer's registration number can strip the good faith defense even if everything else looks correct. SST member states apply a relaxed good faith standard, giving sellers a somewhat lower bar for acceptance in those jurisdictions.
Four things separate a certificate library that survives an audit from one that generates an assessment.
If a review of your current library reveals gaps, proactive remediation before an audit opens is significantly cheaper than addressing them after. Many states, including Texas, California, and New York, allow certificates collected during an open audit to be considered before the final assessment is issued, but that window is narrower and less reliable than acting before the auditor arrives.
Do you know what an auditor would find in your certificate library today? Most certificate gaps are invisible until an auditor samples them and projects the error rate across years of exempt sales. Ceretax manages the full exemption certificate lifecycle: collection at point of sale, validation, expiration tracking with renewal alerts, and an audit-ready library that connects every certificate to its transactions.
