Most B2B sellers treat exemption certificates as a formality. A customer claims they are buying for resale, the rep collects a form, the deal closes. That works fine until an auditor arrives and asks to see the certificate behind every untaxed transaction in the audit period.
The liability sits with the seller, not the buyer. If a certificate is invalid, the seller owes the uncollected tax plus interest and penalties, regardless of what the customer told them. And the way auditors calculate that liability is what makes certificate problems so expensive: they sample your records, find the error rate, and project it across the full audit period. A 15% error rate in a 100-transaction sample, applied to $3 million in exempt sales over three years, means $450,000 of sales lose their exemption. The auditor assesses tax on that amount, which is $31,500 at a 7% combined rate, plus interest and penalties. A handful of paperwork gaps becomes a five-figure tax bill through that extrapolation alone.
Missing certificates are the most straightforward. A sale was coded exempt in the system, but there is nothing on file to support it. This happens most often when a customer verbally claims exempt status, the rep overrides the tax, and the paperwork never follows.
Expired certificates are the most avoidable. Florida's Annual Resale Certificate (Form DR-13) expires every December 31, and the Florida Department of Revenue issues a new one each year to registered dealers. Florida exemption certificates, such as the Consumer's Certificate of Exemption (Form DR-14), expire five years after issuance under Fla. Stat. §212.084. Other states have no hard expiration but expect periodic re-verification. A certificate that was valid when collected can be worthless at audit time if it lapsed midway through the period under review.
Incomplete certificates are defective on their face: missing buyer name, blank address, no tax ID, unsigned, or no stated reason for exemption. These defects are easy to catch at intake and almost impossible to fix years later.
Wrong form for the wrong state scales as a problem with geographic expansion. The MTC Uniform Certificate is accepted in 36 states with varying conditions. The SST certificate covers 24 member jurisdictions. States outside those frameworks require their own forms. Using the MTC certificate for a Texas customer when Form 01-339 is required is the same as having nothing on file.
Certificate-to-transaction mismatch is the failure auditors find in sophisticated operations. A resale certificate does not cover manufacturing, nonprofit, government, or project exemptions. If a customer's certificate claims resale but the items were used in production, the exemption fails even if the certificate itself looks complete.
Because expiration rules differ by state, a seller operating in multiple jurisdictions cannot apply a single renewal schedule to their entire certificate library.
| State / Certificate | Validity and Key Rule |
|---|---|
| Florida | Annual Resale Certificate (DR-13) expires each December 31 and is reissued yearly. Exemption certificates (DR-14) expire 5 years after issuance (Fla. Stat. §212.084). |
| Texas | No statutory expiration if buyer info unchanged. Form 01-339 required. |
| New York | Valid while circumstances unchanged. Form ST-120. Validate buyer's Certificate of Authority number. |
| California | Valid until revoked or circumstances change. Buyer must hold active seller's permit. |
| Washington | Reseller permits from the Department of Revenue are generally valid four years (two years for contractors and businesses open under 12 months). Out-of-state buyers without a Washington permit may use the SST or MTC uniform certificate. |
| MTC Uniform Certificate | Accepted in 36 states with varying conditions. Verify current acceptance before relying on it. |
| SST Certificate | Accepted in 24 SST member jurisdictions. One form covers all member jurisdictions. |
Sellers who accept an invalid certificate in good faith are generally protected from liability, but good faith has real requirements. It means the certificate appeared valid on its face and was collected at or near the time of the sale, from a buyer whose business plausibly supported the exemption claimed.
It does not protect a seller who accepted a certificate with visible defects. It does not protect a certificate collected after the audit notice arrived. Texas, for example, gives a seller 90 days from the comptroller's written notice to produce certificates (Tax Code §151.054), but a certificate obtained after the audit begins does not earn good-faith protection. And in states that require it, failing to verify the buyer's registration number can strip the good faith defense even if everything else looks correct. SST member states apply a relaxed good faith standard, giving sellers a somewhat lower bar for acceptance in those jurisdictions.
Four things separate a certificate library that survives an audit from one that generates an assessment.
If a review of your current library reveals gaps, proactive remediation before an audit opens is significantly cheaper than addressing them after. Some states allow certificates collected during an open audit to be considered before the final assessment is issued. Texas gives 90 days from the comptroller's written notice. That window is narrower and less reliable than acting before the auditor arrives.
Do you know what an auditor would find in your certificate library today? Most certificate gaps are invisible until an auditor samples them and projects the error rate across years of exempt sales. CereTax SmartExempt manages the full exemption certificate lifecycle: collection at point of sale, validation, expiration tracking with renewal alerts, and an audit-ready library that connects every certificate to its transactions. If you are comparing tools, start with how to choose exemption certificate management software.
