Most businesses receiving a sales tax audit notice assume the process ends with a number they either pay or dispute in court. The reality is more nuanced, and more navigable, than that. A sales tax assessment is a constructed document. It is built from records the auditor could access, projected using methodology the auditor chose, and subject to challenge at multiple points before it becomes legally binding. The businesses that pay the smallest assessments are not always the ones with the cleanest compliance history. They are the ones that understood which parts of the process were contestable and acted at the right moments.
In 2026, state revenue agencies are auditing more aggressively than at any point since the post-Wayfair registration wave of 2019 to 2022. States that spent several years onboarding newly registered remote sellers are now cycling back through those registrants to verify that collection has been accurate. High-volume SaaS companies, ecommerce sellers, and multi-state service providers are disproportionately represented in current audit activity, and the audit periods being reviewed now frequently cover 2022 through 2024, when pricing models and product catalogs were expanding fastest and tax infrastructure was often not keeping pace.
An assessment begins before the auditor issues a single findings document. The first stage is scoping: the state issues an audit appointment letter identifying the audit period, the issues under review, and an initial Information Document Request (IDR). The IDR is effectively the auditor's shopping list, and what you provide in response, and how it is organized, shapes every calculation that follows.
For most businesses with meaningful transaction volume, auditors do not review every transaction. They select a sample period, commonly one to three months drawn from within the audit window, examine those transactions in detail, and then project the error rate from that sample across the entire audit period. This is where assessments can become dramatically disconnected from reality. If the sample period happens to include an unusually large exempt transaction that lacks complete documentation, or a period before a billing system upgrade that solved a systematic error, the projected error rate across four years can produce a number several times larger than actual noncompliance.
The look-back period itself varies by state and by circumstance. Most states audit back three years from the due date of the return. Ohio allows four years. Washington routinely covers four years plus the current period. If returns were not filed, or if fraud is alleged, many states have no statutory look-back limit at all. A business that did not register in a state until 2023 but had nexus from 2020 onward is exposed on the unregistered period without the protection of a standard limitations period.
The most important thing to understand about a sales tax assessment is that it has two forms: preliminary and final. The preliminary assessment is negotiable. The final assessment, once issued as a Notice of Determination or its equivalent in each state, carries a hard deadline, typically 30 to 60 days, to file a formal petition for redetermination or appeal. Missing that deadline is not a paperwork problem. It is the legal event that converts a negotiable estimate into an enforceable obligation.
Challenges to sampling methodology represent the highest-value intervention point in most audits. If the auditor selected a sample period that included anomalous transactions, a one-time large sale, a period of system transition, or a customer type not representative of your broader book of business, you can request that those transactions be assessed separately rather than folded into the projected error rate. Texas explicitly provides taxpayers the right to request reconciliation conferences and independent review conferences after the exit conference if disagreements remain. California's 30-day petition window after the Notice of Determination applies even if you intend to dispute only a portion of the assessment.
Exemption certificates are the second major challenge category. Auditors routinely flag transactions where the certificate on file has expired, contains an error, or was issued in a state-specific format the auditor does not recognize. In many states, you have the opportunity to produce corrected or supplementary documentation after the preliminary findings are issued. Certificates obtained after the fact, or corrected versions of flawed certificates, can remove flagged transactions from the taxable base before the final assessment is calculated. This window closes once the Notice of Determination is issued.
The third intervention point is vendor verification. If a customer self-assessed and paid use tax on the same transaction your auditor is flagging as untaxed, sales tax generally cannot be assessed again on the same transaction. Verifying whether customers paid use tax independently, and documenting it, can eliminate double-counting in the assessment.
A final assessment is not the end of the road. Every state with a sales tax provides formal appeal rights, and most offer at least two levels: an administrative appeal filed with the issuing agency, and a judicial appeal filed with the state's tax court or general court system. Administrative appeals are generally faster, lower-cost, and decided by people with subject matter expertise in the state's tax code. Judicial appeals are appropriate when the legal question at issue goes beyond the auditor's findings into statutory interpretation or constitutional questions.
The appeal timeline is the variable that catches businesses off guard. Most states require that an administrative appeal be filed within 30 to 90 days of the final assessment notice. Texas requires a written Statement of Grounds identifying disputed items. California requires a Petition for Redetermination within 30 days of the Notice of Determination. Filing on a preliminary basis, even before you have fully documented every dispute, is better than missing the deadline entirely. You can supplement the record after filing; you cannot reinstate appeal rights after the window closes.
Penalty waiver requests are a parallel track that operates independently of the appeal process in most states. Penalties can reach 25 to 40% of the tax due, and many states will consider waiving them for first-time audit situations, good-faith compliance efforts, or circumstances where the taxpayer demonstrated reasonable cause for the discrepancy. These requests are generally handled administratively and do not require a formal appeal to be pending.
The structure of a sales tax audit, its reliance on sampling, its sensitivity to documentation gaps, and its tight appeal windows, points toward a single practical conclusion: the actions that matter most happen years before the audit notice arrives. A business with transaction-level audit trails, current and complete exemption certificates, reconciled returns, and documented taxability decisions is not just better positioned to defend itself. It is genuinely less likely to be assessed at all, because auditors working from clean, well-organized records find fewer anomalies to project.
The businesses most vulnerable to inflated assessments are not necessarily the ones with the worst compliance. They are the ones whose compliance was inconsistent or undocumented, giving an auditor's sampling methodology the gaps it needs to extrapolate a small error into a large liability. Building the documentation infrastructure that closes those gaps is the most cost-effective audit defense strategy available, and it is the only one that works before the notice arrives.
Do not wait for a notice to find out where you stand. The businesses with the smallest audit assessments are not the ones with perfect records. They are the ones whose records were organized, reconciled, and audit-ready before the auditor arrived. CereTax builds that infrastructure for you, with transaction-level audit trails, exemption certificate management, and compliance monitoring across every state you operate in.
