Skip to content

Tax Exemption Certificates: A Guide for Credit and AR Teams

SGUTTI · Founder, EFILOS

Updated August 31, 2026 · 12 min read

Exemption certificates are one of the few things a credit department is responsible for that nobody trained it to handle. They arrive as email attachments, get filed by whoever notices them, and are looked at again only when an auditor asks. Meanwhile the exposure they create sits on the seller's side of the transaction, accruing quietly at the rate the customer buys.

This guide is written for the credit, AR and customer onboarding side of the business rather than the tax side. It does not tell you whether a given sale is exempt, which is a question for your tax function and your advisors. It covers what the document is, why it matters to you specifically, what kinds you will encounter, and what a process that does not fall over looks like.

The single most useful idea in it: an exemption certificate is not a document you store. It is a claim with a lifespan, attached to a customer, covering a described set of purchases in a named jurisdiction. Treating it as a file to be kept is the root of nearly every failure that follows.

What an exemption certificate actually is

A sales tax exemption certificate is the buyer's written claim that a purchase is not subject to sales tax, together with the reason and the registration number supporting it. That is the whole of it, and the most commonly misunderstood part is the first three words. The buyer issues the certificate. The state does not send it, does not sign it, and in most cases has never seen it. What the state issues is the registration or permit number that appears on the form.

This matters because it sets the reliability of the document correctly in your mind. A certificate is an assertion by a customer, made under penalty of perjury in most jurisdictions, that they qualify. It is not verification. A well-completed certificate from a customer who is not entitled to the exemption is still a defective certificate, which is why states attach conditions to a seller's ability to accept one in good faith.

The form itself is usually short: who the buyer is, the type of business, the basis for the exemption, the registration number in the jurisdiction concerned, a description of what is being purchased, and a signature. Multistate forms add a row per state, because the same buyer can hold a different basis in different places.

Why the seller carries the exposure

Here is the asymmetry that makes this a credit department problem rather than a filing problem. When a state audits an untaxed sale and asks why no tax was charged, the answer has to be a certificate on file. If the seller cannot produce one, the general outcome is that the seller is assessed the tax that should have been collected, plus interest and typically penalties.

The buyer is not usually pursued for it, and in practice may no longer be a customer, may have been acquired, or may have gone out of business entirely. The liability does not follow them. It stays with the party that made the untaxed sale and cannot evidence why.

Two consequences follow, and both are financial rather than administrative. The first is that a missing or expired certificate is an unbooked liability sitting on the ledger — real money, unreserved, invisible until someone asks. The second is that it comes out of margin rather than out of the transaction: you are paying tax you never collected, on sales already made at a price that did not include it.

That is the case for treating certificates as a credit and finance responsibility. The department that already tracks what a customer owes you and what you are exposed to on that account is the natural home for the document that determines whether those invoices were correct.

The certificates you will actually encounter

In practice a B2B seller sees a small number of recurring forms rather than the full taxonomy. Knowing which is which saves a surprising amount of back-and-forth with customers who have sent the wrong one.

Two of these deserve particular attention because they are routinely confused. The SSUTA certificate and the MTC Uniform certificate both let a buyer make one claim across several states. They come from different bodies, are accepted in different and only partly overlapping groups of states, and neither is universal. A seller with a national customer base will hold both, alongside state-specific paper for the states that take neither.

  • Resale certificate — by far the most common: the buyer asserts the goods will be resold, so tax is deferred to the eventual retail sale
  • State-specific exemption certificate — a particular state's own form, for a basis that state recognises
  • SSUTA Certificate of Exemption — the Streamlined Sales and Use Tax Agreement's multistate form, accepted across member states
  • MTC Uniform Sales & Use Tax Exemption Certificate — the Multistate Tax Commission's multi-jurisdiction form, accepted by a different group of states
  • Direct pay permit — issued by a state to the buyer, shifting determination and remittance onto them; comfortable for the seller, and rare
  • Entity-based documentation — government and qualifying nonprofit purchasers, whose evidence requirements vary widely by state

Blanket versus single-purchase

A blanket certificate covers a customer's qualifying purchases on a continuing basis. A single-purchase certificate covers one named order. Almost every B2B seller wants the former, because the alternative — a certificate per transaction from a customer who orders weekly — is unworkable for both parties.

The trade-off is that a blanket certificate is only as good as the description of what it covers. It describes a class of property the buyer resells or otherwise uses exemptly; a purchase outside that description is not covered merely because the form is on file. Customers who buy both for resale and for their own consumption are the usual complication — the forklift for their warehouse is not covered by the certificate for the goods they resell.

The practical handling is to ask the customer to flag taxable orders rather than to collect a certificate each time, and to make sure the description on the blanket certificate actually matches what they buy from you. A certificate describing 'building materials for resale' from a customer who also buys shop consumables from you covers part of the relationship and not the rest.

Where certificate processes fail

The failures are consistent across companies and none of them are exotic. They are worth naming because each has a different fix and they are usually treated as one undifferentiated problem called 'we are bad at certificates'.

The most expensive of the four is almost always silent expiry, because nothing happens on the day a certificate lapses. No order is blocked, no invoice fails, no customer calls. Business continues exactly as it did the day before, and the exposure accrues at the rate the customer buys. By the time anyone notices, the amount at stake is months of sales rather than one order — which is precisely why these are found in audits rather than in the ordinary course of work.

  • Never collected — the customer was invoiced without tax on the strength of a verbal assurance, or because 'they have always been exempt'
  • Collected but not findable — the certificate exists, in an inbox belonging to someone who has since left, or in a folder nobody can name
  • Collected but incomplete — missing the registration number, the signature, the description, or the date; a defective certificate is close to no certificate at all
  • Silently expired — the document is on file, correctly, and stopped being good some months ago
  • Wrong jurisdiction — a certificate for the state the customer is headquartered in, covering deliveries into three other states
  • Wrong scope — a valid resale certificate used to justify exemption on goods the customer consumes rather than resells

What the credit department is actually responsible for

It helps to state the boundary explicitly, because credit teams often either take on too much of this or avoid it entirely on the grounds that it is a tax matter.

What belongs to credit and onboarding: asking for the certificate at the right moment, which is during onboarding alongside the credit application rather than at the first order when the shipment is already waiting. Knowing who at the customer can actually sign it. Checking that what arrives is complete and matches the customer and the states you sell into. Holding the document where it can be found, with its details available without opening it. Knowing when it expires and starting the renewal before the date rather than after.

What does not belong to credit: deciding whether the exemption is legally valid, whether a particular transaction qualifies, or how the exemption should be applied in the tax engine. Those are questions for your tax function and your advisors, and a credit department that starts answering them has taken on a liability it is not equipped to carry.

The dividing line is roughly this: credit owns the document and its lifecycle, tax owns the determination. Where the two need to meet — a customer whose certificate covers an unusual basis, or a state that has changed its rules — that is a conversation, not a handoff.

What a process that holds up looks like

Certificates get asked for at onboarding, as part of the same package as the credit application and any guarantee, rather than as a separate request weeks later. Asking once, at the point where the customer is already assembling paperwork and motivated to finish, is worth more than any amount of chasing afterwards.

The details live outside the document. Certificate type, jurisdiction, registration number, exemption basis and expiry date are held as data, so that 'which of our customers have certificates expiring this quarter' and 'do we hold anything for this customer in Illinois' are questions someone can answer without opening files. A folder of PDFs cannot answer either.

Somebody looks at each certificate before it is treated as good. Not a legal review — a completeness check: right customer, right states, reason stated, number present, signed, dated. Most defective certificates fail on something visible in ten seconds, and a certificate that was never checked is one you discover is defective at the worst possible time.

And expiry is monitored by something other than memory. The renewal conversation starts weeks before the date, not after a lapse is discovered. This is the part that most reliably separates a process that holds up from one that merely exists, because it is the only part that has to work when nobody is thinking about certificates at all.

Where to check the rules yourself

Nothing in this guide is tax advice, and the rules it describes in general terms vary by state and change over time. The authoritative sources are short and worth bookmarking rather than working from summaries — including this one.

For anything consequential — a new state, an unusual exemption basis, a customer whose situation does not fit the pattern — the answer comes from your tax advisor or the state directly, not from a vendor's guide.

  • The revenue department of each state you sell into, which publishes its own forms, validity periods and acceptance rules
  • The Streamlined Sales Tax Governing Board, for the SSUTA certificate, the list of member states, and the exemption reason codes it defines
  • The Multistate Tax Commission, for the Uniform Sales & Use Tax Exemption Certificate and the states that accept it, including the conditions each attaches
  • Your own tax function or external advisor, for anything that determines whether a transaction is actually exempt

About the author

SGUTTI · Founder, EFILOS

SGUTTI is the founder of EFILOS and the architect of SCREDIT, the trade-credit operating platform. He writes about credit operations, financial statement analysis, and receivables management based on the workflows SCREDIT is built around.

Connect on LinkedIn

Frequently asked questions

Who issues an exemption certificate — the state or the customer?

The customer. This is the most common misunderstanding about these documents. The buyer completes and signs the certificate, asserting that they qualify and stating the basis. What the state issues is the registration or permit number that appears on the form. That is why a certificate is evidence of a claim rather than verification of one, and why states set conditions on a seller's ability to accept a certificate in good faith.

What happens if we cannot produce a certificate in an audit?

The general outcome is that the seller is assessed the tax that should have been collected on the untaxed sales, together with interest and usually penalties. The buyer is typically not pursued, and may no longer exist as a customer, so the liability stays with the seller. Because the tax was never collected from anyone, it is paid out of margin on sales already made.

How long is an exemption certificate valid?

It depends on the state and the certificate type. Some are valid until revoked, some expire after a fixed period, and some depend on continued activity on the account. A certificate with no stated expiry is not one that never needs review — it is one whose review date you have to set yourself. Because the seller carries the exposure in every case, the practical posture is to know the rule for each state you sell into and to refresh on a schedule.

Is a resale certificate the same as an exemption certificate?

A resale certificate is one kind of exemption certificate — the most common kind in B2B distribution. It claims exemption on the specific basis that the goods will be resold rather than consumed, so tax is collected once at the end of the chain. Other bases include manufacturing, agricultural use, government and nonprofit status, each with its own requirements. The reason is recorded on the certificate itself and determines what it actually covers.

Should credit or tax own certificate collection?

Credit and onboarding are the natural owners of the document and its lifecycle: asking for it at the right moment, checking it is complete, holding it where it can be found, and tracking when it expires. Tax owns the determination — whether an exemption is valid and how it applies to a transaction. Splitting it this way keeps each side inside its competence, and it puts the collection obligation with the team already collecting a credit application from the same customer at the same time.

Can one certificate cover a customer buying in several states?

Sometimes. The SSUTA certificate and the MTC Uniform certificate both exist for this purpose, each accepted by a group of states, and both are structured per jurisdiction — a row for each state with the registration number and basis claimed there, because the same customer can qualify differently in different places. Neither is universally accepted, and some states require their own form or attach additional conditions, so a multistate certificate reduces the paperwork without eliminating state-specific certificates entirely.

When should we ask a customer for their certificate?

At onboarding, in the same package as the credit application, rather than at the first order. At onboarding the customer is already assembling paperwork and motivated to complete it; at first order the shipment is waiting, sales is applying pressure, and the path of least resistance is to invoice without tax and sort the document out later. Later has a way of not arriving.

See SCREDIT on your own workflows.

A 30-minute walkthrough with the team that built it — using scenarios from your credit operation, not canned demo data.