Exemption certificates are one of the few things a credit department is responsible for that nobody trained it to handle. They arrive as email attachments, get filed by whoever notices them, and are looked at again only when an auditor asks. Meanwhile the exposure they create sits on the seller's side of the transaction, accruing quietly at the rate the customer buys.
This guide is written for the credit, AR and customer onboarding side of the business rather than the tax side. It does not tell you whether a given sale is exempt, which is a question for your tax function and your advisors. It covers what the document is, why it matters to you specifically, what kinds you will encounter, and what a process that does not fall over looks like.
The single most useful idea in it: an exemption certificate is not a document you store. It is a claim with a lifespan, attached to a customer, covering a described set of purchases in a named jurisdiction. Treating it as a file to be kept is the root of nearly every failure that follows.
What an exemption certificate actually is
A sales tax exemption certificate is the buyer's written claim that a purchase is not subject to sales tax, together with the reason and the registration number supporting it. That is the whole of it, and the most commonly misunderstood part is the first three words. The buyer issues the certificate. The state does not send it, does not sign it, and in most cases has never seen it. What the state issues is the registration or permit number that appears on the form.
This matters because it sets the reliability of the document correctly in your mind. A certificate is an assertion by a customer, made under penalty of perjury in most jurisdictions, that they qualify. It is not verification. A well-completed certificate from a customer who is not entitled to the exemption is still a defective certificate, which is why states attach conditions to a seller's ability to accept one in good faith.
The form itself is usually short: who the buyer is, the type of business, the basis for the exemption, the registration number in the jurisdiction concerned, a description of what is being purchased, and a signature. Multistate forms add a row per state, because the same buyer can hold a different basis in different places.
Why the seller carries the exposure
Here is the asymmetry that makes this a credit department problem rather than a filing problem. When a state audits an untaxed sale and asks why no tax was charged, the answer has to be a certificate on file. If the seller cannot produce one, the general outcome is that the seller is assessed the tax that should have been collected, plus interest and typically penalties.
The buyer is not usually pursued for it, and in practice may no longer be a customer, may have been acquired, or may have gone out of business entirely. The liability does not follow them. It stays with the party that made the untaxed sale and cannot evidence why.
Two consequences follow, and both are financial rather than administrative. The first is that a missing or expired certificate is an unbooked liability sitting on the ledger — real money, unreserved, invisible until someone asks. The second is that it comes out of margin rather than out of the transaction: you are paying tax you never collected, on sales already made at a price that did not include it.
That is the case for treating certificates as a credit and finance responsibility. The department that already tracks what a customer owes you and what you are exposed to on that account is the natural home for the document that determines whether those invoices were correct.
The certificates you will actually encounter
In practice a B2B seller sees a small number of recurring forms rather than the full taxonomy. Knowing which is which saves a surprising amount of back-and-forth with customers who have sent the wrong one.
Two of these deserve particular attention because they are routinely confused. The SSUTA certificate and the MTC Uniform certificate both let a buyer make one claim across several states. They come from different bodies, are accepted in different and only partly overlapping groups of states, and neither is universal. A seller with a national customer base will hold both, alongside state-specific paper for the states that take neither.
- Resale certificate — by far the most common: the buyer asserts the goods will be resold, so tax is deferred to the eventual retail sale
- State-specific exemption certificate — a particular state's own form, for a basis that state recognises
- SSUTA Certificate of Exemption — the Streamlined Sales and Use Tax Agreement's multistate form, accepted across member states
- MTC Uniform Sales & Use Tax Exemption Certificate — the Multistate Tax Commission's multi-jurisdiction form, accepted by a different group of states
- Direct pay permit — issued by a state to the buyer, shifting determination and remittance onto them; comfortable for the seller, and rare
- Entity-based documentation — government and qualifying nonprofit purchasers, whose evidence requirements vary widely by state
Blanket versus single-purchase
A blanket certificate covers a customer's qualifying purchases on a continuing basis. A single-purchase certificate covers one named order. Almost every B2B seller wants the former, because the alternative — a certificate per transaction from a customer who orders weekly — is unworkable for both parties.
The trade-off is that a blanket certificate is only as good as the description of what it covers. It describes a class of property the buyer resells or otherwise uses exemptly; a purchase outside that description is not covered merely because the form is on file. Customers who buy both for resale and for their own consumption are the usual complication — the forklift for their warehouse is not covered by the certificate for the goods they resell.
The practical handling is to ask the customer to flag taxable orders rather than to collect a certificate each time, and to make sure the description on the blanket certificate actually matches what they buy from you. A certificate describing 'building materials for resale' from a customer who also buys shop consumables from you covers part of the relationship and not the rest.
Where certificate processes fail
The failures are consistent across companies and none of them are exotic. They are worth naming because each has a different fix and they are usually treated as one undifferentiated problem called 'we are bad at certificates'.
The most expensive of the four is almost always silent expiry, because nothing happens on the day a certificate lapses. No order is blocked, no invoice fails, no customer calls. Business continues exactly as it did the day before, and the exposure accrues at the rate the customer buys. By the time anyone notices, the amount at stake is months of sales rather than one order — which is precisely why these are found in audits rather than in the ordinary course of work.
- Never collected — the customer was invoiced without tax on the strength of a verbal assurance, or because 'they have always been exempt'
- Collected but not findable — the certificate exists, in an inbox belonging to someone who has since left, or in a folder nobody can name
- Collected but incomplete — missing the registration number, the signature, the description, or the date; a defective certificate is close to no certificate at all
- Silently expired — the document is on file, correctly, and stopped being good some months ago
- Wrong jurisdiction — a certificate for the state the customer is headquartered in, covering deliveries into three other states
- Wrong scope — a valid resale certificate used to justify exemption on goods the customer consumes rather than resells
What the credit department is actually responsible for
It helps to state the boundary explicitly, because credit teams often either take on too much of this or avoid it entirely on the grounds that it is a tax matter.
What belongs to credit and onboarding: asking for the certificate at the right moment, which is during onboarding alongside the credit application rather than at the first order when the shipment is already waiting. Knowing who at the customer can actually sign it. Checking that what arrives is complete and matches the customer and the states you sell into. Holding the document where it can be found, with its details available without opening it. Knowing when it expires and starting the renewal before the date rather than after.
What does not belong to credit: deciding whether the exemption is legally valid, whether a particular transaction qualifies, or how the exemption should be applied in the tax engine. Those are questions for your tax function and your advisors, and a credit department that starts answering them has taken on a liability it is not equipped to carry.
The dividing line is roughly this: credit owns the document and its lifecycle, tax owns the determination. Where the two need to meet — a customer whose certificate covers an unusual basis, or a state that has changed its rules — that is a conversation, not a handoff.
What a process that holds up looks like
Certificates get asked for at onboarding, as part of the same package as the credit application and any guarantee, rather than as a separate request weeks later. Asking once, at the point where the customer is already assembling paperwork and motivated to finish, is worth more than any amount of chasing afterwards.
The details live outside the document. Certificate type, jurisdiction, registration number, exemption basis and expiry date are held as data, so that 'which of our customers have certificates expiring this quarter' and 'do we hold anything for this customer in Illinois' are questions someone can answer without opening files. A folder of PDFs cannot answer either.
Somebody looks at each certificate before it is treated as good. Not a legal review — a completeness check: right customer, right states, reason stated, number present, signed, dated. Most defective certificates fail on something visible in ten seconds, and a certificate that was never checked is one you discover is defective at the worst possible time.
And expiry is monitored by something other than memory. The renewal conversation starts weeks before the date, not after a lapse is discovered. This is the part that most reliably separates a process that holds up from one that merely exists, because it is the only part that has to work when nobody is thinking about certificates at all.
Where to check the rules yourself
Nothing in this guide is tax advice, and the rules it describes in general terms vary by state and change over time. The authoritative sources are short and worth bookmarking rather than working from summaries — including this one.
For anything consequential — a new state, an unusual exemption basis, a customer whose situation does not fit the pattern — the answer comes from your tax advisor or the state directly, not from a vendor's guide.
- The revenue department of each state you sell into, which publishes its own forms, validity periods and acceptance rules
- The Streamlined Sales Tax Governing Board, for the SSUTA certificate, the list of member states, and the exemption reason codes it defines
- The Multistate Tax Commission, for the Uniform Sales & Use Tax Exemption Certificate and the states that accept it, including the conditions each attaches
- Your own tax function or external advisor, for anything that determines whether a transaction is actually exempt
About the author
SGUTTI · Founder, EFILOS
SGUTTI is the founder of EFILOS and the architect of SCREDIT, the trade-credit operating platform. He writes about credit operations, financial statement analysis, and receivables management based on the workflows SCREDIT is built around.
Connect on LinkedIn