SaaS Sales Tax Exposure Found in Due Diligence: What to Do

Investors found sales tax we never collected: what does it mean for the round?

It means the company likely owes that tax itself. A seller that had to collect and did not can owe the tax, plus penalties and interest, even though customers were never charged (Texas Comptroller). In some states people can owe it too: New York makes officers and employees with a duty to act for the company personally liable for tax required to be collected (New York Tax Law 1131; 1133), and Texas makes a person who controls paying over collected tax, and willfully does not, liable for it (Texas Tax Code 111.016). For the round, the finding becomes three things: a sized estimate, a reserve in the books, and an exception on the disclosure schedule. Whether investors also ask for a price change, an escrow or a closing condition is a negotiation; the tax rules do not set it.

A case is not simple when it involves several states, a state that has already written to the company, tax that was collected but never sent in, invoices that bundle SaaS with services or hosting, or sales records that cannot be split by state and month. Each of those changes the number or the route.

Gather first: sales by customer, state and month; invoices and contracts; exemption and resale certificates; and any letter from a state.

How do we size the SaaS sales tax exposure by state and year?

Exposure in each state is the taxable sales made after collection became required, times that state's combined rate, plus interest and any penalties. Work one state at a time:

1. Confirm the state taxes what you sell. See sales tax on SaaS and software.
2. Find the date collection became required: physical presence, or a start date each state sets after you cross its economic threshold. See when you must collect sales tax.
3. Total the taxable sales into that state from that date, by filing period, using each customer's location and local rate.
4. Apply the rate on top of the invoiced price. In Texas, tax counts as included in the price only if the seller gave the customer a written statement saying so and posted a sign (Texas Comptroller).
5. Add interest and penalties, then show the result as a range.

Collection rarely starts on the day you cross a threshold, so the exposure start date matters:

Penalties and interest differ by state. Texas, for example, charges 5% of late tax paid within 30 days, 10% after that, and $50 per late report; interest starts 61 days after the due date (Texas Comptroller).

Show the exposure as two numbers. The low end assumes a voluntary disclosure agreement limits the past periods and waives penalties; Texas also waives interest on tax that was not collected (Texas program). The high end covers every period since collection became required, with penalties. Periods with no return filed can stay open: New York's ordinary audit time limit does not apply to them (New York Publication 130-D).

Which states can we drop from the exposure?

Drop a state, or a slice of its sales, only where records support it. These are the usual reasons the number shrinks:

Threshold tests differ by state. California, for example, counts sales of tangible personal property by the seller and related persons, and the requirement applies only to sales on and after its start date (CDTFA). From January 1, 2027, California counts SaaS as tangible personal property (CDTFA), so a state dropped for past periods may still matter going forward. Do not drop exempt sales on a customer's word: Texas presumes a sale taxable in an audit when the seller has not kept the certificate (Texas records FAQ). A small state balance still counts, even one too small for a multistate application.

If you sell hosting or GPU compute rather than SaaS, the taxability is different: see sales tax on hosting and GPU compute.

Do we book a sales tax reserve in the financial statements?

Under US GAAP, a company records a liability for a loss contingency when payment is probable and the amount can be reasonably estimated. Uncollected sales tax the company had to collect often meets both tests once it is sized. When only a range can be estimated, the books generally carry the best estimate in the range, and the notes describe the rest.

The reserve covers the tax plus interest to date, and penalties, less any of either the state is expected to waive. It is not income tax, so it sits outside the income tax provision. Do not reduce it for tax you hope to bill customers later. Your auditor or reviewer, if you have one, decides the final accounting; give them the state-by-state workpaper behind the number.

Do we file voluntary disclosure before or after the round closes?

Start before any state contacts you; eligibility depends on contact, not on the closing date. A state inquiry about the tax ends the voluntary disclosure route for that tax in that state (Multistate Tax Commission). Texas bars a business it has already contacted about a liability (Texas program); New York bars one already under audit or billed for the tax (New York program).

Applying does not have to name the company. The Multistate Tax Commission keeps the applicant's identity confidential until the agreement is signed, and Texas accepts an initial request that does not name the business. The Commission reports an average of about 4 months from application to completed agreement when few states are involved and none counteroffers (Multistate FAQ), so an agreement started near closing is usually still pending when the round closes. The round's documents can then describe the pending applications and the reserve. The Commission does not process a state whose estimated tax for the lookback period is below $500; apply to that state directly (Multistate program).

Two sequencing traps: filing a return or paying tax in a state counts as contact for the multistate program, and California's out-of-state program is only for sellers not yet registered there (CDTFA Publication 178); some states also require their own order of steps. How agreements work, state by state, is in catching up on uncollected sales tax.

What if a state already sent us a letter or nexus questionnaire?

In that state, plan on answering it rather than on a voluntary disclosure. Prior contact usually bars the program for that tax, and New York excludes taxpayers already under audit or billed for the tax (New York program). Other states that have not contacted you can still be eligible.

Answer by the deadline in the letter, from records. Size that state at the high end of the range, since penalty relief is not built in. List the letter on the disclosure schedule. Responding step by step is in catching up on uncollected sales tax.

Can we bill customers now for the sales tax we did not charge?

Sometimes, depending on the state's law and the contract. In Texas, tax that a seller adds to the price is a debt the customer owes the seller, recoverable like the price itself (Texas Tax Code 151.052). A Texas customer that was not charged may separately owe use tax directly to the state (Texas use tax). Neither rule makes customers pay an old bill; contracts that quote prices "including all taxes" can stop it.

Tax you do collect from customers must be sent to the state in full (Multistate FAQ). Collected but unremitted tax is treated more harshly: Texas neither waives the interest on it nor limits its lookback (Texas program). Bill only what you will remit, and keep the reserve at the full amount until cash comes in.

How does sales tax exposure show on the disclosure schedule?

It appears as an exception to the tax representations, usually the ones saying all taxes due were paid and all required returns were filed. The entry names each state, the periods, the estimated amount or range, and the status: under review, voluntary disclosure pending, or a state inquiry being answered.

Counsel drafts the schedule. The CPA supplies the numbers, which should match the reserve or explain why they differ. The other tax representations and exceptions are in tax representations and the disclosure schedule.

What records do we need to size the exposure?

A sales export by customer, state and month is the core; the rest supports what you drop or rely on.

• Every invoice line: date, customer, billing and use location, product, price, tax charged, credits and refunds.
• Contracts showing whether prices include tax and what was bundled.
• Exemption and resale certificates, with the dates received.
• A timeline of employees, offices and servers by state, for the nexus start date.
• Any permits, returns, payments, state letters, questionnaires and audit notices.

If the books cannot produce sales by state and month, fix that first. See tax clean-up before investor due diligence.

Example

Illustrative US dollars only; rates and dates are assumptions, not any state's rules.

Seed SaaS, one state over the line

A seed-stage company sold $600,000 of SaaS into one state after collection became required there, all within the periods a voluntary disclosure there would cover. At an assumed 6% combined rate, the tax is $36,000, before interest. Nobody from the state has contacted the company. It books a reserve of $36,000 plus interest to date, files an anonymous voluntary disclosure request before closing, and lists the state, periods and pending request on the disclosure schedule.

Half the sales are in states that do not tax SaaS

A company has $2,000,000 of out-of-state sales. $1,000,000 went to states that do not tax its product, so those drop out. Of the other $1,000,000, $300,000 was made before collection started and $100,000 went to exempt customers with certificates on file. Exposure is figured on the remaining $600,000: at an assumed 6%, $36,000 plus interest and any penalties.

The letter came first

A state's nexus questionnaire arrives before the company applies anywhere. In that state the anonymous route is gone. The company answers on time, registers, sizes that state at the full lookback with penalties, and lists it on the schedule. In the other states, which have not written, it files voluntary disclosures.

Different for you?

• You want the voluntary disclosure steps, lookback and anonymity rules: see catching up on uncollected sales tax.
• You are not sure which states tax your product: see sales tax on SaaS and software.
• You do not know when nexus started: see when you must collect sales tax.
• You sell GPU compute or hosting, not SaaS: see sales tax on hosting and GPU compute.
• Diligence has not started yet: see tax clean-up before investor due diligence.
• The lawyers want the other tax reps confirmed: see tax representations and the disclosure schedule.
• The company is being sold, not raising: see tax clean-up before selling your startup.
• You are registered and need to file going forward: see filing sales tax returns.
• Several states, a state letter, or a round closing soon: bring the sales export and any letters to startup tax help.