Intermediate Quick Answer
How do I collect and store exemption certificates from customers?
⚡ TL;DR
Collect the certificate before the first exempt sale — retroactive certificates provide limited protection. Store them in a retrievable format (digital is fine) for at least 5–7 years after the customer relationship ends, covering most states' 3–5-year retention requirements plus audit lookback windows. Track expiration dates; a verbal exemption claim is never sufficient.
Collect certificates before the first exempt sale, store them so they can be retrieved on audit, and track expiration dates so you’re not holding stale documentation.
Key takeaways
- Timing: collect the certificate before or at the time of the first exempt sale, retroactive certificates provide limited protection in most states
- Format: digital storage is accepted in all states; scan and store physical certificates; direct digital submission (the customer fills out a form online) is preferable when available
- What to collect: the completed certificate form (state-specific, MTC, or SST), confirming the buyer’s name, address, exemption reason, and signature/attestation
- Retention period: most states require 3-5 years from the last exempt sale; given audit lookback periods, retain certificates for at least 5-7 years after the customer relationship ends
- Retrieval on audit: certificates must be producible on demand, organize by customer or by transaction; a box of unsorted paper certificates is not audit-ready
- Expiration tracking: some states impose certificate validity periods (see the validity period guide); set calendar reminders or use certificate management software to alert on upcoming expirations
- Volume threshold: if you have more than 50-100 exempt customers, manual spreadsheet tracking breaks down fast, see the guide on certificate management software for scalable options
- What doesn’t work: a buyer’s verbal claim of exemption; an email saying “we’re tax-exempt”; a 501(c)(3) letter without a state certificate; an EIN alone
Frequently asked questions
How should I collect exemption certificates from customers?
Collect certificates as part of your B2B customer onboarding, before the first exempt sale, not after. Send a certificate request through email, your customer portal, or a certificate management platform, and hold up collection of the exempt order until the certificate is received and verified. Don't process an order as exempt while waiting for the certificate to arrive.
How long do I need to keep exemption certificates?
Most states require exemption certificates to be retained for 3-5 years after the last exempt sale to that customer. Because audit lookback periods can extend 3-4 years, and because the last sale to a customer may be years after the certificate was issued, it's safest to retain certificates for at least 5-7 years after the relationship ends. Check your highest-volume states' specific retention requirements.
Looking for more answers on this topic?
Browse Exemption Certificates & B2B Sales