Sales tax exemption certificates can appear to be a routine administrative responsibility until an audit reveals missing documentation, expired certificates, inconsistent customer records, or years of transactions that lack adequate support. For Controllers and CFOs, those deficiencies can translate into assessments, penalties, additional staff hours, and unexpected balance sheet exposure.
During the recent Controllers Council and Avalara webinar, Sales Tax Exemption Certificate Management Best Practice – Sage Case Study, Christine Martin, Senior Solution Consultant at Avalara, examined how finance teams can establish a more dependable exemption certificate process. Drawing on more than 15 years of sales and use tax experience, Martin discussed the operational weaknesses she continues to encounter, the financial consequences of incomplete certificate management, and the role automation and AI can play in improving compliance.
Why Exemption Certificate Management Deserves Executive Attention?
Many companies still rely on spreadsheets, shared folders, emails, paper files, and individual employees to collect and maintain exemption certificates. The difficulty with these arrangements extends beyond administrative inconvenience. Every additional manual handoff creates another opportunity for a certificate to be misplaced, overlooked, incorrectly validated, or allowed to expire.
Martin described the direction of tax compliance as a continuous, connected process in which documentation is collected and maintained alongside transactions rather than reconstructed years later during an audit.
“We’re seeing the shift happen already. It’s from being this periodic and reactive trying to find a certificate four years later to now we’re doing things as transactions happen and collecting those documents and storing them as they happen.”
The webinar’s first audience poll illustrated how much work remains. Thirty-five percent of respondents were unsure how their organizations managed exemption certificates, while 27 percent reported a fully manual process. Another 18 percent used partially automated internal tools, while only 10 percent reported using a dedicated exemption certificate management system.
The Cost of a Missing Certificate Can Escalate Quickly
One of the webinar’s most instructive examples involved a sporting goods company that recently underwent a Texas sales tax audit. The company ultimately faced a $300,000 assessment related to exemption certificates.
The underlying mistake was surprisingly ordinary. According to Martin, one cashier had marked every transaction as exempt during a particular day. When the auditor selected transactions from that period, the company could not produce exemption certificates supporting those sales. The resulting error factor was then extrapolated across the audit period.
“Their CFO said that there’s got to be a better way to do this.”
The incident exposed more than a documentation problem. It raised questions about employee training, point-of-sale procedures, internal controls, and the systems used to determine whether a transaction should receive exempt treatment.
Technology can help address that exposure by connecting certificate collection with the systems where transactions originate. Depending on the business, that may involve an ERP, tax engine, e-commerce platform, or point-of-sale environment. The objective is to reduce opportunities for unsupported exemptions while limiting the amount of specialized tax knowledge required from front-line employees.
Establish Clear Ownership of the Process
Another recurring weakness is uncertainty over who owns exemption certificate management.
Sales may collect certificates during customer onboarding. Customer service may receive documents after an invoice has been issued. Accounting may review certificates, while IT maintains the ERP and related integrations. Tax personnel may ultimately be responsible when an auditor requests documentation.
When responsibilities are distributed without a defined owner, certificates can disappear between departments.
Martin recommended establishing a designated owner, documented procedures, and clear accountability for each stage of the certificate lifecycle. That responsibility should include more than initial collection. Organizations with recurring customers must also determine who monitors expiration dates, obtains renewals, follows changes in state requirements, and confirms that customer tax status remains accurate.
This becomes particularly important because certificate requirements differ among jurisdictions and can change. Martin cited Florida resale certificates, which expire annually, as well as a recent Louisiana change that shortened the validity period for resale certificates.
“I think having SLAs, having some accountability, but assigning an owner to this exemption process becomes super important.”
A documented operating procedure can clarify who requests certificates, who reviews them, who updates customer records, who monitors expiration dates, and who responds when documentation is incomplete.
Exemption Management Extends Across the Customer Lifecycle
Certificate management also affects departments beyond tax and accounting.
Sales representatives frequently have the earliest opportunity to identify a tax-exempt customer. Incorporating certificate collection into the credit application or customer onboarding process can reduce the likelihood that finance personnel will need to pursue documentation after transactions have already occurred.
The consequences can also reach accounts receivable. If a tax-exempt customer receives an invoice that includes tax, the customer may delay payment, short pay the invoice, or request that it be corrected. Finance then must address credits, revised invoices, and outstanding receivables.
E-commerce introduces another consideration. A tax-exempt buyer who cannot submit exemption documentation during checkout may abandon the purchase rather than complete a transaction with tax incorrectly applied.
As Martin explained, exemption management becomes part of a broader process that begins with customer onboarding and continues throughout the commercial relationship.
“This becomes a whole flow, a whole process from beginning to end, from the time you onboard a customer until you start invoicing, and then even further in that customer life cycle. So, it’s not a one-time thing.”
Manual Storage Creates Lasting Audit Exposure
Collecting a certificate does little good if the organization cannot retrieve it when an auditor asks for it.
Martin shared several examples from her career involving binders, boxes, shared drives, and employees searching through years of records for individual documents. In one case, a company stored exemption certificates in a box in the attic of its office. During a move, family members helping the business discarded the box because the documents appeared old. Years later, California auditors requested the missing certificates.
These situations illustrate the weaknesses of treating exemption certificates primarily as stored documents. Organizations also need to know which customer and jurisdiction each certificate covers, whether it remains valid, what exemption it supports, and which transactions should rely on it.
Martin summarized the limitations of traditional processes plainly: “What I have certainly seen since my time in industry is this manual age of exemption certificate management is dead.”
Centralized electronic records provide a more workable foundation, particularly when certificate information can interact with transaction data instead of remaining isolated in a folder or filing cabinet.
Using AI to Improve Certificate Validation
One area where AI can contribute practical value is certificate review.
Employees traditionally have to examine each document to determine whether required information is present, including signatures, dates, taxpayer identification numbers, and exemption reasons. That work requires time, attention, and familiarity with applicable requirements.
AI-assisted validation can perform portions of that review automatically and flag incomplete documentation for further attention.
Martin described the opportunity this way: “Rather than me having to do this manual review and saying, is it signed? Is it dated? Does it have a name? Does it have an exempt reason? Why not let AI tools do that for you?”
Automation can also support the broader certificate lifecycle by tracking expiration dates, initiating renewal requests, maintaining certificate data, and connecting exemption status with transaction systems.
The intended result is a closer relationship between supporting documentation and the tax treatment applied to an individual transaction. Before granting an exemption, the system can consider whether an appropriate certificate exists, whether it remains effective, and whether it applies to the jurisdiction and exemption reason involved.
Why Customer Data Matters During an Audit
Even a sophisticated certificate process depends on reliable customer data.
Martin described organizations in which an ERP required employees to populate a certificate-number field before a customer could be marked exempt. In practice, employees could enter arbitrary text simply to satisfy the field requirement. The system would then treat the customer as exempt despite the absence of legitimate supporting documentation.
“The data drives the action.”
Duplicate accounts, outdated customer records, unsupported exemption indicators, and certificates issued under former company names can all create problems downstream.
Martin illustrated how those errors can compound during an audit. In a hypothetical sample of 100 exempt transactions, some customers might have been incorrectly marked exempt, others might have expired certificates, and still others might have certificates for the wrong state. If those deficiencies produce a substantial error rate in the auditor’s sample, that percentage can be extrapolated across a much larger population of exempt sales.
For finance leaders, data quality therefore belongs alongside document collection as a fundamental component of exemption certificate management.
Moving Toward a More Mature Certificate Management Process
Martin presented exemption certificate management as a progression through several levels of maturity.
At the earliest stage, organizations rely on ad hoc collection with little tracking or standardization. The next stage introduces centralized storage, although certificates may remain disconnected from transaction systems. More developed programs use digital collection, customer portals, automated validation, renewal campaigns, and reporting.
The subsequent stage incorporates real-time AI validation across sales channels and connects certificate information with tax and business systems.
As organizations expand into additional states, the need for a scalable approach becomes more pronounced. Economic nexus requirements, jurisdiction-specific rules, certificate expiration requirements, and different treatment of exemptions can make decentralized processes increasingly difficult to maintain.
The Potential Return from Automation
The webinar also reviewed findings from a Forrester Total Economic Impact study involving six Avalara customers with annual revenues ranging from $24 million to $8.3 billion.
According to the study figures presented during the webinar, the analyzed customers achieved a payback period of less than six months and a three-year value of $769,000, representing a 153 percent return on investment. The study also identified efficiency improvements related to certificate validation, audit preparation, returns processing, and tax research.
Certificate management represented a considerable portion of that administrative burden. Martin cited 416 hours per year spent validating certificates and said customers reported saving approximately 30 minutes of staff time per exemption certificate after adopting Avalara.
Audit preparation also improved. Customers reported saving 34 hours per audit, while the study identified an 85 percent efficiency gain associated with audit preparation.
Those figures illustrate why exemption certificate management can warrant attention beyond the tax department. The business case can encompass labor utilization, audit preparation, financial exposure, and the capacity of finance personnel to spend more time on other responsibilities.
How Avalara ECM Works Within the Process
During the demonstration portion of the webinar, Martin described Avalara Exemption Certificate Management as a centralized location for both certificate images and the associated data.
The platform includes AI-assisted validation through Avalara’s Avi functionality. Users can upload an exemption certificate, and the system can identify missing information such as a signature, date, exemption reason, or taxpayer identification number.
“Avi can actually help validate exemption certificates in real time.”
The system can also support expiration reporting, certificate collection from customers, certificates issued to vendors, and audit retrieval. Martin demonstrated how certificates for a particular jurisdiction could be located and prepared for an auditor without manually searching through individual files.
For Sage users and organizations working across other connected finance systems, certificate management can also be incorporated into existing customer and transaction workflows rather than operating as an isolated compliance exercise.
Building a More Defensible Exemption Process
The webinar’s central lesson was that exemption certificate compliance depends on the complete process surrounding the document.
Organizations need defined ownership, dependable customer data, consistent collection procedures, proper validation, expiration monitoring, accessible records, and a connection between exemption documentation and transaction treatment. Weakness in any one of those areas can surface several years later when an auditor requests support for a transaction.
Automation and AI can reduce much of the repetitive work associated with those responsibilities while giving finance and tax teams better visibility into potential exposure before an audit begins.
For Controllers and CFOs evaluating their current practices, the appropriate starting point is to examine how certificates move through the organization today. Determine who collects them, who validates them, where they are stored, how renewals are handled, and whether an exemption can be applied without adequate documentation. Those answers can reveal where avoidable exposure remains.
About the sponsor
Avalara delivers automated, cloud-based tax compliance built seamlessly into the Sage ecosystem. Through prebuilt integrations across Sage Intacct, 100, 300, and X3, Avalara automates real-time tax calculation, exemption certificate management, and return filing directly inside your Sage workflows, helping businesses scale efficiently and stay audit-ready worldwide. Learn more at www.Avalara.com.
