Where Multi-State Compliance Breaks Down for Growing Businesses

The pattern plays out the same way regardless of industry. Revenue crosses a nexus threshold, an employee gets hired in a new state, or a service is delivered into a taxing jurisdiction, and nobody flags it. Months or years later, a state notice, an audit, or acquisition due diligence uncovers back-filings, unpaid taxes, and penalties that materially affect enterprise value. The difference between managed compliance and reactive compliance directly affects cash, valuation, deal readiness, and leadership credibility with the board.

Economic nexus thresholds, established across nearly every U.S. state after South Dakota v. Wayfair (2018), mean that a company can trigger sales tax collection and remittance obligations in a state where it has zero physical presence. Most states set their threshold at $100,000 in sales or 200 transactions, though the specifics vary by state. California, Texas, and New York use a $500,000 revenue threshold. Kansas has no minimum threshold for remote sellers.

For companies selling products or services across state lines, the exposure compounds quietly. Revenue in each state accumulates toward a threshold that most internal accounting teams are not actively monitoring. When the threshold is crossed and the company has not registered, collection has not started, and filings have not been made, the resulting liability includes not just the uncollected tax but penalties and interest that can reach 25% to 50% of the underlying amount. KDG explored this dynamic in depth in our analysis of how growth-stage merchants navigate multi-state sales tax obligations, including why platforms like Avalara require proper configuration to move from rate calculation to actual compliance.

Product taxability adds another layer. SaaS is taxable in more than 20 states. Digital goods are taxable in more than 30 states. Apparel, food, and professional services each carry category-specific rules that change annually. A company that installs a tax automation tool and assumes compliance is handled has created a false sense of security unless the underlying nexus determinations, product taxability classifications, and exemption certificate management are set up correctly and reviewed regularly.

Remote and hybrid work has quietly created employer nexus in dozens of new states for most growing companies. Every new-state hire triggers a set of obligations that include state unemployment insurance registration, state income tax withholding, workers’ compensation coverage, paid leave program compliance, wage and hour requirements, and posting requirements. Each state has its own registration cadence, filing deadlines, and penalty regime.

The employment side is often more painful than the tax side. A company that hires remote employees in a handful of new states hasn’t just added headcount. Each state brings its own payroll registration, withholding requirements, unemployment insurance account, and employment laws to monitor and comply with. The obligations multiply with every hire. For a finance team already stretched thin managing day-to-day operations, the incremental workload of multi-state payroll compliance is frequently underestimated.

The compliance bill from unregistered or mismanaged payroll obligations compounds in much the same way sales tax liability does. The difference is that payroll non-compliance also carries employee-facing consequences, including incorrect withholding, missing benefits, and potential personal liability for officers.

State income and franchise tax obligations are among the most overlooked exposures for growing businesses. A company with an economic nexus for sales tax purposes may also have income tax nexus in those same states, creating a separate set of filing and payment obligations that often go unaddressed until a state notice arrives.

Unclaimed property, or escheatment, is a widely overlooked multi-state obligation with its own set of rules, dormancy periods, and audit programs in every state. Many growing businesses have never filed. Local obligations, including city, county, and special district taxes, are the last mile of the problem. State-level compliance does not clear local business license, gross receipts, occupational, or home-rule tax obligations, especially in states like Colorado, Louisiana, and Alabama with heavy local tax authority.

The Corporate Transparency Act and beneficial ownership information reporting has added a new federal layer on top of state-level obligations, with a shifting regulatory posture that requires active monitoring rather than a one-time filing.

Software alone does not solve multi-jurisdiction compliance. Tools like Avalara, TaxJar, and similar platforms automate calculation, filing, and remittance, but they only work when nexus determinations, product taxability decisions, exemption certificate management, and system integrations are set up correctly.

The most common failure we see is a company that installs Avalara, collects sales tax in the states where it believes it has nexus, and assumes the problem is solved. Over the next 18 months, revenue growth pushes the company past economic nexus thresholds in additional states. Without active nexus monitoring, the company continues to not collect tax in those states. By the time the gap is discovered, the company has accumulated uncollected tax liability, potential penalties, and interest. The tax engine was working exactly as designed. The compliance infrastructure around it was not.

Nexus studies are the foundational, most skipped step. Without a documented nexus determination, businesses either over-register, spending money and creating obligations they do not have, or under-register, accumulating hidden liability. Tax automation platforms need to be configured, maintained, and integrated into a broader compliance workflow that includes registration, filing calendars, exemption certificate management, and periodic re-review triggered by growth events.

The most effective posture follows a defined sequence. 

1. Conduct a nexus study. Document where the company has nexus across sales tax, income and franchise tax, payroll, and unclaimed property. This is the foundation that every subsequent step depends on. 
2. Register where required. File registrations in states where nexus exists and obligations are owed. For states where the company has been operating without registration, evaluate Voluntary Disclosure Agreements, which generally offer look-back limits and penalty waivers in exchange for proactive disclosure. 
3. Configure automation correctly. Ensure that tax automation platforms reflect current nexus determinations, product taxability classifications, and exemption certificate requirements. Connect those platforms to ERP, CRM, and accounting systems so that filings reconcile against the general ledger.
4. Establish a filing calendar and controls framework. Create a documented compliance calendar that tracks registration renewals, filing deadlines, and periodic review triggers. Tie the calendar to a controls framework that the CFO can present to the board, investors, or acquirers. 
5. Re-review at every growth event. New state revenue thresholds, new hires, new products, new channels, and new entity structures all change the compliance posture. Build re-review into the operational rhythm rather than waiting for the next state notice or diligence process to surface the exposure.

Mid-market companies face a structurally difficult position on multi-jurisdiction compliance. They have crossed enough thresholds in revenue, headcount, and state footprint to have real exposure, but they typically lack a dedicated in-house tax function to manage the resulting complexity. In-house indirect tax talent commands salaries that are uneconomical for most companies under $50M in revenue, and the labor market for that talent remains extremely tight.

The result is that compliance in this segment is almost always managed reactively. A state sends a notice. A CPA raises a flag during annual review. A buyer’s due diligence team identifies the exposure. By that point, the back-tax, penalty, and interest stack has usually been accruing for years and cannot be undone. It can only be remediated, and that remediation almost always costs materially more than a proactive nexus study, registration, and controls program would have cost from the start.

From a talent perspective, a poorly managed multi-state compliance program burns out internal accounting teams, who spend disproportionate time on filings, notices, and reconciliations rather than on financial analysis, forecasting, and strategic support to the business. Fractional CFO and managed accounting models have emerged as a practical mid-market answer because they combine tax and compliance expertise with the financial operations rhythm most growing companies lack internally. Choosing the right model depends on an organization’s stage of growth, financial complexity, and operational needs, which we explore in greater detail in our article, Managed Accounting vs. Fractional CFO: Which Do You Need?

Compliance complexity scales non-linearly with growth. Adding a fifth state is not 25% harder than four. Each new jurisdiction introduces new rules, new deadlines, and new interaction effects with existing filings. Boards and investors now expect a documented compliance posture. “We use software” is no longer sufficient. Leadership is expected to demonstrate a nexus study, a filing calendar, a remediation plan for known exposures, and a controls framework tied to the growth plan.

M&A due diligence is where multi-state compliance failures most often become material. Buyers routinely discount purchase price, escrow funds, or require indemnification for uncured sales tax, payroll tax, and unclaimed property exposure. The financial consequences are cash liabilities that hit at the worst possible moment, during a growth push, a raise, or an exit. Companies with a clean, documented compliance posture expand into new states faster, hire remote talent with confidence, launch new products without creating unmanaged obligations, and enter M&A processes without unnecessary valuation risk. Companies without that posture pay a growth tax in the form of slower expansion decisions, deferred hiring, unclear pricing, and periodic cleanup projects that pull finance leadership away from strategic work.

Organizations preparing for a capital raise, acquisition, or significant expansion should view compliance readiness as equivalent to financial audit readiness. Both require documented processes, clean records, and defensible controls. The organizations that build audit-ready compliance and financial reporting infrastructure before the diligence process begins are the ones that close deals on their terms. KDG’s work with growing organizations on financial operations modernization, including fund accounting, grant compliance, and integrated reporting, demonstrates how a phased approach to building compliant financial infrastructure reduces risk and strengthens confidence with investors, funders, and acquirers.

We approach multi-jurisdiction compliance by helping mid-market organizations connect tax expertise, financial operations, technology configuration, and strategic growth planning into a single, coordinated engagement. Multi-jurisdiction compliance is not a single-discipline problem. It sits at the intersection of tax strategy, accounting operations, systems architecture, and growth planning, and solving it requires a partner that works across all four. 

Our methodology begins with understanding the current compliance posture: where the company has nexus, where it is registered, where gaps exist, and how those gaps interact with the growth plan. We identify the specific exposures across sales tax, income and franchise tax, payroll, unclaimed property, and licensing, and we build a prioritized remediation and registration plan. 

From there, our tax accounting and managed accounting teams take ownership of the ongoing compliance workflow, including nexus monitoring, filing calendars, exemption certificate management, and reconciliation against the general ledger. Our technology team handles the configuration and integration of tax automation platforms like Avalara, ERP and CRM tax settings, and payroll platform configuration for multi-state employees, because compliance software does not work correctly out of the box and requires ongoing configuration and integration work. 

Our Fractional CFO and strategic advisory capabilities provide the leadership layer that ties compliance into the broader growth plan. The point of compliance work is not just to file forms. It is to remove friction from the growth plan and give leadership confidence to scale. Organizations that invest ahead of the growth curve gain a durable operational advantage. Compliance handled proactively becomes a growth enabler, not a growth tax. 

Large accounting firms serve enterprise clients and are often too expensive or too transactional for mid-market growing businesses. Sales tax automation vendors sell software and configure it narrowly, but do not own the broader compliance posture across payroll, income tax, unclaimed property, and licensing. KDG's opportunity is to own the integrated, operational middle by wiring tax and compliance expertise into managed accounting, technology configuration, and Fractional CFO strategic guidance, as a long-term partner rather than a one-time engagement.