What fields are required on a valid exemption certificate?
Seven fields appear on the required checklist in every state. This is the floor. Some states require additional fields; a cert that passes review in one state may still be deficient in a state with more specific requirements.
Purchaser legal name
The exact registered legal name of the buying entity. "Acme Wholesale LLC" is insufficient if the registered entity is "Acme Wholesale Holdings, LLC." The name on the cert must match the buyer's state registration record. For multi-entity buyers with a parent company and purchasing subsidiaries, the entity that actually takes title to the goods is the entity whose name belongs on the certificate.
Purchaser address
The buyer's principal place of business. A billing address, shipping address, or parent-company address does not substitute unless the entity at that location is the purchasing entity. Auditors routinely cross-reference the address on the cert against the buyer's registration record.
Purchaser sales tax registration number
The state-issued account number evidencing that the buyer is registered to collect sales tax in the state of purchase. For resale buyers, this is the permit number. For non-profit or government purchasers, the equivalent identifier applies: a 501(c)(3) federal EIN, a government agency identification number, or a state-issued exemption number. This field draws the most auditor scrutiny. A cert without it is incomplete on its face and rarely survives a good-faith challenge in California or New York.[1][2]
Exemption reason with statutory category or citation
A specific statutory category: "resale," "direct pay," "agricultural use," "manufacturing exemption," "government entity," "non-profit organization." Vague descriptions such as "used in business" fail the audit test. The stated reason must match an applicable exemption category in the state of purchase. When the state requires an explicit statutory citation rather than a category descriptor, include both.
Intended use where applicable
Required in manufacturing, agricultural, and industrial exemption contexts. A buyer claiming a manufacturing exemption must describe how the purchased goods are used in the production process. Resale certificates generally do not require an intended-use statement because the exemption type defines the use by implication.
Authorized signature and title
An authorized representative of the buying entity must sign, with their title included. Electronic signatures are accepted in most states under the Uniform Electronic Transactions Act (UETA). The signer's title provides the auditor a basis for verifying that the signatory was authorized to bind the organization.
Date of issuance
An undated certificate is a clean audit flag. Most states accept certificates for three to five years from issuance; some accept them indefinitely until the buyer's exemption status changes. California explicitly ties the reliance period to the purchaser's active permit status under CA Reg. 1668.[1] The date anchors the certificate to the buyer's registration status at a verifiable point in time, which matters when a permit later lapses.
One technical note: the claimed exemption type must match the transaction. A resale certificate from a buyer purchasing goods for a manufacturing process, rather than for resale, is invalid for that purpose even if every field is properly completed.
State-specific exemption certificate forms and document numbers
Six high-volume states require or strongly prefer their own form. Accepting a generic cert in these states introduces audit risk. The state-specific forms by document number:
| State | Primary form | Secondary form | Governing authority |
|---|---|---|---|
| California | CDTFA-230 (Resale Certificate) | CDTFA-230-G (State/Local Govt) | CA Reg. 1668 [1] |
| New York | ST-120 (Resale Certificate) | ST-119.1 (Exempt Organization) | NY Pub. 750 [2] |
| Texas | 01-339 (Resale and Exemption) | 01-924 (Agricultural) | TX Rule 3.287 [3] |
| Florida | DR-13 (Annual Resale Certificate) | DR-14 (Consumer's Certificate of Exemption) | Fla. Stat. §212.07 [4] |
| Illinois | ST-587 (Equipment Exemption) | ST-587-A (Manufacturer/Assembler) | 86 Ill. Adm. Code 130.2065 [5] |
| Massachusetts | ST-4 (Resale Certificate) | ST-5 (Exempt Organization) | 830 CMR 64H.1.1 [6] |
California
The CDTFA-230 requires the seller's name, the buyer's seller's permit or use tax registration number, a description of the property purchased, and the purchaser's signature.[1] A general use statement does not satisfy the form. California accepts neither the MTC Uniform Resale Certificate nor the SSTGB F0003 as a substitute for CDTFA-230 when the seller's name is required.
New York
ST-120 applies to registered dealers; ST-119.1 covers exempt organizations including charities and government entities.[2] Both require the seller's name and the buyer's Certificate of Authority number. A missing Certificate of Authority number renders the cert deficient regardless of how the seller characterizes their good-faith acceptance.
Texas
Form 01-339 is a combined resale and exemption certificate. The buyer checks the applicable exemption category and provides a Texas sales tax permit number, or for out-of-state purchasers an equivalent registration number.[3] Agricultural buyers use Form 01-924. TX Rule 3.287 governs acceptance and explicitly addresses good-faith reliance.
Florida
The DR-13 Annual Resale Certificate is issued by the Florida DOR directly to registered dealers, not self-prepared by the buyer.[4] Sellers verify the certificate through the DOR's electronic portal. Because the state bears responsibility for an erroneously issued DR-13, sellers who complete electronic verification receive strong audit protection. DR-14 covers government agencies, non-profits, and other exempt organizations; it is also DOR-issued with a fixed expiration date.
Illinois
ST-587 covers equipment used in manufacturing or assembly; ST-587-A covers a broader manufacturing exemption.[5] Illinois does not issue a general resale certificate form; resale transactions use the MTC Uniform Resale Certificate, which Illinois accepts, or a written buyer certification.
Massachusetts
ST-4 is the resale certificate; ST-5 covers exempt organizations.[6] Both require the buyer's Massachusetts tax registration number or federal EIN. The Department of Revenue has flagged incomplete ST-4s as a recurring audit-adjustment category for B2B sellers in recent examination cycles.
TaxCloud's exemption certificate management validates incoming certs against state-specific field requirements at collection, catching missing fields and mismatched form types before they accumulate into an audit liability.
Which states require the seller's name on the certificate
The seller-name requirement determines whether a blanket certificate (one cert covering all future purchases from that seller) is viable, or whether each selling relationship requires a named cert.
| State | Seller name required? | Uniform form accepted without seller name? | Notes |
|---|---|---|---|
| California | Yes | No; neither MTC Uniform nor SSTGB F0003 | CDTFA-230 requires seller named [1] |
| New York | Yes | No; neither MTC Uniform nor SSTGB F0003 | ST-120 requires seller named [2] |
| Texas | Yes | MTC accepted with seller name added; SSTGB not accepted | TX Rule 3.287 [3] |
| Massachusetts | Yes | MTC accepted with seller name added | ST-4 requires seller named [6] |
| Florida | N/A (state-issued cert) | Electronic verification replaces buyer-prepared cert | Seller runs portal check; no paper cert required |
| Illinois | No | MTC Uniform accepted; SSTGB F0003 accepted | Blanket certs viable [5] |
| SST full member states (23) plus Tennessee as associate | No (for SSTGB F0003) | F0003 accepted without seller naming across the 23 full member states plus Tennessee | Addenda required for select exemption types in some member states |
| MTC-accepting states (~38) | No (for MTC Uniform) | MTC Uniform accepted for resale transactions | Confirm state-by-state; a handful of states reject MTC Uniform outright |
For a brand with B2B buyers across 30 or more states, this produces a two-pool cert strategy: a blanket-cert pool covering SST member states and most MTC-accepting states where no seller naming is required, and a named-cert pool covering California, New York, Texas, and Massachusetts where each selling relationship requires its own form. The named-cert pool generates most of the ongoing management work.
The good-faith acceptance doctrine and its limits
When an auditor finds a deficient certificate, the seller's primary defense is good faith. If the seller had no reason to know the exemption claim was false, and the cert was otherwise consistent with the buyer's claimed status, the transaction may remain exempt even if the document was technically incomplete.
Four components govern the analysis:
No reason to know
The seller did not know, and had no reasonable basis to know, that the buyer was not entitled to the exemption. A buyer who represents themselves as a registered reseller but whose permit has since lapsed is the buyer's problem, provided the seller had no practical way to verify the change at the time of sale.
Non-essential missing field
The missing field is not one of the core identity or eligibility fields. A missing date is generally survivable; a missing purchaser registration number is not. The registration number is the field the auditor uses to verify buyer eligibility independently. Its absence removes the auditor's ability to confirm the claim.
Internal consistency
The cert is consistent with the buyer's claimed status, their purchase pattern, and the nature of the goods. A non-profit claiming a resale exemption for office equipment raises a consistency flag even if every field is present; the exemption type and the stated use are misaligned.
State-specific standard of care: the good-faith threshold differs by state.
California
CA Reg. 1668 provides that a seller who takes a resale certificate in good faith is relieved of liability.[1] "Good faith" in California means the seller must have accepted a properly completed certificate. A cert with key eligibility fields missing does not satisfy the standard, and California auditors apply stricter technical review than most states.
New York
NY Tax Law §1132(c) requires that a seller accepting a certificate in good faith have no notice or knowledge that the sale is not for an exempt purpose.[2] Missing required fields, including the Certificate of Authority number and seller name, undermine the good-faith defense because their absence signals that basic verification was not performed.
Texas
TX Rule 3.287 gives a seller a complete defense if the certificate is accepted in good faith and the seller did not know, and reasonably should not have known, that the exemption claim was false.[3] Texas applies an objective standard. A technically incomplete cert from a buyer whose business profile aligns with the claimed exemption, where the seller had no prior reason to doubt the claim, generally holds.
Florida
The DOR's direct-issuance model for DR-13 shifts the good-faith calculation. Sellers who verify the DR-13 electronically through the state portal are protected regardless of what the document contains. The state assumes the risk of an erroneously issued certificate.[4]
One procedural note: the SSTGB F0003 includes a retrospective remedy provision for SST member states. Under specific conditions, a seller who collected and remitted tax on a transaction later shown to be exempt can seek a refund through the SST program. This provision does not apply in non-SST states and is not a general safety net for improperly accepted certs.
SSTGB Form F0003 vs. MTC Uniform: the decision framework
A growing B2B cert library ends up mixing uniform forms with state-specific forms. The two uniform forms serve different coverage sets.
SSTGB Form F0003. Accepted in all 23 full SST member states plus Tennessee as associate for the exemption types the form covers.[7] Some SST states require state-specific addenda for particular exemption categories, including agricultural, manufacturing, and direct-pay situations; the SSTGB publishes the addendum requirements by state at streamlinedsalestax.org. F0003 does not require the seller's name, making it viable as a blanket cert across the entire SST member-state set without reprinting per selling relationship.
MTC Uniform Sales and Use Tax Resale Certificate. Accepted in approximately 38 states for resale transactions.[8] The MTC Uniform covers resale only and does not address manufacturing, agricultural, or organizational exemptions. States that require their own form (California, New York, Texas, Massachusetts) do not accept the MTC Uniform as a complete substitute, though Texas and Massachusetts accept it with the seller's name added. The current state-by-state acceptance list is maintained by the Multistate Tax Commission at mtc.gov.
Cert-pool architecture for a $20-80M Shopify or Shopify Plus brand with 30-state exposure:
- Collect F0003 for all 23 full SST member states plus Tennessee. One form accepted across the entire set. Check the SSTGB addendum table for the buyer's exemption type before treating F0003 as the complete filing.
- Collect CDTFA-230 for California, ST-120 or ST-119.1 for New York, 01-339 for Texas, and ST-4 or ST-5 for Massachusetts, each named to the specific seller relationship.
- For Florida: run electronic DR-13 verification for each resale buyer and confirm expiration annually. Collect DR-14 for exempt-org buyers; note the fixed expiration date.
- Collect MTC Uniform for the remaining states that are neither SST members nor in the named-cert group and that accept the MTC form for the relevant exemption type.
- Track expiration by state and form type. Most states accept certs for three to five years; Florida's DOR-issued DR-13 expires annually; California's reliance period under CA Reg. 1668 requires renewal when a buyer's permit status changes.[1]
TaxCloud's exemption certificate management tracks expiration by state and form type, flags certs approaching renewal windows before they expire mid-relationship, and timestamps cert acceptance at the transaction level so there's a dated record of what was valid when it was used.
What an invalid certificate costs at audit
An auditor who rejects an exemption certificate reclassifies the underlying transaction as taxable. The consequence chain:
Tax assessment
The state assesses tax at the applicable state and local rate on the transaction amount, retroactive to the original transaction date. At a combined 8% rate, a single $50,000 exempt purchase represents $4,000 in assessed tax. Multiply that by the number of transactions with the same buyer across the audit period.
Penalties
Most states impose a civil penalty for failure to collect, in the 10-25% range of assessed tax. Florida applies 10% (Fla. Stat. §212.12).[4] California applies 10% (Cal. Rev. & Tax. Code §6484).[1] New York applies 10% (NY Tax Law §1145).[2] Texas applies 5-10% depending on how long the failure persisted (Tex. Tax Code §111.061).[3]
Interest
Interest accrues from the original transaction date, not from the audit date. At a typical state interest rate of 6-10% annually, a three-year-old transaction carries 18-30% in accumulated interest before penalties are layered on top.
Cascading exposure
An auditor who finds one deficient cert for a given buyer tests the full transaction history with that buyer across the audit period. A single invalid cert from a wholesale customer who placed 200 orders over three years is not a one-transaction problem.
SSTGB retrospective remedy
For transactions in SST member states where F0003 was used and the buyer can establish exemption eligibility after the fact, the SSTGB has a defined remedy process for sellers who collected and remitted tax in good faith. This is a specific SST-program benefit, not a general cure for cert deficiencies in non-SST states.
The brands that come out of exemption-certificate audits with manageable adjustments are the ones whose cert library functions as an audit trail, not a static file. Auditors look for evidence of the validation process: was the buyer's registration status verified at collection? Is there a timestamp on cert acceptance? Did an expiring cert trigger a re-collection request before the next transaction? TaxCloud's exemption certificate management captures collection, validation against state-specific field requirements, expiration tracking, and the transaction-date evidence chain: the documentation an auditor needs to confirm the cert was valid when used, not just that it exists in a folder somewhere.