Understanding tax rates is one thing; building a system to stay compliant is another. Here are the policies and practices that keep you safe.
Document your sources. For each state where you do business, keep a folder with the current rate, the official source URL, and the date you last verified it. If you ever get audited, this shows you made a good-faith effort to comply.
Set a review calendar. I recommend checking rates at least quarterly. Mark your calendar for January 1, April 1, July 1, and October 1. Also check after your state's legislative session ends—most changes take effect on July 1 or January 1.
Use a multi-source verification approach. Don't just look at the Tax Foundation. Check the state revenue site too. If they agree, you're probably good. If they don't, trust the state.
Be careful with drop-shipping. If you use a drop-shipper, you're still responsible for charging the correct tax to the customer. Your drop-shipper might not handle tax at all, so it's on you to know the rate.
Consider tax automation software. There are services that integrate with your e-commerce platform and calculate tax in real time. They're not free, but they can save you from costly mistakes. Just make sure the service uses up-to-date state data.
Understand nexus. You only have to collect tax in states where you have nexus—a physical presence like an office or warehouse, or economic nexus if you exceed a sales threshold. If you're unsure, consult the state's economic nexus rules or a tax professional.
One more thing: don't forget local taxes. Some cities and counties add their own vape tax on top of the state rate. These are harder to track, but they matter. Your state revenue site might have a lookup tool for local rates.
