Corporate · Multi-State 12 min read

Operating across state lines: multi-state compliance for Texas businesses.

A Texas business hires a remote employee in California. Sells SaaS to customers in 30 states. Stores inventory in an Atlanta warehouse. Each of these decisions triggers compliance obligations the business may not have evaluated. The five compliance categories, the post-Wayfair sales tax landscape, and the structural decisions that determine whether multi-state operations produce growth or audits.

Practice areas this article covers

If you read nothing else

A Texas business operating across state lines triggers compliance obligations in five recurring categories: foreign qualification (registration as a foreign entity with the secretary of state); sales tax nexus (collection and remittance, dramatically expanded by the Supreme Court's 2018 decision in South Dakota v. Wayfair); state income or franchise tax (entity-level filings in nexus states); employment law and payroll tax (when employees work in another state, that state's employment laws and payroll regimes apply); and state privacy compliance (the rapidly expanding state privacy regime, with about 20 states now having comprehensive consumer privacy laws). Foreign qualification and tax nexus are distinct analyses — a business may have one without the other, and treating them as proxies for each other is the most common multi-state compliance error. The compliance burden accumulates incrementally; the first out-of-state activity feels manageable, but a fully compliant remote-first Texas business with employees in 15 states typically requires structured multi-state compliance infrastructure rather than ad hoc handling.

Call Chuck Kraus: (682) 529-7177

Most Texas businesses extend operations across state lines without making a deliberate decision to do so. A remote employee gets hired in Denver. A customer signs up from Boston. Inventory gets stored in an Atlanta fulfillment warehouse. A sales rep gets promoted who lives in Phoenix and travels to client sites. None of these feel like the kind of corporate decision that warrants legal analysis. Each of them, individually, triggers compliance obligations under the laws of the other state — and collectively, they accumulate into a multi-state compliance posture that the business has not evaluated.

The discovery typically arrives as a notice. A state department of revenue assesses sales tax for years of unregistered selling, with penalties and interest. A state secretary of state issues a delinquency notice for unregistered foreign business activity. A state employment commission audits payroll tax compliance for an employee the business never registered. A state attorney general's privacy enforcement office sends a request for information about consumer rights handling. None of these are surprises, exactly — the law is what it is. The surprise is that the business has been triggering these obligations for years and only now is being asked to address them.

This article is the framework I use when working with Texas businesses on multi-state compliance — the five recurring categories of compliance obligations, the post-Wayfair sales tax landscape that fundamentally changed remote seller compliance, the activity triggers that determine which obligations apply where, and the structural decisions that separate businesses that operate cleanly across state lines from businesses that operate at audit risk.

The five compliance categories

Multi-state compliance for Texas businesses falls into five recurring categories, each with its own legal framework, regulatory authority, and triggering activities. Understanding which categories apply to which states is the foundation of a coherent multi-state compliance posture.

Compliance categories

Five recurring categories of multi-state compliance for Texas businesses

01
Category 01

Foreign Qualification

What triggers it Conducting "doing business" or "transacting business" activities under the target state's definition. Common triggers: physical office, employees working in the state, owning real estate, holding inventory, executing significant contracts in the state.
What's required Registration with the secretary of state, certificate of good standing from Texas, registered agent in target state, payment of registration fees, ongoing annual reports and franchise tax filings.
Cost of non-compliance Monetary penalties (often back-fees for the entire unregistered period), inability to bring lawsuits in the state's courts, and tax assessments dating to when registration should have occurred.
02
Category 02

Sales Tax Nexus (Post-Wayfair)

What triggers it Economic nexus: typically $100,000 of in-state sales or 200 separate transactions in the prior 12 months (some states have raised to $500,000). Physical presence remains a separate trigger.
What's required Registration with the state's department of revenue, collection of sales tax on taxable transactions, periodic filing and remittance, ongoing compliance with the state's product taxability rules and exemption certificate handling.
Cost of non-compliance Sales tax assessments going back to when nexus was established (typically 3–7+ years), plus penalties and interest. Wayfair nexus liability often cannot be passed back to customers and becomes the seller's cost.
03
Category 03

State Income or Franchise Tax

What triggers it Each state's specific nexus standard for income/franchise tax — often economic nexus, factor presence, or physical presence. PL 86-272 provides limited safe harbor for tangible-goods sellers but does not apply to services or digital products.
What's required Annual income tax or franchise tax filings in nexus states. Income is apportioned among states based on each state's specific apportionment formula — typically a weighted combination of sales, payroll, and property factors.
Cost of non-compliance Tax assessments for unfiled years, plus penalties and interest. Some states have indefinite statute of limitations for non-filers — meaning exposure can extend back many years before any audit period begins.
04
Category 04

Employment & Payroll Tax

What triggers it An employee working in another state — including remote workers, sales representatives, and field employees. The employee's state law applies to the employment relationship; the employer must register with the state's tax authorities.
What's required State payroll tax registration (where applicable), state unemployment insurance registration, workers' compensation coverage compliant with state requirements, compliance with the state's employment laws (minimum wage, overtime, leave, anti-discrimination), and benefits compliance.
Cost of non-compliance Payroll tax assessments, unemployment insurance arrears, workers' comp coverage gaps, and exposure to employee claims under the state's employment laws for unpaid wages, missed benefits, or improper terminations.
05
Category 05

State Privacy Compliance

What triggers it Processing personal data of state residents above the state's specific thresholds. Approximately 20 states now have comprehensive consumer privacy laws including CCPA (California), CDPA (Virginia), CPA (Colorado), TDPSA (Texas, eff. July 2024), and others.
What's required Privacy notices meeting each applicable state's standards, consumer rights handling (access, delete, correct, port, opt-out), data protection assessments for high-risk processing, reasonable security practices, sensitive data protections, and ongoing compliance discipline.
Cost of non-compliance State attorney general enforcement actions with statutory penalties (varies by state, often $2,500–$7,500 per violation), private rights of action in some states, and the reputational cost of public enforcement actions.

The activity-trigger matrix

Different activities trigger different compliance categories. The matrix below maps the recurring activities a Texas business engages in across state lines against the five compliance categories — providing a quick reference for which obligations are likely activated by which activity.

Trigger matrix

Which activities trigger which compliance obligations

Activity in another state
Foreign Qual.
Sales Tax
Income/Franchise Tax
Employment
Privacy
Hire employee in state
Open physical office
Hold inventory in state
Own real estate
Sell to in-state customers (remote)
Independent contractor in state
Travel for sales/services
Process state-resident data
Typically triggered Sometimes triggered (depends on facts) Generally not triggered by this activity alone

The Wayfair earthquake and what it means now

The Supreme Court's June 2018 decision in South Dakota v. Wayfair, Inc., 138 S. Ct. 2080, was the most consequential change to multi-state tax law in three decades. The decision overruled Quill Corp. v. North Dakota, 504 U.S. 298 (1992), which had required physical presence in a state before that state could compel a remote seller to collect sales tax. Wayfair held that physical presence is not required and that economic nexus alone — sufficient sales volume or transaction count — supports sales tax collection obligations.

Following Wayfair, every state with a sales tax has enacted economic nexus legislation. Thresholds typically follow the South Dakota model — $100,000 of in-state sales or 200 separate transactions in the prior 12 months — though some states have raised the threshold to $500,000 of sales (without a transaction count alternative). The result is that any Texas business with meaningful out-of-state sales activity has potential collection obligations in dozens of states. A SaaS company with $20 million in revenue can easily have economic nexus in 30 to 40 states. An e-commerce retailer with $5 million in revenue can have nexus in 15 to 25.

The compliance burden is real. Each nexus state requires registration with the department of revenue, collection at correct rates (which vary by state and often by jurisdiction within the state), filing of periodic returns (monthly, quarterly, or annually depending on the state and volume), remittance, exemption certificate handling, and ongoing maintenance. The product taxability rules vary materially by state — software, services, digital goods, and SaaS are taxable in some states and exempt in others, with frequent changes. The compliance work is not glamorous and is typically beyond what a CFO or general manager can handle alongside their primary responsibilities.

The structural answer for most Texas businesses with meaningful out-of-state sales is to deploy a sales tax compliance solution — either an in-house tax team for businesses large enough to support it, or an outsourced solution from one of several specialized providers (Avalara, Vertex, TaxJar, Sovos, and others). The cost of compliance is significant; the cost of a state department of revenue audit assessing five years of unremitted tax with penalties and interest is consistently a multiple of what compliance would have cost.

The framework decision: where to operate, where to register

Multi-state compliance is not a question of whether to comply — it is a question of where to deploy the compliance investment. Three structural decisions consistently determine the cost and effectiveness of a Texas business's multi-state posture.

The geographic footprint decision. Where to hire, where to sell, where to hold inventory, where to open offices. Each of these decisions has multi-state compliance consequences that should be evaluated at the time of the decision rather than discovered after. The compliance burden of an additional state is approximately the same regardless of the business volume in that state, which means a state that contributes meaningfully to revenue justifies the compliance investment more easily than a state with one remote employee or a handful of customers. The strategic question is whether to limit hiring or selling to states where the business intends to maintain compliance, or to expand into states without limit and accept the broader compliance burden.

The compliance infrastructure decision. In-house, outsourced, or hybrid. The right answer depends on the business's scale, the geographic footprint, and the available internal expertise. Smaller businesses with activity in five or fewer states often handle compliance internally with attorney and CPA support. Mid-market businesses with activity in 10–20 states typically benefit from outsourced sales tax compliance combined with multi-state payroll providers and registered agent services. Larger businesses with activity in 30+ states typically require some in-house tax function with outsourced support for specific functions. The wrong approach for any size — and the most common one — is to address compliance ad hoc as obligations are discovered, which produces the worst combination of high compliance cost and high non-compliance exposure.

The remediation decision. For Texas businesses that have been operating across state lines without complete compliance, the question is what to do about it. Voluntary disclosure agreements (VDAs) — programs offered by many state revenue departments through which a non-filer can come forward, file the missing returns and pay the tax, with reduced penalties and a limited look-back period — are typically the most cost-effective remediation path. VDAs are time-sensitive — they are unavailable once the state has initiated contact about the deficiency, so the window closes when audit notices arrive. For businesses with meaningful unremedied multi-state exposure, evaluating VDA opportunities should happen before the audit notice rather than after.

The compliance burden accumulates incrementally. The first out-of-state employee feels manageable. The fifteenth requires a different operational discipline. Texas businesses that operate cleanly across state lines tend to be the ones that recognized the inflection point earlier rather than later.

What this article cannot tell you

The framework above describes the structural categories every Texas business operating across state lines should understand. The specific application to your business — which states your activity triggers obligations in, what your existing compliance posture looks like, where the highest-priority remediation targets are, and what infrastructure decisions fit your business size and growth plans — depends on facts that a general article cannot evaluate.

The most useful first step for a Texas business with multi-state activity is the working session that maps the specific operations onto the five categories and identifies the priorities. That session produces a working direction in fifteen minutes — typically with a clear sense of which compliance gaps are most consequential and which can wait.

How I help

Multi-state compliance is operational discipline, not paperwork.

My practice covers multi-state compliance strategy at the structural level — mapping operations against the five categories, identifying compliance gaps, designing the infrastructure (in-house, outsourced, or hybrid) that fits the business's scale and trajectory, coordinating with multi-state payroll providers, sales tax compliance services, and registered agent services. The work is part of the broader fractional general counsel relationship for many Texas businesses with multi-state operations; for others, it operates as a defined compliance review engagement.

For specialized work — sales tax compliance execution, multi-state employment law disputes, state tax audit defense — Scale LLP coordinates with state and local tax specialists, employment litigation counsel, and other experts as the matter requires. The strategic and structural work stays consistent across the engagement.

For Texas businesses that have extended operations across state lines without a deliberate compliance posture — or that anticipate doing so — the first conversation produces a useful direction. The framework is consistent across business types; the application to your specific situation is the work the conversation will surface.

Schedule a Call

Going deeper

Questions I hear from Texas businesses operating across state lines.

A Texas business is generally required to register as a "foreign entity" in another state when its activities cross the threshold of "doing business" or "transacting business" as defined under that state's laws. Common triggers include maintaining a physical office, employing workers, owning real estate, holding inventory, having employees regularly working in the state, executing significant contracts in the state, and in some states, generating revenue from in-state customers above specified thresholds. The legal consequence of failing to register typically includes monetary penalties (often calculated as the registration fees and franchise taxes that would have been owed for the entire unregistered period), inability to bring lawsuits in the state's courts, and tax assessments going back to when registration should have occurred. Foreign qualification is a separate analysis from tax nexus — a business may have nexus for sales tax or income tax purposes without triggering foreign qualification, and vice versa.

Sales tax nexus is the connection between a business and a state that triggers obligations to collect and remit sales tax on transactions with in-state customers. For decades under Quill Corp. v. North Dakota (1992), the Supreme Court required physical presence before a state could compel remote sellers to collect sales tax. The Court reversed Quill in South Dakota v. Wayfair, Inc. (2018), holding that physical presence is not required and that economic nexus alone — sufficient sales volume or transaction count — can support sales tax obligations. Following Wayfair, virtually every state with a sales tax has enacted economic nexus legislation, with thresholds typically set at $100,000 of in-state sales or 200 separate transactions in the prior 12 months (some states have raised to $500,000). The decision fundamentally changed the operational reality for Texas businesses selling to out-of-state customers — a Texas SaaS company or e-commerce retailer can now have collection obligations in 30 or 40 states without ever having an employee, office, or inventory outside Texas.

Hiring an employee in another state — whether in-state office worker, remote worker, or sales rep — triggers obligations under the laws of the employee's state. Foreign qualification: the employee's presence typically constitutes "doing business" requiring registration with the secretary of state. State employment law: the employee is covered by the employment laws of their state, which may include different minimum wage and overtime rules, state-specific anti-discrimination laws, paid sick leave requirements, paid family leave programs, and state-specific termination rules. State payroll tax: the business must register with the state's department of revenue for state income tax withholding (where applicable) and with the state's unemployment insurance authority. Workers' compensation: typically must obtain coverage compliant with the employee's state's requirements (Texas allows opt-out; many states do not). Privacy and benefits: must comply with the employee's state's privacy regime for employee data, state-specific benefits rules, and other state employment law obligations. The aggregate compliance burden of a single out-of-state employee can be substantial.

Generally yes — most states impose corporate income tax (or a similar entity-level tax such as a franchise tax based on income) and require filings from businesses with nexus to the state. The nexus standard for state income tax can differ from sales tax nexus and is governed by each state's specific rules. Some states have adopted "factor presence" nexus standards under which specified levels of sales, payroll, or property in a state create income tax filing obligations even without traditional physical presence. The federal Public Law 86-272 provides a limited safe harbor for businesses whose only in-state activity is the solicitation of sales of tangible personal property, but the safe harbor has narrowed in recent years through state interpretations expanding what activities exceed mere solicitation, and does not apply to services or digital products. For Texas businesses operating in multiple states, the income tax compliance burden often involves filings in 5 to 30+ states depending on the business model, with apportionment of income among states based on each state's specific apportionment formula. Texas businesses benefit from Texas's lack of state income tax — the burden is on filings in other states, not on a Texas income tax return.

Foreign qualification is the process by which a business entity formed in one state registers with another state to legally conduct business there. The process typically involves filing an application for authority with the secretary of state of the target state; obtaining a certificate of good standing from the entity's home state; paying registration fees (varies by state from approximately $100 to over $750); appointing a registered agent in the target state; obtaining whatever business licenses or permits the target state requires for the specific business activity; and ongoing compliance, which typically includes annual reports, franchise tax filings, and registered agent maintenance. Foreign qualification does not change the entity's home state — a Texas LLC remains a Texas LLC, simply registered to do business in another state. The annual maintenance burden is more consequential than the initial registration, particularly for businesses operating in many states. Most Texas businesses operating in multiple states use a registered agent service that handles registered agent obligations across multiple states for a single annual fee.

Yes, and many Texas businesses do — but the compliance posture must be deliberately managed because each state where an employee works typically generates compliance obligations across multiple categories. The fully compliant remote-first Texas business with employees in 15 states will typically have foreign qualification in those 15 states; payroll tax registration with state revenue departments and unemployment insurance authorities; workers' compensation coverage for each state's requirements; benefits compliance with state-specific rules; employment policies addressing state-specific employment law differences; sales tax registration in states where economic nexus is crossed; privacy compliance with state-specific privacy regimes; and ongoing administrative work to maintain all of these registrations. The cost is significant but predictable. Many Texas businesses underestimate the burden because the compliance accumulates incrementally. The strategic decision is whether to build in-house multi-state compliance capability, outsource to specialized providers, or limit hiring to states where the compliance burden is acceptable.

Nexus and foreign qualification are related but distinct concepts. Foreign qualification is a state corporate law concept — a state's requirement that out-of-state entities register with the state to legally transact business there. It governs the entity's right to do business and to use the state's courts; it is administered by the secretary of state. The threshold typically focuses on physical activity (offices, employees, real estate). Nexus is a state tax law concept — the connection between a business and a state that triggers state tax obligations. Nexus is administered by state departments of revenue. Different state taxes have different nexus standards: sales tax nexus (post-Wayfair, often economic nexus alone); income or franchise tax nexus (typically economic, factor presence, or physical depending on the state); employment tax nexus (typically triggered by an employee in the state). The two analyses must be conducted independently. A Texas business may have sales tax nexus in a state without triggering foreign qualification, and vice versa. Failing to recognize the distinction is one of the most common multi-state compliance errors.

Yes, increasingly so. The state privacy law landscape has evolved rapidly since California enacted the CCPA in 2018, with comprehensive consumer privacy laws now in effect in approximately 20 states and additional states moving toward enactment. Each state's privacy law applies based on different criteria — typically some combination of revenue thresholds, consumer count thresholds, and the nature of the data processing — and creates different consumer rights and business obligations. Texas businesses processing personal data of out-of-state consumers may be subject to multiple state privacy laws simultaneously. The Texas Data Privacy and Security Act (TDPSA), effective July 1, 2024, brought Texas into this group of states. Common features across state privacy regimes include: consumer rights to access, delete, correct, and port personal data; rights to opt out of certain processing including sale and targeted advertising; obligations to provide privacy notices, conduct data protection assessments, implement reasonable security practices; and ongoing compliance including consumer rights handling within statutory timeframes. The cost of compliance is significant but predictable; the cost of a state attorney general enforcement action is typically a multiple of the compliance investment.

The compliance framework is consistent.
The application to your business is the work.

Whether the operation spans 3 states or 30, the first conversation maps the specific footprint onto the five categories and identifies the priorities.

This article describes the structure of multi-state compliance for Texas businesses at a general level and is not legal or tax advice for any specific situation. The application of foreign qualification, tax nexus, employment law, and privacy compliance rules to a particular business depends on the specific activities, footprint, and facts that cannot be evaluated in a general article. Legal and tax provisions referenced reflect the law as of the publication date and are subject to change through legislation, regulation, or judicial decision. Consult counsel and qualified tax advisors licensed in the relevant jurisdictions before making decisions in any specific matter. Chuck Kraus is licensed in Texas, Minnesota, Washington State, and Canada.