California Sales Tax Audit Guide

California sales tax audits are conducted by the California Department of Tax and Fee Administration, known as the CDTFA. The CDTFA is one of the most aggressive and well-resourced state tax agencies in the country. California's sales and use tax rules are among the most complex in any jurisdiction, particularly around technology, services, manufacturing, and mixed transactions. Businesses that operate in California face audit risk that is significantly higher than in most other states, and the potential assessments from a CDTFA audit can be substantial.

Statute of Limitations

The standard statute of limitations for a California sales tax assessment is three years from the return due date or the date the return was filed, whichever is later. For returns where a substantial understatement of tax exists, the period extends to eight years. When fraud or intent to evade is involved, there is no limitation period and the CDTFA can assess tax for any period without restriction. Businesses that have not been filing California returns face the unlimited fraud period by default, which is one reason early voluntary disclosure is often the right strategy for out of state businesses that have established California nexus.

How Businesses Are Selected

The CDTFA uses a sophisticated data matching program that compares reported sales tax collections against federal and state income tax filings, payroll records, and industry-specific benchmarks. A business reporting gross receipts on its income tax return that are substantially inconsistent with its sales tax remittances will generate an audit flag. The CDTFA also conducts industry-wide sweeps, targeting entire sectors at once. Ecommerce businesses, software companies, cannabis retailers, contractors, and manufacturers are recurring audit targets.

California is particularly aggressive in pursuing out of state businesses that sell into California. Since the state adopted economic nexus standards following the 2018 Wayfair decision, the CDTFA has actively identified businesses exceeding the $500,000 California sales threshold that have not been registering and filing. If your business sells into California and has not evaluated its nexus exposure, an audit notice may not be far off.

High-Risk Areas in California

California's tax rules create specific audit exposure in a set of areas that recur consistently across industries:

• Software and digital goods: California distinguishes between custom software (generally not taxable) and canned or prewritten software (taxable), and the lines are frequently disputed in audit.
• Mixed service and product transactions: When a business sells a combination of services and tangible goods, California requires careful allocation. Auditors regularly challenge whether bundled transactions were properly characterized.
• Manufacturing and research and development exemptions: These exemptions are available but narrowly defined. Equipment that qualifies must be used directly and exclusively in qualifying activities, and the CDTFA interprets those requirements strictly.
• Construction contracts: Materials incorporated into real property are generally taxable at the time of purchase. Contractors frequently have audit exposure for materials they purchased without paying tax on the assumption the sale to the customer was taxable.
• Drop shipment transactions: California has specific rules governing third party fulfillment and drop shipments that differ from most other states, creating compliance gaps for businesses using fulfillment networks.
• Cannabis businesses: Subject to both state excise tax and local taxes on top of standard sales tax, and CDTFA audit activity in this sector has increased sharply.

The California Audit Process

A CDTFA audit begins with a written notification letter identifying the audit period, the taxes under examination, and a list of records to be produced. The CDTFA will request an initial meeting to explain the audit scope and establish a timeline. This initial meeting is where the course of the audit is often set, and you should not attend without representation.

The fieldwork phase involves review of sales records, purchase invoices, exemption certificates, general ledger entries, and sales tax returns. Auditors use statistical sampling extensively. A representative period is selected, an error rate is calculated, and that rate is extrapolated across the entire audit window. On a business with significant annual sales, this methodology can produce an assessment that bears little relationship to actual underpayment.

After fieldwork, the auditor issues a Notice of Determination setting out the proposed assessment. Businesses have 30 days to petition for a redetermination. This is the first formal appeal opportunity and a critical deadline that must not be missed.

California Appeals Process

Following a Notice of Determination, businesses can file a petition for redetermination with the CDTFA. The CDTFA conducts an internal review of the audit findings. If the redetermination is unfavorable, the next step is an appeal to the Office of Tax Appeals, which is an independent state agency created specifically to hear tax disputes. OTA proceedings involve formal legal briefing, oral argument, and written decisions. The OTA is not bound by CDTFA positions and has reversed CDTFA assessments on both legal and factual grounds.

If the OTA decision is adverse, the taxpayer can appeal to California Superior Court. This judicial review path is available but rarely pursued given the cost and complexity. Most cases are resolved at the CDTFA redetermination or OTA level.

What We Look For in California Audits

• Sampling methodology errors: California auditors must follow specific statistical standards. Challenges to sample selection, sample period, and extrapolation method frequently reduce assessments significantly.
• Software and technology characterization: Whether a product is custom or canned, and how bundled transactions should be split, are legal questions that CDTFA auditors regularly get wrong.
• Manufacturing exemption eligibility: Equipment that qualifies for the manufacturing or R&D exemption is often taxed anyway when auditors apply overly narrow definitions.
• Resale certificate validity: California has strict requirements for resale certificates. We review whether challenged certificates substantially comply with the requirements and whether the underlying transactions were genuine resale transactions.
• Penalty abatement: California allows penalty abatement for reasonable cause. First time audit findings, good faith reliance on professional advice, and other circumstances can eliminate penalties entirely.