Last updated: April 2026
TL;DR – Quick Summary
- Sales tax on POS software varies by state: 17 U.S. states tax SaaS subscriptions, with rates ranging from 2.9% (Wyoming) to 9.55% (Louisiana).
- White-label ISOs are responsible for understanding tax obligations in each state where they deploy, regardless of where the platform is headquartered.
- Compliance failures can result in back taxes, penalties, and merchant relationship damage. Proactive tax management is a competitive advantage.
Why Sales Tax Compliance Matters for White-Label POS ISOs
For ISOs deploying white-label POS software across multiple states, sales tax compliance is one of the most commonly overlooked-and potentially costly-operational responsibilities. Unlike traditional POS resellers who sell physical hardware, white-label SaaS providers may be selling taxable software subscriptions in states where they have no physical presence.
The rules changed significantly in 2018 when the South Dakota v. Wayfair ruling allowed states to impose sales tax collection obligations on out-of-state sellers based on economic activity alone. According to a 2025 Tax Foundation analysis, 17 U.S. states now tax SaaS subscriptions, and ISOs who sell white-label POS software in these states without proper compliance expose themselves to back taxes, interest, and penalties.
States That Tax SaaS Subscriptions
SaaS Tax Landscape for POS ISOs
Key Compliance Obligations for White-Label ISOs
- Register in states where you have economic nexus – Typically triggered by 200 transactions or 100,000 USD in revenue in a state. Registration is required before collecting tax.
- Charge the correct tax rate – Rates vary by state, county, and city. Using automated tax calculation software is essential for accuracy.
- File and remit taxes on time – Filing frequency (monthly, quarterly, annually) depends on revenue volume. Missing deadlines triggers penalties.
- Maintain records for 7+ years – Most states require documentation of tax collected, exemptions claimed, and nexus activities.
- Understand exemption certificates – Some merchants (nonprofits, governments, resellers) may be tax-exempt. Proper documentation is required.
PCI Compliance for POS Resellers
Beyond sales tax, white-label POS ISOs must ensure their platform meets PCI DSS (Payment Card Industry Data Security Standard) requirements. PCI compliance is not optional-it is a requirement for any company handling payment card data. Non-compliance can result in fines of 5,000 to 100,000 USD per month from payment brands, plus liability for fraud losses from breached data.
OrderPin’s white-label platform includes PCI DSS compliance as a standard feature, reducing the compliance burden for ISOs deploying under their own brand.
Frequently Asked Questions
Do white-label POS ISOs need to collect sales tax?
Yes, if the ISO is selling SaaS subscriptions in states that tax digital products. Out of 50 U.S. states, 17 currently tax SaaS subscriptions. If an ISO has economic nexus in a state (typically 200 transactions or 100,000 USD in revenue), they must register with that state’s tax authority and collect the applicable tax.
What happens if an ISO does not comply with sales tax requirements?
Non-compliance can result in three consequences: (1) Back taxes owed with interest-potentially going back several years; (2) Penalties ranging from 5% to 25% of unpaid taxes per period; (3) Loss of merchant trust if discovered after deployment. The financial risk is significant: an ISO with 50 merchants at 100 USD/month in a taxing state could owe 3,000-6,000 USD annually in back taxes if non-compliant.
How does OrderPin handle sales tax and PCI compliance?
OrderPin provides PCI DSS compliance as a standard platform feature, so ISOs deploying white-label solutions are covered under OrderPin’s PCI compliance. For sales tax, OrderPin recommends that ISOs consult with a sales tax specialist or use automated tax calculation tools like Avalara or TaxJar. OrderPin does not provide tax advice, but the platform is designed to integrate with major tax calculation services.
What PCI compliance level do POS ISOs need to meet?
PCI compliance requirements vary by transaction volume. Most white-label POS ISOs fall under Merchant Level 4 (under 20,000 annual transactions), which requires completing an annual SAQ (Self-Assessment Questionnaire) and quarterly network scans. Using a compliant payment processor and tokenized payment gateway significantly simplifies compliance for ISOs and their merchants.
Conclusion
Sales tax and PCI compliance are non-negotiable responsibilities for white-label POS ISOs. With 17 states taxing SaaS subscriptions and PCI penalties reaching 100,000 USD monthly, the cost of non-compliance far exceeds the cost of proper registration and systems setup.
ISOs deploying on OrderPin benefit from built-in PCI compliance as a standard feature. For sales tax, OrderPin recommends working with a qualified tax professional or using automated tax calculation tools to stay compliant in all jurisdictions where you deploy.
About OrderPin
OrderPin’s white-label POS platform includes PCI DSS compliance as standard, reducing your compliance burden as an ISO. Contact our partner team to learn about our compliance features and get started with your white-label POS deployment.
