The One Rule: Work Location Drives Obligation

Payroll follows where work is performed, not where HQ sits. One remote hire can create three accounts: withholding, unemployment, and new-hire reporting.

Pair this with Payroll Tax Guide, 1099 vs W-2, and Compliance Checklist.

Nexus Triggers Checklist

  • Employee home, coworking, or travel days in state
  • Officer/director services performed there
  • Warehouse, inventory, or sales activity — also see SALT Planning and SaaS Sales Tax
  • Contractor conversion creating de facto employment

Registration Sequence (Per New State)

  1. Confirm work locations by payroll register, not HR memory.
  2. Apply for withholding + unemployment IDs; allow 2-4 weeks.
  3. Configure payroll provider for state + locality codes before first run.
  4. File new-hire reports within deadline.
  5. Add state returns to close calendar — see Month-End Close.

Reciprocity and Local Traps

Reciprocal agreements (e.g., DC/MD/VA, IL neighboring states) change withholding but not unemployment. Local taxes — Ohio RITA, Pennsylvania PSD codes, New York City — still require separate setup. Do not assume provider defaults are correct.

Controls That Prevent Penalties

Control How Evidence
Location tracking Time system or attested work-location by period Payroll preview vs location report
Registration log State, IDs, effective dates, owner Screenshot + approval
Clearing rec Payroll clearing zero monthly Signed rec
Return tie-out Returns = GL = bank Return + GL + bank packet

Enforce role separation per QuickBooks vs Xero Controls and review access quarterly.

Expansion Playbook

  • Pre-hire check: registration lead time, UI rates, local filings.
  • Offer letters state work location and update duty.
  • First payroll blocked until IDs or compliant interim procedure with counsel.
  • Quarterly nexus sweep: new addresses, travel logs, EOR coverage — see International Payroll EOR.

Worked Example: The $45k Remote-Hire Surprise

Austin HQ hires a senior engineer working from Denver, $185k salary, starting March 1. Nothing registered in Colorado until a November payroll review:

Exposure Math Amount
Unwithheld Colorado tax (8 months) Employer liability for failure-to-withhold ~$6,800 + interest
Unemployment (unregistered account) Back contributions + late penalties ~$1,200 + penalties
Workers comp gap No Colorado policy for 8 months Retroactive premium + fine
New-hire reporting 20-day deadline missed by months Per-employee penalty
Total   ~$10k+ before counsel time

Versus $0 if registered in February for ~$100 filing + 3 hours. The quarterly nexus sweep (addresses, travel logs, EOR coverage) exists precisely to catch March hires before they become November findings — see Internal Audit sampling and Payroll Year-End tie-outs.

Local Tax Traps (The Ones Providers Miss)

Locality Trap Fix
Ohio cities + RITA Dozens of municipal rates; work city ≠ home city RITA registration per work city; verify withholding tables quarterly
Pennsylvania PSD codes for every work/home combo; LST per locality PSD lookup on every address change, not annually
New York City / Yonkers City surcharges on top of state NYC/Yonkers codes in payroll before first city paycheck
Philadelphia Wage tax for work performed in city, including nonresidents Day-count tracking for hybrid workers
San Francisco, Denver, others Gross-receipts / headcount taxes beyond payroll Confirm business-tax registration, not just withholding

Payroll-provider “auto-setup” handles the common cases and misses the local ones — validate locality codes against pay-statement geography every quarter, not against the provider’s defaults. Local failures surface in Workers Comp Audits and state reviews, never helpfully in advance.

Voluntary Disclosure vs Audit Discovery

Found an unregistered state with 2 years of payroll? Two paths:

  1. VDA (you come forward): limited lookback (often 3–4 years vs unlimited), penalty waiver or reduction, no audit of other periods as a matter of course. Requires: stop the bleeding (register now), quantify precisely (payroll by state by period from registers, not estimates), and go through counsel where privilege matters.
  2. Wait for discovery: full lookback, full penalties plus interest, expanded audit scope (nexus questionnaire leads to income-tax and sales-tax questions — see SALT and SaaS Nexus), and workers-comp and 1099 issues surface in the same review.

VDAs take weeks; discoveries take quarters and cost multiples. Calendar the decision with counsel this month, not next quarter — every additional payroll deepens the liability in both paths.

FAQ

Can an EOR avoid registration?

An EOR can be employer of record, but you still need contract, cost, and control review. Misusing EOR for core-team management creates co-employment risk.

How do we catch drift?

Monthly payroll-location vs HRIS vs expense-report cross-check; quarterly Internal Audit sample.

Next Steps

  1. Pull last 3 payroll registers and list every work state.
  2. Reconcile to registration log; close gaps via VDA where needed.
  3. Lock state calendar into Q1 planning — see Tax Filing Deadlines.