Nonprofit Compliance Checklist: Annual Requirements You Can't Miss

Tax-exempt status is not permanent. It is maintained through consistent compliance with federal, state, and governance requirements, and it can be revoked automatically when those requirements are not met. Missing the Form 990 filing deadline three years in a row results in automatic revocation of your 501(c)(3) status — no warnings, no appeal, no second chances.

A nonprofit compliance checklist maps every federal, state, and governance requirement your organization must meet each year, ensuring nothing falls through the cracks and your tax-exempt status stays secure. The challenge is that these requirements come from multiple jurisdictions, on different timelines, with different consequences for failure — and in most nonprofits, they live in one person's head rather than in a system.

This guide gives you the full compliance picture, organized by category and month, so that every deadline is visible and owned.

---

Why Compliance Calendars Fail at Most Nonprofits

The typical compliance management approach: a senior staff member, usually the Executive Director or Controller, carries the deadlines in their head or in a personal calendar. They remember to renew the charitable solicitation registration because they have done it for years. They know the 990 is due in November because it always has been. The system works as long as that person is there.

When that person leaves, the institutional knowledge leaves with them. When an organization grows and adds compliance obligations in new states or new federal programs, the informal system does not scale. Deadlines get missed, registrations lapse, and the consequences range from late fees to revocation of the ability to solicit donations in states where you depend on donors.

A compliance calendar makes the system explicit, transferable, and auditable. Every requirement has a due date, an owner, and a status. No single person's memory is the only safeguard.

---

Federal Compliance Requirements

Form 990

The Form 990 is the nonprofit sector's most significant annual filing. It is required for most tax-exempt organizations and is publicly available — meaning your donors, funders, board members, and competitors can read it.

Which form applies:

• Form 990-N (e-Postcard): Organizations with gross receipts under $50,000
• Form 990-EZ: Organizations with gross receipts under $200,000 and total assets under $500,000
• Form 990: Organizations above the EZ threshold
• Form 990-PF: Private foundations (all sizes)

Due date: The 15th day of the fifth month after your fiscal year ends. For calendar-year organizations, that is May 15. Extensions are available via Form 8868 for an additional six months.

The revocation rule: Miss the 990 filing for three consecutive years, and the IRS automatically revokes your tax-exempt status. Reinstatement requires a formal application and applicable fees. Build the 990 filing into your annual calendar at fiscal year close. Allow at least two to three months between your fiscal year end and the deadline for data collection, review, and board approval.

Payroll Tax Compliance

• Form 941 (Employer's Quarterly Federal Tax Return): Due by the last day of the month following each quarter — April 30, July 31, October 31, January 31
• Form 940 (Employer's Annual Federal Unemployment Tax Return): Due January 31
• W-2s and W-3 transmittal: Due to employees and the SSA by January 31
• Federal payroll tax deposits: Due semi-weekly or monthly depending on your deposit schedule

Payroll tax errors are among the IRS's highest enforcement priorities. Penalties for late deposits run from two percent to 15 percent of the unpaid tax. Integrate payroll tax compliance into your monthly close process, not your annual compliance review.

1099 Filing

• Form 1099-NEC: Required for payments of $600 or more to non-employee service providers. Due to recipients January 31 and to the IRS by January 31 (electronically) or February 28 (paper)
• Form 1099-MISC: Required for certain other payments including rents and prizes. Review requirements annually as IRS rules evolve

Maintain a W-9 collection process for all new vendors at onboarding. Chasing W-9s in January is preventable friction.

---

State Compliance Requirements

State requirements are where organizations most commonly have gaps. Most nonprofits are registered in their home state, but many operate in additional states through program activities, online fundraising, or remote staff — and each state with a nexus may have independent requirements.

Annual Corporate Filings

Every nonprofit must file an annual report with the state agency that governs corporations, usually the Secretary of State. Filing fees and due dates vary by state. Many states require the report on the anniversary of incorporation; others set a fixed annual deadline.

Failure to file results in administrative dissolution of the corporate entity. A dissolved corporation cannot enter contracts, employ staff, or operate legally. While reinstatement is usually possible, it requires fees and corrective filings and may disrupt operations.

Charitable Solicitation Registration

Most states require nonprofits to register before soliciting charitable contributions from residents. Registration must be renewed annually in most states. The threshold for registration varies: some states require registration if you solicit any residents; others exempt organizations below a revenue threshold.

As of 2026, more than 40 states have some form of charitable solicitation registration requirement. Online fundraising reaches donors in every state, and many state attorneys general have taken the position that a donation page accessible by residents constitutes solicitation in that state. Organizations relying on online giving should conduct a formal state registration analysis.

State Income Tax Exemptions

State income tax exemption does not automatically follow from federal 501(c)(3) status. Many states require a separate application. Review whether your state and any states where you operate require separate applications, and whether those exemptions expire or require periodic renewal.

State Employment Taxes

States have independent unemployment insurance, disability insurance, and workers' compensation requirements. Multi-state organizations must register with each state's workforce agency and pay applicable taxes. Remote workers create nexus in their home states even when the organization has no physical office there.

---

Governance and Internal Compliance Requirements

Board Meetings and Minutes

Most nonprofit bylaws require a minimum number of board meetings per year. Minutes must be prepared and approved at each meeting. Audit committees (required for organizations above certain revenue thresholds in some states) must meet separately from the full board.

Keep a rolling calendar of board and committee meetings with designated minute-takers and a defined approval process. Board minutes are reviewed by auditors and by state charity regulators. Gaps in the meeting record are a governance finding.

Conflict of Interest Policy and Annual Disclosures

IRS Form 990 asks directly whether your organization has a conflict of interest policy (Part VI, Line 12a), whether that policy is annually monitored (12b), and whether potential conflicts are disclosed (12c). Answering "no" to these questions raises a red flag with regulators and sophisticated funders.

Best practice: distribute the conflict of interest disclosure form to all board members, officers, and key employees annually. Collect signed disclosures before each board year begins. File completed disclosures with board records.

Whistleblower Policy

Form 990 asks whether you have a whistleblower protection policy (Part VI, Line 13). A written policy that prohibits retaliation against staff who report suspected legal violations is a governance best practice and a funder expectation for most institutional grants.

Document Retention Policy

Form 990 asks whether you have a written document retention and destruction policy (Part VI, Line 14). The policy should specify retention periods by document type — financial records, board minutes, contracts, grant records, personnel files — and the process for approved destruction.

Executive Compensation Review

The IRS requires that executive compensation be reasonable and determined through a process that satisfies the rebuttable presumption of reasonableness: independent board approval, comparability data from similar organizations, and contemporaneous documentation. Conduct this review annually and document it in board minutes.

---

The Annual Compliance Calendar

January

• W-2s and W-3 transmittal due (January 31)
• Form 1099-NEC due to recipients and IRS (January 31)
• Form 940 due (January 31)
• Annual conflict of interest disclosure collection
• Begin Q1 charitable solicitation renewals

February

• Board approval of budget (for calendar-year organizations)
• Executive compensation review and board documentation

March

• Audit fieldwork (typical for calendar-year organizations)
• Board review of draft financial statements

April

• Form 941 for Q1 due (April 30)
• Review state annual report deadlines
• Audit committee meeting

May

• Form 990 due for calendar-year organizations (May 15, or file Form 8868 extension)
• Mid-year review of federal grant compliance and Single Audit threshold tracking

July

• Form 941 for Q2 due (July 31)
• Mid-year board meeting (if applicable)

August

• Review extended 990 status if extension was filed (extended deadline November 15)
• Q3 charitable solicitation renewals

October

• Form 941 for Q3 due (October 31)
• Board review of year-end close plan
• Begin gathering audit documentation

November

• Extended Form 990 deadline (November 15 for calendar-year organizations on extension)
• Complete audit preparation checklist

December

• Fiscal year-end close procedures
• Year-end compliance review: confirm all state registrations current and all governance documents on file
• Board approval of any policy updates

---

Where Compliance Documentation Breaks Down

Compliance documentation is not the same as compliance. An organization can have a conflict of interest policy and never distribute it. It can have a document retention schedule and never apply it. The gap between policy and practice is where regulatory risk lives.

The documentation challenge is that compliance activities happen on different timelines, owned by different people, and generate documents that need to be retained and accessible to regulators and auditors years later. When these documents are managed informally — in email, on personal drives, in file cabinets — the audit trail that demonstrates compliance does not exist in a form that is useful under scrutiny.

The Audit Trail in sherbertOSOS captures every transaction, approval, and system action with timestamps and user attribution. Financial compliance documentation — records that demonstrate how grant funds were spent, how allocations were calculated, how restricted funds were tracked — is always current and always retrievable. When a state charity regulator or federal auditor asks for documentation of how restricted funds were managed, the answer is a report, not a document search.

For organizations approaching the federal Single Audit threshold, see Single Audit (Uniform Guidance): What Nonprofits Must Know. For the financial compliance documentation an audit requires, see Nonprofit Audit Preparation: The Complete Checklist.

---

Frequently Asked Questions

What happens if a nonprofit misses the Form 990 deadline?

Missing three consecutive years of Form 990 filing results in automatic revocation of tax-exempt status. A single late filing triggers a penalty of $20 per day, capped at $10,000 or more for larger organizations. File on time, or file an extension on time.

Do nonprofits need to file state reports too?

Yes. Most states require annual corporate filings, and states where you solicit donations require charitable solicitation registration renewals. Organizations with remote staff or online fundraising may have compliance obligations in multiple states even without a physical office there.

What governance documents should be reviewed annually?

Conflict of interest policy and signed disclosures from all board members and officers, whistleblower policy, document retention policy, executive compensation review and board minutes documenting the approval process, and any state-specific governance requirements.

How do we track charitable solicitation registration requirements across multiple states?

A state registration tracking spreadsheet or a compliance management service — many law firms and CPAs offer annual registration services — is the baseline approach. The key is knowing which states require registration, when renewals are due, and whether your activities in each state meet the threshold for registration.

What is the penalty for operating with a lapsed charitable solicitation registration?

Penalties vary by state but can include fines, required remediation, and cease-and-desist orders. Some state charity bureaus publish lists of organizations with lapsed registrations. Operating without a required registration creates legal exposure and undermines donor trust.

Can a nonprofit lose its tax-exempt status for reasons other than filing failures?

Yes. Private benefit, inurement (profits flowing to insiders), excessive lobbying, any political campaign activity, and operating in a manner inconsistent with exempt purposes can all trigger revocation. The Form 990 is the primary tool the IRS uses to monitor these risks.

---

The Bottom Line

Nonprofit compliance is not a single annual task. It is a continuous process with quarterly, monthly, and annual touchpoints across federal, state, and governance requirements. The organizations that manage it well treat it as a system, with assigned owners, documented deadlines, and formal confirmation that each item is complete.

The organizations that get into trouble are not usually the ones with bad intentions. They are the ones who relied on one person's knowledge and lost it when that person left, or who grew faster than their compliance infrastructure kept pace.

sherbertOSOS supports compliance management through its Audit Trail, reporting suite, and documentation infrastructure, ensuring that your financial compliance records are always current and accessible when regulators ask.

→ Download the sherbertOSOS compliance calendar template and start managing your annual requirements systematically.