Nonprofit Compliance Checklist: Post-Incorporation Requirements (2026)

Receiving your 501(c)(3) status is just the beginning of your nonprofit journey. The hard part is what comes next: a fragmented stack of federal, state, and local rules that no single agency owns. The IRS owns one piece. Your Secretary of State owns another. Your state attorney general's charity bureau owns a third. And the internet piles on "best practices" with no way to tell which are required and which are optional.

This guide is the calm version. It is organized by timeline (first 30 days, first 90 days, annual) and every item is tagged so you can triage:

• ✅ Required by federal law

• ⚠️ Required in some states (with the lookup link)

• 💡 Board best practice (not legally required, but worth it)

Most of this you can handle yourself in your first year without hiring a lawyer. What you need is the actual minimum, in the right order, with the exact forms and filing links. That is what is below.

‍

Table of contents

• What is post-incorporation compliance, and why does it feel impossible?

• Immediate post-incorporation actions (first 30 days)

• First 90 days: state registration requirements (initial filings)

• Charitable solicitation registration: do you need to register?

• Federal tax compliance: Form 990 requirements

• Annual state compliance requirements (recurring filings)

• Corporate governance: ongoing requirements

• Record-keeping requirements

• Employment and contractor compliance

• Insurance requirements for nonprofits

• Special permits and activity-specific compliance

• Nonprofit compliance calendar: your annual checklist

• How Zeffy helps with donation record-keeping

‍

What is post-incorporation compliance, and why does it feel impossible?

Post-incorporation compliance is everything you have to do after your nonprofit is legally formed and (usually) after the IRS grants 501(c)(3) status. It is not one checklist. It is several, owned by different agencies, each on its own schedule.

It feels impossible because it actually is fragmented. The IRS handles your federal tax-exempt status (Form 990, EIN, public-disclosure rules). Your Secretary of State handles your corporate existence (annual report, registered agent). Your state attorney general's charity bureau handles fundraising (charitable solicitation registration). State and local agencies handle activity-specific permits (raffles, alcohol, food). Nothing tells you which of these you actually need.

The consequences of getting it wrong are real:

• Automatic loss of tax-exempt status. If you fail to file the required Form 990 series for three consecutive years, your organization will automatically lose its tax-exempt status. That is set in statute under IRC 6033(j), and getting reinstated is a paperwork and fee burden you do not want.

• Personal liability for board members if governance is sloppy enough to pierce the corporate veil.

• Inability to accept tax-deductible donations while your status is revoked.

• State penalties and fines for missed registrations or annual reports.

For a small nonprofit: the goal is not to do everything on day one. The goal is to triage federal items first, state-of-incorporation items second, charitable solicitation third, and governance hygiene as you go. The rest of this guide is in that order.

‍

Immediate post-incorporation actions (first 30 days)

These are the items that should be done shortly after your articles of incorporation are filed. Most can happen in a single organizational board meeting.

‍

1. Hold your organizational board meeting ✅

Your first board meeting establishes the corporate record. Hold it as soon as possible after incorporation. At a minimum, document these decisions in the meeting minutes:

• Adopt the bylaws

• Elect officers (president, treasurer, secretary at minimum)

• Adopt a conflict-of-interest policy (the IRS expects to see this and asks about it on Form 1023)

• Authorize opening a bank account, and name the signers

• Set the fiscal year

• Approve initial budget and any startup contracts

‍

2. Apply for your EIN (Employer Identification Number) ✅

Your EIN is the federal tax ID for your organization. It is similar to a Social Security number, but for a business or nonprofit. You will need it to open a bank account, file Form 1023 (if you have not already), and file your 990 each year. Apply on the IRS EIN application page for free. It takes about 15 minutes online.

One common confusion: EIN, TIN, and "Tax ID" often refer to the same number for a nonprofit. The bank will ask for your EIN. That is the same number the IRS uses to track you.

‍

3. Open a dedicated bank account ✅

Open a separate business or nonprofit bank account. Bring your articles of incorporation, EIN letter, bylaws, and the board resolution authorizing the account. Never mix personal and nonprofit funds, even temporarily. Commingling is a fast track to losing tax-exempt status and personal-liability exposure.

‍

4. Set up basic accounting and donation tracking ✅

You need a record of every dollar in and out from day one. A basic chart of accounts in Wave, QuickBooks, or even a structured spreadsheet is enough at the start. The point is that you can produce a financial picture for your board and for Form 990 later.

If you plan to fundraise online right away, a newly incorporated 501(c)(3) can start accepting tax-deductible gifts on day one with free donation forms.

For a small nonprofit: if you do nothing else in your first 30 days, do the board meeting (with documented minutes), the EIN, and the bank account. Those three unlock everything else.

‍

First 90 days: state registration requirements (initial filings)

Within roughly your first 90 days, you will need to handle one-time initial filings with your state. These are different from the recurring annual filings covered later. Below are the top 10 states by nonprofit population, with the initial post-incorporation requirements. Fees and deadlines change. Confirm against each state's official site before you file.

‍

‍

If your state is not above, find your Secretary of State at nass.org and your state AG charity bureau through the National Association of State Charity Officials (NASCO) directory.

For a small nonprofit: the only initial filings you cannot skip are the one in your state of incorporation and registration in any state where you actively ask residents for money. Everything else can wait until you actually fundraise there.

‍

Charitable solicitation registration: do you need to register?

Most states require nonprofits to register with the state before soliciting donations from residents. The IRS describes the landscape as approximately 40 states with some form of charitable solicitation registration (see the IRS Charitable Solicitation - State Requirements page). Credible secondary trackers (Affinity Registration and Cogency Global) put the count at 38 to 41 depending on how exemptions and partial-requirement states are counted. ⚠️ Required in some states.

‍

States with no general charitable solicitation registration requirement

Based on the Affinity Registration / Cogency Global tracker (source), these 10 states have no general charitable solicitation registration requirement for most nonprofits:

• Delaware

• Idaho

• Indiana

• Iowa

• Montana

• Nebraska

• South Dakota

• Utah

• Vermont

• Wyoming

Texas has no general charitable solicitation registration requirement, but it does have narrow requirements for law enforcement, public safety, and veterans organizations soliciting in Texas. If your organization is in one of those categories, do not assume Texas is fully exempt.

Every other state has some form of registration requirement. State requirements change. Confirm against your state AG site before relying on this.

‍

The Unified Registration Statement (URS)

If you solicit in many states, the Unified Registration Statement is a single form accepted by most (but not all) registration states as the initial filing. It does not eliminate state-specific renewal forms or fees, but it can cut the first-time paperwork meaningfully. The Multistate Filer Project publishes the current URS and the list of participating states.

‍

Online fundraising can trigger multi-state requirements

A widely cited interpretation among state regulators (the "Charleston Principles") is that if you actively target donors in a state (run ads there, send appeals to residents there, accept recurring gifts from residents there), you may need to register there. Passive presence on the internet alone usually does not trigger registration in every state, but the line is murky. If you run paid acquisition or targeted email outside your home state, talk to a nonprofit attorney about your registration footprint.

For a small nonprofit: register in your home state first. Add states only as you actively solicit there. Do not try to register in all 40 on day one. It is expensive and most small orgs do not need it.

‍

Federal tax compliance: Form 990 requirements

Every 501(c)(3) (with very narrow exceptions like churches) has to file an annual return in the Form 990 series. The IRS provides three versions based on size.

‍

Which Form 990 do you file? ✅

‍

Sources: IRS 990-N FAQ and Form 990-EZ instructions.

If your revenue crosses a threshold mid-year, you file based on the year-end numbers. If you filed the wrong version, you can submit an amended return on the correct form.

‍

When is Form 990 due? ✅

The 15th day of the 5th month after your fiscal year ends. For a calendar-year nonprofit, that is May 15. If May 15 falls on a weekend or holiday, the deadline moves to the next business day.

Need more time? File Form 8868 on or before the due date to get an automatic 6-month extension. The extension is only for filing the form, not for any tax that might be owed (rare for a 501(c)(3), but it happens with UBIT).

‍

The 3-year automatic revocation rule ✅

If you fail to file these forms for three consecutive years, your organization will automatically lose its tax-exempt status. There is no warning letter that says "you have one year left." The IRS publishes the Automatic Revocation of Exemption List and your name lands on it the day after the third missed deadline.

‍

Donor acknowledgments and the $250 rule ✅

For any single contribution of $250 or more, the donor must obtain a written acknowledgment from your organization before they file their tax return to claim a deduction. The acknowledgment must include the amount, a description of any goods or services provided in return, and a good-faith estimate of the value of those goods or services (or a statement that none were provided). See IRS Publication 1771 for the full rule.

‍

‍

Public-disclosure requirements ✅

Your Form 990 (except Schedule B donor names for most filers) is a public document. You must make the last three years' returns available for public inspection on request and provide copies at reasonable cost. Posting them on your website satisfies most requests automatically.

For a small nonprofit: a 990-N takes about 10 minutes once a year. If you are 990-N eligible, do it yourself. If you are above the threshold, hire a CPA who works with nonprofits, even just for one year, to set up the structure.

‍

Annual state compliance requirements (recurring filings)

These are the filings that come around every year (or every other year) after the initial post-incorporation filings above. Same 10 states, scoped to recurring obligations.

‍

‍

Verify each state's current fee and deadline on the official portal before you file. Tiered schedules and online-filing surcharges are common and change without much warning.

For a small nonprofit: set calendar reminders for two dates: your federal 990 due date (15th day of 5th month after FY end), and your state's main annual charity renewal. Those two together cover most of your recurring exposure.

‍

Corporate governance: ongoing requirements

Governance is the part where federal vs state vs best-practice gets confusing fast. Here is the honest breakdown.

‍

Annual board meeting ✅ / ⚠️

Most state nonprofit corporation acts require at least one annual board meeting. Some require an annual members meeting too, if your organization has voting members. Document attendance and decisions in minutes. This is not optional even though no one will write you a ticket for skipping it.

‍

Maintain current bylaws 💡

Review your bylaws every 2 to 3 years and after any structural change (adding voting members, restructuring the board, changing officer roles). Outdated bylaws are the number-one source of internal disputes that escalate into legal cost.

A common landmine: if your articles of incorporation say "no members" but your bylaws describe voting members, those documents conflict. The articles usually win, which can mean the "votes" your bylaws describe are not actually binding. If yours conflict, check your Secretary of State's guidance and talk to a nonprofit attorney to amend one or the other. Do not paper over it.

‍

Conflict-of-interest policy and annual disclosure ⚠️

The IRS asks about your conflict-of-interest policy on Form 990 every year. Some state AG charity bureaus require you to maintain one. The minimum: a written policy, annual written disclosure from every board member and officer, and minuted recusals when a conflict exists.

‍

Board term limits and succession 💡

Term limits are governance hygiene, not legal requirement (with rare exceptions). Two-year terms with a max of two or three consecutive terms is a common pattern that keeps the board fresh without losing institutional memory.

‍

Registered agent ✅

Every state requires a registered agent on file (an individual or service that accepts legal mail). If your agent's address changes, file an update with the Secretary of State immediately. A missed legal notice because of an outdated agent can mean default judgments and lost lawsuits.

For a small nonprofit: annual board meeting, current bylaws, annual conflict-of-interest disclosure, and a current registered agent. Four things. Do them, document them, move on.

‍

Record-keeping requirements

The IRS expects you to maintain books and records sufficient to substantiate your tax filings and your tax-exempt purpose. Retention guidance follows.

‍

Retention periods

‍

Donation records specifically need to live somewhere you can search. If you collect gifts online, a free donor management dashboard stores donation history, receipts, and offline gifts in one place so the 7-year donor-record requirement does not become 7 years of spreadsheet archaeology.

For a small nonprofit: a folder structure (cloud plus local backup), a 7-year shred-or-archive rule for financial records, and a tool that holds donation history is enough. Do not over-engineer this.

‍

Employment and contractor compliance

This is the section that most often surprises new nonprofits and where misclassification is a top audit trigger. ⚠️ Required in every state, with state-by-state variation.

‍

Employee vs independent contractor classification

The IRS uses a common-law test with three categories of factors. See IRS Publication 15-A for current guidance:

• Behavioral control: who controls how the work is done? An employer-style relationship sets hours, methods, and supervises closely.

• Financial control: who controls the business side? Contractors typically invest in their own tools, can profit or lose on the engagement, and offer services to other clients.

• Relationship of the parties: what does the written agreement say? Are there benefits (health, retirement, paid leave)? Is the relationship ongoing or project-bounded?

States may apply stricter tests on top of the IRS test. California's ABC test, for example, makes contractor classification much harder. Misclassifying an employee as a contractor exposes you to back payroll taxes, penalties, and possible wage-and-hour claims.

‍

If you have employees ✅

• Register for federal and state payroll tax accounts

• Issue W-2s by January 31 of the following year

• Pay federal payroll taxes (Social Security, Medicare, federal unemployment)

• Pay state payroll taxes (state unemployment, state income tax withholding)

• Workers compensation insurance (required in most states once you have any employee)

‍

If you have contractors ✅

• Collect a Form W-9 from every contractor

• Issue Form 1099-NEC by January 31 of the following year to any contractor paid $600 or more

• Keep written agreements that reflect the actual working relationship

Edge cases (a board member who also provides paid services, a stipended volunteer, a part-time program coordinator) are exactly where misclassification audits start. Talk to a nonprofit attorney or CPA before you make these calls.

For a small nonprofit: if you have anyone other than volunteers, get classification right from day one. The cost of fixing it later is always higher than the cost of asking once now.

‍

Insurance requirements for nonprofits

Insurance is the part most new nonprofits underfund until something goes wrong. The four types worth knowing:

‍

Directors and Officers (D&O) liability insurance 💡

Protects board members personally from claims arising from their service on the board. Especially important if you want to recruit volunteer board members who are not independently wealthy. Many prospective board members will ask if you carry it before agreeing to serve.

‍

General liability insurance 💡

Covers third-party bodily injury or property damage (someone trips at your event, a volunteer damages a venue). Usually required by venues that host your events.

‍

Property insurance 💡

If you own or rent space, equipment, or significant inventory, this covers loss from fire, theft, or damage.

‍

Event insurance / special event liability ⚠️

Often required by venues or municipalities for fundraisers, festivals, races, or any event open to the public. Frequently includes liquor liability if alcohol is served.

Cost varies widely by state, organization size, and risk profile. The Nonprofit Risk Management Center is the standard noncommercial resource for nonprofit-specific insurance questions and can point you to brokers who specialize in 501(c)(3) coverage.

For a small nonprofit: D&O first (you need board members; this protects them), then general liability (covers you at events), then event-specific coverage as you scale. Skipping all of it is one bad incident away from being a board-resignation event.

‍

Special permits and activity-specific compliance

If your nonprofit does any of the activities below, you may need a permit on top of your standard registrations. ⚠️ Required in some states.

• Raffles and gaming. Most states regulate charitable gaming. Some require a specific license per event, some require an annual permit, and a few prohibit raffles entirely. Check with your state attorney general or gaming commission.

• Bingo. Where allowed, bingo usually requires a separate license with its own reporting requirements.

• Alcohol at fundraising events. A one-time event permit from your state ABC (alcohol beverage control) board is usually required, and the venue's existing liquor license may or may not cover a fundraiser.

• Food handling at events. Local health departments may require permits for food prepared and served at public events, including potlucks at some scales.

• Auctions. A few states regulate charitable auctions, especially if you take a percentage cut or auction off items of significant value.

Where to look: your state attorney general's charity bureau and your local city/county clerk. For each event with any of the above, plan the permit timeline backward from the event date. Some permits require 30 to 60 days lead time.

For a small nonprofit: if you are running a fundraiser with alcohol or gaming, check permits first, book the venue second. Reversing that order is how events get canceled.

‍

Nonprofit compliance calendar: your annual checklist

Once you are past the first-year hump, compliance becomes a recurring rhythm. Here is a quarter-by-quarter pattern for a calendar-year nonprofit. If your fiscal year is different, shift the dates accordingly.

‍

Q1 (January to March)

• Issue W-2s and 1099-NECs by January 31

• Hold annual board meeting (if not already done)

• Annual conflict-of-interest disclosures from every board member and officer

• Begin Form 990 preparation; gather financials and program data

• Review bylaws if it has been 2 or more years since the last review

‍

Q2 (April to June)

• File Form 990 by May 15 (calendar-year filers) or file Form 8868 for the 6-month extension

• File state annual reports and charity renewals that follow the 4-month-15-day pattern

• Renew charitable solicitation registrations approaching expiration

• Confirm state tax exemption renewals where required

‍

Q3 (July to September)

• Mid-year financial review with your treasurer

• Update donor records and clean up any duplicate or stale records

• Confirm registered agent information is current in every state where you are registered

• Plan year-end campaign and confirm all event permits

‍

Q4 (October to December)

• Year-end giving campaigns

• Prepare year-end donor acknowledgments (especially the $250 or more rule)

• Review annual report draft for board approval

• Confirm insurance renewals (D&O, general liability, event-specific)

• Begin next year's budget

For a small nonprofit: put four dates on the calendar: January 31 (W-2/1099), May 15 (federal 990), your state's main charity renewal, and your insurance renewal. Everything else fits around those.

‍

How Zeffy helps with donation record-keeping

Compliance is a legal question, not a software question. What Zeffy does is automate the donation-receipt and donation-record-keeping slice of compliance, which is the slice most often skipped or done badly at small orgs.

• Automatic IRS-compliant donation receipts issued at the moment of every gift, with all the substantiation details required for the $250 or more acknowledgment rule.

• Complete donation transaction history in one dashboard, including online gifts, offline gifts you enter manually, and recurring donations, so the 7-year donor-record retention guidance is automatic instead of a spreadsheet project.

• Year-end giving summaries you can send to donors for their tax filing.

Zeffy keeps a complete record of every donation and issues automatic tax receipts. 100K+ nonprofits use Zeffy and $2B+ has been raised on the platform. No platform fee, no transaction fee, no credit card fee. Ever.

Compliance is not just about checking boxes. It is your bridge to sustainable growth. Get the donation-record-keeping piece automated, and you free up the hours that would have gone into receipts and spreadsheets to spend on the parts of compliance that actually require human judgment.

‍

‍

‍

‍

‍

‍

‍

This guide is informational and is not legal, tax, or accounting advice. State requirements change, so verify with the official regulator (the IRS, your Secretary of State, or your state attorney general's charity bureau) before you file, and talk to a nonprofit attorney or CPA for anything outside the basics.