Rankd Tax Exemption Certificates for WooCommerce

Free is trust-based: mark a role as tax-exempt and every member of that role is exempted immediately, no evidence required. Pro adds a certificate-backed compliance layer — role members aren't exempted until there's an approved certificate on file covering the order's jurisdiction, or a recorded override accepting the risk. Individual users can always be excluded via the Never Exempt override regardless of tier.

Usually not — this plugin is designed to defer to exemptions granted by other systems rather than override them. It can conflict with plugins that write directly to the WooCommerce customer session object instead of using the standard woocommerce_customer_is_vat_exempt filter. See the Plugin Compatibility section below if a customer's exemption isn't applying correctly.

Deactivating never touches your data. Deleting the plugin also leaves all data in place by default — certificates, overrides, settings, and the audit log are only removed if you explicitly opt in via the "Remove Data on Uninstall" setting before deleting.

Configurable at WooCommerce → Settings → Tax Exempt Certs → Who Can Manage Exemptions. Administrator is always included and can't be removed. Roles left out of that setting still get read-only access to certificate and status information, but can't make changes.

Yes.

A scheduled daily check automatically expires certificates past their expiry date and removes the customer's exemption. If Expiry Warning is configured, a reminder email goes out X days beforehand, and the customer sees a prefilled renewal form in My Account. A configurable grace period can keep exemption active while a renewal is under review.

Yes (Pro) — certificates are jurisdiction-specific, and a customer can hold multiple certificates covering different states, provinces, or countries. Exemption is applied only when the order's destination matches an approved certificate's jurisdiction.

In a protected directory outside direct web access (via .htaccess on Apache, with an Nginx compatibility notice shown if detected), served only through a permission-checked download handler — never a public URL.