The Compliance Questions Nonprofits Should Ask Before Expanding

SPEAKER_00 (0:00): Welcome to the Nonprofit Compliance Brief, where we explain charitable solicitation and multi-state fundraising requirements in clear, practical terms for nonprofit leaders and finance teams. This podcast is produced by Ironwood Registrations.

SPEAKER_01 (0:14): Glad to be diving into this one.

SPEAKER_00 (0:15): Yeah, so today we’re doing a deep dive into what most nonprofit leaders would probably consider a really good problem to have.

SPEAKER_01 (0:23): Right. Growth.

SPEAKER_00 (0:25): Exactly. But looking at the materials for today’s deep dive, it seems like this particular “good problem” is actually one of the most dangerous phases in an organization’s whole life cycle. I’ve been calling it the Growth Paradox.

SPEAKER_01 (0:38): The Growth Paradox—I like that. It sounds a bit dramatic, but in our world, it’s actually incredibly accurate. It’s a paradox because every Executive Director or Development Director wakes up wanting to expand. That’s literally the job description. You want to reach more people, launch a new program, double the donor file. But—and here is where it gets super sticky—the moment you actually start doing that, you introduce these invisible friction points.

SPEAKER_00 (1:03): Yeah. And the scary part is you usually don’t feel that friction until the machinery literally starts smoking. It’s like you want to drive the car at 100 miles an hour, but you’re still driving on tires rated for a school zone.

SPEAKER_01 (1:19): That is a perfect analogy. We aren’t just talking about doing some extra paperwork. We’re talking about whether your operational systems can actually hold the weight of your ambition. If you grow the mission without growing the compliance infrastructure to support it, you risk derailing the entire thing.

SPEAKER_00 (1:53): Let’s start with the definition of expansion. I still have this very 20th-century image in my head—a ribbon-cutting ceremony, bricks and mortar, a new sign on a building.

SPEAKER_01 (2:17): And that is the classic trap. Honestly, if you wait until you’re cutting a ribbon to think about your compliance, you are already six months behind. Expansion today is a lot subtler and usually entirely digital. It isn’t about where your feet are; it’s about where your voice is. Are you actively asking people who live in a new state for money? That is expansion.

SPEAKER_00 (2:44): Okay, but hold on. Let’s say I’m in Ohio and I partner with a group in Kentucky for a joint project. We aren’t merging. I haven’t moved my staff. Have I expanded?

SPEAKER_01 (2:56): You absolutely have. Structurally and legally, you’ve expanded your footprint. You are now operating or soliciting across state lines. The same goes for increasing online outreach, like a targeted Facebook ad campaign. You have triggered a whole new set of regulatory expectations without ever leaving your desk.

SPEAKER_00 (3:21): That feels like a bit of a “gotcha” because to me, it’s just marketing.

SPEAKER_01 (3:29): Right. To you, it’s just marketing. To a state regulator, it’s active solicitation. That distinction right there is where people get into so much trouble.

SPEAKER_00 (3:45): Which brings us to the geography of all this. Does putting a “Donate Now” button on my website mean I’m instantly expanding to all 50 states? If the answer is yes, then literally every small nonprofit is breaking the law right now.

SPEAKER_01 (4:18): That is the million-dollar question. Thankfully, the answer is no, but with a massive asterisk. We rely on something called the Charleston Principles for this.

SPEAKER_01 (4:33): It’s a framework that tries to distinguish between passive and active solicitation on the internet. If you just have a generic donate button and someone from Oregon happens to stumble across it and gives you 50 bucks, that is generally considered passive. You aren’t required to register in Oregon just for that one random donation.

SPEAKER_00 (4:59): That is a huge relief.

SPEAKER_01 (5:03): But—here’s the Growth Paradox rearing its head—you aren’t just going to sit around. You’re going to email them. Let’s say you send a “Save the Whales” blast to 500 people located in Florida, or you geotarget an ad to Atlanta. You have now moved from passive to active. You are reaching into their state and asking their citizens for money. Legally, you need to be registered.

SPEAKER_00 (6:10): So the checklist for leadership can’t just be “Who do we want to reach?” It has to be “Where are these donors physically located and are we soliciting them actively?” You have to treat your donor list like a map rather than just a spreadsheet.

SPEAKER_01 (6:51): Exactly. Now we move to the Operational Stress Test. This is the moment where the “sticky note system” finally comes to die.

SPEAKER_00 (7:14): It works fine when you are local—one registration, one sticky note.

SPEAKER_01 (7:30): But now you’re soliciting in 15 states. You have deadlines in May, November, and December. Some are based on fiscal year, some on calendar year. Some require wet signatures, some use portals. The system collapses. You usually don’t know it failed until you get a certified letter from the Attorney General of Pennsylvania telling you that you’re late and you owe fines.

SPEAKER_00 (8:09): Fines are annoying, but the bigger issue is the Reporting Surprise.

SPEAKER_01 (8:22): Yes. Expansion changes your financial reporting tier. Most states use a tiered system based on revenue. If you raise under a certain amount, you file a simple report. If you hit a certain ceiling—and that ceiling varies wildly state to state—you might be legally required to have a full independent audit done.

SPEAKER_00 (8:53): What is the real-world difference between a CPA review and a full audit?

SPEAKER_01 (9:02): Oh, about $10,000 to $20,000. And months of grueling work. If you expand and raise a million dollars, you might have accidentally triggered a mandatory audit requirement you never budgeted for. You pop the champagne for the revenue win but fail to budget for the compliance cost.

SPEAKER_00 (10:18): This brings us to the Board of Directors. In many orgs, they just look at the growth chart and say, “Great job, let’s get lunch.”

SPEAKER_01 (10:39): That default mode is dangerous. The board has a fiduciary duty to oversee this. They need to ask:

1. Do we have the internal capacity to manage compliance in five new jurisdictions?
2. Does this move trigger an audit requirement?
3. Who is the specific person named on the registration documents?

SPEAKER_00 (11:39): That “Who” question seems vital.

SPEAKER_01 (11:42): It is the most important one. We call it the Bystander Effect of Compliance. When you’re small, Susan the office manager handles everything. When you get bigger, you have a CFO, a controller, and outside counsel. If the CFO thinks legal is doing it, and legal thinks development is doing it, the deadline passes and it isn’t done. You need a specific name, not a department.

SPEAKER_00 (12:40): There’s also a natural tension with Marketing. They are paid to be loud and fast; compliance is paid to be cautious and slow.

SPEAKER_01 (13:09): In a multi-state environment, that alignment is non-negotiable. Marketing might put out a brochure saying, “We are launching a nationwide initiative to end hunger,” but your official articles of incorporation state you are a “local food bank serving three counties in Ohio.” That looks like fraud to a state regulator. Your public description must match what you are telling the IRS and state regulators.

SPEAKER_00 (14:09): And marketing wants to launch yesterday.

SPEAKER_01 (14:18): Getting registered in a new state can take weeks or months. If you launch a campaign on November 1st but didn’t mail the paperwork until October 15th, you aren’t legal when the donations hit. “The Postal Service was slow” is not a legal defense. You have to use Strategic Pacing. Don’t drive faster than your headlights can show you the road.

SPEAKER_00 (15:17): I’m listening to this and thinking, my staff is burned out, and now I need to hire a compliance officer? It feels like bureaucratic red tape designed to slow down good work.

SPEAKER_01 (15:44): It’s a valid frustration, but I want to reframe it: View compliance as a structural milestone of your success. If you’re worrying about multi-state registration, it means you have succeeded! Your message is resonating far beyond your local community.

SPEAKER_01 (16:24): More importantly, compliance is an asset. We live in an era where public trust is plummeting. A donor can pull up your Form 990 in three seconds at your gala. If you can say, “We are fully registered in 40 states and independently audited every year,” that is a powerful marketing message. It’s the “blue checkmark” of the nonprofit world. It tells major donors their money is safe.

SPEAKER_00 (17:25): Compliance protects credibility—and credibility is the only real currency a nonprofit has.

SPEAKER_01 (18:02): Exactly. Compliance isn’t the brakes; it’s the pavement. If you don’t have it laid down before you start driving 100 miles an hour, you’re going to go off-road quickly. Think about the future—institutional donors and AI assistants will eventually automatically filter out any nonprofit that isn’t perfectly compliant and up-to-date across all jurisdictions.

SPEAKER_00 (18:49): Let’s wrap up with a Readiness Checklist:

1. Look at the map: Where are the donors physically located?
2. Internal systems: Can we track deadlines in 10 states without dropping the ball?
3. The Board: Do they understand the risk or are they just cheerleading?
4. Pacing: Is the operational engine ready for the speed we want to hit?

SPEAKER_01 (19:21): If the answer to any of those is no, pause. Fix the foundation first, then build the second story. It isn’t as sexy as a ribbon-cutting, but it keeps the doors open.

SPEAKER_00 (19:49): If you found this discussion helpful, you can find additional compliance guides and visual resources at ironwoodregistrations.com. Thanks for listening.