# Compliance Articles > Articles about Compliance from Dodo Payments, including guides, insights, and best practices. - **URL**: https://dodopayments.com/blogs/category/compliance --- - [Security incident involving an internal analytics system](https://dodopayments.com/blogs/security-incident-internal-analytics-system): An unauthorised party exploited CVE-2026-72898 in a Metabase instance used for internal reporting. Payments, card data, funds and credentials were unaffected. - [Anrok Alternatives in 2026: Per-Market Pricing vs Bundled Tax Compliance](https://dodopayments.com/blogs/anrok-alternatives): Anrok charges per market per month. Here is what a market actually costs, how the math scales across states and countries, and five Anrok alternatives compared. - [TaxJar Alternatives in 2026: AutoFile Limits, US-Only Scope, and What to Use Instead](https://dodopayments.com/blogs/taxjar-alternatives): A practical look at TaxJar alternatives in 2026, covering AutoFile credit costs, the US-only filing scope, the Stripe ownership question, and five options to compare. - [7 Avalara Alternatives for SaaS and Digital Sellers in 2026](https://dodopayments.com/blogs/avalara-alternatives): Compare Avalara alternatives for SaaS and digital sellers in 2026, including per-state cost scaling, quote-only enterprise pricing, and who actually carries the tax liability. - [Reverse Charge VAT Explained for SaaS Sellers](https://dodopayments.com/blogs/reverse-charge-vat): How reverse charge VAT works on cross-border B2B software sales, when it applies, what your invoice must say, and why VAT number validation matters. - [KYB Verification: What Payment Providers Check](https://dodopayments.com/blogs/kyb-verification): What KYB verification involves, which documents payment providers request, why beneficial ownership matters, and how to pass business verification first time. - [Sales Tax Exemption Certificate: A Guide for SaaS](https://dodopayments.com/blogs/sales-tax-exemption-certificate): What a sales tax exemption certificate is, when a B2B SaaS buyer can claim one, how to validate and store it, and what happens in an audit if you cannot. - [High Risk Merchant Account: Costs, Options, Alternatives](https://dodopayments.com/blogs/high-risk-merchant-account): Why payment providers classify a business as high risk, what a high risk merchant account actually costs, and which alternatives work for digital sellers. - [W-8BEN Form Guide for Non-US Software Sellers](https://dodopayments.com/blogs/w-8ben-form-guide): What the W-8BEN and W-8BEN-E forms are, when a non-US software business actually needs one, how treaty benefits cut withholding, and who collects the form. - [Merchant Underwriting Explained: Why Providers Say No](https://dodopayments.com/blogs/merchant-underwriting-explained): How merchant underwriting works, what payment providers assess before and after approval, why rolling reserves happen, and how to pass review first time. - [Tax Residency Certificate: What It Is and How to Get One](https://dodopayments.com/blogs/tax-residency-certificate-guide): How a tax residency certificate cuts withholding tax on cross-border income, plus the application route in the US (Form 8802), India (Form 10FA) and the UK. - [DAC7 Reporting: A Practical Guide for Platform Operators](https://dodopayments.com/blogs/dac7-reporting-platforms): What DAC7 reporting requires from platforms: who must report, which activities are in scope, the seller data to collect, and the 31 January deadline. - [E-Invoicing Compliance: A Guide for Global SaaS](https://dodopayments.com/blogs/e-invoicing-compliance-global-saas): How e-invoicing mandates work for software companies selling internationally: clearance vs post-audit models, Peppol, structured formats, and who carries the obligation. - [Strong Customer Authentication (SCA): A Practical Guide for SaaS](https://dodopayments.com/blogs/strong-customer-authentication): Strong Customer Authentication (SCA) is the PSD2 rule requiring two-factor verification on many payments. Learn how SCA works, its exemptions, and how to stay compliant without killing conversion. - [Best Sales Tax Software for SaaS in 2026: A Buyer's Guide](https://dodopayments.com/blogs/sales-tax-software-saas): Compare the best sales tax software for SaaS and digital sellers in 2026, from calculation tools to full Merchant of Record coverage, with the tradeoffs that matter. - [States with No Sales Tax: What SaaS Sellers Should Know (2026)](https://dodopayments.com/blogs/states-with-no-sales-tax-saas-sellers): States with no sales tax explained for SaaS sellers. The 5 NOMAD states, what nexus still triggers, and how SaaS taxability varies across the US. - [Sales Tax Nexus for SaaS: When to Register and How to Track Thresholds](https://dodopayments.com/blogs/sales-tax-nexus-saas-when-to-collect): When to register for sales tax across US states as a SaaS. Economic nexus thresholds, the registration workflow, and how MoR removes the entire process. - [Making Tax Digital (MTD) for SaaS: What UK and Global Sellers Need to Know](https://dodopayments.com/blogs/making-tax-digital-uk-saas): Making Tax Digital explained for SaaS founders. Who it applies to, VAT and Income Tax obligations, MTD-compatible software, and how MoR handles it for you. - [Canada Digital Services Tax: 2026 Guide for SaaS Sellers](https://dodopayments.com/blogs/canada-digital-services-tax-saas): Canada's 3% Digital Services Tax explained for SaaS founders - thresholds, retroactive enforcement, current status with the US trade dispute, and what to do now. - [Digital Services Tax (DST): A Global Guide for SaaS Sellers](https://dodopayments.com/blogs/digital-services-tax-global-guide): Digital services tax explained - which countries charge DST, how rates and thresholds differ, and what SaaS sellers need to do to comply across multiple jurisdictions. - [Raw Card APIs and PCI Compliance: A SaaS Reality Check](https://dodopayments.com/blogs/raw-card-api-pci-compliance): Raw card APIs give you full control over the payment form but expand PCI scope dramatically. When the trade off makes sense and when it absolutely does not. - [Selling Digital Goods Outside the App Store: A 2026 Compliance Playbook](https://dodopayments.com/blogs/digital-goods-outside-app-store): Where and how to legally accept payments outside the App Store in 2026: US, EU DMA, South Korea entitlements, and the patterns that keep your iOS app compliant. - [What Is Indirect Tax? The SaaS Founder's Compliance Primer](https://dodopayments.com/blogs/what-is-indirect-tax-saas): What indirect tax is, how it differs from direct tax, why it matters for SaaS founders, and the practical steps to stay compliant across global markets. - [Indirect Tax Definition for Founders: VAT, GST, and Sales Tax in One Page](https://dodopayments.com/blogs/indirect-tax-definition-saas): Indirect tax explained for SaaS founders. The difference between VAT, GST, and sales tax in plain English, with examples and the practical compliance impact. - [VAT vs Sales Tax: Why Global SaaS Founders Need to Understand Both](https://dodopayments.com/blogs/vat-vs-sales-tax-saas): VAT vs Sales Tax explained for SaaS founders. How they differ, where each applies, common compliance mistakes, and why global SaaS deals with both simultaneously. - [VAT Compliance for Digital Products: A Country-by-Country Cheat Sheet](https://dodopayments.com/blogs/vat-compliance-digital-products): VAT compliance for digital products explained country-by-country. Thresholds, rates, registration paths, and when a Merchant of Record is the right call. - [EU VAT for SaaS in 2026: Thresholds, OSS, and Common Mistakes](https://dodopayments.com/blogs/eu-vat-saas-guide-2026): Complete EU VAT guide for SaaS founders in 2026. Thresholds, OSS registration, B2B vs B2C rules, invoice requirements, and how to stay compliant globally. - [Payment Compliance: GDPR and PSD2 Obligations for SaaS](https://dodopayments.com/blogs/payment-compliance-gdpr-psd2): Understand how GDPR and PSD2 affect your SaaS payment flows. Covers data handling obligations, Strong Customer Authentication, and how a merchant of record simplifies compliance. - [PCI Compliance Checklist for SaaS and Digital Products](https://dodopayments.com/blogs/pci-compliance-checklist-saas): A practical PCI compliance checklist for SaaS companies selling digital products. Understand SAQ types, scope reduction, and how a merchant of record simplifies compliance. - [PCI DSS Compliance: What Digital Businesses Need to Know](https://dodopayments.com/blogs/pci-dss-compliance-digital-business): PCI DSS compliance explained for digital businesses. Understand the 12 requirements, compliance levels, and how to reduce your scope when selling digital products online. - [Ecommerce Sales Tax Compliance: A Step-by-Step Guide for Digital Sellers](https://dodopayments.com/blogs/ecommerce-sales-tax-compliance): Navigate ecommerce sales tax compliance with this step-by-step guide covering nexus, registration, collection, filing, and automation for digital sellers. - [EU Digital Services Tax: What SaaS Founders Need to Know in 2026](https://dodopayments.com/blogs/eu-digital-services-tax): Understand the EU digital services tax landscape, VAT obligations for digital products, and how to stay compliant when selling SaaS to European customers. - [Sales Tax on Digital Goods by State: Complete 2026 Guide](https://dodopayments.com/blogs/sales-tax-digital-goods-by-state): Which US states charge sales tax on digital goods? See the full state-by-state breakdown for software, SaaS, ebooks, and digital downloads in 2026. - [SaaS Revenue Recognition: ASC 606 Guide for Subscription Companies](https://dodopayments.com/blogs/saas-revenue-recognition): Practical ASC 606 revenue recognition guide for SaaS. Covers the 5-step framework, deferred revenue, and how a Merchant of Record simplifies compliance. - [How Merchant of Record reduces your Legal & Compliance risk](https://dodopayments.com/blogs/merchant-of-record-legal-compliance): Understand how a Merchant of Record lowers legal and compliance risk by handling tax remittance, invoicing, disputes, and global regulatory obligations. --- **Dodo Payments** -- The billing & payments platform for AI-first companies. [Payments](https://dodopayments.com/payments) | [Billing](https://dodopayments.com/billing) | [Distribution](https://dodopayments.com/distribution) | [Pricing](https://dodopayments.com/pricing) | [Documentation](https://docs.dodopayments.com) | [Dashboard](https://app.dodopayments.com)