Article V · Knoxville, TN
Regulatory compliance
Compliance failures are rarely dramatic. They accumulate quietly — a registration that lapsed, a worker classified the wrong way, a policy that was accurate three years ago — and they surface at the worst possible moment: during diligence on a sale, in response to an agency notice, or in a lawsuit where the failure becomes the plaintiff’s best evidence.
We help Tennessee businesses identify which obligations actually apply to them and build a routine for meeting them. That covers entity and licensing filings at the state and county level, employment classification and wage-hour practice, workplace policies, industry-specific regulation, data privacy and breach obligations, and the ordinary corporate maintenance that keeps a company in good standing.
The goal is proportionate. A fifteen-person company does not need the compliance apparatus of a public one, and building it would waste money that the business needs elsewhere. What it needs is an accurate inventory of what applies, a named owner for each item, and a calendar. That is most of the value, and it is achievable in weeks rather than quarters.
What a Tennessee business actually owes, and to whom
Compliance feels overwhelming largely because obligations arrive from three different levels of government with no coordination between them. Sorted by source, the list is shorter and more manageable than it appears.
- Tennessee Secretary of State
- An annual report for each domestic and foreign entity, and a registered agent continuously maintained at a Tennessee street address. Missing the annual report is the most common single failure and can eventually lead to administrative dissolution.
- Tennessee Department of Revenue
- Franchise and excise tax registration and filing, which reaches most Tennessee entities including LLCs. Sales and use tax where you sell taxable goods or services, and business tax where applicable.
- County clerk
- Business licenses in Tennessee are issued at the county level, so a company operating in more than one county may owe more than one. Whether a license is required, and its class, generally depends on gross receipts and line of business. Municipalities may add their own.
- Federal — employment and tax
- EIN, employment tax deposits and returns, I-9 verification for every employee, and Fair Labor Standards Act obligations on classification, minimum wage, and overtime.
- Industry regulators
- Contractor licensing, professional licensing boards, alcohol permits, health department requirements, transportation authority. Highly specific to what you do and frequently the area with the sharpest consequences.
- Privacy and data
- Driven by whose data you hold rather than by your size. Tennessee has its own consumer privacy statute with applicability thresholds, and several other states reach businesses with no physical presence there.
Worker classification: the most common expensive mistake
Calling someone an independent contractor does not make them one. Classification turns on the substance of the working relationship — how much control you exercise over how, when, and where the work is done, how economically independent the worker genuinely is, whether they serve other clients, who supplies the tools, and whether the work is central to your business.
What makes this treacherous is that different authorities apply different tests to the same worker, and they can reach different conclusions. The IRS, the Department of Labor, and Tennessee agencies administering unemployment insurance and workers’ compensation each have their own framework. A worker can be properly classified under one and misclassified under another.
The exposure when it goes wrong is quantifiable and generally larger than owners expect: back employment taxes with interest and penalties, unpaid overtime for hours already worked, unemployment and workers’ compensation premiums, and benefit-plan consequences. It is also among the most common findings in a sale diligence process, where it typically converts into an escrow holdback or a price reduction.
A signed contractor agreement helps, but it does not control. If the day-to-day relationship looks like employment, the agreement will not save the classification — though its absence makes matters distinctly worse.
Privacy obligations for companies that never thought they had any
Businesses that do not consider themselves technology companies routinely have privacy obligations, because the trigger is not what you sell — it is whose personal information you collect and where those people live.
If you run a website that collects contact information, use analytics or advertising pixels, hold customer records, or handle employee data, you are processing personal information. Several state privacy laws reach businesses with no physical presence in the state, based on volume of data or revenue. Tennessee has its own consumer privacy statute with its own thresholds.
The sensible first step is scoping: determine which regimes actually apply to you before building anything, because the answer sets the entire scale of the work. For many small East Tennessee businesses the honest answer is that few apply, and a straightforward privacy notice plus reasonable security practice is proportionate. For others the answer is materially more, and finding that out from a regulator is the wrong way.
Two items are worth attention regardless of which regime applies. Vendor agreements should address what your processors may do with data you hand them, since their breach becomes your problem. And a written breach-response plan matters because notification obligations run on short clocks, and the time to work out who to call is not the morning you find out.
Getting out of trouble, and staying out
When something has already gone wrong — a notice, an audit letter, a demand — the instinct to respond quickly and helpfully is understandable and frequently harmful. Early responses are difficult to walk back, and an answer given before the underlying facts are established can create a second problem on top of the first.
The better sequence is to understand precisely what is being asked and by whom, establish the actual facts internally, determine what you are genuinely required to provide against what has merely been requested, and then respond deliberately and in writing. Agencies are generally willing to work with businesses that engage seriously; volunteering more than was asked is what tends to broaden an inquiry.
Once resolved, the useful output is a system rather than a memory. An accurate inventory of obligations, a named owner for each, and a calendar with real deadlines prevents the great majority of repeat failures — and takes weeks, not quarters, to put in place.
Scope
What this covers
- Compliance assessment
- A plain inventory of the federal, Tennessee, and county obligations that genuinely apply to your business, with the ones already out of compliance flagged first.
- Licensing and registrations
- State and county business licenses, annual reports, registered agent maintenance, and foreign qualification where you operate across state lines.
- Employment practice
- Employee versus contractor classification, exempt status and wage-hour exposure, handbooks, and the onboarding documents that create real obligations.
- Policies and procedures
- Written policies that reflect what your company actually does, since a policy contradicted by daily practice is worse than having none at all.
- Data privacy and security
- Privacy notices, vendor data terms, and breach-response obligations, including the Tennessee Information Protection Act where it applies to you.
- Agency response
- Measured handling of notices, audits, and investigations, coordinated so that the response does not create the next problem.
How it runs
What working together looks like
- 01
Call
What you do, where you operate, how many people work for you and under what arrangements. Enough to scope which regimes plausibly reach you.
- 02
Inventory
The obligations that genuinely apply, by source, with anything currently out of compliance identified first and ranked by actual consequence.
- 03
Remediation
Fixing what is broken: lapsed filings brought current, classifications corrected, missing registrations completed.
- 04
Documentation
Policies, handbooks, notices, and agreements written to reflect what the company actually does rather than an aspirational version of it.
- 05
Calendar and ownership
Every recurring obligation assigned to a person with a date. The step that determines whether any of the preceding work survives the year.
Failure modes
What usually goes wrong
- Missing the annual report
- The most common failure, and one that compounds quietly until the entity is out of good standing and a lender or buyer notices.
- Classifying by preference rather than by test
- Treating workers as contractors because it is simpler. The agreement does not control the classification; the working relationship does.
- Operating in another state without registering
- Hiring a remote employee or opening a location elsewhere generally triggers foreign qualification, plus that state’s tax and employment obligations.
- A handbook that contradicts actual practice
- A written policy nobody follows is evidence against you. In a dispute it establishes the standard you set and then failed to meet.
- Copying a privacy policy from another website
- It will describe data practices that are not yours. A privacy notice that misstates what you actually do is itself a misrepresentation.
- Answering an agency notice immediately
- Fast, helpful, unconsidered responses are hard to retract and frequently expand the scope of the inquiry.
Fit
You probably need this if
If more than one of these is true, the call is worth the twenty minutes. If none of them are, we will tell you that too.
- You are unsure whether your workers are correctly classified
- You have received a notice or audit letter from a state or federal agency
- You are expanding into another state and have not registered there
- Your handbook or privacy policy has not been reviewed in over two years
- You collect customer data and have no written breach response
- You are preparing for a sale and want problems found before a buyer finds them
- You hired your first employee and are not certain what that changed
Questions
Compliance: common questions
What ongoing filings does a Tennessee business have to make?
At a minimum, an annual report to the Tennessee Secretary of State, a registered agent maintained at a Tennessee address, and franchise and excise tax filings with the Department of Revenue. County and municipal business licenses commonly apply on top of that depending on where you operate and your gross receipts. Missing the annual report is the most common failure, and it can eventually put the entity out of good standing.
How do I know if a worker is an employee or an independent contractor?
It turns on the degree of control and independence in the actual working relationship, not on what the agreement calls the person or whether they invoice you. Federal and Tennessee authorities apply overlapping but distinct tests, and they can reach different conclusions about the same worker. Misclassification is expensive when it is found — back taxes, unpaid overtime, and penalties — and it is one of the more common findings in diligence.
Does my small business need a written privacy policy?
If you collect personal information through a website, very likely yes. The obligation is usually driven not by your size but by whose data you collect and where they live, and several state laws reach businesses with no physical presence in that state. Tennessee has its own consumer privacy statute with its own applicability thresholds. The right first step is determining which regimes actually reach you, because that scopes everything else.
What happens if my company falls out of good standing in Tennessee?
Administrative dissolution or revocation is the eventual consequence, and the practical effects arrive sooner. A company not in good standing can face difficulty enforcing contracts, obtaining financing, or closing a sale, and buyers treat it as a diligence problem. Reinstatement is generally available, but it means back filings and fees, and it is far easier to avoid than to unwind.
We are opening an office in another state. What do we need to do?
Typically register as a foreign entity in that state, appoint a registered agent there, and take on its filing and tax obligations. Employment law is the part most often underestimated: wage, leave, and termination rules vary considerably by state, and practices that are lawful in Tennessee are not uniformly lawful elsewhere. This is worth sorting out before the first out-of-state hire, not after.
Do I need a business license in Knox County?
Quite possibly. Tennessee business licenses are issued at the county level through the county clerk, and whether you need one — and which class it falls into — generally depends on your gross receipts and your line of business. Some professions and activities are exempt, and cities may impose their own requirement on top of the county’s. If you operate across more than one county in the Knoxville metro, check each one rather than assuming the first answer covers you.
Do I need an employee handbook?
It is not legally required for most small employers, but it becomes genuinely useful once you have a handful of employees, because it sets consistent expectations and documents the policies you would want to rely on in a dispute. The important caveat: a handbook you do not follow is worse than no handbook. It establishes the standard you set for yourself, and inconsistent application of your own written policy is a recurring theme in employment claims.
How much does a compliance review cost?
We quote an assessment as a flat fee, scaled to headcount, number of locations, and how regulated your industry is. For most small East Tennessee businesses it is a defined project measured in weeks that produces an inventory, a remediation list ranked by real consequence, and a calendar. Remediation itself is quoted separately once we know what is actually broken, because that is not knowable in advance.
Related work
- III
Corporate Governance
Bylaws, operating agreements, and the rules that decide who controls the company and how disputes resolve.
- I
Business Formation
Choosing and standing up the right structure — LLC, partnership, or corporation — so the entity holds up when it matters.
- II
Contracts
Drafting, reviewing, and negotiating the agreements you sign with vendors, clients, and partners.
Where we do this work
Next step
Tell us what you're building.
A short call is enough to tell you whether this is work we should be doing for you, what it is likely to involve, and what it will cost. No obligation, and no charge for the conversation.