Most compliance problems at companies started with a decision that made complete sense at the time. Here are three of those choices, what they cost, and how to tell if you've already made them.
Choice 1: Paying Your Team as Contractors Instead of Employees
A Toronto agency at $4.6M had 9 contractors billing $110K–$140K/year, while working Mon–Fri on company laptops. Two incorporated at the agency's suggestion. All signed indemnity clauses.
The Trigger
Could be an audit. More typically, a worker applies for EI, prompting a CRA CPP/EI ruling, which then covers everyone.
The Test
Control over work, who provides tools, profit/risk exposure, and integration into the business. A contract saying "independent contractor" usually doesn’t cut it.
What Reclassification Actually Costs
When a worker is reclassified, the employer is assessed for both sides of CPP and EI.
$11,988 Per Worker/Year - CPP + EI for one worker above the ceilings
$215K 9 Workers × 2 - Years Before penalties and interest
20% Repeat Penalty - 10% for first failure, 20% for repeat or negligent failures
The indemnity clause doesn't stop the CRA assessment. CPP and EI exposure survives even when income tax is sorted out. If someone incorporated at your suggestion and works only for you, their company may be a personal services business - taxed at ~44.5% in Ontario with almost every deduction denied.
Choice 2: Charging the Same GST/HST Rate to Clients in Every Province
A Vancouver firm set up in 2021 with all BC clients at 5% GST. By 2026, 40% of revenue came from Ontario (13% HST) and 12% from Alberta, but every invoice still went out at 5%.
The Rule
Depending on the nature of the business, most commonly, the place of supply follows the recipient's business address, not where work is performed. Ontario clients should be invoiced at 13% HST.
The Gap
On $1.28M of Ontario revenue, the 8-point gap between 5% and 13% = $102,400/year. Over two periods: ~$205,000.
Why This Error Hurts More Than You Think
1. You owe it whether or not you charged it
The CRA assesses the supplier, not the customer. You can invoice the difference under Section 224 of the Excise Tax Act, but some clients won't pay.
2. You can't claim it as a bad debt
The bad debt provision requires tax was included in net tax reported, which is exactly what didn't happen. The uncollectible amount comes straight out of profits.
3. Directors can be assessed personally
Under Section 323 of the Excise Tax Act, unremitted GST/HST is not only a corporate debt. "I hired a bookkeeper" has failed as a due diligence defence more than once.
Choice 3: Paying Non-Residents and Parking Cash Outside Canada
A Toronto SaaS company at $7M ARR did three ordinary things - all carrying filing obligations it didn't know it had.
The Consultant
Regulation 105 requires 15% withholding on fees for services rendered in Canada. On US$100K attributable to Canadian work: US$15,000 to withhold, plus 10% penalty if missed.
The Cash
Foreign property over $100K at any time triggers Form T1135. Surplus cash in a yield account is hard to exclude. Penalty: $25/day up to $2,500 - or $500/month up to $12,000 if knowing.
The Related-Party Fee
Management fees to a non-resident attract 25% withholding under Part XIII. Treaty relief may apply, but the NR4 must still be filed and documented.
What All Three Risks Have in Common
Many business decisions carry compliance or tax consequences unknowingly.
Every transaction was recorded. The books balance. Clean financials sit on top of all three. The hiring was decided by the founder. The Xero setup was done by someone who has since left. The consultant was engaged by the head of product. In each case, accounting saw the transaction after the fact, recorded it accurately, and had no mandate to ask the question that mattered.
That gap is what compliance risk looks like at this size. It is the absence of anyone whose job is to look at an operating decision and ask what it triggers.
How to Test Your Exposure Before the CRA Does
Contractor Classification
Pull a vendor list by annual spend. Flag every individual or single-person corporation paid over $50K. Ask: who controls the work, who supplies tools, do they have other clients? If it feels like an employee, it probably is.
GST/HST by Province
Pull revenue by customer province for the last eight quarters. Compare to GST/HST collected by rate. If revenue mix has moved and rate mix hasn't - you've found it.
Non-Resident Payments
Search AP for non-resident payments. Check every foreign bank account. Two questions: did any work happen physically in Canada? Did the balance ever exceed $100K CAD?
The Voluntary Disclosures Program Is Usually a Better Door
Under rules in effect since October 2025, an unprompted VDP application can get full penalty relief and 75% interest relief. Once the CRA has contacted you about the issue, interest relief drops to 25% at best.
Before CRA Contact - Full penalty relief + 75% interest relief
After CRA Contact - Interest relief drops to 25% at best
Compliance Risk Is a Systems Problem
Every one of these choices was reversible for about ninety days after it was made. What makes them expensive is time. What buys the time is someone reviewing operating decisions while they are still recent.
Reclassify contractors - Before a year of contributions accrues
Fix tax codes - Before they touch two years of invoices
Withhold on first payment - To any non-resident consultant
If you're scaling past $2M and your finance function is still mostly a monthly close, check these three this quarter rather than next year.
