Home Blog BOI Reporting: The Corporate Transparency Act Rules That Catch Founders Off Guard
Government paperwork on a wood desk representing FinCEN BOI compliance filings
Business Compliance

BOI Reporting: The Corporate Transparency Act Rules That Catch Founders Off Guard

The short answer

BOI reporting under the Corporate Transparency Act: Bay Area CPA on who files, the 30-day update rule, $591/day penalty, and FinCEN ID workflow.

If you formed a Delaware LLC for your Bay Area side project, a holding entity for your founder stock, or a single-member shell to hold real estate in San Jose, you almost certainly have a Beneficial Ownership Information (BOI) report due to FinCEN. The Corporate Transparency Act took effect January 1, 2024, and despite a year of court drama and back-and-forth injunctions, enforcement is currently active. The penalty for missing a report or skipping an update is $591 per day, indexed for inflation, with a $10,000 cap per violation period and potential criminal exposure of two years in prison for willful violations.

The piece that catches most Bay Area founders sideways is not the initial filing. It is the 30-day update rule. Any change to a beneficial owner's name, address, or ID document triggers a new BOI report within 30 days. A co-founder moves apartments? File. A director renews their driver's license with a new number? File. You add a board member? File. Miss the window, and the daily penalty clock starts running.

At Silicon Valley Tax we file BOI reports for our entity clients as part of standard entity compliance. This guide walks through who must file, who counts as a beneficial owner, the deadlines, the update trap, the 2024 enforcement saga, and the penalties for getting it wrong.

What BOI Reporting Is

Beneficial Ownership Information reporting was created by the Corporate Transparency Act (CTA), enacted as part of the National Defense Authorization Act for Fiscal Year 2021, which was signed into law on January 1, 2021 over a presidential veto override. It is codified at 31 U.S.C. §5336. The rule requires most US-formed entities to disclose to the US Treasury's Financial Crimes Enforcement Network (FinCEN) the identity of the humans who own or control them.

The policy goal is anti-money-laundering. Until BOI, there was no federal database tying entities to their human owners; shell-company abuse for tax evasion, sanctions evasion, and fraud was easy in states like Delaware, Wyoming, and Nevada that ask very little at formation. BOI closes that gap by requiring direct ownership disclosure at the federal level.

Filings happen electronically at boiefiling.fincen.gov. There is no paper form, no fee, and no annual renewal. You file once at formation and again every time the information changes.

Who Must File

The default is that every US-formed entity created by filing a document with a state Secretary of State must file. That includes:

  • Limited liability companies (LLCs), single-member and multi-member
  • Corporations (C-corps and S-corps)
  • Limited partnerships and limited liability partnerships
  • Any other entity formed by state filing (statutory business trusts in certain states, professional corporations, etc.)

Foreign entities registered to do business in any US state also file. General partnerships and sole proprietorships, which require no state filing to exist, are out of scope.

The 23 exemption categories

Congress carved out 23 exemptions, all designed for entities that are already heavily regulated elsewhere. The ones that matter most for our client base:

  • Large operating company. More than 20 full-time US employees, more than $5 million in gross receipts on the prior year's federal tax return, AND a physical operating presence in the US. All three tests must be met. A 50-person SaaS startup with $10M ARR is exempt; a 10-person SaaS startup with $10M ARR is not.
  • Tax-exempt organizations. 501(c) entities, plus split-interest trusts under §4947.
  • Publicly traded companies. SEC-registered issuers under the Exchange Act.
  • Subsidiaries of exempt entities. Wholly owned by one or more exempt parents.
  • Inactive entities. Formed before 1/1/2020, no activity, no foreign owners, no asset transfers in 12 months, no more than $1,000 in assets.

Other exemptions cover banks, credit unions, registered investment advisors, broker-dealers, insurance companies, public utilities, and similar regulated industries. Most early-stage Bay Area startups, founder holding LLCs, and real estate single-member LLCs do not qualify for any exemption and must file. The full exemption matrix lives in FinCEN's BOI FAQs.

Who Counts as a Beneficial Owner

This is where founders get tripped up. A beneficial owner is any individual (never an entity) who meets either of two tests:

  1. 25% or more equity ownership. Direct or indirect. Per FinCEN FAQ F.9, unconverted SAFEs and unexercised options generally do not make the holder a beneficial owner until conversion or exercise, but the substantial-control prong below can still capture a holder who exerts current control through those instruments. A founder with 35% common stock counts on the equity prong. A VC fund whose allocation through the LP chain reaches an individual at 25% counts that individual.
  2. Substantial control. Anyone exercising substantial control over the company, regardless of equity. This includes senior officers (CEO, CFO, COO, General Counsel, President), directors, anyone with authority to appoint or remove a majority of the board, and anyone with the right to make important business decisions.

The substantial-control prong is the broad one. A bootstrapped two-co-founder LLC with 50/50 ownership has two beneficial owners on the equity test alone. Add a non-equity COO and you have three. Add two independent board seats (a typical Series A board has the CEO plus the lead investor plus an independent), and the report names five humans, only two of whom hold meaningful equity.

VC partners who hold board seats personally are beneficial owners of every portfolio company on whose board they sit, even at sub-1% equity. Independent directors are beneficial owners. The general counsel of a 10-person startup is a beneficial owner. The bookkeeper is not.

The 30-Day Update Rule

This is the rule that quietly creates ongoing exposure for every entity you own. Within 30 calendar days of any change to the reported information, you must file an updated BOI report. The list of triggering changes is long:

  • A beneficial owner's residential address changes (they move)
  • A beneficial owner's legal name changes (marriage, divorce, court order)
  • A beneficial owner renews their driver's license or passport and the ID number changes
  • A new beneficial owner joins (new C-level hire, new board seat, new equity round pushing someone over 25%)
  • An existing beneficial owner exits (resignation, sale, dilution below 25% with no control)
  • The reporting company's own name, address, or EIN changes
  • An exempt entity loses its exemption (e.g., the operating company falls under 20 employees or $5M revenue)

The two we see slip most often: address changes and ID renewals. A founder relocating from Sunnyvale to Mountain View triggers a filing. A board member renewing a 5-year California driver's license triggers a filing. Neither feels like a reportable event, and neither shows up on any tax calendar by default. We track these for our entity clients because the alternative is missing them.

Filing Deadlines

The deadline depends on when the entity was formed:

Formation Date Initial BOI Deadline
Before January 1, 2024 January 1, 2025
During calendar 2024 90 calendar days from formation notice
January 1, 2025 or later 30 calendar days from formation notice
Any change in information 30 calendar days from the change
Correcting an error in a prior filing 30 calendar days from discovery

"Formation notice" means the date you receive notice from the state that your entity has been created (typically the same day or one to two days after filing). Entities formed in 2025 or later get exactly 30 days, which is tighter than the 90-day window 2024 entities had.

The 2024 Enforcement Saga

The CTA had a rough first year in court. A quick timeline so you understand where things actually stand:

  • March 2024. A federal district court in Alabama (NSBA v. Yellen) ruled the CTA unconstitutional as applied to the National Small Business Association plaintiffs. The 11th Circuit took the appeal. The ruling did not extend beyond the named plaintiffs, so FinCEN kept enforcing against everyone else.
  • December 2024. A federal district court in Texas (Texas Top Cop Shop v. Garland) issued a nationwide preliminary injunction blocking BOI enforcement entirely. The 5th Circuit briefly stayed the injunction, then reinstated it within days. FinCEN paused enforcement.
  • January 2025. The Supreme Court stayed the Texas injunction pending appeal, and FinCEN resumed enforcement with a brief deadline extension to give entities that had paused filing a chance to catch up.
  • 2025 through mid-2026. Various challenges continue to work through the appellate courts, but no current injunction blocks enforcement as of publication. The SCOTUS docket includes one or more CTA constitutional challenges. Confirm the current injunction and enforcement posture before relying on any specific filing extension; this area has shifted multiple times in a single quarter.

The practical takeaway: BOI is enforceable today. Founders who saw the late-2024 headlines and assumed the whole regime had been struck down are wrong. We have clients who skipped filings during the brief injunction window and are now catching up retroactively. The longer the delay, the worse the daily-penalty math gets if FinCEN ever decides to audit.

Penalties

The civil penalty starts at $591 per day for 2026 (originally $500/day under the CTA, indexed for inflation). It runs until the violation is cured, capped at $10,000 per violation period. Criminal penalties for willful violations or knowingly false filings are up to $10,000 in fines and up to 2 years in federal prison.

The "willful" standard is meaningful. FinCEN has indicated that good-faith mistakes by small entities will generally not trigger criminal referral, and there is a 90-day safe harbor to correct an inaccurate filing without civil penalty. But unfiled reports past their deadline have no equivalent safe harbor. The clock just runs.

Practical risk: FinCEN has not yet pursued broad enforcement actions against ordinary small businesses, but the database is being built, banks are required to verify BOI against it for new account openings, and any audit, lawsuit, or M&A diligence on your entity will surface a missing filing immediately. The exposure is latent until something forces a look.

Hold three or more LLCs and unsure each one has a current filing? We audit Bay Area entity portfolios for missed reports and stale data in one sitting. Schedule a complimentary consultation.

What Goes Wrong Without a CPA Tracking It

The most common BOI failure we see at intake: a Bay Area founder formed three Delaware LLCs in 2022-2024 (an operating co, a holding LLC for IP, a real estate single-member LLC), filed initial BOI for the operating co in 2024, and never filed for the other two because they "weren't doing anything." Both inactive-looking LLCs still owed reports, and the founder has now accrued a theoretical $591/day exposure on each since their original deadline. DIY tax software does not track BOI obligations because BOI is not a tax filing. The 30-day update trigger lives nowhere except in your head until something forces a look (M&A diligence, a bank-account opening, an audit). That tracking discipline is exactly what an engagement covers.

What Information Goes on the Report

For each beneficial owner and each company applicant (the individual who actually submitted the formation paperwork, for entities formed after 1/1/2024), the BOI report captures:

  • Full legal name
  • Date of birth
  • Current residential street address (PO boxes not allowed for beneficial owners)
  • A unique identifying number from one of: unexpired US passport, unexpired state-issued driver's license, unexpired state/local/tribal ID, or (only if none of the above exist) unexpired foreign passport
  • An image of the ID document

The reporting company itself reports its legal name, any DBAs, current US business street address, jurisdiction of formation, and Taxpayer Identification Number.

FinCEN identifiers

A beneficial owner who appears on multiple BOI reports can apply for a FinCEN Identifier at boiefiling.fincen.gov, which becomes a substitute for the four ID pieces above. The owner updates their FinCEN ID directly when their information changes, and every entity that listed the FinCEN ID is automatically updated. For VC partners on multiple boards, or founders with multiple entities, the FinCEN ID dramatically reduces the administrative load.

How SVT Handles BOI for Entity Clients

BOI is part of standard entity compliance for our clients. When we form a new entity through our entity services practice, we file the initial BOI report as part of the engagement. For existing entity clients, we track filed BOI reports and the underlying beneficial owner information so we can flag the 30-day update trigger when a client tells us about an address change, a new board appointment, a name change, or a license renewal.

The most common cleanup engagement we do here: a founder who set up two or three entities themselves (a holding LLC, an investment vehicle, a real estate LLC) without realizing each had its own BOI obligation, and never filed for any of them. We onboard the entities, file the back BOI reports, and add them to our ongoing tracking.

If you formed an entity for your S-corp vs LLC decision, did an LLC-to-S-corp conversion, or are working through equity questions as a startup founder, BOI sits in the background of every entity choice. We handle the filings so you don't have a $591/day timer running on a forgotten LLC.

FAQ

Does a single-member LLC have to file BOI?

Yes, unless it qualifies for one of the 23 exemptions. Most single-member LLCs (holding companies, real estate vehicles, side-project entities, disregarded-entity passthroughs) are not exempt and must file. The single member is the beneficial owner on both the equity prong and the substantial-control prong.

I formed my LLC in 2019 and never operated it. Do I still have to file?

Probably yes, but check the inactive-entity exemption. To qualify, the entity must have been formed before 1/1/2020, have no foreign owners, have no current activity, have not transferred any assets in the prior 12 months, and hold no more than $1,000 in assets. Most "dormant" LLCs technically fail one of those tests (the bank account holding $1,200 from years ago, the rental that did $50 in income last year) and still owe a report.

What happens if I move and forget to update the BOI?

The 30-day update window starts on the date of the change. If you discover the miss later, file the update immediately. There is no formal late-update safe harbor, but FinCEN's published guidance suggests good-faith corrections by small entities are unlikely to trigger penalty action. The risk grows the longer the gap.

Do I have to list my VCs as beneficial owners?

You list any VC who, through their fund chain, indirectly owns 25% or more of your company, named down to the human level. You also list any VC partner who personally holds a board seat at your company, even at 0% direct equity, because they meet the substantial-control test. Most Series A and later rounds add at least one VC-side beneficial owner to the report.

Is BOI a tax filing?

No. BOI is filed with FinCEN, not the IRS, and it is unrelated to your federal tax return. It does not change your tax liability, your entity classification, or your basis. It is purely an anti-money-laundering disclosure. That said, your tax professional is the natural person to handle it because the underlying beneficial ownership data overlaps heavily with entity tax compliance.

What is a FinCEN Identifier and should I get one?

A FinCEN Identifier is a unique number FinCEN assigns to an individual or entity. Once issued, it substitutes for the individual's full identifying information on any BOI report. If you sit on multiple boards or own multiple entities, getting a FinCEN ID once and updating it in one place when your address or license changes is far easier than updating every entity report separately. Most founders with two or more entities should request one.

Get Your Entity Compliance Buttoned Up

If you have one or more entities and you are not certain a BOI report has been filed for each, or you cannot remember the last time you updated one after a board change, address move, or ID renewal, the right move is to do the audit now while there is no live penalty exposure rather than after something forces a look. We can review your entity portfolio, file any back reports, and set up tracking so future updates don't fall through the cracks.

Schedule a complimentary consultation and we will walk through what you have, what is filed, and what needs filing. Or call us at (408) 383-9870.

One missed BOI update can cost $10K.

We file BOI reports for our entity clients and track the 30-day update triggers so they don't get forgotten. Add your entities to our compliance calendar.