Avalara Aviator Maps Products to Tax Codes. AI Agent Work Does Not Arrive as a Product.
Key Takeaway: On September 23, 2026, Avalara unveiled Avalara Aviator, an "agent hub for tax and compliance" whose first listed capability is helping customers "map products to tax codes." In March we wrote that Avalara's agentic push solved the wrong agentic problem and named three things that would change our mind. Aviator is the first product we can grade against that list. It clears part of one test, and the part it clears shows exactly where AI agent sales tax diverges from catalog tax: for agent work, the tax code is a property of the call, not of the product.
What Avalara Announced
The release, issued from Durham at Avalara's CRUSH customer and partner conference, describes an orchestrator agent called Avi that takes plain-language requests and delegates to "lead agents" overseeing research, certificates, and returns. The initial capabilities, in Avalara's words, help customers:
- Map products to tax codes
- Report transaction and tax liability data
- Validate exemption certificates
- Auto-generate tax matrices
- Analyze results across multiple applications
- Configure custom rules
It ships to existing customers at no additional cost, with general availability to follow the CRUSH Europe event next month. The release promises "an audit-defensible record for every action" and says that "humans delegate the work while remaining in control of the decisions."
Credit first, because it is earned. The worked example in the release is a good control design. A customer describes a rule in plain language; Avi drafts it, simulates its impact on past transactions, flags conflicts with other rules, and the customer approves before the rule goes live. Draft, back-test, human sign-off, record. That is how a tax department should let software change its own configuration, and many in-house builds skip the back-test. If Aviator does what the release says, the people who configure AvaTax will make fewer silent mistakes.
The Three Tests We Set in March
When we responded to Avalara NEXT on March 30, we said three developments would show a major platform was addressing agent commerce rather than automating existing workflows:
- Classification of AI-native work types without a human-curated SKU mapping step.
- Nexus tracking that accounts for distributed agent activity.
- Pricing that makes sense for high-frequency, low-value agent transactions.
It would be convenient to declare a zero out of three. That would also be unfair, so here is the honest scoring.
Test 1: partial. Aviator removes the human from the mapping step. An agent now proposes the product-to-code assignment. That is real progress on the labor problem. It does not remove the step. The unit being classified is still the product in the customer's catalog, and the output is still one code per product. For a company selling kitchen equipment, which is what the beta customer quoted in the release distributes, that is the right grain. A walk-in freezer is a walk-in freezer on every invoice.
Test 2: not addressed. The release says nothing about nexus, and nothing about whether autonomous purchasing activity counts toward any state's threshold. That is not a criticism of a compliance-operations product. It is simply not what this launch is for.
Test 3: not addressed. "No additional cost to existing customers" describes the add-on, not the per-transaction economics underneath it. Whether a sub-dollar agent call can carry a tax determination that costs less than the call is still an open question for every enterprise platform.
Why the Grain Matters: One Endpoint, Two Tax Rates
Here is the point Aviator's design brings into focus. An AI agent selling through a single API endpoint does not sell one product. The same endpoint, at the same price, can run a batch inference job on one call and return a research synthesis on the next. In a number of states the tax consequence turns on which of those happened.
Connecticut is the cleanest illustration because the rate difference is written into the imposition statute itself. Conn. Gen. Stat. § 12-408(1)(A) imposes the sales tax at "six and thirty-five-hundredths per cent" on taxable services, "except, in lieu of said rate, the rates provided in subparagraphs (B) to (I)." Subparagraph (D)(i) is one of those exceptions: "With respect to the sales of computer and data processing services occurring on or after July 1, 2001, at the rate of one per cent."
We ran the same purchase through the AgentTax engine twice: a Connecticut buyer in Hartford, $1,000, transaction_type: "api_access", business purchaser, seller not collecting. Same SKU. Only the work_type changes.
| Work performed | Engine category | Rate | Use tax on $1,000 |
|---|---|---|---|
| compute (processing the buyer's data) | data_processing | 1.00% | $10.00 |
| research (retrieving and synthesizing information) | information_service | 6.35% | $63.50 |
A product-level tax code has to pick one of those rows for every call the endpoint ever serves. Pick the 1% row and every research call is under-collected by $53.50 per thousand dollars. Pick the 6.35% row and every compute call is over-collected by the same amount, which in a buyer-facing product is a refund claim waiting to happen. An agent that performs the mapping faster does not change the arithmetic, because the error is in the grain, not the speed.
Two disclosures, because this analysis should hold our own engine to the standard it applies to Avalara's.
First, the line between "computer and data processing" and an information service in Connecticut is a facts question, and the engine resolves it from the work_type the caller declares. If the caller mislabels the work, the engine will faithfully compute the wrong tax. The audit trail records the declared work type and the source of the classification, so the error is at least visible.
Second, the engine applies 6.35% to every research call, including fact patterns, such as plain access to an online research database, where a Connecticut buyer may have an argument for the lower rate. The engine cannot tell database access apart from information-service output, so it takes the higher number. That is a deliberate overtax on those facts, consistent with our conservative default, and it is the same grain problem in miniature.
What This Means If You Operate Agents
If your company already runs AvaTax for its catalog business, nothing in this analysis argues against Aviator for that business. It argues against assuming that the catalog model extends to the agent side of your revenue. Three practical steps:
- Classify at the call, not the product. If one endpoint performs materially different work, pass the work type with each transaction. In AgentTax that is the
work_typefield onPOST /api/v1/calculate; it drives the per-state category in the audit trail.
- Keep the record at the same grain. Avalara is right that every action needs an audit-defensible record. For agent commerce, "every action" means every call, including what the call actually did. A product code on an invoice line will not tell an auditor whether a given call was processing or research.
- Test your worst state. Run your top three work types against Connecticut, Texas, and whichever state you sell into most. If the numbers do not move, the grain question may not matter to you. If they do, you have found your exposure. You can do this without an account in the playground.
For the broader state picture, our AI agent sales tax guide walks through how each state treats the categories agent work falls into, and our comparison with Avalara sets out where each platform fits.
What to Watch
Avalara says upcoming enhancements will include "self-healing," with agents that "examine changes to your business and recommend fixes to root discrepancies before they can turn into filing liabilities." The same release says the system will "catch anomalies unloading a traditional human review onto an agentic worker." Those two sentences sit a little uneasily next to the promise that humans remain "in control of the decisions," and how Avalara resolves that tension when Aviator reaches general availability is worth watching.
The more interesting signal would be smaller: a tax code, or a rule type, that attaches to the transaction instead of the product. The moment a major platform lets the classification vary call by call within a single SKU, the agent-commerce problem and the catalog problem start converging. Aviator's plain-language rule builder is closer to that than anything Avalara has shipped before. It is not there yet.
This analysis is for informational purposes only and does not constitute legal or tax advice. Consult a licensed tax professional for compliance decisions.
Related Articles
Missouri Says the Disc Is Not the Product. For AI Agents, the True Object Test Only Works Where the Service Was Never Enumerated.
6 min readIndustry & OpinionNew York Offered to Apportion a $301,810 Assessment by User Location. NetDocuments Could Not Produce the Users.
8 min readPractical GuideIs SaaS Taxable in Arizona? Yes, as a Rental, and Arizona's Economic Nexus Threshold Does Not Count It
7 min read