Intro: Four Layers, and a Landscape That Moves
A brewery approved to sell from its taproom cannot automatically ship bottles across state lines. Alcohol ecommerce compliance closes that gap, resting on four layers that rarely stand still.
Federal rules govern the product itself, covering labeling and the excise tax owed at production. State rules govern the channel. They decide whether direct shipping is permitted for a beverage type, under what permit.
Carrier requirements govern the physical shipment, and age verification runs through both the order and the delivery. Statutes change, agencies issue rules, and litigation reshapes this landscape regularly.
This overview describes each obligation’s shape and points toward verification. It is educational content, not legal advice; confirm specifics with alcohol beverage regulatory counsel and a specialist compliance provider.
Compliance is the regulatory layer of the full Custom Craft Brewery and Winery Direct-to-Consumer Platform Development for US Producers: Building a Club, Taproom and Compliant Shipping System guide.
Meeting these obligations starts with genuine custom software development, paired with the web application development a compliant storefront requires.
TTB Labeling and Certificate of Label Approval
Federal regulation governs what appears on an alcohol beverage label. Products entering interstate commerce generally need a certificate of label approval.
This is the COLA requirement, applying before a bottle reaches a shipping cart. Exemptions exist in some cases, notably for products sold only within the state made.
That is one reason a producer moving from local sales into direct shipping meets label requirements it never faced before.
Mandatory label information varies by beverage type. It typically includes the brand name, class or type designation, alcohol content where required, and net contents.
The producer’s name and address must appear, along with the government health warning statement. Certain products also require formula approval before labeling can proceed.
Requirements differ meaningfully between wine, malt beverages and distilled spirits. Treating alcohol as one labeling category is a common and costly error.
For a DTC platform, the link is direct. Every product listed must carry a label approved for how it’s sold.
Advertising rules sit alongside labeling, reaching websites, email and social content. Mandatory statements and prohibited practices apply there too.
Verify current label and advertising requirements directly; never publish label content from memory. Which obligations become concrete features is mapped in Brewery and Winery DTC Software Features — What a US Craft Producer Selling Direct Actually Needs in the First Release.
State Direct Shipping Permits and Volume Limits
State shipping permits and volume limits form the second layer of alcohol ecommerce compliance, varying sharply by beverage type. Wine is broadly permitted across states; beer is far fewer, and spirits fewer still.
A brewery’s direct-to-consumer business is often taproom sales and local pickup, not national ecommerce. Treating alcohol DTC as one regime for every beverage type misjudges the market.
The Permit Is the License to Operate the Channel
Direct shipping is an exception to the three-tier system, granted state by state under a permit. That permit must be applied for, paid for and renewed, sometimes with a bond.
Permits are specific to beverage type. That is why a winery and a brewery in the same state face different answers. A lapsed permit closes that state immediately.
Volume Limits Are Tracked Per Consumer
Most permitting states cap how much may be shipped to one consumer or household over a period. The limits and periods vary, and tracking is cumulative across every channel.
The platform must maintain a running total per consumer across club shipments, individual orders and gifts. That total gets evaluated before any new order is accepted. Never publish volume limits; verify them per state.
Below the State Level
Some states permitting direct shipping still contain counties or municipalities where delivery is prohibited. That makes address-level validation necessary, not merely a state-level check.
Some states also require products registered before shipment, separate from federal label approval. Both are checks the compliance engine performs and the platform enforces.
Age Verification: 21+ at Order and at Delivery
Preventing sales to people under the legal drinking age is the purpose this entire framework serves. It operates at two separate points, and both are mandatory.
In order, states generally require the seller to verify the purchaser is 21 or over. This runs through identity verification against data sources. Requirements vary by state, and some circumstances call for identification presented directly.
At delivery, the carrier must obtain a signature from a recipient aged 21 or over. This is the adult signature service that carrier alcohol programs require, and shipments cannot be released without it. USPS cannot carry alcohol shipments. Every carrier in this channel is a private one, running its own age-verification program.
The two checks are complementary, not interchangeable. Verifying at order does not establish who answers the door. A signature at the door does not confirm the purchase was lawful.
For the platform, this means both checks are enforced and both results recorded as evidence. Neither should ever appear in marketing as an optional step or a point of friction.
State-specific age verification requirements differ and need direct confirmation before launch. Getting this wrong exposes both the license and the platform to real risk.
Excise Tax, Sales Tax, and Reporting
Tax in this channel comes from two directions, and reporting comes from a third. Federal excise tax applies at production and removal, with periodic returns filed to the federal authority.
That obligation exists independently of the sales channel, though direct-shipped volume still feeds into it. State obligations attach separately to the shipment itself.
Permitting states generally require the shipper to collect and remit state sales and excise tax. Some add local tax on top, and registration with the state revenue authority typically accompanies the shipping permit.
Economic nexus rules interact with all of this in ways worth confirming state by state. None of this is optional once a producer ships beyond its home state.
Reporting is the obligation producers most often underestimate. States generally require periodic reports listing quantities, products and destinations shipped. Some require a filing even when no shipments occurred that period.
The software implication follows directly. Shipment records must capture reporting details at the moment of shipment.
Reconstructing them later from order data never built for that purpose rarely works. Verify rates, frequencies and formats per state; never work from figures published in an article.
Advertising, Trade Practice, and Marketing Constraints
Alcohol advertising is regulated, and that regulation reaches a DTC operation’s website, email and social content, not just broadcast media. Requirements include mandatory statements in certain contexts and prohibitions on particular claims, with details varying by beverage type.
States layer on their own restrictions, and some limit specific promotional structures. The practical implication is that marketing content becomes a genuine compliance surface rather than a purely creative one.
Automated content generation, dynamic promotional copy and user-generated content all need review before publication. Content should never be targeted or designed in ways likely to reach a substantially under-21 audience.
Trade practice rules address tied house arrangements, exclusive outlets, commercial bribery and consignment sales. These constrain any arrangement involving retailers or wholesalers beyond the direct consumer relationship. Verify before building anything involving trade partners or promotional mechanics.
Payments, Accessibility, and Other Obligations
Payment card obligations span the storefront, club billing with stored credentials, and tasting room point of sale. Tokenization keeps the environment holding sensitive card data small. Where staff take payment on a handheld at the counter, that surface falls inside the same scope and is built through custom mobile app development.
Digital accessibility applies to the public storefront and works best designed in rather than remediated later. That matters here. A checkout carrying age verification and compliance messaging has more to get right than an ordinary one.
Text message marketing carries its own consent and revocation requirements. Data protection obligations apply to the customer information a DTC operation accumulates. That includes purchase histories more sensitive than general retail data.
Where a producer runs a tasting room, on-premise service obligations including server training apply under state law.
Final Thoughts
Producers who treat alcohol ecommerce compliance as an operating condition, not overhead, build something durable. Approved labels, current permits, tracked limits, and both age checks enforced support a defensible, profitable direct business.
This is educational and strategic content, not legal advice. Confirm any position with alcohol beverage regulatory counsel and a specialist compliance provider.
Scoping the permit footprint and reporting obligations before architecture is fixed keeps compliance from becoming a rebuild. Bringing in a dedicated technology partner early keeps that scope grounded from day one. Learn more about digital transformation solutions from one of the leading AI software companies in the United States.
