Magento Developer, United States: 12 questions answered.
FAQs for US Magento merchants: TaxJar / Avalara setup, CCPA / CPRA / VCDPA / CPA / CTDPA, Stripe + Affirm + Klarna integration, ACH / Net-30, multi-warehouse routing.
How do I add ACH / Net-30 to Magento for my B2B buyers?
For ACH payments, we integrate Stripe ACH, Authorize.net eCheck, or Plaid + Dwolla, depending on your volume and risk tolerance. Stripe ACH is easiest (3-day clearing, $0.80 cap fee), but holds funds until clear. For Net-30 / Net-60, we build a customer-segment-based payment method (only B2B-approved customers see it), with a credit-limit field on the customer record (synced from Equifax or Dun & Bradstreet via API), automated invoice generation, and a dunning workflow for overdue accounts. Adobe Commerce + B2B module includes most of this out of the box; on Open Source we build it custom.
Can you set up Klarna / Afterpay / Affirm BNPL on my US Magento store?
Yes, all three have official Magento 2 modules. Affirm is the strongest US-native player (founded SF, 2012); their on-site messaging (“As low as $25/mo with Affirm”) on PDPs lifts AOV by 30-85% in our data. Klarna is bigger globally but very strong in US fashion / lifestyle. Afterpay (now Cash App Afterpay) leads in US under-30 demos. We typically wire 2 of the 3 + Apple Pay + Google Pay for full coverage. Risk + approval handled by the BNPL provider, not you.
How do you handle COPPA for stores selling to under-13s?
If your store sells to (or markets to) children under 13, toy stores, kids’ clothing, edtech, COPPA (Children’s Online Privacy Protection Act) applies. You must: (1) get verifiable parental consent before collecting any data on under-13s, (2) post a clear COPPA-specific privacy policy, (3) let parents review/delete the child’s data, (4) not condition participation on disclosure of more info than needed. We implement: age-gate at registration, parental-consent flow (email-plus or signed-form upload), data-segregation (under-13 records flagged + auto-purged on request). Penalties for non-compliance run up to $50,120 per violation, do not skip this.
How does multi-warehouse / state-by-state inventory routing work?
Magento 2.3+ ships with MSI (Multi-Source Inventory), which lets you define multiple warehouses (sources) and ship orders from the closest one. We layer on ShipperHQ for rules-based routing (e.g. “ship from CA warehouse for ZIPs west of 100, NJ warehouse for east”), dimensional-weight pricing, and rural-route fallbacks (USPS for ZIPs UPS won’t deliver to). For B2B with reserved stock, we add custom code to lock inventory per quote until expiry. ShipStation integration handles label printing + tracking back to Magento.
Is Magento Open Source enough or do I need Adobe Commerce for B2B in the US?
For most US B2B stores under $5M revenue, Magento Open Source + Hyvä + a few B2B extensions works fine. You add: customer-specific catalogs (Mageplaza / Amasty), quote-request flows, Net-30 payment, ACH gateway. Total: $50-100/yr in extension licences. Adobe Commerce ($22k+/yr licence) makes sense when you need: shared catalogs across companies, requisition lists, multi-tier corporate accounts (parent / child orgs), built-in quote workflow with seller approval, and page builder / live search / product recommendations AI features. We’ll write a candid recommendation in the audit, usually against Adobe Commerce unless you’re >$10M.
Do I need to be PCI-DSS compliant if I use Stripe?
Yes, but it’s much simpler than self-hosting card data. Using Stripe Elements or Stripe Checkout, your store never touches a raw PAN, you qualify for SAQ A (the easiest PCI tier). You still need to: (1) serve checkout over HTTPS only, (2) not log card data anywhere, (3) complete the SAQ A self-assessment annually, (4) run quarterly ASV scans (your acquirer usually provides these). We’ll lock down the Magento install (admin-URL randomisation, 2FA, restricted IPs, no card-data caching) so SAQ A actually applies.
What’s the right shipping setup for rural / island US addresses?
This trips up a lot of stores. UPS & FedEx have delivery-area surcharges for rural ZIPs, and they refuse to deliver to many PO boxes / military APO/FPO addresses. USPS covers all of them (including Alaska, Hawaii, Puerto Rico, Guam, US Virgin Islands), often cheaper. We build fallback rules: try UPS Ground first, fall back to USPS Priority for unreachable ZIPs. For Alaska / Hawaii orders we always quote USPS or surface-rate UPS, never expedited. Address validation (USPS API or Smarty Streets) catches typos before the label prints, saves real money.
How do you handle US sales tax in Magento?
Magento ships with basic table-rate tax, which is fine for a single-state store. The moment you have economic nexus in more than one state, very common after Wayfair v. South Dakota (2018), you need a real tax engine. We integrate TaxJar, Avalara AvaTax, or Vertex depending on your scale and budget. The engine pulls live rates per state, county, and even ZIP+4, files returns automatically, and keeps a full audit trail.
Can you migrate me from Shopify Plus to Magento on AWS US-East?
Yes, we’ve done several. Typical Shopify Plus → Magento migrations take 6-10 weeks. We use Magento’s Data Migration Tool for products, orders, customers; custom scripts for metafields and Shopify-specific apps. AWS US-East-1 (N. Virginia) is the standard Magento hosting region for US stores, we deploy via Adobe Commerce Cloud (managed) or self-hosted on EC2 + RDS Aurora MySQL + ElastiCache Redis + OpenSearch. Average cost: $1,200-3,500/month for managed, $600-1,800 self-hosted. URL preservation (301-redirects from Shopify URLs) is critical, we map all of them to keep SEO equity.
What’s the difference between CCPA, CPRA, VCDPA, CPA, and CTDPA, and how do I comply with all of them?
They’re state-level privacy laws, all GDPR-flavoured but with different scopes:
- CCPA (California, 2020), right to know, delete, opt-out of sale
- CPRA (California, 2023), adds “sensitive personal info” + Cal Privacy Protection Agency
- VCDPA (Virginia, 2023), opt-in for sensitive data, DPIA requirement
- CPA (Colorado, 2023), universal opt-out signal (Global Privacy Control)
- CTDPA (Connecticut, 2023), similar to CPA
Magento doesn’t handle this natively. We deploy a cookie-consent CMP (Cookiebot, OneTrust, or open-source Klaro), per-state-view opt-out flows, and a DSAR automation (data-subject-access requests handled in < 45 days). Configured per state-view, not site-wide, California users see the “Do Not Sell” link, others don’t.
How do I integrate TaxJar / Avalara / Vertex with Magento 2?
All three have official Magento 2 connectors. Setup involves: (1) install the extension, (2) wire the API key, (3) map your nexus states + product tax codes (PTCs), (4) enable address validation, (5) turn on auto-filing if eligible. We typically pick TaxJar for stores under $5M revenue (cheaper, simpler), Avalara for $5M, $50M (more PTCs, exemption-cert handling), and Vertex for enterprise + B2B with complex exemptions.
What time-zone overlap can I expect working with you from India?
From Ahmedabad (IST, UTC+5:30) we have 2-4 hours of real-time overlap with US East Coast daily, roughly 6:30 PM, 9:30 PM IST = 8:00 AM, 11:00 AM EST. We schedule status calls in that window. For US West Coast (PST, UTC-8) the overlap is just 1-2 hours late evening for us, so we run that mostly async: daily Loom recap videos (3-5 mins), written end-of-day status notes, and Slack-first communication. Most West Coast clients tell us they prefer it, they wake up to a clean status update instead of needing a call.
Not answered above?
Send the question as a brief; the answer comes back in writing within 24 hours, with a quote if it needs work.