Coworking and virtual office software in Baltimore: every mailbox needs two IDs in a USPS database, and Maryland now accepts one as a principal office

Picture three Baltimore businesses this autumn. They are composites, but every rule in their stories is real. The first is a coworking space on two floors of an old cotton mill along the Jones Falls, with a little over a hundred members. About a third of them almost never come in: they pay for a street address, for mail that is opened and scanned on request, and for a few hours of meeting rooms a month. On October 15 the community manager logged into a Postal Service database and certified, as she must every quarter, that every one of those members has a current PS Form 1583 on file and that none of their identity documents has expired. Two had, over the summer, and she spent the first half of October chasing new driver’s licenses by email.

The second is a pack-and-ship store in Towson with four hundred numbered boxes, a notary stamp and a carrier counter. In late 2023, its owner started asking every one of those box holders to come back to the counter with two identity documents and sign a new form, because the Postal Service had given operators about nine months to move every existing customer into its new database. Some came the first week, some took the whole nine months, and a few never came back, so their boxes were closed and their mail went into the six-month remailing routine the rules require.

The third is a founder in Remington who formed a limited liability company in August and rented a downtown virtual office so that her home address would not appear on her filings, her invoices or her website. In September she listed the new address on Google, and the profile was suspended within days. In October her bank’s onboarding form asked whether the address was a mail drop, because its address-verification service had already said so.

All three are buying or selling the same product, and it is not a desk. It is an address. It looks like real estate and it is sold like software, with monthly plans, add-ons and an online checkout, but it is regulated like mail, by parties who are neither the seller nor the buyer. The Postal Service decides what has to be collected before mail can be delivered to it, Google decides whether a business can appear on the map at it, payment processors and banks decide what it is good for, and Maryland decides which of the services sold with it are taxable and what an operator owes the people whose passports it now holds. Generic coworking software was built for the desk. The address is where the rules are.

This guide is for Baltimore operators of coworking spaces, business centers, virtual offices and mailbox stores, in the City and across Baltimore County, and for anyone deciding whether to build their own software or keep renting it. We start with the local market and what the national platforms charge, then read the Postal Service’s 2023 and 2024 rules, Google’s listing guidelines and Maryland’s statutes as the data model they really are, report what 24 Baltimore-area operators’ websites say, and show how to sell an address online without selling something the rules do not allow. We are a small studio that builds custom software at a fixed price, and we will say where renting is the better answer, because it often is.

What Baltimore’s coworking, virtual-office and mailbox trade looks like

Start with a small surprise: officially, this trade does not exist as one industry. In the federal industry classification the Census Bureau uses, “coworking space rental or leasing” and “executive suites” sit in code 531120, alongside every landlord of an office building. “Private mailbox rental centers” are 561431, a business-services code. “Voice mailbox services,” the answering part of a virtual office, are 561421. A single virtual-office plan with an address, mail handling and a receptionist answering the phone in the member’s company name spans three industries, which is the first hint that the line items on its invoice are not interchangeable. And because coworking shares its code with every office landlord, no official count of coworking spaces exists.

The mailbox half can be counted. County Business Patterns, the Census Bureau’s count of establishments with paid employees, shows a small trade and a suburban one. Baltimore County has nearly three times as many private mail centers as the City, which fits a business built largely on franchised pack-and-ship stores in strip centers.

Treat those numbers as floors, and in one respect as a puzzle. County Business Patterns counts only businesses with employees, so a mailbox desk run by its owner is invisible to it, and the nonemployer row, which also counts copy shops, puts a ceiling on how many of those there are. The ZIP-level version of the same data shows no private mail center in any Baltimore City ZIP Code at all, because since 2017 the Bureau publishes a cell only if it contains three or more establishments; eight City establishments spread across several ZIP Codes simply vanish. And the newest year available is 2023; the Bureau’s methodology page now says it is “no longer current” while it works out how to comply with a Commerce Department order prohibiting the noise infusion it used to protect small cells. The Postal Service has a better count of its own: in February 2025, according to its Inspector General, “over 1.6 million customers nationwide (through nearly 12,000 CMRAs) were registered for this service,” about 133 customers per agency, and “the Postal Service does not collect any related revenues.”

Coworking can only be estimated, from listings. Yardi’s coworking index counts 118 locations and 1.5 million square feet in what it calls the Baltimore market, which reaches Frederick and Annapolis. That is 1.5% of the region’s office space against 2.45% nationally, yet 3.6 locations per 100,000 residents against 2.8, so Baltimore’s spaces are more numerous and smaller than the national average, about 12,700 square feet each against 17,500. Nationally, CoworkingCafe’s second-quarter 2026 report counts 9,384 locations, about 77% of them independent or regional, with median prices of $219 a month for a membership, $34 for a day pass, $45 an hour for a meeting room and $169 a month for a virtual office. In our own reading of Baltimore operators’ websites, reported in full below, the independents undercut those medians for a day pass ($25), a hot desk ($175 a month) and a virtual-office or mail plan ($52.50), while a dedicated desk costs $324.50, above the national membership median, and the smallest private office $610.

The national brands are present, but not as heavily as in other cities. IWG, the parent of Regus, Spaces and HQ, had 4,974 centers worldwide at the end of June 2026, and its Baltimore page lists 16, of which 12 are in the City or the County: five in the City, between downtown, the Inner Harbor, Fells Point and Stadium Square in South Baltimore, and seven in the County, in Towson, Pikesville, Owings Mills and Hunt Valley. Their median published starting prices work out at about $91 a month for a business address and $55 for a day of coworking. CBRE took full ownership of Industrious in January 2025 for a total consideration of $841 million, but Industrious has no Baltimore page. WeWork left bankruptcy in June 2024 with Yardi people on its board, and its Baltimore location page returns a 404. On the mailbox side, The UPS Store reports 5,603 locations in the United States, 17 of them in Baltimore City or County, and seven national virtual-address networks list 54 Baltimore-area addresses between them, which we come back to in the census.

The buildings around them are still emptier than before the pandemic, though how much emptier depends on whose inventory you read. For the third quarter of 2026, CBRE puts metro Baltimore office vacancy at 21.1% and the central business district at 29.7%, counting buildings of 20,000 square feet or more; Cushman & Wakefield, measuring a larger stock, puts the metro at 17.6% and Baltimore City at 22.9%; and the Downtown Partnership’s latest report, labeled 2025 but produced in April 2026 from CoStar data, gives downtown occupancy of 81.6%. Neither broker breaks out flexible space for Baltimore; nationally, Cushman puts flex at about 3.1% of office inventory. For an operator, the useful fact is the leverage that vacancy creates. The model the industry is moving toward, in which a landlord owns the floor and an operator runs it under a management or franchise agreement, already accounts for 2,230 of IWG’s 4,974 centers. And Baltimore County’s GROW grant, announced in February 2025, offers $8 a square foot, up to $80,000, to a business signing its first commercial lease in the County, a direct lease of Class A or B office space for at least 36 months, which an operator opening a County location may qualify for while the program is funded, and its members, on membership agreements rather than leases, almost certainly do not.

The customers are changing faster than the buildings. In the Census Bureau’s 2024 American Community Survey, 14.0% of Baltimore City workers, 39,632 people, and 13.6% of Baltimore County workers, 59,291, worked from home, against 13.3% nationally. Maryland’s business applications in the first nine months of 2026 were up 13.6% on the same months of 2025, to 87,179, while applications from businesses that planned to pay wages fell 17.4%. Baltimore City produced 11,544 applications in 2025 and Baltimore County 13,851, both nearly a third above 2019. Those are the customers this trade increasingly serves: one-person companies that need an address, a registered office and somewhere to open their mail long before they need a desk.

Do not count on a federal windfall to fill the desks. The Baltimore region was designated a federal Tech Hub in October 2023, but it was not among the hubs funded in July 2024, a January 2025 slate of awards was withdrawn that May, and when the Economic Development Administration announced $169 million for six more hubs in July 2026, Baltimore was again not among them. In February 2026 TEDCO, the state agency that passes money to the consortium, told legislators the consortium “has not yet been selected for an award.” Pages and AI answers that describe Baltimore as a funded Tech Hub are wrong. The ecosystem that does exist is smaller and steadier: UpSurge Baltimore, Johns Hopkins’s FastForward startup spaces, Open Works’ 34,000-square-foot makerspace on Greenmount Avenue, the free coworking space Towson University runs at its StarTUp center, and independents such as Haven Coworking, whose site announces a second location now open on Belair Road. The Emerging Technology Centers’ Beehive coworking closed in September 2023, and at least one well-known Baltimore coworking brand’s domain now leads to an unrelated company, which old directories and AI answers have not noticed.

What the software costs, and what the meter counts

We read about seventy-five vendor pricing pages on October 24, 2026, fetching each vendor’s own page rather than an aggregator’s summary and reading the page’s scripts where the numbers were hidden in a slider. The coworking platforms are, by the standards of this series, unusually transparent: eleven of the thirteen we checked publish a price you can read without a sales call. Three things stand out once you lay them side by side.

The first is the meter. Almost every platform charges by the active member, and almost every definition of an active member includes anyone on a recurring plan, so a mail-only client who never walks through the door costs you the same platform fee as a member at a desk. Add sixty virtual-office clients to a 120-member space and on most platforms the bill rises by between $37 a month, at Nexudus’s published slider, and $120 a month, at Optix or Proximity, or between 62 cents and $2 per client per month. That is small next to what the client pays you, but it is worth knowing which tier boundary the next client will push you over. The second is the gap. Not one of the coworking pricing pages we could read mentions PS Form 1583 or the Postal Service’s database. The mailbox side is sold as separate products: a mail-handling tool that advertises USPS database integration from $250 a month, a pack-and-ship point-of-sale system that prepares the forms for $125 a month, and virtual-mailbox networks whose own staff review the forms and whose terms for operators are not published at all. The third is the network economics. Anytime Mailbox alone lists 56 Maryland locations, and neither it nor iPostal1, the other large address network, publishes what an operator pays or keeps.

The meters around the platform are where most of the money goes, and several of them are not software at all. Payment processing is the biggest: Stripe’s published card rate of 2.9% plus 30 cents takes $14.80 from a $500 private-office invoice, while its bank-transfer rate of 0.8%, capped at $5, takes $4, and Stripe Billing adds 0.7% on top for recurring plans. Door access is the least transparent line in the stack. Proximity publishes $99 a location; Kisi shows “starting at $99” without saying per what; Avigilon Alta, Brivo, Salto KS and DOOR, the company formerly called Latch, publish no price at all. Identity checks are cheap: $1.50 per document-and-selfie check at Stripe Identity, $0.80 to $1.89 at Veriff with monthly minimums of $49 to $209. Remote notarization is not: Proof, OneNotary and NotaryCam all charge about $25 a session, and BlueNotary’s prices start at $25. Since the 2024 rule lets the operator witness the 1583 on a video call, that $25 can disappear from your checkout entirely, although some virtual-mailbox help pages still tell renters the form must be notarized, which is a network’s policy rather than the Postal Service’s rule.

Put those prices together for two realistic Baltimore businesses and the totals are modest. A coworking space with 120 members and 60 virtual-office clients, one location, four doors and two meeting rooms pays between $5,412 and $10,176 a year in published software fees across the three complete stacks we could price, or $4,548 plus an unpublished mail-network fee on a fourth, before door licenses and hardware, which nobody but Proximity publishes. An independent mailbox store with 400 boxes and 80 virtual-mailbox clients can run on a $125-a-month point of sale for $1,500 a year, or $4,500 to $5,100 with a compliance and mail-automation tool added, which works out at between 26 and 89 cents per customer per month.

Two numbers matter more than any of those. One is the time the Postal Service’s database takes. If keying in a form really takes the twenty minutes iPostal1’s operator FAQ estimates, the 480 customers of our model mailbox store represent 160 staff hours of data entry the first time, more where a box has several addressees, and every new member, every expired license and every closed box adds a few minutes more. The other is the competing product. The Postal Service’s own price list, Notice 123, effective October 4, 2026, sets prices by fee group, and its box-finder put most Baltimore post offices in the group where the smallest box costs $111 for six months and the largest $379. It showed the main post office on East Fayette Street charging $222 a year for the smallest box and $758 for the largest. Roland Park and the Southeast station charge half that, $110 a year, from a cheaper fee group, so the same box costs twice as much in one part of the City as another. A twelve-month term costs exactly twice the six-month price, a three-month term requires automatic renewal, and the Postal Service’s Street Addressing option lets a box holder use the post office’s street address with the box number and receive other carriers’ packages there, which is the post office competing for the same customer who wants a street address. A private mailbox has to be worth more than that, and the difference is service: scanning, forwarding, longer hours and somebody who knows your name.

Since July 2023, every private mailbox lives in a USPS database

The most important fact about software in this trade has nothing to do with desks, doors or meeting rooms. It is a definition. The Domestic Mail Manual, the Postal Service’s rulebook, which federal regulations incorporate by reference, defines a commercial mail receiving agency as “a business that, in whole or in part, accepts the delivery of U.S. Mail on behalf of another person or entity as a business service.” It then names two kinds of business that rarely think of themselves that way. “An office business center (OBC) is a business that operates primarily to provide private office facilities and other business support services to individuals or firms,” section 508.1.8.1 says, and “OBCs are considered CMRAs for Postal Service purposes and must comply with the requirements in 1.8.” So is any business that operates primarily to reship or redeliver other people’s mail. If a carrier leaves your members’ mail at your front desk and you hand it out, scan it or forward it, the Postal Service puts you in the same category as a pack-and-ship store with a wall of numbered boxes, and the rest of this section applies to you.

Until July 2023 that sentence had an escape hatch, and a coworking operator could write its member agreements around it. The old section 508.1.8.4, “Office Business Center Acting as a CMRA,” treated a member as a mailbox customer only in some cases. A member whose written agreement gave them the full-time use of a private office was not one, and neither was a member whose agreement provided all of the following: at least 16 hours a month of private-office use at market price, full-time reception with live telephone answering and after-hours voicemail, a listing in the building directory, and conference rooms and other business services on demand. The 2023 rewrite deleted the section and replaced it with the flat statement that office business centers “are considered CMRAs.” Read with the rest of 508.1.8, the plain reading, and the one iPostal1’s operator FAQ now gives, is that every member who receives mail through the center’s single delivery point needs a 1583 on file, private office or not. A member agreement drafted to fit the old test no longer keeps anyone out of the database.

The same rewrite gave the whole category a new database. On May 19, 2023, the Postal Service published a final rule that moved PS Form 1583, the “Application for Delivery of Mail Through Agent” that mailbox renters have signed in one version or another since at least 1967, out of filing cabinets and into an electronic USPS CMRA Customer Registration Database. The rule’s own dates do not quite agree with each other (its heading says it took effect on July 1, 2023, its answers to commenters say July 9, and the July 9 edition of the manual is the one that carries the new text), but the consequence was the same for every operator. Each received a letter with instructions for the database and then had about nine months to collect a brand-new 1583, with fresh copies of two identity documents, from every existing box holder and enter it. Couples who had shared one form for years each had to fill in their own: “all customers (including spouses) are required to complete a new PS Form 1583,” the Postal Service told a commenter who asked about grandfathering. Every new customer since then goes into the database when they sign.

Read the current manual as a list of duties and it turns into a data model. The owner or manager registers the business on PS Form 1583-A and, since 2023, also completes a 1583 about themselves, which the Postal Service justified as a security measure so that their documents, too, could be checked automatically. Each customer completes a 1583 and shows two current documents: a primary one with a photograph, such as a state driver’s license or ID card, a U.S. or foreign passport, a military or federal ID, a green card or a naturalization certificate, and a secondary one that ties the person to the home or business address written on the form, such as a lease, a mortgage or deed of trust, a voter or vehicle registration card, a home or vehicle insurance policy, an I-94 arrival record or a second photo ID. Social Security cards, birth certificates and credit cards do not count, and the Postal Service said in 2023 that corporate ID cards and utility bills no longer count for this form either. If the name or address on the application does not match the documents, “the CMRA must deny the application.” The operator then types the form’s contents into the database, uploads “a clear and legible copy of each identification document,” keeps at least a digital copy of the signed form at the business, available “at all times for examination by Postal Service representatives and Postal Service inspectors,” and may destroy its own copies of the IDs once they are uploaded.

Two details in that paragraph trip up software that was built for desks. The first is that the person and the mailbox are different things. A separate 1583 is required “for each addressee of a Private Mail Box (PMB) for residential or personal use,” spouses included, while a parent may list minors on their own form. When mail is to be addressed to a company, the applicant is still an individual: the Postal Service’s answer in 2023 was that “the applicant on PS Form 1583 is always an individual,” who must add the business’s name, address and the county and state or country where it is registered. A coworking member record that holds one company, one billing contact and one plan cannot represent a personal box shared by two adults, each with their own form, documents and expiry dates, or a business box with an officer who signs for the company, an authorized pickup person with their own two documents and a list of employees who receive mail there. The second is that the form is not optional paperwork you can redesign. “A CMRA must not modify or alter Form 1583 or Form 1583-A,” and mail for an addressee on an altered form must go back to the sender. Your signup flow can collect the data in whatever order makes sense, but the document the member signs has to be the Postal Service’s.

The October 15 problem

The clause that changes software the most is two sentences long. The operator “must ensure that all its addressees (customers) have a current PS Form 1583 on file and that information for each addressee is up to date in the USPS CMRA Customer Registration Database,” including “termination dates for any PMBs closed in the previous quarter,” and “must certify in the USPS CMRA Customer Registration Database each quarter (certification due on January 15, April 15, July 15, and October 15), that every PS Form 1583 it submitted is current, all termination dates have been updated, and no identification documents are expired.” The manual adds, in case anyone missed it, that “any expired, illegible, or unclear identification or address documents uploaded into the CMRA Customer Registration Database will be considered not in compliance.”

Read the last six words of the certification again. A driver’s license that was valid when a member signed up in 2023 and expires on her birthday in November puts the operator out of compliance at the next quarterly certification, although the member has done nothing wrong and still pays every month. The database “will automatically notify the CMRA when a photo identification document entered has expired,” the Postal Service promised in 2023, although its Inspector General still listed that alert as a planned enhancement in 2025, so an operator should not rely on it. Even when the warning arrives, the member does not. Somebody has to find her, ask for the new license, get it photographed or scanned and upload it before January 15. The arithmetic is unglamorous and it is the whole job. Maryland licenses for drivers aged 21 and over run for up to eight years and expire on the holder’s birthday; a license issued to someone with temporary lawful status in the United States can expire after a year or at the end of their authorized stay, which matters to anyone selling Baltimore addresses to founders from abroad. If 400 box holders carry eight-year licenses whose expiry dates are spread evenly across the calendar, about 50 of them expire in a year, roughly one a week, and every one is a phone call, a counter visit or a video session that has to happen before the next quarterly date. The Maryland Motor Vehicle Administration mails its own renewal notice at least 60 days ahead, which is a sensible lead time to copy.

The penalty for falling behind is not a fine. It is the mail. A postmaster may, with approval from the next level up and notice to the Postal Inspector in Charge, suspend delivery to a CMRA that fails to comply after a written notice that lists the violations and gives it 30 days to fix them; once a suspension takes effect, the carrier returns the mail to its senders marked “Delivery Suspended to Commercial Mail Receiving Agency.” For a business whose product is mail, that is not a compliance problem in the abstract. It is every member’s bank statements, court notices and tax letters going back to the sender at once. Separately, the Chief Postal Inspector can order an operator to withhold all mail for a single mailbox suspected of being used to break federal law, and the operator must hand that mail back to the carrier the next business day. Since 2023 the manual has also said, as it long said of post office boxes, that a private mailbox “must not be used for, or in connection with, a scheme or enterprise that violates any federal, state, or local law,” and the Postal Service said the new database would give operators a way to report suspicious mailboxes to the Inspection Service confidentially.

None of this is new to the people who run mailbox stores; the paper version of the rule is older than most of them. What changed is that the Postal Service now holds the records electronically, can see an expired document without visiting, and expects a quarterly attestation from you, and its Inspector General has started counting. Its June 2025 audit found that “over 1.6 million customers nationwide (through nearly 12,000 CMRAs) were registered,” that only 39% of the data had been uploaded to the new database by February 2025, that 69% of the operator applications it sampled were on an outdated form and 49% had identification problems, including “wholesale store IDs or credit cards,” and that 21 of 24 local postal managers were not doing the mail sampling the program requires. It also noted that the Postal Service collects no revenue from the program and suggested registration fees; management declined, and in March 2026 put its own cost of running the program at about $1.5 million a year. Programs that cost money and earn nothing tend to be tightened, not loosened. A spreadsheet of box numbers can survive a visit from an inspector. It cannot certify, four times a year, that nobody’s license has expired.

The signature can happen on a video call. The form still cannot be filled in online

For most of the form’s life, the hard part of opening a mailbox was getting the customer into the room. The Postal Service has required the agent’s owner or manager to sign PS Form 1583 since at least 1967 and to witness the customer’s signature since 1973, and it was not until 1982 that a notary public was allowed to witness it instead, which is how mail-scanning services with no counter of their own came to depend on notaries. In December 2023 the Postal Service proposed a clarification, and on May 2, 2024, it published the final rule, effective the day before. The customer “must sign or confirm his or her signature in the physical or virtual (in real-time audio and video) presence of the CMRA owner or manager, or authorized employee, or acknowledge his or her signature in the physical or virtual (in real-time audio and video) presence of a notary public commissioned in a United States state, territory, possession, or the District of Columbia.”

The only comment on the proposal came from a company that sells remote notarizations, and it argued that letting an operator witness a signature over video did not control fraud well enough and that operators should at least record the sessions. The Postal Service disagreed on both counts. It had never prescribed the steps for witnessing a signature in person, it said, so it would not prescribe them for a video call either, and “the burden and expense associated with the proposed additional recording and maintenance/storage requirements also must be balanced against need for such additional measures, and the Postal Service has not yet determined such a need exists.” It also changed one verb. An operator does not “acknowledge” a signature, because “the Postal Service has no authority to confer any notarial authority on any person”; the customer “confirms” it in the operator’s presence instead.

So since May 2024 a Baltimore coworking space can open a mailbox for a founder in Kaunas, Austin or Silver Spring without either of them traveling: the founder fills in the form, holds two documents up to the camera, signs or confirms the signature while the manager watches, and the manager checks that the documents match the form, signs as the agent and uploads the images. What the Postal Service did not allow matters as much as what it did. In 2023, commenters asked for an online version of the 1583 that customers could complete by themselves, and the Postal Service refused: “Given the relationship between the CMRA and the PMB applicant and the need for in person identity proofing, the Postal Service determined to maintain the in-person application process between the CMRA and its customer.” Another commenter asked it to endorse a digital identity-verification process, the selfie-and-document check that online banks use, and it replied that the form must be notarized or the applicant’s identity verified by a CMRA employee. The video option came later and runs through a person, not around one.

That gives the online sale of a mailbox a shape no ordinary checkout has. The plan, the price and the payment can be completely self-service. The thing the customer is actually buying, the right to have mail delivered to them at your address, cannot be switched on until a human being has watched them sign. Every serious operator therefore runs two pipelines that most software treats as one: a commercial one that ends at payment, and a postal one that ends when a staff member or a notary has witnessed the signature, the database entry is made and the images are uploaded. Between the two sits a queue of people who have paid and cannot yet receive mail, and a manager who needs to know who they are, which video slot they booked and which of them uploaded a passport photo too blurry for the Postal Service to accept. If the customer prefers a notary, Maryland makes that easy as well: a Maryland notary may notarize remotely for a signer located anywhere in the United States, and abroad when the record is headed for a U.S. government body, as this one is. The fee is capped at $30 for a remote act and $8 in person, and the notary must keep the audio-video recording and the journal for ten years.

None of this makes the paper form obsolete, and that is worth saying plainly to anyone who sells a digital-only experience. The member’s signed 1583 is still a Postal Service form that must not be altered, it still has to be on file at the business “at all times,” and its contents still have to be typed into the Postal Service’s database by somebody. When commenters asked in 2023 for an interface that would let their systems send the data directly, the Postal Service said it was “exploring the option of allowing an API process to upload these data” but that “such a facility would not be available in the first year.” Three years later we could find no public interface. The database lives inside the Postal Service’s Business Customer Gateway, and the Inspector General reported in 2025 that the uploads still missing depended on enhancements “such as data transfer capabilities.” The market has improvised around the gap. Anytime Mailbox offers to key in its partner locations’ forms after being added as an administrator of their gateway accounts, from $3 a record, and iPostal1’s operator FAQ estimates about twenty minutes per form for anyone typing them in by hand. Any software that promises to automate the whole thing should be asked exactly how.

The member leaves. The mail keeps coming for six months

Membership software ends a relationship with a cancellation date and a final invoice. The Postal Service ends it six months later, and the six months belong to you. When a mailbox customer leaves, the manual says, “neither the addressee nor the CMRA will file a change-of-address order with the Post Office.” The operator writes the termination date on its copy of the 1583, enters it in the Customer Registration Database “as soon as practical” and keeps the endorsed form for at least six months. And it “must remail mail intended for the addressee (customer) for at least 6 months after the termination date,” with new postage, to the forwarding address the customer gave on the form, which also has to be in the database. If the customer collected mail at the counter and never gave a forwarding address, the operator has to get one at termination and record it in both places.

There are exits from the obligation, and they are narrow. A customer can tell the operator in writing, in the service agreement or a separate document, that mail, or certain types of mail, should not be remailed. Those instructions cannot say that the operator should refuse the mail, return it to the sender, hold it for six months and then hand it back, or put it back into the mail without new postage. During those six months the operator “may not refuse delivery of mail if the mail is for an addressee who is a customer or former customer.” Only after the six months may it return First-Class Mail, Priority Mail, Priority Mail Express, USPS Ground Advantage retail parcels and accountable mail to the Post Office, without postage, the next business day after it arrives, endorsed “Undeliverable, Commercial Mail Receiving Agency, No Authorization to Receive Mail for this Addressee.” If remailed pieces come back marked “Moved, Left No Address,” the operator may return later mail early, but only with the postmaster’s or station manager’s approval and evidence that it really did remail to the address on file. Mail for anyone with no 1583 on file at all goes back the next business day, and none of it may be dropped in a collection box.

Three things follow for the software, and none of them is exotic. The first is that “canceled” is not a terminal state. A member who leaves on October 31 is a former customer with live postal obligations until at least April 30, and the system has to know their forwarding address, their written instructions if they gave any, and every piece that arrived and where it went, because “upon request, the agent must provide to the USPS all addresses to which the CMRA remails mail.” The second is that the remailing costs money after the revenue has stopped. Postage for six months of a busy small company’s mail is not trivial, and an operator who has not priced it into a closing fee, a deposit or the last invoice is paying it out of margin. The third is the date. The termination date entered in the database is the one the next quarterly certification looks at, and the six-month clock starts from it, so a member who stops paying in September but whose box is only formally closed in December has quietly moved both the operator’s compliance date and its remailing window by three months. The Postal Service, for its part, keeps the records for two years after a mailbox is closed, according to the privacy notice it published for the new database.

PMB 234, #234, and the flag that follows the address everywhere

The product has a format, and the format is fixed by the Postal Service rather than by your marketing. The manual says a CMRA “must represent its delivery address designation for the intended addressees by the use of ‘PMB’ (private mailbox) or the alternative ‘#’ sign,” and it prints the layouts it wants: the addressee’s name, then “PMB 234” or “#234,” then the street address, then the city, state and ZIP Code, or the same thing on three lines with the box number at the end of the street line. One exception catches many business centers. When the operator’s own address already contains a secondary element such as a suite or floor number, the member has to use “PMB” in the three-line format, as in 10 MAIN ST STE 11 PMB 234, and “it is not permissible to combine the secondary address element of the physical location of the CMRA address and the CMRA customer private mailbox number, e.g., 10 MAIN ST STE 11-234.” Mail without the box designation can come back endorsed “Undeliverable as Addressed, Missing PMB or # Sign.”

Many virtual-office sales pages offer something else: a “suite” of your own, so the address looks like an office rather than a mailbox. We understand the appeal, and so does every customer who has been told that a PMB looks small. But the Postal Service’s rule leaves no room for it, and a suite number that does not exist in the building is also exactly the kind of detail that address-matching software flags. In our census of Baltimore-area operators, three of the eleven that sell an address offer mail-only customers a suite number of their own. Address software will not keep the secret: under the Postal Service’s matching rules for certified address software, in force since August 2023, an unconfirmed “STE” or “APT” at a CMRA address is rewritten to “PMB,” so “Suite 234” comes out of a bank’s or a marketplace’s address check as PMB 234 anyway.

The flag is the larger point. The Postal Service knows which addresses are mail-receiving agencies, because they registered with it, and its address data marks them. When it set up the new database it published the routine uses of the records, and the first one specific to this system reads: “Information may be disclosed for the purpose of identifying an address as an address of an agent to whom mail is delivered on behalf of other persons. This routine use does not authorize the disclosure of the identities of persons on behalf of whom agents receive mail.” In plain terms, anyone who validates addresses against the Postal Service’s data can learn that your address is a CMRA, though not who rents a box there. The flag is older than most of the businesses that carry it. The Postal Service decided in 1994 that “the identification of CMRA addresses would be an effective tool in combating credit card fraud,” and today its address data, licensed to every certified address-validation product, marks such addresses with a CMRA indicator; its own Addresses API returns the indicator as a field. Smarty, Google’s Address Validation API, Lob and Melissa all pass it through to the software that banks, payment processors and marketplaces run when a business signs up.

What those systems do with the flag varies, and the details matter more than the rumors. Stripe still processes card payments for a business whose address is a mailbox, but since July 1, 2025, it has checked addresses against a proprietary list for its money-management products, Issuing, Treasury and Opal, and there it turns away addresses belonging to “registered agents, mailbox services, or virtual address services,” giving existing accounts 30 days to change a flagged address. Mercury, the fintech popular with startups, will not take a virtual address or a mail-receiving agency as a company’s physical address, and Brex and Relay take similar positions, but Mercury accepts proof of occupancy at a coworking space, “such as a signed lease agreement or invoice.” That sentence deserves a coworking operator’s attention: a member invoice that shows the company name and the full street address with its unit number has become a compliance document, and a well-designed invoice template is a feature. The federal contractor registry, SAM.gov, wants a physical address too, and tells entities that use a virtual office to give the address where they keep their books and records.

For an operator, the lesson is to sell the address as what it is. Every plan page should show the member’s address in the correct format before they buy, say that it will be recognized as a mail-receiving address, and list the common uses it serves well (mail, a registered office where the law allows it, invoices, a website contact page, client meetings by appointment) and the ones it may not (a Google Business Profile, some bank and payment-processor verifications, licenses that require a place of business, which the Maryland section below lists). An operator who explains this up front loses a few sales to competitors who do not, and keeps the members it does sign.

Google will map your coworking space, not the companies that borrow its address

The Postal Service decides who may receive mail at your address. Google decides whether anyone can find a business there, and its answer for most virtual-office customers is no. The current guidelines for representing your business on Google settle it in a few lines that every operator in this trade should know by heart. “P.O. boxes or mailboxes located at remote locations aren’t acceptable.” A business that rents a mailing address but does not operate from it, which Google calls a virtual office, “isn’t eligible for a Business Profile.” An office at a co-working space can be listed only if it keeps clear signage, receives customers there during business hours and is “staffed during business hours by your business staff.” Elsewhere the same page says businesses showing their address “should maintain permanent fixed signage of their business name at the address,” and that service-area businesses, the plumbers, consultants and cleaners who go to their customers, “can’t list a ‘virtual’ office unless that office is staffed during business hours.” The co-working clause is nearly six years old: archived copies of the page show it replacing an older and looser rule about “temporary” virtual offices between November 2020 and February 2021, and the signage sentence arriving in the second half of 2022.

Notice who these rules are about. Your own business, the coworking space or the mailbox store, is a real place with your name on the door, staff behind the counter and customers walking in during posted hours, and it belongs on Google like any shop. Your members are a different matter. A member on a mail-only plan rents exactly what Google calls a virtual office. A member with a hot desk has no sign and no fixed place. Even a member with a private office qualifies only if all three conditions hold: a clear sign with the business name, customers received there during business hours, and the member’s own staff present during those hours. A founder who comes in on Tuesdays and Thursdays and meets clients over video satisfies neither the second nor the third, however beautiful the office.

This matters to your software because it matters to your sales. The single most attractive promise a virtual-office seller can make to a new business is visibility, and the promise “use our address on Google Maps” is the one Google prohibits most explicitly. Members who try anyway tend to discover the rule through a suspension, often after they have printed the address on cards and invoices. Google says it may suspend profiles that do not follow its guidelines, and the evidence its appeal tool suggests is official business registration, a business license, tax certificates or utility bills, with the business name and address matching the profile; a mailbox renter rarely has an electricity bill at the mailbox. Verification is no easier. Google recommends video verification for businesses that are eligible for it, and on a live video call the owner is expected to show outside signs or a nearby street sign, the business’s products or branded equipment, and proof of management such as access to employee-only areas or the keys that open the premises. A mail plan can show the street sign but not the other two. Apple, whose business listings product is now called Apple Business, takes the same line in different words: a location must be a “distinct, customer-facing physical place” that the public can find and visit, which a mail plan is not, although Apple does let a real location publish separate hours for services such as mailbox pickup.

The honest version of the product is not hard to describe, and it is a better product. For members who want to appear on the map, a coworking space can sell a private office whose plan includes a permanent sign with the member’s business name, reception of the member’s customers during stated hours and a written reminder that the member’s own staff must be there during those hours, and it can say plainly that these are Google’s conditions, not the operator’s. For everyone else, the address is a registered office, a mailing address, a place to meet clients by appointment and a line on the website’s contact page, which is valuable. A member who visits customers can still have a Business Profile as a service-area business, with a service area and no address shown; Google’s own instruction is that a business that does not serve customers at its address should remove the address from its profile. A member who serves customers only online is not eligible for a profile at all, since Google requires “in-person contact with customers during its stated hours” and lists “online-only businesses” among the ineligible.

The loss is no longer only a pin on a map. Google’s guide to its generative AI search features, published in May 2026, says a Business Profile can help a business’s products and services show up in AI responses too, so a member without one is also missing from a source Google’s AI answers draw on. The operators have a version of the same problem. When we ran the four searches a Baltimore founder would run, for a coworking space, a virtual office, a mailbox rental and a day pass, the 36 results included no independent local operator’s own website at all; the slots went mostly to directories, marketplaces and national networks. That part an operator can fix, and the e-commerce section below is about how.

The Maryland layer: on October 1, a mailbox became a principal office

Three weeks before we wrote this, Maryland changed the rule that most virtual-office customers ask about first. Every Maryland corporation and limited liability company must have a principal office in the state and a resident agent. For years the State Department of Assessments and Taxation (SDAT) insisted that the principal office be a street address where the business actually was: its instructions listed a “post office box, drop box, mail rental facility, virtual address, Staples Store, UPS Store, or storage facility” as unacceptable. Chapter 247 of 2026, House Bill 308, signed on April 28 and in force since October 1, 2026, rewrote the definition. A principal office may now be “an address in this State supplied by a commercial mail receiving agency with which a Maryland corporation, limited liability company, limited liability partnership, or limited partnership has a valid commercial mail receiving agreement in accordance with U.S. Postal Service regulations,” and a commercial mail receiving agency is defined as “a person that is authorized by the U.S. Postal Service to accept the delivery of mail on behalf of another person as a business service.”

The new law ties Maryland’s corporate register to the postal rules described above, and it comes with a condition the customer accepts by using it. Under the new section 1-407, an entity that designates a mail-receiving agency’s address as its principal office “acknowledges that the mail receiving agency shall provide the contact information included in USPS Form 1583 to the Department or a law enforcement agency on request.” In other words, the 1583 is now, in effect, a Maryland corporate record too. The fiscal note expected that mail-receiving agencies “may benefit,” which is a polite way of saying that every Baltimore operator with a registered mailbox wall now has a product it could not sell for this purpose in September.

Three cautions keep that product honest. First, the change is limited to an address supplied by a USPS-authorized agency under a valid agreement, which means a registered CMRA with a current 1583 on file; a “virtual address” from a business that is not a registered CMRA is not covered. Second, the resident-agent rule did not change. SDAT’s own form for articles of organization, revised in May 2026, still asks for the resident agent’s “complete physical address” and says “P.O. Boxes cannot be accepted,” and a resident agent must be an individual residing in Maryland or a Maryland entity. The cost of getting that wrong is on record: in Mayor & City Council of Baltimore v. Prime Realty Associates (2020), SDAT rejected an LLC’s post-office-box address for its agent, the City served SDAT instead, and the LLC’s building went into receivership and was sold; Maryland’s highest court held that “it is the LLC’s obligation to accurately record its resident agent’s address with SDAT.” Third, the state’s own pages have not caught up. On October 24, 2026, Maryland Business Express still told filers to use “a real street address, not a P.O. Box, post office, UPS store, mailbox service, or virtual address,” and the General Assembly’s online statute pages did not yet show section 1-407. An AI assistant that reads either will give your customers the old answer.

For software, that means three separate flags on every address product, not one. An address can be eligible as a principal office (a registered CMRA address with an active agreement and a current form), it can be offered with a resident-agent service (a staffed physical address where process can be received, never a box number), and it can be eligible or not for a particular license, which is a third question. The signup flow should record the customer’s section 1-407 acknowledgment, and the operator needs a simple log of every request for 1583 contact information from the Department or the police: who asked, when, what was released and on what basis.

Which parts of a virtual-office plan Maryland taxes

“Maryland does not tax services” is nearly true and dangerous in this trade. Space is not taxed: a Comptroller regulation says “receipts from the rental of banquet and other public rooms and business quarters are not subject to the tax,” which covers offices and meeting rooms, and day passes and hot desks most likely follow. Mailbox rental is not on the list of taxable services. A telephone answering service is: it is item 7 of the enumerated services in Tax-General section 11-101(m), taxed at 6%, and the statute defines it as a service that “consists exclusively of the taking of messages, either by an automated system or by a live operator, and transmitting the messages to the customer,” with an exclusion for answering that is incidental and less than 5% of the provider’s gross receipts. A virtual-office plan that bundles an address, mail handling and a message-taking service therefore mixes a non-taxable service with a taxable one, and we found no Comptroller guidance on how to tax the bundle. The safe design is to price the answering separately: on a $99 plan with $30 of answering stated on its own line, the tax is $1.80 a month, while the same plan taxed as a single price would carry $5.94, a difference of $49.68 per customer per year.

The newer question is the 3% tax on data and information technology services that took effect on July 1, 2025. The Comptroller’s regulation, in force since March 2, 2026, lists “optical scanning,” “data capture imaging” and “cloud storage” among the taxable services and says that “each service the vendor provides must be evaluated individually.” A digital-mailbox add-on that scans the contents of a member’s letters and keeps the images online looks a lot like those words. Mailbox rental itself sits in a different industry code that the tax does not reach. We found no ruling on the combination, so this is genuinely ambiguous; the lowest-risk approach is to price scanning and storage as a separate add-on and collect 3% on it, which on a $15 add-on is 45 cents a month. Our guide to the 3% tax explains the rest of it, including the fact that the operator’s own coworking software subscription is taxable at 3% when bought for the business.

Licenses a mailbox cannot hold

Some of your customers will want the address for a license, and for some licenses the answer is written down in words that could describe a virtual-office plan. The Real Estate Commission’s regulation on a broker’s place of business says it “may not consider an answering service, a mechanical message recording device or a mail drop, singly or in combination, to satisfy the requirements of an office.” The Home Improvement Commission requires “the actual street address of the contractor’s principal business office” and says an applicant “may not provide a post office box or private mail drop as the applicant’s business address of record.” A trader’s license, which any business selling goods from a place needs, is issued for each store or place of business and displayed there. A sales and use tax license, by contrast, can be issued to the address where notices are mailed when a business has no fixed place, and that is a legitimate use of a mailbox.

The passports in your drawer

Since 2023, every mailbox operator holds, or held until it uploaded them, copies of two identity documents for every customer, and in Maryland that makes it the owner of personal information. Under the Maryland Personal Information Protection Act, a name combined with a driver’s license, state ID or passport number is personal information when it is not encrypted or redacted. A business that holds it must protect it with reasonable security, require the same of its vendors, and destroy it with reasonable care; after a breach of computerized data it must notify the Attorney General first and the people affected within 45 days, and a vendor that only maintains the data must tell its client within ten days. The Postal Service, helpfully, lets operators delete their copies of the documents once the images are uploaded to its database, and the cheapest security measure in this trade is to take it up on that offer and keep only the signed form. If your staff notarize forms, remember that a Maryland notary’s journal records the identification number of each credential and must be kept for ten years, which is another copy of the same data. Maryland’s broader Online Data Privacy Act generally applies only at 35,000 Maryland consumers and does not count people acting in a commercial context, so a typical Baltimore coworking space or mailbox store is outside it, and no Maryland statute forbids scanning a driver’s license.

Two consumer rules round out the picture. Maryland’s automatic-renewal law, in force since June 1, 2026, requires renewal terms next to the consent box, a cancellation method online that is as easy as signing up, and a renewal notice 15 to 45 days ahead for plans of a year or longer; we covered it in detail for car wash memberships, and coworking memberships sold to individuals are in the same position. The state’s new rule that an online store must show its refund policy on a page the buyer sees before paying applies, on its face, to “the sale of goods,” which catches packing tape and envelopes at a mailbox store but probably not a membership; showing it anyway costs nothing.

The Baltimore layer: three visits a day, the hours after midnight, and the mail plant

Baltimore City’s zoning code has no word for coworking, and that is mostly good news. A shared office is an “Office,” which the code defines as “an establishment that engages in the processing, manipulation, or application of business information or professional expertise, whether or not it offers services to the public,” and offices are permitted by right in every commercial district from C-1 to C-5, in the office-residential district and in the transit-oriented districts. The exception is worth checking before you sign a lease on a beautiful old building: in the industrial districts I-1, I-2 and MI, an office is a conditional use that needs the Board of Municipal and Zoning Appeals and is “allowed only when secondary to a primary industrial use.” A pack-and-ship store with a mailbox wall reads most naturally as a retail goods establishment, which every commercial district permits. A zoning use permit is needed for any change in the authorized use or to occupy a building that has been empty for more than a year, so an office floor fitted out as coworking should not need one, while a former shop or warehouse will.

The most interesting clause for this trade sits in the rules for home businesses, because it writes part of your demand for you. Under section 15-507 of the City’s zoning code, a home occupation may receive no more than three client or customer visits a day and ten a week, may employ at most one person who is not a resident family member, and may not receive, sell or ship deliveries “on or from the premises, with the exception of regular U.S. Mail or a shipping service that is characteristic of service to residential neighborhoods.” A Remington consultant who meets five clients on Monday, two on Tuesday, four on Wednesday, three on Thursday and one on Friday has gone over the daily limit on two days and the weekly limit by five visits, and every one of those meetings could have happened in your conference room. An Etsy seller whose suppliers ship pallets to a rowhouse has the same problem with packages. A meeting-room credit and a package plan are, in the City, partly a zoning product, and a coworking space that explains that on its own website is answering a question its customers did not know to ask.

Opening hours raise a question nobody has tested. Section 9-6 of the City’s licensing article says that “no business in a Residential Zoning District, Office-Residential Zoning District, or C-1, C-1-E, C-1-VC, C-2, or C-3 Commercial Zoning District may be open to the public at any time between the hours of midnight and 5 a.m. without having first obtained a late-night operations license.” Whether a coworking space that gives its members key-card access around the clock is “open to the public” at 2 a.m. has, as far as we could find, never been decided, and it probably turns on whether anyone can buy a day pass and walk in at that hour. The cautious design is a door system that knows the difference between a member and a day-pass holder, and an operator in one of those districts who wants to sell overnight passes should ask the City first.

The county line also moves the tax bill. For fiscal 2027 the City’s real property tax rate is $2.248 per $100 of assessed value against Baltimore County’s $1.10, before the state’s $0.112, and downtown properties pay a further $0.2239 to the Downtown Management Authority. The business personal property tax on the desks, chairs, phone booths and servers that fill a coworking floor is $5.62 per $100 in the City and $2.75 in the County, so $150,000 of furniture and equipment at full assessment costs $8,430 a year in the City and $4,125 in the County, while a business whose personal property statewide cost less than $20,000 in total pays nothing. The City also taxes each telephone line at $4 a month, payable by whoever “leases, licenses, or sells” it to a customer billed at a City address; whether that reaches the phone numbers a virtual office assigns to its members is untested, but an operator with fifty of them is looking at $2,400 a year if it does. Remember, too, that a “Baltimore, MD” mailing address is no guide to which of these applies: the census below found eight of them in the County.

Finally, the mail itself, which is the raw material of the business and arrives through a plant in trouble. In June 2026 the Postal Service’s Inspector General reported on the Baltimore Processing and Distribution Center: between March 2025 and February 2026, 48.1% of its 46,105 outbound trips were late, canceled or extra; scans of loaded mail averaged 54.96% against a goal of 94%; and during a three-day visit in April 2026 the auditors found 10,695 delayed mailpieces reported in the plant’s system and another 26,129 flats and 235 packages that were not. Audits of four local delivery units the same month counted between 295 and 4,465 delayed pieces each, and at the Loch Raven branch in Towson the hold-mail overflow area held mail “dating as far back as 2019 with no evidence of an active customer Hold.” When a member says a check never arrived, the operator’s first job is to show when the piece reached the front desk, if it did, and what happened next. A mail log with timestamps is the best defense a mailbox business has against being blamed for the Postal Service’s delays.

What 24 Baltimore-area operators’ websites say

On October 24, 2026, we read the public websites of every coworking space, business center, virtual-office provider and independent mailbox store we could find in Baltimore City and Baltimore County. The frame came from OpenStreetMap, which tags nine coworking spaces in the area (one of them closed, one a salon-suite building), IWG’s Baltimore page, seven national virtual-address networks (three of them virtual-office resellers), The UPS Store’s locator, local directories, a 2024 Baltimore coworking guide and ordinary search. It turned out smaller than the trade’s visibility suggests. Seven domains listed in guides and directories now belong to gambling or spam pages, an unrelated company or nobody, one site sits behind a bot wall, and the largest independent operator in Baltimore County has no website of its own that we could find; the .com that matches its name belongs to an unrelated medical-billing firm, which is exactly where an AI assistant looking it up would land. That left 24 operator records, 23 independents plus IWG counted once, and three sampled UPS Store pages, which share a national template. Eleven of the 24 sell an address or a mail plan, and they are the denominator for most of what follows.

Prices first, because they are the most useful thing on these sites and the thing a buyer, or an AI assistant answering a buyer, looks for. Among independents that publish them, the median day pass is $25 (five sites, $15 to $60), a hot desk $175 a month (nine sites), a dedicated desk $324.50 (eight), the smallest private office $610 (eleven, $336 to $900) and a virtual-office or mail plan $52.50 (six, $9.99 to $75). IWG publishes its starting prices by the day, a habit worth noticing because it makes comparison harder: across its twelve centers in the City and the County, a business address starts at $2 to $4 a day, about $61 to $122 a month, a day of coworking at $45 to $65 and a meeting room at $39 to $69 an hour. The virtual-address networks are cheaper still at the bottom: the thirteen Baltimore-area addresses on Anytime Mailbox start at a median of $10.99 a month, for a plan with a fixed number of mail items and scanned pages.

Now the address itself. Ten of the eleven address sellers promise a real or professional street address, and five contrast it explicitly with a post office box. One mentions PS Form 1583: A&C Pack and Ship tells customers plainly that they must complete and sign the form and provide supporting documents before using its package service. None of the eleven lists the identity documents it accepts, none mentions that the form can now be signed on a video call, and none uses the letters PMB. Three offer mail-only customers a suite number of their own, in wording that ranges from a unique suite for each address to “your own suite number.” The best explanation we found in the whole frame came from a franchise template: each of the three UPS Store pages we sampled tells customers that every recipient needs two forms of identification “to complete the mandatory PS Form 1583” and that the address uses PMB or the pound sign. On the other side of the ledger, none of the eleven promises a Google listing, which is to their credit, and none says whether a member could qualify for one, which is a missed chance to say something useful.

Three patterns matter for software. The first is that one address is sold through many channels. Seven networks list 54 Baltimore-area addresses between them, and those come down to about 33 street addresses: one office building in Woodlawn appears on five networks, a coworking space on Harford Road on four. Each listing is a separate sales channel with its own prices and plan names, feeding the same wall of boxes and the same Postal Service database, so box numbers and customer records have to stay unique across all of them. One network listing even prints the building’s suite number merged with the box designation, the very format the manual says is not permissible. The second is that a Baltimore mailing address does not tell you where you are. By the Census Bureau’s geocoder, eight addresses in our frame with the mailing city “Baltimore, MD” are in Baltimore County, including a UPS Store the locator files under a City neighborhood, and so are two of the seven “Baltimore” listings on Anytime Mailbox and five of the twelve on iPostal1. Taxes, licenses, zoning and the property tax on your furniture follow the county line, not the postal name. The third is that mail and membership live in different systems. The member platforms visible on public pages were Cobot on two sites and OfficeRnD, Archie and Proximity on one each; mail ran on a separate mailroom tool or was handed to a national network, and three operators send buyers straight to a network’s checkout.

Selling online is the exception. Four of the eleven address sellers let a buyer sign up or pay online, one of them through a small WooCommerce store with Stripe; apart from the three that hand buyers to a network, the rest say contact us or apply. One publishes a package-fee schedule, in weight bands from $1 to $7.50 for subscribers and $1.50 to $8.50 for everyone else, with a locker code good for 48 hours before storage fees start, which is the kind of rule a mail log should enforce. Machine-readability is mostly accidental. Seven of the 24 sites serve a real llms.txt file, but three of those were generated automatically by Wix and one by an SEO plugin; none of the 24 blocks the main AI crawlers; five of 23 homepages carry LocalBusiness structured data and ten carry none at all; one site, the public university’s, has an accessibility statement.

Some operators do this well, and they deserve the credit. Haven Coworking publishes a full ladder, from a $25 day pass to offices from $749 and virtual-office plans at $40 and $70 a month whose quotas for mail items, scans and shredding are spelled out, along with a fee for each additional recipient; its plan pages carry Offer and unit-price markup and a hand-written llms.txt. Co_Lab, City House, Brewers Hill Hub, the Baltimore Innovation Center, Impact Hub Baltimore, Spark, Mindhub and Co-Balt all publish clear prices. A&C Pack and Ship states the Postal Service requirement in one sentence. As always in this series, the problems are counted and not named.

The e-commerce half: selling an address online

A coworking space or mailbox store sells five different kinds of thing, and each one needs a different checkout. It sells time: a day pass, a meeting room for two hours. It sells memberships: a hot desk, a dedicated desk, a private office by the month. It sells addresses: a mail plan, a virtual office and, since October 1 in Maryland, a principal office for a company. It sells services by the piece: a scanned letter, a forwarded bundle, a package held for a week, a notarized signature. And many sell goods: boxes, tape, printing, coffee. Most websites in our census sell none of these online. Four of the eleven address sellers let a buyer sign up or pay without a conversation, and three more hand the buyer to a national network’s checkout, where the network sets the plan names, collects the money and keeps the customer relationship. For an operator, owning the store is less about the fee the network takes than about owning the customer, the data and the answer an AI assistant gives about you.

Time and memberships: the half that platforms already sell

Day passes, meeting rooms and memberships are the easy half, and the coworking platforms in the pricing table above already sell them with calendars, member portals and card-on-file billing. The things to watch are the fees and the rules. Cobot takes 5% of drop-in passes and 9% of external bookings on top of its subscription, Peerspace takes 20% of a meeting-room booking, and a pass sold on your own site through Stripe costs 2.9% plus 30 cents. Memberships sold to individuals fall under Maryland’s automatic-renewal law, with its renewal notices and its easy cancellation, and a store that sells goods must show its refund policy before checkout. For search, describe your location with LocalBusiness markup (schema.org has no type for a coworking space, and its PostOffice type is a government office, the wrong choice for a private mailbox store), publish each plan with an Offer and a price, and mark up workshops as Events only when they are open to the public: since June 2025 Google has excluded events that require a membership or an invitation from its event results.

Addresses: a checkout that ends on a video call

The address is the half no platform sells properly, and it is the half where a store you own makes the most difference. A good checkout for a mailbox or virtual-office plan starts by showing the buyer exactly what they are buying: the address written in the correct format, with “PMB” or “#” and the box number, and a plain list of what it is good for and what it is not, including the Maryland principal-office option, the licenses it cannot satisfy and the fact that Google will not map it. It then asks for the 1583 data in the order a person finds natural, one addressee at a time, with the company’s name, address and place of registration where mail will be addressed to a business. The documents come next, and the checks are simple enough to run in the browser: one photo document from the Postal Service’s list (a state license or ID, a U.S. or foreign passport, a military or federal ID, a green card, a naturalization certificate, a matrícula consular, a NEXUS card or a U.S. university ID) and one document that ties the person to the address on the form (a lease, a mortgage, a voter or vehicle registration card, a home or vehicle insurance policy, an I-94 record or a second photo ID), with expiry dates captured, corporate IDs and utility bills refused, and a note that the same driver’s license cannot serve as both documents. An automated document-and-selfie check at $1.50 is a useful screen before a person spends time on a video call, but it is not the witnessing the rules require.

Payment can be taken at that point, and the checkout then does the thing ordinary carts never do: it books an appointment. The buyer picks a ten-minute video slot with a staff member, or chooses a remote notary at about $25 if they prefer, and the order stays in a visible state, paid but not yet allowed to receive mail, until the signature has been witnessed, the database entry made and the images uploaded. The store should say in advance what happens if the documents do not match the form, because the rules leave no discretion (“the CMRA must deny the application”), and the refund terms belong on the plan page, not in an email after the fact. For a customer who wants the address as a Maryland principal office, the same checkout records the acknowledgment the new law attaches to that choice. And once the images are uploaded, the store should delete its copies, which the Postal Service allows and Maryland’s data-security law rewards.

Services by the piece: price the remail before you owe it

Mail plans are quota products. The plans we read count incoming items, scanned pages, shredding and recipients, and charge for each extra: one Baltimore operator charges $20 to $25 a month for every additional recipient, and a national network’s cheapest plan at a Dundalk address includes 30 items and 5 scanned pages a month for one recipient, with forwarding at $5 a bundle. Packages need weight bands and a storage clock, like the operator whose locker codes are good for 48 hours before storage fees begin. Each of those is a metered charge against a card on file, which costs more than a card tapped at the counter: Square’s card-on-file rate on its free plan is 3.5% plus 15 cents, against 2.6% plus 15 cents in person. And one charge has to be priced before it is owed. The six months of remailing after a customer leaves are a cost that arrives after the revenue has stopped, so the checkout should collect a closing deposit, or the plan terms should set a closing fee, sized to six months of that customer’s typical forwarding.

What search engines and AI assistants can read

The last part of the store is the part machines read. Publish prices on the page, in text: an assistant cannot quote a price that lives in a PDF or behind a contact form, and four of the eleven address sellers we read publish no price for their mail plans. Keep the plan pages fast and plain, with the address format, the quotas and the fees on the page itself. Use LocalBusiness markup with your real address and hours, which only five of 23 local homepages did, and make sure the name and address on the site match your Google Business Profile exactly. Do not expect FAQ markup to earn anything in Google anymore, since Google stopped showing FAQ rich results on May 7, 2026, and treat an llms.txt file as harmless and optional, since Google says its search ignores them, although other systems may read them. Above all, do not wait for an AI shopping button to sell for you: Google’s new checkout protocol excludes subscriptions, services and rentals, which covers every product in this trade except the boxes and tape, and OpenAI has said it is moving away from a standalone checkout inside ChatGPT, with purchases completed on merchants’ own sites. The assistant may send the customer. Your own store has to close the sale.

A note for readers in Lithuania

Our studio has Lithuanian roots, and the comparison is instructive because Lithuania regulates the same product through completely different gatekeepers. In Baltimore, the party that decides whether an address works is the Postal Service. In Vilnius it is the owner of the building and the state register. A Lithuanian company’s seat, its buveinė, is described by the address of the premises, and the Register of Legal Entities records that address together with the building’s unique number in the Real Estate Register. A company that does not own the premises must file the owner’s or co-owner’s written consent when it registers the seat or moves it. The owner can also take the address back: the owner asks the registrar to remove the company’s seat, the registrar notifies the company, and if it has not moved within six months the seat is deregistered automatically, a procedure the government tightened in January 2026. A company left without a seat for more than six months can then be liquidated on the registrar’s initiative.

Lithuania came close to abolishing the physical seat altogether. In 2018 the government backed a draft that would have let a company register a “virtual seat,” just a municipality and a state electronic-delivery mailbox, and the explanatory note gave the register’s own figures: 8,088 legal entities registered at six Vilnius addresses, 1,979 of them at a single one. The draft was never enacted. What passed instead, in force since January 2022, made the state e-delivery box an equally valid channel for correspondence and a mandatory entry, printed on the company’s letters and invoices. In effect, Lithuania solved the mail problem with a government inbox and kept the address problem with the landlord.

The identity rules run in the opposite direction from the Postal Service’s. Under Lithuania’s law on the prevention of money laundering, providing a registered office, a business address or a correspondence address to a company or another legal person is a trust or company service, and the provider is an obliged entity: it must identify the client before the relationship starts, notify the Centre of Registers within five business days of starting or stopping the activity, keep its owners and managers free of certain convictions, and answer to the Financial Crime Investigation Service. One photo document is enough, where the Postal Service wants two, but a company client must also disclose its beneficial owners and its actual place of business, which a virtual-office client by definition does not have at the address it is renting. Remote identification by live video is allowed, much as the Postal Service has allowed since 2024. The retention rule is the starkest contrast: a Lithuanian provider must keep copies of identity documents and any video recordings for eight years after the relationship ends, while a Baltimore operator may delete its copies of the documents as soon as they are uploaded to the Postal Service. From July 10, 2027, the EU’s new anti-money-laundering regulation applies directly, and its companion directive requires these providers to be licensed or registered.

The market looks familiar. Workland, a coworking chain with spaces in both cities, lists a day pass at €25 in both Vilnius and Kaunas, a hot desk at €280 a month in Vilnius and €220 in Kaunas, and private offices from €340 and €280 per person, all before 21% VAT; a business-address service such as 1office’s starts at €500 a year with up to ten letters a month forwarded. For a software team the lesson is that the same product needs a different data model in each country. A Baltimore address is a person with two documents, a box number in a federal database and a quarterly attestation. A Vilnius address is a building number, an owner’s consent that can be withdrawn and an anti-money-laundering file that must outlive the customer by eight years. A platform that hard-codes either one will be wrong in the other.

What custom actually costs, and when it pays

We price every project at a fixed fee, agreed before we start, and publish the starting points on our pricing page. For a Baltimore operator, whether it is a single-floor coworking space in a Remington warehouse, a business center in a Towson office tower that rents mailboxes on the side, or a pack-and-ship store in Catonsville with a wall of 400 boxes, the packages map onto this article like this.

Most of our projects land between $6,000 and $30,000, and none requires you to give up a coworking platform, a door system or an accounting package that already works; the demos page shows finished work. In Maryland, the state’s 3% tax on software and IT services applies to a custom build, so the Online Store package starts at $6,180 with tax and a Custom App at $12,360.

Be clear about what custom does not save. In our model coworking space, the three complete published software stacks cost between about $5,400 and $10,200 a year, and in the mailbox store between $1,500 and $5,100. Card fees on 120 memberships at $250 a month, $360,000 a year, come to about $10,900 at Stripe’s standard rate, more than the most expensive stack, and rent dwarfs everything. An Online Store build at $6,180 with tax costs a little more than a year of the middle coworking stacks. It pays only where the rented tools cannot hold what the business now depends on: a quarterly certification that is true, a member who has paid but cannot yet receive mail, a former member whose mail you are still obliged to forward, a principal-office customer whose contact details SDAT or the police can ask for, and an invoice that a bank will accept as proof of occupancy. Measured against a 30-day deficiency notice, which can end with every member’s mail going back to its senders, the build is cheap. Measured against a coworking platform that already handles your desks and forty members you know by name, it is not, and you should keep what you have.

What we would build for a Baltimore coworking space or mailbox store

We would not build a coworking platform. The products in the pricing table above have spent a decade on desk booking, member portals, door integrations, invoicing and the hundred small settings a flexible-office business needs, and an operator whose members are happy with the app should keep it. We would not build door access, Wi-Fi authentication, accounting or a shipping counter either, and we would not try to replace the label printers and carrier accounts a pack-and-ship store already runs on. What we would build is the layer the Postal Service, Google and Maryland have put around all of that: a record of who is allowed to receive mail at your address, which of their documents expires when, what happened to every piece that arrived, and what you are allowed to promise them about the address in the first place.

The first piece is a register of people, not accounts. A personal box has one signed 1583 for each adult, each with two documents and their own expiry dates. A business box has an individual applicant who signs for the company, an optional authorized pickup person with their own documents, and a list of named recipients who may be asked to show two IDs, along with the company’s name, address and place of registration as the form requires. The register follows each addressee through states the Postal Service cares about, most of which the billing system never sees: applied, paid, witnessed, entered in the Customer Registration Database, active, terminated, in the six-month remailing window, and closed. It keeps the version of the form each person signed, who witnessed it, when and how (at the counter, on video with a named employee, or through a notary), and the termination date that will appear in the next quarterly certification.

The second is a witnessing desk. A member who buys a mailbox online books a video slot in the same checkout; the manager’s screen shows the form, the uploaded documents side by side and a short checklist (the photo matches the face on camera, the name and address on the form match the documents, neither document has expired, the images are sharp enough for the Postal Service to accept), and the session ends with the agent’s signature and a log entry. The Postal Service does not require recordings, and we would not make one by default, because a video archive of people holding up their passports is a liability you would then have to protect. We would keep a written record of who checked what and when, which is what you would want to show an inspector.

The third is an expiry board and a quarterly pack. Every document on file carries its expiry date, and members whose documents will expire before the next certification date get a reminder about 60 days ahead, the lead time the Motor Vehicle Administration itself uses, with a link to upload the new one and, if needed, book a short video check. On the first of January, April, July and October the manager gets a list of everything that would make the certification untrue: expired documents, unsigned forms, mailboxes closed last quarter without a termination date in the database, and remailing addresses missing for former members. Until the Postal Service offers an interface for its database, we would also build a side-by-side entry screen that lays out each form in the database’s order, so that re-keying is quick and checkable, rather than pretending the double entry does not exist.

The fourth is a mail log that knows the rules. Each piece is logged on arrival with an image of the envelope, the addressee and the carrier; the member chooses what happens next (open and scan, forward, hold, shred, pick up), and every action is recorded with its cost, including the postage on anything remailed. Pieces for addressees with no form on file go into a return queue that has to be cleared the next business day. Former members’ mail is remailed to the address on file for six months unless their written instructions say otherwise, and after the sixth month the eligible classes go into a return queue with the Postal Service’s endorsement wording already printed. Packages are logged separately with storage days, so that a storage fee is a rule and not an argument at the counter.

The fifth is an address desk that tells the truth. It formats each member’s address correctly, with “PMB” or “#” and never a suite number merged with a box number, and it explains on the plan page, in plain words, that the address will be recognized as a mail-receiving address by banks, marketplaces and Google, which accept such addresses for some purposes and refuse them for others. For members who want to appear on Google Maps, it asks the three questions Google asks (is there permanent signage with your business name, are you there to receive customers during your hours, and are your own staff there during those hours) and routes the ones who qualify to a private-office plan with a sign on the door, instead of selling a mail plan with a promise attached that Google will not honor.

The sixth is the Maryland layer. Invoice lines carry a tax category, so that a telephone-answering service bundled into a virtual-office plan is taxed as the Comptroller expects and the desk and the mailbox are not; identity documents are encrypted, kept only as long as the operator actually needs them after upload, and covered by a written breach procedure that meets Maryland’s personal-information law; and plan pages show the refund policy where a buyer sees it before paying. The last piece is the store itself, described in the e-commerce section above: plans, passes, meeting rooms and mailboxes sold online, with the postal steps built into the checkout rather than bolted on after it.

Build, buy, or leave it alone

Most Baltimore operators should not start with custom software, and the ones that should usually need less of it than they think. A coworking space with forty members, a dozen mailboxes and a manager who knows every member by name is better served by a calendar reminder for the quarterly certification and an afternoon spent cleaning the member list than by any build. The subscriptions in this trade are modest next to rent, and the money that leaves the business through an empty floor will not come back because the booking app was rewritten.

The question is not whether your software is good. It is whether it can hold the facts that the Postal Service, Google and Maryland now ask you about, and you can test that in an afternoon with your own data. Custom work starts to pay when several of these are true:

• You could not say today which of your mailbox holders’ documents will have expired by the next quarterly certification date, or you find out from the Postal Service’s database rather than from your own records.
• Your member records hold one company per account, while your mailboxes have several named addressees, each with their own form and documents.
• You sell mailboxes or virtual-office plans online, and the gap between “paid” and “allowed to receive mail” lives in somebody’s inbox.
• You cannot list, for every member who left in the last six months, their forwarding address, their written instructions and what you remailed to them at whose expense.
• Your website or sales team tells mail-only customers that they can use your address on Google Maps.
• Your invoices put a phone-answering service, a desk and a mailbox on one line, and nobody has asked which parts Maryland taxes.
• You keep copies of members’ driver’s licenses and passports in a shared drive, an email folder or a filing cabinet, with no date on which they will be deleted.

If one or two of these describe you, fix them inside the tools you have: most coworking platforms take custom fields and automated emails, a monthly export can drive an expiry list, and a one-page script for the front desk will stop the Google promises. If three or more describe you, and especially the expiry, the online-sales and the former-member items, the rented tools are being asked to hold a postal compliance record they were never designed for, and a fixed-price build around them is cheaper than a 30-day notice from the postmaster. And if none of them describes you, keep your software, keep your money, and spend the time filling desks.

Questions Baltimore coworking and mailbox operators ask us

Is a coworking space a commercial mail receiving agency?

If it accepts mail on behalf of its members, yes. The Domestic Mail Manual defines a commercial mail receiving agency (CMRA) as a business that accepts delivery of U.S. Mail for others as a business service, and since July 2023 it has said that office business centers, which provide private offices and business support services, are considered CMRAs. The old exemption for members with a full-time private office or a bundle of office, reception and conference services was deleted, so a coworking space that receives members’ mail must register on PS Form 1583-A and follow the CMRA rules.

What is PS Form 1583 and who has to sign it?

PS Form 1583, Application for Delivery of Mail Through Agent, is the Postal Service form that authorizes a mail receiving agency to accept mail for a customer. Every addressee of a private mailbox for personal use needs one, including each spouse separately; a parent lists minors on their own form, and when mail is addressed to a company the applicant is still an individual who adds the company’s details. The owner or manager of the agency completes one for themselves too. The operator enters each form in the USPS CMRA Customer Registration Database and uploads copies of the two identity documents.

Can PS Form 1583 be signed online or over video?

It can be signed over live video, but not completed as a self-service online form. Since May 2024 the applicant may sign or confirm the signature in the physical or real-time audio-video presence of the agency’s owner, manager or an authorized employee, or acknowledge it before a U.S. notary in person or by video. The Postal Service declined to require recordings, refused to create an online-only version of the form and did not accept automated identity verification as a substitute for a person witnessing the signature.

Which IDs are accepted for PS Form 1583?

Two current documents: a primary one with a photograph, such as a state driver’s license or ID card, a U.S. or foreign passport, a military or federal ID, a permanent resident card, a naturalization certificate, a matrícula consular, a NEXUS card or a U.S. university ID, and a secondary one that ties the person to the address on the form, such as a lease, mortgage or deed of trust, a voter or vehicle registration card, a home or vehicle insurance policy, Form I-94 or a second photo ID. Social Security cards, birth certificates, credit cards, utility bills and corporate IDs are not accepted.

What happens when a mailbox customer’s ID expires?

The operator has to collect and upload a current document. Every quarter, by January 15, April 15, July 15 and October 15, a commercial mail receiving agency (CMRA) must certify in the USPS database that every PS Form 1583 is current, all termination dates are updated and no identification documents are expired. Expired or illegible documents count as non-compliance. An operator that fails to fix violations within 30 days of a written notice can have its delivery suspended, with mail returned to senders.

What does a CMRA have to do when a customer cancels?

Record the termination date on the form and in the USPS database, keep the endorsed PS Form 1583 for at least six months, and remail the former customer’s mail with new postage to the forwarding address on file for at least six months, unless the customer gave written instructions not to. Neither side files a change-of-address order. During those six months the operator may not refuse the former customer’s mail; afterward it may return eligible classes to the Post Office with the required endorsement, the next business day after each piece arrives.

Can a mailbox customer use “Suite” instead of “PMB”?

No. The Domestic Mail Manual requires an address at a commercial mail receiving agency (CMRA) to use “PMB” (private mailbox) or the “#” sign with the box number, and when the building’s own address already has a suite number the customer must use “PMB,” as in 10 MAIN ST STE 11 PMB 234; combining them as STE 11-234 is not permitted. Certified address software also rewrites an unconfirmed suite or apartment designator at a CMRA address to PMB, so a “suite” does not survive a bank’s or a marketplace’s address check.

Can I use a virtual office address on my Google Business Profile?

Generally not. Google’s guidelines say a business that rents a mailing address but does not operate there is not eligible for a Business Profile, and that P.O. boxes and remote mailboxes are not acceptable. An office in a coworking space can be listed only if it has clear signage, receives customers during business hours and is staffed during those hours by the business’s own staff. A business that serves customers at their locations can list itself as a service-area business with its address hidden.

Can a Maryland LLC use a mailbox or virtual office as its principal office?

Since October 1, 2026, yes, if the address is supplied by a USPS-authorized commercial mail receiving agency in Maryland with which the company has a valid mail receiving agreement under Postal Service rules. Chapter 247 of 2026 added this to the definition of a principal office, and a company that uses such an address acknowledges that the agency must give the contact information on its PS Form 1583 to the State Department of Assessments and Taxation or law enforcement on request. Some state web pages had not been updated as of late October 2026.

Can a virtual office be my Maryland resident agent?

Not as a mailbox. A Maryland resident agent must be an individual residing in Maryland or a Maryland entity, and the forms of the State Department of Assessments and Taxation (SDAT) require the agent’s complete physical address and do not accept P.O. boxes. Chapter 247 of 2026 changed the rule for principal offices only. A business center can offer a resident-agent service at its staffed street address, but the box number is not an agent’s address, and an incorrect agent address can mean that legal papers are served on SDAT instead of on you.

Does Maryland charge sales tax on coworking memberships or virtual office plans?

Mostly not, with two exceptions to watch. The rental of business quarters and meeting rooms is not taxable in Maryland, and mailbox rental is not an enumerated taxable service, but a telephone answering service that consists of taking and transmitting messages is taxable at 6%. Separately priced mail scanning and cloud storage of images may fall under the 3% tax on data and information technology services that began on July 1, 2025; we found no Comptroller ruling on mail scanning. Stating each service on its own invoice line keeps the taxable part small. This is general information, not tax advice.

How much does a coworking day pass or virtual office cost in Baltimore?

In our October 24, 2026 review of Baltimore-area operators’ websites, independents that publish prices charged a median of $25 for a day pass, $175 a month for a hot desk, $324.50 for a dedicated desk, $610 for the smallest private office and $52.50 for a virtual-office or mail plan. IWG’s Baltimore-area centers publish starting prices of $45 to $65 for a day of coworking and $2 to $4 a day for a business address, and national virtual-mailbox networks list Baltimore-area addresses from about $10 a month.

How much does coworking or mailbox software cost?

Published prices on October 24, 2026, started at $60 a month for coworking platforms and, for 180 active users, ran from $231 at Nexudus to $599 at Cobot. Most count virtual-office clients as members. None of the eleven readable coworking platform pricing pages mentioned PS Form 1583 or the USPS database; mailbox compliance tools are sold separately, such as PilotoMail from $150 to $300 a month and PostalMate at $125 a month. A complete coworking stack for 180 users cost about $5,400 to $10,200 a year in published fees.

Can a coworking space sell mailboxes online?

Yes, but the sale is not complete at payment. A store can collect the plan choice, the PS Form 1583 information, the two identity documents and the payment online, and book a video session, but the customer may use the address only after an employee or a notary has witnessed the signature in person or by live video, and the operator must also enter the form and upload the documents to the USPS database. The checkout should show the address in the correct PMB format, say what happens if the documents do not match the form, and hold activation until the postal steps are done.