How Long Should You Keep Your Business Records?

If your office has a “paper chair” (you know, the one that’s holding up a mountain of receipts), this guide is for you. Keeping business records isn’t just about pleasing your inner neat freakit’s about surviving audits, lawsuits, insurance claims, payroll questions, and that one moment when you desperately need to remember why you bought a $612 “equipment” charge at 11:58 p.m.

The tricky part: there isn’t one magic number. Some records should be kept for years, some for months, and some basically forever (like your business formation documents… and maybe your grudges, but only if you have decent legal counsel). Below is a practical, U.S.-focused retention roadmap with clear timeframes, real examples, and a simple way to build a document retention policy you’ll actually follow.

Why record retention matters (beyond “because the IRS exists”)

Business records do three big jobs:

• Tax support: Proving income, deductions, credits, and payroll taxes.
• Legal defense: Backing you up in employee disputes, contract issues, or regulatory questions.
• Business clarity: Helping you price, forecast, get financing, sell the business, or recover after a disaster.

The goal isn’t to keep everything. The goal is to keep the right things for the right amount of timeand delete the rest safely, so you’re not paying cloud storage fees to preserve the history of every lunch you regretted.

The IRS “clock” that drives many retention decisions

For taxes, the core idea is simple: keep records long enough to support what you put on your tax return until the statute of limitations expires for that return. In many everyday situations, that’s three years. But there are important exceptions that can stretch the clock.

Common IRS timeframes (plain English edition)

• Keep records for 3 years in typical situations (the standard window for assessment).
• Keep records for 6 years if you omitted income that should have been reported and it’s more than 25% of gross income.
• Keep records for 7 years if you file a claim for a loss from worthless securities or a bad debt deduction.
• Keep records indefinitely if you don’t file a return or you file a fraudulent return.
• Employment tax records: keep at least 4 years after the tax becomes due or is paid (whichever is later).
• Assets/property records: keep records relating to property until the statute expires for the year you dispose of the property.

Example: You buy a work truck and depreciate it for several years. You don’t just keep the purchase paperwork for “three years.” You keep it until after you sell the truckand then keep it long enough to cover the tax return where you reported the sale and any gain/loss. Same logic for equipment, buildings, software purchased as a capital asset, and improvements.

The big buckets: what to keep for 1 year, 3 years, 7 years, or forever

Think of retention like a well-organized pantry: you keep the staples longer, you label everything, and you throw away the expired mystery jar before it turns into a science fair project.

Keep forever (or “as long as the business exists”)

These are your “birth certificate” and “DNA” documents. If you ever sell the business, apply for major financing, get sued, or face a regulatory question, these are the records that prove what your business is and who owns what.

• Articles of incorporation/organization, amendments, certificates, and entity registrations
• Bylaws, operating agreements, partnership agreements
• Shareholder/ownership records, equity grants, cap tables, unit ledgers
• Board/shareholder meeting minutes and key resolutions
• Federal EIN confirmation, key tax elections, major licenses and permits
• Intellectual property filings (trademarks, patents), and foundational assignments
• Long-term contracts that remain active (keep for the life of the contract + several years)

Keep 7 years (the “sleep well at night” category)

While the IRS often uses a 3-year window, many businesses keep a broader set of supporting documents for 7 years as a conservative practice, especially for financial records that could matter in audits, disputes, or insurance claims. Seven years is also explicitly relevant in certain tax situations (like specific loss claims).

• Business tax returns and key supporting schedules
• General ledger, year-end financial statements, trial balances
• Bank statements, canceled checks (or images), deposit records
• Accounts receivable/payable summaries, invoices, receipts
• Expense reports and documentation for significant deductions
• Contracts that ended, plus proof of performance and payments
• Insurance policies and claim documentation (often longer if a claim is open)

Keep 3 years (the “baseline compliance” category)

Three years is a common minimum for many tax-related documents and also shows up in federal employment record rules. This category typically includes documentation that supports income and deductions and routine business operations.

• Receipts and invoices supporting income/expenses (if not kept in the 7-year bucket)
• Sales records, purchase records, and routine bookkeeping documentation
• Payroll records required under wage/hour rules (many must be kept at least 3 years)
• Business meal, travel, and vehicle logs (keep longer if tied to asset basis)

Keep 4 years (employment tax records)

If you have employees, payroll is where “oops” becomes “ow.” Federal guidance commonly requires keeping employment tax records for at least 4 years after the tax is due or paid (whichever is later).

What this can include: employee names/addresses/SSNs, dates of employment, wage amounts, withholding, fringe benefits, employer tax contributions, copies of filed payroll tax returns, and related documentation.

Keep 2 years (wage calculation support)

Federal wage/hour rules distinguish between (1) core payroll records and (2) the backup details used to compute wages. Many “wage computation” recordslike time cards, schedules, and records of additions/deductionsoften have a 2-year minimum.

Keep 1 year (many general HR records)

Hiring and personnel records frequently fall into 1-year minimums under federal discrimination-related recordkeeping rules, with longer requirements in specific situations (for example, if a complaint/charge is filed, you keep relevant records until the matter is resolved).

• Applications, resumes, promotion decisions, and basic personnel files (often 1 year minimum)
• Records related to terminations (often at least 1 year from termination in certain cases)
• Performance documentation (often wise to keep longer if tied to termination decisions)

Special case: Form I-9 retention (a rule with math)

Form I-9 has its own famous formula. You must retain a Form I-9 for each employee for: 3 years after the date of hire OR 1 year after the date employment endswhichever is later.

Quick example: You hire Jordan on Jan 1, 2024, and they leave Jan 1, 2025. Three years after hire is Jan 1, 2027. One year after termination is Jan 1, 2026. You keep it until Jan 1, 2027.

Pro tip: keep I-9s separate from general personnel files (paper or digital) so you can produce them quickly and purge them safely when eligible.

Special case: OSHA injury and illness records (5 years)

If you’re subject to OSHA recordkeeping, certain injury and illness records (like the OSHA 300 Log, 300A summary, and 301 incident reports) generally must be kept for 5 years following the end of the calendar year they cover.

Special case: Employee benefit plans (ERISA often means 6 years)

If you sponsor employee benefit plans subject to ERISA, record retention can be longer and more formal. A commonly cited federal requirement is to retain certain plan records for 6 years from the date of filing (often connected to plan reporting), and best practice is to keep core plan documents and supporting proof of compliance in an organized, accessible system.

A simple record retention schedule you can steal (and customize)

Here’s a practical starter schedule. Adjust based on your industry, state requirements, contracts, and any “legal hold” situation (meaning: you’re aware of a dispute, audit, or claimthen you pause deletion until it’s resolved).

How to build a document retention policy (without making it a 47-page doorstop)

1. List your record categories. Start with Tax, Accounting, Payroll/HR, Legal/Corporate, Operations, and Industry-specific.
2. Assign retention periods and an “owner.” Every category should have a responsible person (even if it’s you wearing three hats).
3. Set storage rules. Decide where the “single source of truth” lives (cloud drive, accounting system, HR platform).
4. Define destruction rules. Shred paper. Securely delete digital files. Keep a destruction log for sensitive categories.
5. Add a legal hold switch. When there’s litigation, an audit notice, or an employee complaint, pause deletions immediately.
6. Automate it. Use folder naming standards, year-based archives, and scheduled reviews (quarterly or annually).

Paper vs. digital: you can go electronic, but do it like an adult

Many businesses want to scan and shred, and that can be totally workable. The key is that electronic records need to be legible, accessible, retrievable, and reproduciblenot “somewhere in the cloud” like a sock lost in the dryer of the internet.

A good system usually includes:

• Consistent naming: YYYY-MM Vendor Amount Category (e.g., 2026-01 Staples $84 OfficeSupplies)
• Folder structure: by year → by category → by month (or vendor), depending on volume
• Permissions: HR and tax docs should have limited access
• Backups: at least one additional backup or versioned storage
• Searchability: OCR scanning helps, but don’t rely on it alonelabel files sensibly

When you should keep records longer than the “minimum”

Minimums are just that: minimums. You might keep records longer when:

• You have assets with long lives: real estate, major equipment, vehicles, software capitalized and amortized.
• You operate in regulated industries: healthcare, finance, transportation, government contracting, etc.
• You have long contracts or warranties: keep supporting documents through the contract term plus the limitation period.
• You’re planning to sell the business: buyers want clean financial history and proof of compliance.
• You face a claim/dispute: litigation hold means you stop purging until it’s resolved.

Common record retention mistakes (and how to dodge them)

Mistake #1: Keeping everything forever

This feels “safe,” but it can backfire. More data can mean more exposure in disputes (and more time spent finding the one document you actually need). Keep what matters, purge what doesn’t, and document your process.

Mistake #2: Keeping things forever… except the one thing you needed

The fix is structure. A simple retention schedule + consistent naming beats a heroic memory every time. Your future self is already tired. Help them out.

Mistake #3: Mixing sensitive documents everywhere

Keep I-9s separate. Restrict access to payroll/HR. Don’t leave banking and tax documents in a shared folder named “Stuff.” (“Stuff” is where compliance goes to die.)

Mistake #4: No legal-hold process

If you learn about a dispute and then delete records on schedule, you can create serious legal risk. Make “pause deletion” a formal step with clear internal instructions.

How to safely dispose of business records

• Paper: cross-cut shred (or use a reputable shredding service with a certificate).
• Digital: don’t just “delete.” Use secure deletion where appropriate, remove access, and purge backups according to your policy.
• Track it: for sensitive categories, keep a simple destruction log: date, category, period covered, method.

Conclusion: Keep what protects you, ditch what clutters you

A smart business record retention plan isn’t about hoarding paper or living in fear of audits. It’s about being able to prove what happened, when it happened, and why it made sensewithout turning your office (or Google Drive) into an archaeological dig.

Start with the core timeframes: three years for many tax items, four years for employment tax records, and longer for assets, OSHA logs, I-9s, and benefit plans. Then build a simple, repeatable schedule and automate the boring parts. Your reward: fewer headaches, faster answers, and the smug satisfaction of finding the right document in under 30 seconds.

Real-World Experiences and Scenarios

Let’s make this real. Below are common, true-to-life scenarios businesses run into (shared as composite examples, because nobody wants their “oops” story published on the internet). If you recognize yourself… congratulations, you are extremely normal.

Scenario 1: The “Receipt Black Hole” Audit Scramble

A small marketing agency takes a bunch of legitimate deductionssoftware subscriptions, contractor payments, a new laptop, and a pile of client travel. The owner assumes the accounting platform will “have it all,” so they never attach receipts consistently. Later, they get an IRS notice asking for support for specific deductions. Suddenly, it’s a late-night scavenger hunt through: email inboxes, bank feeds, three credit card portals, and a shoebox that looks like it survived a hurricane.

What would have helped? A simple rule: every transaction over a set threshold (say $75 or $100) needs a digital receipt attached in the accounting system, plus a monthly routine to reconcile and label. Even a basic naming systemVendor + Date + Amount + Categoryturns chaos into a clean paper trail. The lesson: retention is useless if you can’t retrieve the record quickly. “I’m sure we have it somewhere” is not a strategy.

Scenario 2: The Employee Dispute You Didn’t See Coming

A retail business terminates an employee for chronic tardiness. Six months later, the employee alleges discrimination and claims the tardiness issue was “made up.” If the business kept clear documentationattendance records, written warnings, and performance notesthe response is straightforward: here are the facts, consistently recorded over time. If those documents were deleted too soon (or never created), the business is stuck relying on memory, which is about as persuasive as “trust me, bro,” but with more legal fees.

The lesson: even if certain HR records have minimum retention periods, it’s often smart to keep termination-related documentation longer, especially for higher-risk roles or situations. Also: store it securely, with restricted access. A messy personnel file is bad. A messy personnel file in a shared folder is a full-on horror movie.

Scenario 3: The Asset Sale That Triggers a Tax Surprise

A construction company sells a piece of equipment they’ve used for years. The sale itself is easy. The hard part is calculating gain or loss, because the tax reporting depends on original cost, improvements, depreciation taken, and the sale price. If the business can’t find the original purchase invoice or depreciation schedule, they risk reporting incorrectlyeither paying more tax than necessary or inviting questions they don’t want.

The lesson: asset records aren’t “three-year documents.” They’re “keep until disposed + keep through the tax return window” documents. A simple fixed-asset folder (digital) with purchase docs, financing, depreciation reports, and disposal paperwork can save real money and real stress.

Scenario 4: The Insurance Claim After a Disaster

A restaurant has a kitchen fire. Everyone is safe, but the cleanup is brutal. Insurance asks for proof of equipment value, purchase dates, repair history, and inventory estimates. Businesses that kept organized recordspurchase invoices, maintenance logs, vendor statements, even photos move faster and recover quicker. Businesses that didn’t? They spend weeks reconstructing history from scattered emails and partial bank records, while trying to keep the business alive.

The lesson: record retention isn’t just compliance. It’s business continuity. Your records are a recovery tool. Think of them as the “spare key” to your businessboring until the day you absolutely need it.

If you want the simplest next step: create your retention schedule, set up year-based folders, decide who owns each category, and add a calendar reminder to review/purge once per year (unless there’s a legal hold). The best retention plan is the one you actually doconsistently, calmly, and without needing a panic-fueled all-nighter.