How Long Do You Need to Keep Business Records? 7 Rules That Keep You Audit Ready

How long to keep business records depends on the record, not on the calendar year. Three years is the general baseline for tax records, employment and payroll tax records run four years, certain situations extend to six or seven years, and a short list of documents should never be discarded at all. The safe practice for most small and mid-sized businesses is a seven year retention window for business records, with permanent storage for the documents that establish the business itself.

The costly mistake is not keeping too much. It is discarding the one file that would have settled a question quickly. Below is a clear schedule you can apply, the business records that fall outside the tax rules entirely, and a simple way to organize retention so the answer is never a search through a storage closet.

Table of Contents

1. How Long to Keep Business Records: The Short Answer
2. Why the Three Year Rule Is Not the Whole Rule
3. The 7 Retention Rules, Record by Record
4. The Business Records That Have Nothing to Do With Taxes
5. Paper or Digital: What Actually Counts
6. Building a Business Record Retention Schedule You Will Follow
7. What Happens When a Business Record Is Missing
8. Frequently Asked Questions

How Long to Keep Business Records: The Short Answer

The Internal Revenue Service sets retention by the period of limitations, which is the window during which a return can be amended or additional tax can be assessed. Most records tie back to that window rather than to a fixed number of years.

In practice, that produces a simple hierarchy. Three years covers ordinary tax records. Four years covers employment tax records. Six years applies when income was understated substantially. Seven years applies to a narrow set of loss claims. A small group of documents is kept permanently because it establishes who the business is and what it owns.

The published guidance on how long to keep records is worth reading once in full. It is short, and it is the authority every other retention chart is based on.

Why the Three Year Rule Is Not the Whole Rule

Three years is the number most business owners remember, and it is correct for the most common situation. It is also the number that causes the most trouble, because it gets applied to every business record in the office.

The three year clock does not begin on the date of the transaction. It begins on the date the return was filed, or the due date of that return if it was filed early. A record supporting a deduction taken on a return filed in April of one year is therefore live well into the third year after that filing, not three years from the receipt.

Several categories sit entirely outside the three year window. Payroll records carry their own requirement. Records establishing the basis of property stay relevant for as long as the property is held, plus the limitation period after it is sold. Formation documents, ownership agreements, and certain permanent filings have no expiration at all.

There is one more reason to hold longer than the minimum, and it has nothing to do with tax authorities. Lenders, insurers, buyers, and grant funders all ask for history. A business that can produce five clean years of statements on request is in a materially stronger position than one that can produce eighteen months. Audit readiness is a business asset, not a compliance chore, which is why organized financial records are worth maintaining beyond the legal floor.

The 7 Retention Rules, Record by Record

Each rule below states the period and the records it governs. Where two rules could apply to the same document, the longer period governs.

Rule 1: Three Years for Ordinary Tax Records

Keep the return and everything that supports it for three years from the filing date. That includes invoices, receipts, bank and credit card statements, canceled checks, mileage logs, expense documentation, and the general ledger detail behind each figure. If a refund or credit claim is filed after the original return, the period runs three years from the original filing or two years from the date the tax was paid, whichever is later.

Rule 2: Four Years for Employment and Payroll Tax Records

Employment tax records are held at least four years after the date the tax becomes due or the date it is paid, whichever is later. This category is broader than most owners expect. It covers wage and hour detail, employee names and addresses and Social Security numbers, dates of employment, amounts and dates of payments, tips reported, fringe benefits, copies of returns filed, and records of deposits. Employment records also carry obligations under labor and employment rules that operate independently of tax law, which is one reason payroll administration is best handled as a documented process rather than a spreadsheet.

Rule 3: Six Years When Income Was Substantially Understated

If income that should have been reported was omitted, and the omission is more than 25 percent of the gross income shown on the return, the retention period extends to six years. Very few businesses set out to be in this category. The practical takeaway is that a business with any complexity in its revenue recognition, multiple entities, or significant cash activity is better served by a six or seven year default than by three.

Rule 4: Seven Years for Worthless Securities and Bad Debt

A claim for a loss from worthless securities or a bad debt deduction carries a seven year retention period. This is a narrow rule with a wide practical consequence, because it is the reason so many retention schedules simply use seven years for all financial records. Doing so is not over-cautious. It removes a judgment call from the process.

Rule 5: Property Records Until the Period After Disposal

Records that establish the basis of property are kept until the limitation period expires for the year the property is disposed of. Purchase documents, closing statements, capital improvement invoices, depreciation schedules, and any records of casualty losses or improvements belong in this group. A building purchased in year one and sold in year twenty means those year one records remain live for more than two decades.

Rule 6: Permanent Records That Are Never Discarded

Some documents have no retirement date. Articles of incorporation or organization, bylaws and operating agreements, minutes and resolutions, stock or membership ledgers, partnership agreements, federal identification number assignment, annual reports as filed, deeds and titles, and any documentation of a legal settlement should be retained permanently. So should year end financial statements and the general ledger itself. These establish the history of the business and cost almost nothing to store.

Rule 7: Indefinitely When No Return Was Filed or a Return Was Fraudulent

Where a return was not filed, or where a filed return was fraudulent, no limitation period closes and records are kept indefinitely. This rule exists as a boundary condition rather than a planning tool. If it applies to a business, the retention question is secondary to getting current, and that is a conversation for a qualified tax professional.

The Business Records That Have Nothing to Do With Taxes

Business record retention schedules built only around tax rules leave gaps, because a significant share of the documents a business needs are governed by contracts, funders, insurers, and state requirements instead.

• Contracts and leases, kept for the term plus the applicable statute of limitations for a contract claim in the governing state
• Insurance policies and claim files, including expired policies, since occurrence based coverage can be triggered by a claim made years later
• Licenses, permits, and certifications, along with the renewal history that proves continuous good standing
• Corporate governance records, including annual filings and registered agent correspondence
• Grant agreements, budgets, drawdown documentation, and reporting, which routinely carry retention terms written into the award itself and often exceed federal tax periods
• Employee files after separation, including offer letters, acknowledgments, performance documentation, and benefit elections

Grant funded organizations deserve particular attention here. Award terms frequently specify a retention period that begins at the close of the grant rather than at the end of a tax year, and funders can and do request supporting documentation years later. Organizations that manage awards should treat grant administration records as a separate schedule with its own start date. The Small Business Administration makes a similar point about internal documentation in its guidance on staying legally compliant, noting that internal records may be needed when a business is sold or when legal action is taken.

Paper or Digital: What Actually Counts

Electronic records are acceptable. The requirement is not the format but the integrity of the record: it must be complete, legible, accurate, and retrievable for the full retention period. A scanned receipt is as valid as the original slip, provided it can be produced when asked.

Three practical conditions separate a digital system that works from one that fails at the moment it is needed.

The first is retrievability. A folder of ten thousand files named by scanner default is technically retained and practically lost. Business records should be organized by year and category, with naming that a person unfamiliar with the system can navigate.

The second is durability. A single hard drive in an office is not a retention system. Records should exist in at least two places, one of them offsite or in the cloud, and the restore process should have been tested at least once.

The third is continuity of access. Accounting platforms change, employees leave, and subscriptions lapse. Records held only inside a software account that no one can log into are gone. Year end exports of statements and general ledger detail, stored independently of the platform, protect against that.

Thermal paper receipts deserve a specific mention. They fade, sometimes within two years, and a blank slip supports nothing. Scan them promptly or the retention period is academic.

Building a Business Record Retention Schedule You Will Follow

A retention policy that lives in a binder nobody opens is the same as no policy. Four steps make it operational.

Begin by writing the schedule down in one page. List each record category, the retention period, where it is stored, and who is responsible. One page is enough for most businesses, and it settles arguments before they start.

Next, set a single annual review date. Many firms use the period after the year end close, when the books are already reconciled and the prior year is complete. On that date, current year records are archived and records past their retention period are dispositioned. A month-end and year-end close process that already exists gives this step a natural home.

Third, separate active from archived storage physically or digitally. Current year and prior year stay accessible. Everything older moves to archive. This single distinction is what keeps a filing system usable as it grows.

Finally, dispose of records deliberately rather than by accident. Financial and personnel documents should be shredded, not discarded, and the disposal should be noted so there is a record of what was destroyed and when. That note is itself valuable if a question arises later about a document that no longer exists.

What Happens When a Business Record Is Missing

Missing documentation is not automatically fatal, but it shifts the burden. A deduction that cannot be substantiated may be disallowed, and the position becomes an argument rather than a fact. That is the real cost of a gap: time, professional fees, and uncertainty.

Reconstruction is often possible. Bank and credit card institutions can typically produce statements going back several years. Vendors can reissue invoices. Payroll providers retain filing copies. A property closing file can usually be rebuilt from the title company or the county record. None of this is fast, and all of it happens at exactly the moment when time is short.

The businesses that never face this are not the ones with the most storage. They are the ones with a routine. Records are captured as transactions occur, reconciled monthly, and closed annually, so the question of what happened in a given month is answered by opening a file rather than by starting an investigation. Businesses across Madison and the wider Jackson metro come to us most often not because something went wrong, but because they want that routine to exist without having to run it themselves.

Frequently Asked Questions

How long should a small business keep bank statements and receipts?

Seven years is the practical standard. The tax minimum for ordinary records is three years, but receipts and statements support deductions that can fall under the six or seven year rules, and separating them by category in advance is more work than simply keeping them all. Storing them digitally makes seven years inexpensive. If the volume has become unmanageable, bookkeeping support that captures documentation as transactions occur solves the problem going forward.

How long do payroll records need to be kept?

At least four years after the tax becomes due or is paid, whichever is later, for employment tax purposes. Separate labor and employment requirements apply to items such as time records, wage computations, and hiring documentation, and several of those run on their own clocks. Because the categories overlap and the shortest period is not the governing one, most employers keep the complete payroll file for seven years. Our clients with employees are set up this way as a default.

Can I throw away paper once everything is scanned?

In most cases yes, provided the digital copy is complete, legible, and retrievable for the full retention period, and provided the storage is backed up. A small number of documents should stay in original form regardless, including anything with a raised seal, original signed contracts and deeds, stock or membership certificates, and titles. When in doubt, keep the original of anything that establishes ownership.

Do these retention rules apply to nonprofits?

The tax retention periods apply in substantially the same way, and nonprofits carry additional obligations. Grant agreements commonly specify their own retention terms measured from the end of the award period, board minutes and governance records are permanent, and donor documentation supporting acknowledgments should be retained. Organizations answering to multiple funders benefit from a single written schedule that satisfies the longest requirement rather than tracking each award separately. Our frequently asked questions cover more of how this works in practice.

Who is responsible if records are lost in a fire or flood?

The business remains responsible for substantiating its own positions, which is precisely why offsite or cloud backup is not optional. Casualty loss documentation itself becomes a record to retain, and rebuilding financial history after a loss is far harder than maintaining a second copy in advance. Any business whose records exist in exactly one location should treat that as the most urgent item on this page.

Let Us Handle What Matters

Record retention is straightforward once a schedule exists and someone owns it. Getting there, from a closet of unsorted boxes to a system that answers questions in minutes, is where most businesses stall. Ledger Group Services provides bookkeeping, payroll, HR administration, compliance documentation, and grant administration for businesses, nonprofits, and families in Madison, Mississippi and beyond. Professional. Confidential. Reliable. Request a consultation and we will review how your records are kept today and what a workable schedule looks like.

This article is general information about record retention practices and is not tax or legal advice. Confirm the requirements that apply to your specific situation with your tax advisor or attorney.