What Business Records to Keep and for How Long (2026)

If you are searching for what business records to keep and for how long, the honest answer is that no single period covers everything. Tax records, transaction records, contracts, personnel files, licenses, and corporate records each run on different clocks, and state law can add years to the federal baseline.

The practical move is a written schedule. It preserves the legally required minimum, tells you when a document is finally safe to destroy, and stops you from paying for storage you no longer need.

How Long Should a Small Business Keep Records?

There is no single retention period, because tax records, transaction records, contracts, personnel files, licenses, and corporate records follow different rules. A written schedule preserves the legally required minimum and nothing more. Most federal tax records run three years from the return date, many business accounting records run seven, and formation documents are often kept forever. State, contractual, and legal-hold requirements can extend all of it.

Two named sources sit behind most of these numbers: IRS Publication 583, which covers depreciation and recordkeeping, and Regulation 1.6001-1, which sets the general rule for how long the IRS allows you to keep supporting documentation.

What Business Records to Keep and for How Long

The table below is a starting point, organized by record category. Read the state column before you file anything in a disposal bin, because a state revenue department can require more than the IRS does.

Record category	Common US federal baseline	Important exceptions	Safe disposal timing
Federal income tax returns	3 years from filing date	6 years if gross income understated by more than 25%; 7 years for a fraudulent or unfiled return; indefinite if no return was filed	After the longest applicable period closes
Business accounting records (general ledger, journals, ledgers)	7 years	Longer where a state or an extended return applies	7 years after the tax year
Receipts, invoices, bank and credit card statements	3 to 7 years	Longer if they support an asset you still own	After the related return clears its window
Sales tax records and permits	3 years federal	Many states require 4 to 6 years or more	Per your state revenue department
Payroll tax records and W-2s	At least 4 years after employment ends	FLSA recordkeeping floors apply separately; W-2s tie to benefit eligibility	After the longest payroll window
Personnel files	Varies by state	Medical and background-check records follow their own rules	Follow your state labor agency guidance
Contracts, leases, vendor agreements	Life of the agreement plus 6 to 7 years	Longer while a claim or warranty period is open	After the dispute window closes
Insurance policies and claims	Life of the policy plus 3 to 7 years	Open claims suspend disposal entirely	After claims are closed and resolved
Asset purchase and depreciation records	As long as you own the asset, plus 7 years after disposal	Needed for cost basis when you sell or refinance	7 years after the asset is disposed of
Business licenses and permits	Period set by the issuing authority	Historical compliance evidence is useful beyond the current term	After renewal cycles and audits are past
Articles of organization, bylaws, operating agreement, minutes, equity ledger	Permanently, or for the life of the business	Canceled and superseded versions stay in the historical file	Rarely destroyed
EIN and IRS determination letters	Permanently	None	Never destroy

State requirements, industry regulators, lease terms, and any active legal hold sit on top of this table. When two rules disagree, the longer one controls.

Tax and Accounting Records

The IRS general rule under Regulation 1.6001-1 gives you three years from the date you filed the return, or from the due date if you filed late. If you filed an extension, the clock runs from the extended return, not the original deadline.

Three exceptions stretch that window. Understate your gross income by more than 25% and the period becomes six years. File a fraudulent return or never file one at all and it becomes seven years, or indefinite. That last point catches people: if there is no return on file, there is no statute of limitations running in your favor.

The seven-year treatment most owners hear about comes from accounting records and fixed asset documentation rather than the income-tax clock. Depreciation schedules, asset purchase invoices, and disposal records need to survive the life of the asset plus seven years, because that is how long the IRS can come back for depreciation claims.

What Counts as a Tax Record?

Any document that supports income, expenses, deductions, or gross receipts. In practice that means receipts, invoices, bank statements, credit card statements, payroll reports, general ledger and journal exports, canceled checks, asset purchase records, mileage logs, and the returns themselves.

Digital copies work. The IRS accepts electronic records as long as they are authentic, readable, and can be produced on request, so a scanned receipt that came from your own card processor carries the same weight as the paper slip. What matters is that you can produce it later, not which format it started in.

A caveat on state taxes: federal guidance is not state guidance. A state revenue department can require sales tax documentation for longer, and the gap is often wider than people expect.

Bank, Credit, and Sales Records

Keep the full set: bank statements, deposit slips, credit card merchant reports, receipts, invoices, customer ledgers, credit memos, refunds, chargeback correspondence, and sales reports. Cash register tapes and receipt books deserve a special mention because they are the easiest records to lose and the hardest to reconstruct.

Use the longest period that applies, which for most businesses lands somewhere between three and seven years. Chargebacks and disputed card transactions have their own short windows, so do not let a dispute expire because the paper went in a shredder too early.

Reconcile monthly. Owners tell me the real problem is never the retention rule, it is finding a four-year-old document when an auditor asks for it next month. Clean books make the search a two-minute task instead of a lost weekend.

Employee and Payroll Records

Two different record sets get confused here. Payroll records that support tax filings follow the payroll tax clock, generally at least four years after employment ends. Personnel files follow state and federal labor rules that have little to do with the IRS.

Employee Records: What to Keep and for How Long

Employee record	How long to keep it	Notes
Applications, résumés, interview notes	1 to 2 years, or longer in states with ban-the-box rules	Keep longer if a hiring claim is likely
Offer letters and employment agreements	Employment plus the state claim window	Useful proof of terms
I-9 forms	3 years after employment ends, or 1 year after the employment verification is completed	Store with the personnel file, separately from tax forms
W-2s, W-3s, payroll tax filings	At least 4 years after employment ends	Longer if a state or contract requires it
Pay records, timesheets, payroll registers	3 years under FLSA recordkeeping rules	The longer payroll tax period governs anyway
Deduction authorizations and benefit elections	Employment plus 3 to 7 years	Needed if a benefit claim is filed later
Performance reviews and written warnings	Employment plus 3 to 7 years	Core evidence in a wrongful termination dispute
Leave records, attendance, accommodation files	Varies widely by state	Medical detail belongs in a restricted file
Medical records and background checks	State-specific, often 1 to 3 years after separation	Never in a shared drive
Termination documents and separation records	5 to 7 years after separation	Longer where an unresolved claim exists

Keep personnel files in a restricted system with access limited to the people who need it. Medical information, accommodation requests, and background check results should not sit in a general shared folder next to the holiday calendar. Owners who get sloppy here create a liability that has nothing to do with taxes.

Contracts, Vendor Files, and Customer Agreements

There is no blanket period for contracts, which is why most vendors say the same vague thing. Retain a contract through the life of the relationship, through the payment and warranty period, and through the applicable dispute window, commonly three to six years depending on the state. Keep it indefinitely while a claim is active.

That covers purchase orders, vendor agreements, leases, permits, warranties, statements of work, signed customer forms, and certificates of insurance. Leases often have their own survival clauses on things like structural repairs, so read them rather than assuming the term is the whole story.

Business Licenses, Permits, and Compliance Records

Keep current licenses, permits, inspection results, registrations, professional credentials, insurance certificates, and written safety policies. Use the period the issuing authority requires, but keep the historical file beyond that.

Proof that you were compliant three years ago is exactly what an investigator or a buyer asks for six years later. Renewal reminders live in the same folder, otherwise a lapsed credential surprises you at the worst possible moment.

Company Formation and Governance Records

Articles of organization, bylaws, operating agreements, board and member minutes, the stock ledger, equity and membership records, annual reports, and certificates of good standing all belong in a permanent file. Governing and ownership records are commonly retained for the life of the business and often beyond it.

Keep superseded versions. An amended operating agreement that replaced the prior version still tells the story of how the company actually operated, and that matters when a lender or a buyer reads minutes from a few years back.

What If Your State Requires Longer?

Federal IRS guidance is a floor, not a ceiling. State revenue departments, secretary of state offices, labor agencies, licensing boards, and industry regulators each set their own requirements, and some run well beyond the federal period. Sales tax is the classic example, with common state windows of three to six years.

Check the sources that apply to you: your state revenue department, secretary of state, labor agency, licensing board, any industry regulator you fall under, the lease, and your customer or vendor agreements. For regulated operations or an unusual dispute, talk to a CPA or an attorney rather than relying on a general schedule.

How to Build and Maintain a Recordkeeping System

1. Inventory your record types. Write down what you actually hold before deciding what to keep. Most owners discover they have more records than they thought and no idea where they are.
2. Assign a retention period and an owner. Every record type gets a period, a trigger event, and a named person responsible. If nobody owns it, nobody enforces it.
3. Scan and name files consistently. A convention like YYYY-MM-DD VendorName Invoice 1234 beats scan_0031 every single time. Searchability is the whole benefit of digitizing.
4. Protect access and back up. Keep tax and personnel records in restricted storage with a tested backup, not on one laptop.
5. Review expirations on a schedule. A monthly or quarterly check catches records that pass their period without anyone noticing.
6. Dispose securely and document it. Log what was destroyed, when, and by whom. If you are ever asked to prove destruction, that log is your answer.
7. Track legal holds. A hold suspends every destruction rule you have. Suspend it in writing, tell everyone who touches records, and release it in writing when the matter closes.

A workable folder structure looks like this: one top-level folder per year, with subfolders for taxes, banking, payroll, personnel, contracts, assets, and compliance. Digital records follow the same shape in your accounting software and cloud drive, so a paper file and its scanned twin sit in matching places.

Set your own auto-delete rules carefully. An email retention setting that wipes attachments after 24 months can quietly destroy the invoice someone needed for a deduction four years later. Check those defaults once a year.

Secure Ways to Dispose of Expired Records

Cross-cut shredding is the standard for paper, cutting documents in both directions so the strips cannot be reassembled into readable text. Strip-cut shredding leaves long ribbons that are much easier to piece back together and is not sufficient for sensitive material. Locked disposal bins keep records contained until a vendor collects them, and a certificate of destruction from the vendor gives you proof that a specific batch was destroyed.

For electronic records, deletion has to be real. Emptying the recycle bin or deleting a file does not remove it from backups or sync caches. Secure deletion, encryption with key destruction, and documented media sanitization are the methods that hold up.

Never recycle ordinary business documents, which include customer lists, invoices, and personnel paperwork. Regular recycling is not secure disposal.

If you are asked to preserve documents, stop destroying immediately. Owners who shred during a live claim cannot un-shred anything, and destroying evidence carries its own penalties. Document the hold first, then sort the pile into preserved and destroyable.

Frequently Asked Questions

Conclusion

Start by listing what you currently hold, not what you think you should keep. Compare each record type against the federal baseline and your state rules, adopt a written retention schedule with a named owner for every category, and put a legal hold process in place before anyone touches a shredder.

Whenever two requirements collide, the longest one wins. Revisit the schedule as your business, your state rules, or your regulations change, and you will have answered what business records to keep and for how long for your situation rather than for the average one.