Most business records need to be kept between three and seven years, with a handful of categories that never get thrown out. The exact answer to how long a business needs to keep records depends on the document and which federal agency cares about it: the IRS, the Department of Labor, OSHA, USCIS, and the EEOC each set their own clocks, and they don’t all start on the same date. Seven years handles most tax paperwork safely. Formation documents, stock ledgers, and asset basis records stay forever.
Retention Periods at a Glance
- Income tax returns and supporting documents: 3 years standard, 6 years if gross income is understated by more than 25%, 7 years for worthless securities or bad debt claims
- Employment tax records: 4 years from the date the tax is due or paid
- FLSA basic payroll records: 3 years; supporting time cards and schedules: 2 years
- Form I-9: length of employment plus the longer of 3 years from hire or 1 year after separation
- Personnel and hiring records (EEOC): 1 year, longer if a charge is filed
- ERISA benefit plan records: 6 years from the Form 5500 filing date
- OSHA 300 Log, annual summary, and 301 Incident Reports: 5 years after the calendar year they cover
- FMLA records: 3 years
- Asset basis records, corporate formation documents, stock ledgers, intellectual property registrations, and any records tied to a fraudulent or unfiled return: indefinite
When federal and state rules overlap, the longer period controls. A business operating in multiple states should build its schedule around the most demanding jurisdiction.
Tax Records
The IRS sets its retention periods around how long it has to assess additional tax. For a substantially correct return, that window is three years from the filing date or three years from the original due date, whichever is later. Returns filed early count as filed on the due date.1Internal Revenue Service. How Long Should I Keep Records Every receipt, invoice, bank statement, and canceled check that supports a deduction has to last that full three years.
Two longer windows override the three-year rule. If a return omits more than 25% of gross income, the IRS gets six years to come after the difference.2Office of the Law Revision Counsel. 26 USC 6501 – Limitations on Assessment and Collection And if you claim a deduction for worthless securities or a bad debt, the IRS requires seven years of supporting records.1Internal Revenue Service. How Long Should I Keep Records
Because those windows layer on top of the standard rule, most tax advisors settle on seven years as a working safe harbor for general income tax records. Seven years covers the three-year floor, the six-year substantial-omission period, and the seven-year worthless-securities rule in one policy. Copies of the actual filed tax returns should be kept permanently; they establish the filing dates that start every other clock running.
If you amend a return or claim a refund, keep the supporting documents for the later of three years from the original filing or two years from when you actually paid the tax.3Internal Revenue Service. Time You Can Claim a Credit or Refund After that window, the IRS won’t process the claim.
Records the IRS Can Ask For Forever
Two categories have no expiration. First, if a return was never filed or was fraudulent, the assessment period never closes.4Office of the Law Revision Counsel. 26 USC 6501 – Limitations on Assessment and Collection Every document tied to that year stays relevant indefinitely.
Second, records that establish the cost basis of assets have to be kept for as long as you own the asset, plus several more years after you sell or dispose of it, because the standard assessment period runs from the return reporting the sale. That means purchase invoices, improvement receipts, and depreciation schedules stay in the file for the full life of the property.
Like-kind exchanges under Internal Revenue Code Section 1031 stretch this further. When you swap one investment property for another, the deferred gain carries into the replacement property, so the original records have to survive until the final replacement is sold outright.5Internal Revenue Service. Like-Kind Exchanges Under IRC Section 1031 The same logic applies to nondeductible IRA contributions and stock basis: the records stay until the money comes out or the shares are sold.
Employment Tax Records
Employment taxes run on a separate four-year clock. Every employer has to keep employment tax records for at least four years after the date the tax becomes due or is paid, whichever is later.6Internal Revenue Service. Topic No. 305, Recordkeeping That covers Forms 941, 940, W-2s, W-4s, and the underlying calculations behind those filings.
The clock is easy to miscount because it doesn’t run from when the return was filed. It runs from when the tax was due or paid. A late deposit resets the start date for those records. State unemployment tax records typically need four to five years as well, depending on the state.
Payroll and Wage Records
The Fair Labor Standards Act sits alongside the IRS rules with its own timelines aimed at proving employees were paid correctly. Basic payroll records showing each employee’s hours, wages, deductions, and pay dates have to be kept at least three years from the last date of entry.7eCFR. 29 CFR Part 516 – Records to Be Kept by Employers
Supporting documents used to calculate pay carry a two-year minimum. That includes time cards, work schedules, wage rate tables, and records of additions or deductions.7eCFR. 29 CFR Part 516 – Records to Be Kept by Employers Sorting documents into two-year and three-year piles creates gaps. Keeping every payroll record for a full three years is simpler and safer if a Department of Labor investigator asks to see the file.
Hiring, Personnel Files, and Form I-9
The EEOC requires employers to keep personnel and employment records for at least one year from the date the record was made or from when the personnel action happened, whichever is later. For involuntary terminations, the year runs from the termination date.8eCFR. 29 CFR Part 1602 Subpart C – Recordkeeping by Employers Job applications, resumes, interview notes, and records tied to hiring, promotion, and termination all fall under that rule.
The one-year period stretches automatically when a discrimination charge is filed or a lawsuit is brought. Every record relevant to that charge must be preserved until final disposition, including the application materials of the person who filed the charge and of every other candidate for the same position.8eCFR. 29 CFR Part 1602 Subpart C – Recordkeeping by Employers A complaint filed eleven months after a hiring decision is much harder to defend if the applications were shredded on schedule.
Form I-9 has its own retention math. For every employee hired after November 6, 1986, the form is kept while they work for you, then for the longer of three years after their hire date or one year after their employment ends.9U.S. Citizenship and Immigration Services. 10.0 Retaining Form I-9 Short tenure means three years from hire; long tenure means one year after separation. I-9 paperwork violations carry per-form penalties currently ranging from roughly $288 to $2,861, and destroying a current employee’s I-9 creates a violation that continues every day the form is missing.
Benefits, Safety Logs, and Leave
ERISA requires records supporting employee benefit plans to be kept for at least six years after the plan’s Form 5500 is filed. That includes the Form 5500 itself and its schedules, nondiscrimination test results, employee communications, financial reports, fidelity bond documentation, and census data used to calculate eligibility and benefits.10DOL.gov. Recordkeeping in the Electronic Age – ERISA Record Retention Requirements Records sufficient to determine each participant’s benefit entitlement, including rates of pay, hours worked, deferral elections, and employer contribution calculations, have to be kept as long as they could affect that entitlement.
Employers subject to OSHA injury and illness recordkeeping keep the OSHA 300 Log, annual summary, and 301 Incident Reports for five years following the end of the calendar year they cover.11eCFR. 29 CFR Part 1904 Subpart D – Other OSHA Injury and Illness Recordkeeping Requirements The five-year window reflects the fact that workplace injuries can develop into claims well after the incident.
FMLA records — eligibility determinations, designation notices, leave calculations, and premium payments — have a three-year minimum. No specific format is required, but they must be available for Department of Labor inspection on request.12eCFR. 29 CFR 825.500 – Recordkeeping Requirements
Corporate Documents and Major Contracts
Anything that defines the legal existence of the business stays forever. Articles of Incorporation or Organization, corporate bylaws, LLC operating agreements, and every amendment to those documents have no expiration for retention purposes. They establish who owns the business, how it’s governed, and what authority its officers have.
Board meeting minutes, shareholder resolutions, and the stock ledger stay permanent for the same reason. The stock ledger tracks every ownership transfer, which is the chain needed to calculate basis and resolve ownership disputes. Trademark, patent, and copyright registrations also stay indefinitely.
Major contracts — long-term leases, partnership agreements, significant vendor deals — should be kept for at least several years after they expire or terminate. State statutes of limitations for written contract disputes run from three to fifteen years, with six years being the most common. A retention policy of seven years past expiration covers most jurisdictions.
Litigation Holds and Closing a Business
Scheduled destruction stops the moment litigation is filed against the business, or the moment it’s reasonably anticipated. This obligation, called a litigation hold, overrides every retention schedule above. Destroying relevant documents after a lawsuit is pending or foreseeable can trigger sanctions ranging from monetary fines to an adverse inference instruction (where the court tells the jury to assume the destroyed records would have been unfavorable) to outright default judgment. The hold reaches electronic records too, including emails, text messages, and backup systems that overwrite automatically. When a hold is triggered, notify everyone in the organization who might hold relevant documents and suspend any automated deletion.
Closing a business doesn’t clear the retention obligations. The IRS requires a final return for the year the business closes, and the standard retention clocks run from that final filing date. Employment tax records still need four years from when the final payroll tax is due or paid.13Internal Revenue Service. Closing a Business Property records survive until the limitations period expires for the year of disposition. Permanent corporate records — Articles of Incorporation, Articles of Dissolution, board minutes, the stock ledger — should be archived and kept indefinitely even after the entity ceases to exist. A dissolved business has no office to keep files in, so designate a person or storage service to hold them.
What Happens If Records Are Missing
Inadequate records hit from two directions: direct penalties and lost defenses.
On the tax side, the IRS treats a failure to keep adequate books and records as negligence. The accuracy-related penalty is 20% of the resulting tax underpayment.14Office of the Law Revision Counsel. 26 USC 6662 – Imposition of Accuracy-Related Penalty If an auditor disallows $50,000 in deductions because the receipts aren’t there, the business owes the additional tax plus 20% on top. If the IRS finds fraud, the penalty jumps to 75%.15Internal Revenue Service. Avoiding Penalties and the Tax Gap
In wage disputes, missing payroll records flip the burden of proof. When an employee claims unpaid overtime and the employer can’t produce the time records the FLSA requires, courts routinely accept the employee’s estimates of hours worked. The same principle governs I-9 audits, EEOC investigations, and OSHA inspections: required records are treated as the truth, and their absence is treated as evidence against the employer.
Storing and Destroying Records
Federal law accepts electronic records as equivalent to paper originals when the storage system meets certain standards. The IRS requires accurate and complete transfers from the original documents, reasonable controls against unauthorized alteration or deletion, and an indexing system that provides an audit trail between the general ledger and source documents.16IRS.gov. Rev. Proc. 97-22 Every stored record has to be legible on screen and reproducible as a hard copy. Scanned paper documents work if the scan is accurate and complete and the system can locate and reproduce any record on request.
Once a retention period expires, destroy records through a documented process. Shred or pulverize physical documents so they can’t be reconstructed. For electronic records, use deletion methods that prevent recovery. Businesses handling consumer report data face additional requirements under the FTC’s Disposal Rule, which calls for reasonable measures to protect against unauthorized access during disposal, whether through shredding, destruction of electronic media, or a qualified destruction service.17eCFR. 16 CFR 682.3 – Proper Disposal of Consumer Information
Keep a destruction log recording what was destroyed and when. That log is the proof that a missing document was disposed of on policy rather than lost, hidden, or shredded in bad faith.