How to Store Invoices and How Long to Keep Them

Storing invoices well means keeping them organized, legible, secure, and retrievable for at least three years after you file the tax return they support, with longer periods for certain situations. That is the short version of how to store invoices and how long to keep them. The longer version depends on what kind of expense the invoice documents, what medium you store it in, and how you protect and eventually destroy it.

How Long to Keep Invoices

The retention clock generally starts on the date you file the return that reports the income or expense, not the date printed on the invoice. Returns filed early count as filed on the due date. Three years from that filing date is the baseline.

Several situations extend the timeline:

If you omit more than 25% of the gross income shown on your return, the IRS has six years to assess additional tax, so keep records covering that full window.¹
If you claim a loss from worthless securities or a bad debt deduction, keep the supporting invoices for seven years.²
Records tied to employment taxes should be held for at least four years after the tax becomes due or is paid, whichever is later.²
If you file a fraudulent return or never file one, there is no time limit at all. The IRS can assess tax at any point, and you would need records going back indefinitely to defend yourself.¹

The Capital Asset Trap

The rule most businesses overlook: invoices tied to property you still own, including equipment, vehicles, buildings, and other depreciable assets, must be kept until the statute of limitations expires for the year you sell or otherwise dispose of that property. Buy a piece of equipment in 2026 and sell it in 2040, and you need the original purchase invoice through at least 2043. Those records let you calculate depreciation deductions and figure your gain or loss at the time of sale.³

The same logic applies when you receive property in a tax-free exchange. Your basis in the new property carries over from the old, so records on both properties need to survive until you dispose of the new one in a taxable transaction.³

State and Contract Timelines

State audit windows and contract statutes of limitations add another layer. Sales and use tax audits typically reach back three to six years, with longer periods for significant underreporting or fraud. Written contract disputes can carry statutes of limitations of up to ten years in some jurisdictions. Treat the longest applicable period as your minimum for any given invoice, whether that comes from federal tax law, state tax law, or a potential contract claim.

What Each Invoice Needs Before You File It

An invoice missing key information is almost as useless as one you never kept. Before archiving anything, confirm the document shows:

The vendor or payee’s full legal name and taxpayer identification number. For independent contractors, this matters for 1099-NEC reporting, since payments of $600 or more must be matched to the right recipient.⁴
The transaction date, which ties the expense to the correct tax year. A missing or wrong date can shift a deduction into the wrong period.
A description of the goods or services detailed enough to show what you actually bought. Vague line items make it hard to defend whether something was a deductible business expense or a personal purchase.
Itemized totals showing the base price, sales tax, and any other fees separately, rather than a single lumped number.
Payment terms and method, whether check, card, wire, or cash, and when payment was due or completed. That information helps you reconcile invoices against bank and credit card statements.

If any of that is missing or illegible, request a corrected invoice from the vendor before filing. Cleaning it up at payment time is far easier than chasing it down two years later when an auditor asks.

Choosing a Storage Method

Federal law does not require paper originals. The IRS accepts electronic records stored in a system that meets specific standards, and many businesses now go fully digital. The choice comes down to how well each option protects the records and how quickly you can retrieve them.

Physical Storage

Paper invoices in filing cabinets still work but demand more maintenance than most people expect. Heat, moisture, and direct light can fade ink within a few years. Paper records need a dry, climate-controlled space. Off-site archiving services provide that environment and add protection against fire, flooding, and theft, at the cost of slower retrieval.

Digital Storage

Revenue Procedure 97-22 sets out what the IRS requires from an electronic storage system. The system must accurately and completely transfer paper records into digital form, and the resulting files must be highly legible and readable both on screen and when printed. Legibility means every letter and number is clearly identifiable; readability means groups of characters are recognizable as words and numbers.⁵

Beyond image quality, the system needs controls that prevent anyone from creating, altering, or deleting stored records without authorization. It also needs an indexing system that lets you locate and reproduce any stored document on request. During an examination, you must be able to provide the IRS with whatever hardware, software, and personnel are necessary to find, display, and print any electronically stored record.⁵

Most modern accounting software satisfies these requirements by linking scanned invoice images to general ledger entries, building the indexing into the workflow. If your system meets the standards, you can destroy the paper originals after scanning.

Backups

Digital files solve the space problem but introduce a different risk. Hardware failure, ransomware, or accidental deletion can wipe out years of records in seconds. The widely adopted protection strategy is three copies of your data on at least two different types of storage, with one copy stored off-site. In practice, that might mean the working copy on your office server, a backup on an external drive, and a third copy in cloud storage. Test your backups periodically. An untested backup is barely better than no backup at all.

A Routine That Actually Holds Up

A consistent process matters more than a perfect system. Businesses that let invoices pile up for months lose documents or file them incorrectly. A weekly or biweekly archiving session prevents that backlog.

Scan at a resolution high enough that every character stays sharp when printed. Compare the scan to the original before discarding anything.
Name files consistently. A convention like YYYY-MM-DD-Vendor-Amount makes files sortable by date and searchable by vendor without opening each one. Whatever format you pick, use it every time.
Organize into folder structures by year and then by expense category or vendor. That structure doubles as the indexing system the IRS requires.⁵
Verify after filing. Open a random sample of recently archived files to confirm they are legible and in the correct folder.
Run backups immediately, so new files propagate to all three storage locations.

Keep your storage software updated. File formats evolve, and an archive saved in an obsolete format five years ago may not open on current systems without conversion.

Protecting Sensitive Information

Invoices routinely carry the kind of data identity thieves want: names, taxpayer identification numbers, bank account details, and credit card numbers. Treating your invoice archive as a sensitive data store is not optional for businesses that handle customer or employee financial information.⁶

The FTC’s Safeguards Rule requires covered financial institutions to maintain a written information security program that protects customer data from unauthorized access. Businesses outside that direct coverage should still follow its core principles: limit who has access to stored invoices, encrypt digital files at rest and in transit, use multi-factor authentication for anyone accessing the system, and keep logs of who viewed or modified records.⁷

For physical records, access control is simpler but just as important. Lock the filing cabinets or storage room. Limit keys to employees who genuinely need them. Never transmit unencrypted invoices containing Social Security numbers or account information by email.

Disposing of Expired Records

Once the retention period passes, you don’t toss invoices in the recycling bin. Records containing personal or financial information require destruction methods that make the data unrecoverable.

For paper, shredding, pulverizing, and burning are all standard. Cross-cut shredding is the practical choice for most offices. For digital files, the equivalent is erasing or overwriting electronic media so the data cannot be reconstructed. Deleting a file or dragging it to the trash is not enough, because basic recovery tools can retrieve deleted files from most storage devices.

The FTC’s Disposal Rule under FACTA makes this a legal requirement for any business that possesses consumer information. The standard is flexible but clear: take reasonable measures to protect against unauthorized access during disposal. Hiring a professional destruction service and verifying compliance through a contract is one approach. Running an in-house shredding program with documented procedures is another.⁸

Document the destruction whichever method you use. A written log or certificate of destruction showing what was destroyed and when gives you proof of a deliberate, controlled process if questions arise later.

If Records Are Lost or Destroyed

Even with a solid system, records get lost. Fires, floods, theft, and plain human error can wipe out part of an archive. Recovery is possible but slow.

Start with the IRS. You can request transcripts of prior returns through the Get Transcript tool at IRS.gov or by calling 800-908-9946. For paper requests, file Form 4506-T (Request for Transcript of Tax Return), which the IRS typically processes within 10 business days. If you need actual copies of filed returns rather than transcripts, use Form 4506. If the loss resulted from a federally declared disaster, write the disaster designation in red at the top of the form to expedite processing and waive the fee.⁹

For the invoices themselves, contact your vendors and request duplicate copies going back at least one calendar year. Pull bank statements to cross-reference deposits and payments, since those records often survive when invoices don’t. Copies of state and local tax returns, sales tax reports, and payroll filings can help reconstruct gross sales figures for a given period.⁹

Reconstruction is painful and incomplete. A backup in a second location would have avoided most of it, and the cost of redundant storage is trivial compared to the cost of piecing a financial history back together after the fact.

1
Office of the Law Revision Counsel. 26 USC 6501 – Limitations on Assessment and Collection
2
Internal Revenue Service. How Long Should I Keep Records?
3
Internal Revenue Service. Publication 583 – Starting a Business and Keeping Records
4
Internal Revenue Service. Instructions for Forms 1099-MISC and 1099-NEC
5
Internal Revenue Service. Rev. Proc. 97-22
6
Federal Trade Commission. Protecting Personal Information: A Guide for Business
7
Federal Trade Commission. FTC Safeguards Rule: What Your Business Needs to Know
8
eCFR. 16 CFR Part 682 – Disposal of Consumer Report Information and Records
9
Internal Revenue Service. Reconstructing Records After a Natural Disaster or Casualty Loss