Keep most business tax records for at least 7 years, employment and payroll records for at least 4 years, and anything tied to a major asset, loan, or business formation for as long as you own the item plus 7 years after you dispose of it. Those three rules cover the vast majority of paperwork a US small business generates. The 7-year benchmark is the safe default because it clears the IRS's three-year general audit window, its six-year window for substantial under-reporting, and gives you room for state agencies and lenders who often want more history than the IRS does. From an underwriter's chair, the story is even simpler: the businesses that keep clean, retrievable records get approved faster and on better terms, because the record is the case.
Key takeaways
- Keep most business tax records at least 7 years — this clears the IRS's 3-year general audit window and its 6-year window for substantial under-reporting.
- Keep payroll and employment tax records at least 4 years after the tax is due or paid.
- Business formation documents, EIN letters, and ownership records should be kept permanently.
- Asset and loan records run on a longer clock: ownership period (or life of loan) plus 7 years after disposal or payoff.
- The IRS accepts legible electronic copies, so scanned records fully satisfy retention requirements.
- For revenue-based funding, the core packet is just the last 3-6 months of bank statements plus ID and proof of business — approval leans on deposits, not credit score.
- A legal hold overrides your normal schedule: records tied to litigation or a dispute cannot be destroyed even if they have aged out.
The Short Version: A Retention Schedule You Can Post on the Wall
Most owners overthink this. The honest answer is that a handful of categories drive nearly every retention decision. Here is the working schedule we hand clients, built around the IRS statute of limitations and real-world lender and legal needs.
| Record type | Keep for | Why |
|---|---|---|
| Federal & state tax returns (filed) | 7 years minimum (many keep permanently) | 3-yr general audit window, 6-yr for major under-reporting; no limit if a return is never filed or is fraudulent |
| Supporting docs (receipts, invoices, mileage, 1099s) | 7 years | Substantiate every line on the return |
| Payroll & employment tax records | 4 years after tax is due or paid | IRS payroll rule; state may require more |
| Bank & credit-card statements | 7 years | Cash-flow proof, tax support, and lender underwriting |
| Business formation, EIN, bylaws, operating agreement | Permanently | Legal existence of the entity |
| Loan & financing agreements | Life of loan + 7 years | Payoff proof, disputes, refinancing |
| Fixed-asset & depreciation records | Ownership period + 7 years | Basis, gain/loss on sale |
| Insurance policies & claims | Life of policy + 7 years (or indefinitely for occurrence-based liability) | Late-surfacing claims |
When two rules collide, keep the longer one. Storage is cheap; reconstructing a destroyed record during an audit or a funding review is not.
Why 7 Years Is the Default (and When It Isn't Enough)
The IRS keeps three separate clocks running, and your retention period should be set by the longest one that could apply to you.
- 3 years — the general rule. The IRS has three years from the filing date to audit a return and assess additional tax. If everything is straightforward, three years is the floor.
- 6 years — if you omit more than 25% of your gross income, the window doubles. Most owners have no idea whether a past return crosses that line, which is exactly why the safe default is six-plus, not three.
- No limit — if you never filed a return, or filed a fraudulent one, the statute of limitations never starts. Those records are effectively permanent.
There are also special cases that stretch beyond seven years. Records supporting a net operating loss carryforward should be kept for as long as the loss affects a return, plus the audit window after that final return. Same logic applies to property basis: if you buy equipment or real estate, keep the purchase records until you sell it, then run the seven-year clock from the return that reports the sale. Employment tax records carry their own four-year rule that runs from when the tax was due or paid, whichever is later.
State agencies frequently want more than the IRS. Several states run four-year sales-tax audit windows and their own income-tax lookbacks. If you operate in multiple states, set your policy to the strictest one you're exposed to.
What Lenders and Underwriters Actually Ask For
Here is where record-keeping stops being a compliance chore and starts affecting whether you can raise capital. When you apply for financing, no one asks for a decade of shoeboxed receipts. They ask for a tight, recent slice — and if you can produce it in minutes instead of days, you close faster.
For a revenue-based or MCA-style marketplace approval, the core packet is short: the last 3 to 6 months of business bank statements, a voided check or bank verification, a copy of your driver's license, and proof the business exists (EIN letter or formation docs). That's often the whole file. Approval leans on your bank deposits and revenue trend rather than your credit score, which is why deposits are the single most important record to keep clean and accessible. Owners with a FICO around 500 and steady deposits routinely qualify, with funding on amounts starting around $10,000 and decisions typically inside 24 to 48 hours.
Traditional term loans and SBA files go deeper — two to three years of tax returns, year-to-date financials, a debt schedule, and often an accounts-receivable aging report. If your books lag, that timeline stretches. The lesson from the underwriting desk: the businesses that keep monthly statements reconciled and returns filed on time don't just pass audits, they get to the front of the funding line. If you want the bigger picture on preparing a file, see our guide on business loan requirements and documents.
Decision Framework: How to Set Your Own Retention Policy
A retention policy works best when it's a single written rule everyone follows, not a case-by-case judgment call. Use this framework to build one.
This approach works best when:
- You want one defensible standard — set the whole company to 7 years for financial records, permanent for legal/entity documents, and stop debating individual files.
- You're growing and expect to seek financing — clean, retrievable records shorten every future underwriting cycle.
- You operate in multiple states or industries with their own rules (healthcare, construction, government contracting) — default to the strictest applicable window.
- You've digitized — the IRS accepts legible electronic copies, so scanned records satisfy retention while cutting physical storage.
Be cautious or seek professional advice when:
- You're tempted to purge early to save space — the cost of a missing record during an audit or lawsuit dwarfs storage cost.
- Records tie to litigation, an open claim, or a known dispute — a legal hold overrides your normal schedule; nothing under hold gets destroyed, period.
- You're in a regulated field — retention minimums for patient, safety, or contract records can far exceed tax rules.
- You're closing or selling the business — buyers and successors need the history, and some obligations survive the sale.
When in doubt, keep it. The only records worth aggressively purging are true duplicates and non-substantive drafts.
Example Retention Plan for a Typical Small Business
To make this concrete, here's how a fictional operator might map the schedule to real documents. Figures and dates are illustrative — for example only.
| Business (example) | Document | Created | Destroy on/after | Format kept |
|---|---|---|---|---|
| Coastal HVAC LLC | 2019 federal tax return + receipts | Filed Apr 2020 | 2027 (7 yrs) | Scanned PDF + original |
| Coastal HVAC LLC | Q3 payroll tax filings | 2023 | 2027 (4 yrs) | Cloud accounting export |
| Coastal HVAC LLC | Bank statements | Monthly | Rolling 7-yr window | Bank portal + monthly PDF |
| Coastal HVAC LLC | Service van purchase (asset) | Bought 2022 | Sale year + 7 yrs | Invoice + title, scanned |
| Coastal HVAC LLC | Articles of organization, EIN letter | 2016 | Never | Fireproof safe + cloud |
| Coastal HVAC LLC | Equipment-financing agreement | 2023 | Payoff + 7 yrs | Signed PDF |
Notice the pattern: financial records ride the 7-year clock, payroll rides 4, assets and loans start their clock at disposal or payoff, and entity documents never leave. One rule per category, applied consistently.
Digital Storage, Security, and Getting Rid of the Rest
The IRS does not require paper. Legible, complete electronic copies satisfy retention rules, and going digital solves the two problems that sink most record systems: things get lost, and things pile up.
A workable setup for a small business: keep source documents in cloud accounting software (which also timestamps them), back up an annual archive to a second location, and store the handful of permanent legal documents in both a fireproof safe and encrypted cloud storage. Name files predictably — YYYY-vendor-type — so any record is one search away. That searchability is what turns a funding request from a week of digging into a same-day export.
When a record clears its retention window and is under no legal hold, dispose of it securely. Shred paper containing financials, EINs, account numbers, or employee personal data; use permanent-delete tools for digital files, not just moving them to a trash folder. A short annual purge — one afternoon each year to retire records that aged out — keeps the system from becoming a liability of its own. And once your records are clean and current, you're not just audit-ready; you're funding-ready. If cash flow is the reason you're organizing in the first place, our overview of business funding options for small businesses walks through how lenders read those same records.
Frequently asked questions
How long do I really need to keep business tax returns?
Keep filed tax returns and their supporting documents for at least 7 years. That clears the IRS's three-year general audit window and its six-year window for substantial income under-reporting. Many owners keep the returns themselves permanently since they take almost no space digitally and prove filing history. If a return was never filed or was fraudulent, there is no statute of limitations, so those records are effectively permanent.
Can I keep everything digitally, or do I need paper originals?
The IRS accepts legible, complete electronic copies, so scanned or digitally native records satisfy retention rules. Digital storage is actually safer and more useful because records are searchable and backed up. Keep a small set of permanent legal documents — formation papers, EIN letter, ownership records — in both secure cloud storage and a fireproof physical location, since those are irreplaceable.
How long should payroll and employee records be kept?
Keep employment tax records for at least 4 years after the tax becomes due or is paid, whichever is later. That is the IRS minimum. Other employment records, like I-9 forms, hiring documents, and records tied to benefits or workplace claims, have their own rules under separate laws and states, and some run longer, so default to the strictest window that applies to you.
Which records do lenders want when I apply for financing?
For a revenue-based or MCA marketplace approval, the core file is usually your last 3 to 6 months of business bank statements, a voided check or bank verification, your ID, and proof the business exists. Approval leans on your deposits and revenue trend rather than your credit score, so keeping bank statements clean and instantly retrievable is the single highest-value record habit for funding.
What is a legal hold and how does it change retention?
A legal hold is a requirement to preserve records connected to actual or anticipated litigation, an audit, or a known dispute. It overrides your normal retention schedule: nothing under hold can be destroyed, even if it has aged past its usual window. Destroying records under a legal hold can carry serious legal consequences, so flag anything tied to a dispute and keep it until counsel releases the hold.
How long do I keep records for equipment, vehicles, or property?
Keep purchase and depreciation records for the entire time you own the asset, then run a 7-year clock from the return that reports the sale or disposal. These records establish your cost basis and determine the gain or loss when you sell, which the IRS can examine after the sale year. The same logic applies to loans: keep financing agreements for the life of the loan plus 7 years.
Do state rules ever require longer retention than the IRS?
Yes. Several states run four-year sales-tax audit windows and their own income-tax lookback periods, and regulated industries such as healthcare, construction, and government contracting often mandate much longer retention for specific records. If you operate across multiple states or in a regulated field, set your policy to the strictest requirement you are exposed to rather than the federal minimum.
Is it safe to shred old records once they age out?
Once a record has passed its retention window and is under no legal hold, you can dispose of it. Shred anything containing financial data, account numbers, EINs, or employee personal information, and use permanent-delete tools for digital files rather than just moving them to a trash folder. A short annual purge keeps your system lean while protecting sensitive data from exposure.
