How Long to Keep Payroll Records

Keep payroll records for at least four years under IRS rules and at least three years under the federal Fair Labor Standards Act (FLSA), and because those clocks overlap, the safe operating rule for most US small businesses is to retain complete payroll records for four years after the tax is due or paid, whichever is later. Some records run longer: supporting wage-computation documents (time cards, work schedules) must be kept two years under the FLSA, but hiring, benefit, and pension records can be required for three years, five years, or the life of the plan plus longer under other agencies. Because different federal agencies — the IRS, the Department of Labor, the EEOC, and ERISA plan rules — each set their own minimums, the practical answer is to retain everything payroll-related for the longest applicable period, then add a buffer. For most owners that means a clean, four-to-seven-year archive.

Beyond compliance, complete payroll history is also a funding asset. Lenders and revenue-based funders read payroll as a proxy for how stable your operation is — a business that can show consistent wages paid out of consistent deposits looks like a business that can service financing. This guide breaks down every retention window by the agency that sets it, gives you a decision framework for how long your business should keep records, and shows where clean records shorten the path to capital.

The short answer: four years, with longer windows for specific documents

If you remember one number, make it four years. The IRS requires employers to keep all employment tax records for at least four years after the date the tax becomes due or is paid, whichever is later. The FLSA (enforced by the DOL Wage and Hour Division) requires three years for payroll records and two years for the underlying wage-computation records. Layered together, four years satisfies the two most common federal exposures for the core payroll file.

But "payroll records" is a broad category, and several document types carry their own, longer clocks:

• Employment tax records (Forms 941, 940, W-2/W-3, W-4, wage payments, tax deposits): 4 years (IRS).
• Payroll records showing hours and wages (earnings, pay period dates, additions/deductions): 3 years (FLSA).
• Wage-computation records (time cards, schedules, records that explain pay differentials): 2 years (FLSA).
• Hiring, promotion, termination records: 1 year from the action (EEOC/ADEA baseline), longer if a charge is filed.
• I-9 forms: 3 years after hire or 1 year after termination, whichever is later (USCIS).
• Benefit and pension plan records: 6 years for filings and as long as relevant for participant benefit determinations (ERISA) — effectively the life of the plan plus a margin.

Because these overlap and none of them is shortened by keeping records longer, the disciplined default is to hold the entire payroll file for the longest window that could apply. For an operating business, that lands most owners at a four-to-seven-year archive, with plan and pension documents kept indefinitely.

Retention windows by agency (reference table)

Use this as your master reference. Where two agencies cover the same document, retain for the longer period. Figures reflect the federal minimums that apply to most private employers; your state may impose longer windows, which always control when they exceed the federal floor.

Two notes underwriters and bookkeepers rely on. First, the IRS four-year clock runs from when the tax is due or paid, not from the pay date — a Q4 liability paid in January starts its clock in the new year. Second, if any claim, audit, charge, or lawsuit is pending or reasonably foreseeable, all normal retention limits are suspended: you must preserve every related record until the matter fully resolves, plus any appeal window.

Which specific documents count as "payroll records"

Owners routinely under-retain because they think "payroll" means only the pay stubs. The category is wider. A defensible payroll file includes:

• Identifying and setup data: employee name, address, SSN, date of birth (if under 19), sex and occupation, W-4 elections, and I-9 documentation.
• Time and pay data: hours worked each day and week, regular and overtime earnings, pay period beginning and ending dates, and the basis of pay (hourly, salary, piece rate, commission).
• Additions and deductions: bonuses, tips, benefits, garnishments, retirement contributions, and every deduction from each paycheck.
• Tax filings and deposits: Forms 941 and 940, state unemployment filings, W-2/W-3, 1099-NEC for contractors, and proof of federal and state tax deposits.
• Payment proof: dates and amounts of each wage payment and the corresponding bank withdrawals.

That last item — bank-level proof that wages were actually paid — is where compliance and funding intersect. When a revenue-based funder or lender reviews your business, they cross-reference payroll outflows against your deposit history. A payroll file that ties cleanly to bank statements does double duty: it satisfies retention rules and it demonstrates a real, staffed operation with predictable cash movement.

Paper, digital, or both — what a compliant archive looks like

Federal agencies do not require paper. The IRS and DOL both accept electronic records provided they are accurate, accessible, and reproducible on request in a legible form. That gives most small businesses a clear path: go digital, back it up, and keep the ability to reproduce any record within a reasonable time.

A compliant, audit-ready archive has four traits:

• Complete: every document class above, for every worker, for the full retention window.
• Legible and reproducible: PDFs or system exports that can be printed or handed to an auditor without reconstruction.
• Secure: SSNs, dates of birth, and pay data are sensitive; encrypt at rest, limit access, and log who touches them.
• Backed up off-site: a fire or ransomware event should not erase your only copy. Keep a second copy in separate infrastructure.

If you use a payroll processor (Gusto, ADP, QuickBooks Payroll, Paychex, etc.), do not assume the vendor is your archive. Providers often retain records only while you are an active customer, and access can lapse when you switch platforms or close the account. Export a full copy at least annually — and always before you change providers — so the retention obligation stays satisfied by records you control.

Decision framework: how long should YOUR business keep records

The federal minimums are the floor, not the recommendation. Use this framework to set your own policy.

Works best when a simple four-year default is enough:

• You are a single-state employer with hourly and salaried W-2 staff and no retirement plan.
• Your state retention rules do not exceed the federal windows.
• You have never had a wage claim, EEOC charge, or IRS employment-tax inquiry.
• You reconcile payroll to bank statements monthly, so records are already clean.

Extend to seven years (or longer) when:

• You sponsor a 401(k), pension, or health plan — ERISA participant records effectively run for the life of the plan.
• You operate in multiple states, some of which mandate longer retention (several require 4–6 years for wage records).
• You have workers who could later dispute overtime classification; a longer archive is your best defense.
• You have open, threatened, or recently resolved litigation, audits, or agency charges — preserve everything related until fully closed plus appeal windows.
• You anticipate a sale, SBA loan, or line of credit where a buyer or lender will diligence several years of payroll.

Avoid these shortcuts:

• Do not purge on the pay date. The IRS clock starts when tax is due or paid, not when the check was cut.
• Do not rely solely on your payroll vendor. Access can end when the relationship ends.
• Do not destroy anything with a live dispute attached, even if the calendar says the window closed. A litigation hold overrides the schedule.
• Do not over-collect and never purge. Sensitive PII you no longer need is a breach liability; purge on a documented schedule once every applicable window has run.

The disciplined middle path for most growing businesses: hold the full payroll file for seven years, keep plan and pension records indefinitely, and run a documented annual purge for anything past every applicable window.

Example retention schedule for a 12-employee business

Here is a realistic model schedule — for example, a Miami-based service business with twelve W-2 employees, one owner, a handful of 1099 contractors, and a new 401(k). Dollar figures and dates are illustrative only.

Notice how the "purge-eligible" date and the recommended "hold" date diverge. The legal minimum permits deletion earlier; the operating recommendation keeps a buffer because audits, disputes, and funding diligence rarely arrive on schedule. Aligning everything to a single, longer horizon (here, roughly seven years) is simpler to administer than tracking seven different clocks.

Why clean payroll records shorten the path to funding

Retention is a compliance obligation, but it is also a growth advantage — especially for owners who fund through revenue-based financing rather than traditional bank loans. Where a bank leads with credit score and years of tax returns, a revenue-based or MCA marketplace approval leans on your bank deposits and revenue. Consistent payroll that ties to consistent deposits is one of the cleanest signals that a business is real, staffed, and generating the cash flow to support financing.

Concretely, clean payroll history helps in three ways:

• Faster diligence. When a funder can see wages paid out of the same deposit stream month after month, there is less to verify and fewer follow-up requests. That is part of why revenue-based approvals can move in as little as 24–48 hours.
• Stronger revenue picture. Payroll outflows implicitly confirm your top-line — you cannot cover payroll from deposits that are not there. It corroborates the revenue story your bank statements already tell.
• Wider access. Because approval centers on deposits and revenue rather than credit, businesses with a FICO in the 500s and roughly $10,000+ in monthly revenue can often qualify — provided the underlying records hold together.

None of this is a guarantee of approval; every funder underwrites its own way, and terms depend on your revenue profile. But the pattern is consistent: businesses that keep clean, reconciled payroll records present a lower-friction, more credible file, and lower friction is exactly what turns a same-week funding need into a same-week funding decision. To see how the deposit-based model works end to end, read our pillar on revenue-based financing and our guide to how to qualify for business funding.