How long to keep business tax records
Most business tax records need to be kept for at least three years, but several situations require six, seven, or indefinite retention. The type of record, the nature of the filing, and where the business operates all change the answer.
Key takeaways
- The IRS standard is three years from the filing date, but that's a floor rather than a ceiling.
- Employment tax records require four years, bad debt and worthless securities require seven, and unfiled or fraudulent returns have no time limit at all.
- Some US states have longer statutes of limitations than federal rules, and international businesses face different requirements entirely.
- The easiest way to stay audit-ready is to capture and store records at the point of expense instead of during tax season.
- SmartScan captures and stores receipts automatically, keeping IRS-compliant digital records available on demand.
How long to keep business tax records: The IRS baseline
How many years do you need to keep tax returns? It depends less on the document type than on what happened on the return itself, and the same logic governs how long to keep tax documents of every other kind. Here's the full picture in one shot.
| Situation | How long to keep records |
|---|---|
| Standard tax returns | 3 years from the filing date |
| Income underreported by more than 25% | 6 years |
| Bad debt deduction or worthless securities claim | 7 years |
| Return never filed, or fraudulent return filed | Indefinitely |
| Employment tax records | 4 years after the tax is due or paid, whichever is later |
| Property and asset records | Life of the asset, plus 3 years after disposal |
The three-year baseline exists because it mirrors the IRS's standard audit window. Under normal circumstances, the agency has three years from the date a return was filed to assess additional tax.
The clock starts ticking on the filing date or the due date, whichever falls later, which means an early filer doesn't get an early finish. File in February for an April deadline and the three years still run from April.
Everything else on that table is an exception to the baseline, triggered by something specific about the return. IRS Publication 583 covers recordkeeping for new businesses, and Publication 463 handles business travel, gift, and car expense substantiation in more depth.
Exceptions that extend the standard retention period
The six-year rule for underreported income
If a business omits more than 25% of its gross income from a return, the IRS gets six years to assess instead of three. Intent is irrelevant here, so a good-faith accounting error extends the window just as effectively as a deliberate one.
Any business with complex revenue recognition or multiple income streams should default to six years on income documentation, since you rarely know at filing time whether you've crossed the threshold.
The seven-year rule for bad debt and worthless securities
Claiming a deduction for a bad debt or a worthless security requires seven years of supporting records. The longer window reflects how hard these claims are to substantiate after the fact, since proving a debt was genuinely uncollectible usually depends on documentation created years before the deduction was claimed.
Keep the original loan agreement, collection attempts, correspondence, and whatever established the write-off date.
No time limit for unfiled or fraudulent returns
There is no statute of limitations on a return that was never filed or that was filed fraudulently. The IRS can assess tax at any point, with no expiration.
This matters more than most businesses realize, because it applies to the entire tax year in question, not just the disputed item. A business that failed to file twelve years ago still has open exposure on that year today.
Property and asset records
Records tied to property follow the asset rather than the calendar. Purchase documentation, improvement receipts, and depreciation schedules stay on file for as long as the business owns the asset, plus three years after disposal.
Basis calculations at the point of sale depend on documentation from the point of purchase, so a building held for 20 years needs its original paperwork available in year 23.
Employment tax records
Employment records have their own rules and their own document list. The IRS requires four years of retention, measured from the date the tax was due or the date it was paid, whichever comes later.
What to keep:
W-2s and W-4s for every employee
Form 941 quarterly filings
Payroll records including wages, tips, and other compensation
Benefit plan documentation
Timesheets and attendance records
Employee names, addresses, occupations, and Social Security numbers
Records of unemployment tax paid
Copies of any undeliverable W-2s
Other agencies set their own rules for the same documents. The Department of Labor, state unemployment agencies, and the EEOC each run separate requirements, some longer than the IRS's four years, so payroll records are worth keeping past the federal minimum.
US state-level rules: Where federal minimums aren't enough
How long do you have to keep business tax records at the state level? In several states, longer than the federal rules require. A business that clears the IRS threshold can still be exposed to a state assessment.
California has a four-year statute of limitations for state tax assessments, one year longer than the federal standard.
Texas requires four years for franchise tax records.
New York generally matches the federal three-year window for income tax but applies stricter documentation standards to employment records.
Default to whichever period is longer, whether that’s federal or state, and apply it across the board rather than tracking separate clocks for different agencies. Businesses with nexus in multiple states should use the longest applicable period among all of them. Keeping records an extra year costs almost nothing compared to not having them.
International business tax record retention
Retention requirements vary significantly outside the US, and businesses with foreign operations or foreign-earned income need to satisfy each jurisdiction independently.
| Country | Authority | Retention period | Note |
|---|---|---|---|
| United States | IRS | 3 to 7 years, indefinite for fraud | Varies by situation |
| United Kingdom | HMRC | 6 years from the end of the accounting period | Self-employed filers keep records 5 years after the January 31 deadline |
| Canada | CRA | 6 years from the end of the tax year the records relate to | Written permission required to destroy earlier |
| Australia | ATO | 5 years from the date the return is lodged | Records must be in English or readily translatable |
| Germany | § 257 HGB and § 147 AO, enforced by state Finanzämter | 10 years for books and financial statements, 8 years for accounting vouchers | Clock starts at year-end, not the document date |
Full details sit with each authority: HMRC, the CRA, and the ATO. Other EU member states run seven to ten years.
Germany is the one to watch. The Fourth Bureaucracy Relief Act cut accounting vouchers from ten years to eight effective January 2025, while books, inventories, and annual financial statements stayed at ten. The government has since signaled it may reverse that cut.
German periods also start at the end of the calendar year in which the last entry was made rather than on the document date, which quietly adds up to a year. Treat this section as directional rather than exhaustive, since cross-border obligations get complicated fast and a local tax professional is worth consulting.
What types of business records to keep
The table above sorts by situation. Records get filed by document type, so here's the same ground that way.
Income and revenue records
Invoices, receipts for sales, bank deposit slips, 1099 forms received, and cost of goods sold documentation. These substantiate the top line of the return and are the first thing an auditor asks for.
Expense and deduction records
Receipts, canceled checks, credit card statements, account statements, and mileage logs. This is the category where documentation most often falls apart, because it depends on capturing small records consistently over a long period.
Mileage logs deserve particular attention. The 2026 mileage reimbursement rate is a two-rate year, with business travel at 72.5 cents per mile through June 30 and 76 cents from July 1 onward, so logs covering the full year need the split applied correctly.
Solid expense tracking also makes it far easier to maximize small business tax deductions, because deductions you can't substantiate aren't deductions.
Property and asset records
Purchase and sale documentation, closing statements, improvement receipts, depreciation schedules, and any records establishing basis. Retention follows the asset, not the tax year.
Payroll and employment records
Four years federal minimum, longer for other agencies; covered in more detail above.
Corporate governance records
Articles of incorporation, bylaws, board minutes, stock and ownership records, partnership agreements, and IP documentation. Keep these permanently, since they establish the legal existence and ownership of the business. Good bookkeeping practices make this categorization automatic rather than a year-end sorting exercise.
The consequences of not keeping business tax records
Missing records cost more than the time it takes to reconstruct them.
Disallowed deductions are the most common consequence and the most expensive. The IRS can reject any claimed expense without substantiating documentation. A business claiming $80,000 in deductions that can only document $50,000 owes tax on the $30,000 difference, plus interest and accuracy-related penalties. The deduction was legitimate, but the documentation wasn't there.
Information return penalties are assessed per form and scale with how late the correction lands.
| When the return is corrected | Penalty per return (2026) |
|---|---|
| Within 30 days of the due date | $60 |
| After 30 days, before August 1 | $130 |
| After August 1, or never filed | $340 |
| Intentional disregard | $680, no annual cap |
For a business missing 1099s for 40 contractors, that's $13,600 at the failure-to-file tier before anything else is assessed.
Three further exposures stack on top:
Extended audit window. Records incomplete enough to obscure underreported income give the IRS an argument for six years instead of three.
Civil fraud penalty. 75% of the underpayment attributable to the fraud, assessed on top of the tax owed.
State penalties. Assessed independently of federal, so one documentation failure can generate consequences at both levels.
Digital vs. paper: How to store business tax records
The IRS accepts digital records, with conditions. They have to accurately reproduce the original, remain legible and accessible for the full retention period, and be available for inspection on request. A photo of a receipt satisfies this; a photo of a receipt on a phone that gets replaced in eighteen months does not.
Four practices make digital storage hold up:
Digitize at the point of expense. Records captured when the transaction happens are complete and legible. Records captured at tax time are whatever survived the year in a wallet or glovebox.
Use stable, non-editable formats. PDFs with a consistent naming convention. Editable formats invite questions about whether a record was altered.
Back up with redundancy. Cloud storage plus a local copy. Retention periods run for years, and single points of failure fail eventually.
Delete securely once the period expires. Cross-cut shredding for paper, certified destruction for drives. Records past retention are liability without benefit.
This is where the practical problem sits. The rules aren't complicated, but consistent capture is, and no retention policy survives records that were never captured in the first place.
Expensify's SmartScan handles this at the source. It reads receipts in realtime, extracts merchant, date, and amount, and stores an IRS-compliant digital record automatically. There's no manual filing step, which means there's no manual filing step to skip. Records land in expense reports already categorized and stored.
Good records aren't just about compliance
Most businesses treat record retention defensively, as something you do so nothing bad happens. That framing undersells it.
Clean records make audits shorter and cheaper. They make deductions easier to claim and defend, which usually means claiming more of them. They make year-end close faster, and they make the business easier to value or sell, since diligence asks for exactly the documentation the IRS does.
So, how long do you need to keep business tax records? Three years at minimum, seven as a working default, and permanently for governance documents. Having them at all is the harder part.
The businesses that stay audit-ready year-round aren't working harder than everyone else. Instead, they're capturing records when the expense happens rather than rebuilding the year from memory each spring. That's a difference in timing rather than effort, and it's the same discipline that makes an end-of-year financial checklist a formality instead of a fire drill.
FAQs about how long to keep business tax records
-
Three years from the filing date is the standard answer for how many years to keep tax returns, matching the IRS's normal audit window. How long do you have to keep tax returns once they're filed? Seven years is the safest default, since it clears every exception short of an unfiled return.
-
Three years from the filing date covers most situations, but the period varies by record type. Employment tax records require four years, bad debt and worthless securities claims require seven, property records follow the asset plus three years after disposal, and un-filed or fraudulent returns have no time limit at all.
-
Start with seven years and adjust from there. Three years is the federal minimum, but the exceptions are common enough that seven is the more practical operating rule. Governance documents are kept permanently, and a year you never filed for never expires.
-
Records supporting bad debt deductions and worthless securities claims require seven years, including the original loan or investment documentation, collection attempts, correspondence establishing un-collectibility, and whatever fixed the write-off date.
Many businesses apply seven years across all tax records as a simplifying default, which is more conservative than required but avoids tracking separate clocks.
-
Three years under normal circumstances. That extends to six years if income was underreported by more than 25%, and there is no limit at all for un-filed or fraudulent returns. The window runs from the filing date or the due date, whichever is later.
-
Three years is the general standard, with longer periods for specific situations. The agency's actual test is whether a record may still be needed to administer the tax code, which in practice means keeping it until the statute of limitations on that return expires. The IRS guidance on record retention lists the situations individually.
-
Yes. The IRS accepts electronic records as long as they accurately reproduce the original, stay legible for the full retention period, and can be produced on request.
Digital storage is generally more reliable than paper since it doesn't fade, tear, or get misfiled. The requirement is that the system can produce a clear, complete copy when asked.
-
Reconstruct what you can from secondary sources. Bank and card statements establish that transactions occurred, vendors can reissue invoices, and accountants or payroll providers often retain copies longer than clients do.
The IRS accepts reasonable reconstruction backed by corroborating evidence, though it carries less weight than originals. Document your method, and involve a tax professional if an audit is underway.
[Disclaimer] This article is general information, not tax or legal advice. Retention rules vary by entity type, jurisdiction, and circumstance, and they change. Expensify doesn't provide tax, legal, or accounting advice, so check with a qualified tax professional before making decisions about your own records.
