Business Tax Records: Retention Periods, Penalties, and E-Storage

Keep most business tax records for at least three years from the date you filed the return or its due date, whichever is later. Several common situations stretch that window to four, six, seven, or indefinitely, and a few categories of records should never be destroyed at all. The right way to think about how long to keep business tax records is to match your retention policy to the longest period that could apply to each type of document, because the IRS sets these timelines based on how long it has to audit the return and assess additional tax.¹ Destroy records too early and you lose the ability to prove deductions during an audit. Hoard everything forever and you waste money on storage while increasing your exposure if the records are breached.

Retention Periods by Situation

Three Years Is the Default

The standard retention period is three years from the date you filed the return or the return’s due date, whichever is later.² This covers most income and expense documentation for a straightforward return. If you file early, the clock starts on the due date, not the filing date.

Four Years for Employment Tax Records

Employment tax records, including Forms W-2, W-4, 940, and 941, along with payroll registers and time sheets, must be kept for at least four years after the date the tax becomes due or is paid, whichever is later.³ The Department of Labor separately requires three years for payroll records and two years for wage computation records like time cards.⁴ Since the four-year IRS requirement is longer, use it as your floor.

Six Years If You Substantially Underreport Income

If a business omits gross income that exceeds 25% of what it reported on the return, the IRS gets six years to assess additional tax instead of three.² If a return showed $400,000 in gross income but the business actually earned $501,000, the $101,000 omission exceeds 25% of the reported figure, and the six-year window applies.⁵ Because you can’t always know in advance whether the IRS will view an unreported item as a substantial omission, a conservative approach is to keep all income-related records for six years.

Seven Years for Bad Debts and Worthless Securities

If you claim a deduction for a bad debt or a loss from worthless securities, you have seven years from the return’s due date to file a claim for credit or refund related to that deduction.⁶ Records supporting these deductions should be kept for the full seven years.⁷ This longer period exists because it often takes years to determine that a debt is truly uncollectible or a security is genuinely worthless.

Until Disposition, Plus the Statute, for Assets

Records that establish the cost basis of business property, including purchase contracts, closing statements, and invoices for capital improvements, must be kept for as long as you own the asset plus the statute of limitations period for the year you sell or dispose of it.⁷ For real estate or equipment held for decades, that can mean retaining records for 20 or 30 years. When you sell the asset, you need the original cost, the cost of improvements, and the depreciation you claimed to calculate the gain or loss. Without those figures, the IRS may recalculate your basis in a way that maximizes your tax.

Depreciation recapture is a specific reason to keep careful depreciation schedules. Gain on sale is often taxed as ordinary income to the extent of prior depreciation deductions.⁸ If you can’t prove the depreciation you actually claimed, the IRS may assume you took the maximum allowable amount, which increases your recapture income.

Until Fully Used for Carryforwards

If your business generates a net operating loss that you carry forward to offset income in future years, keep the records supporting that loss for three years after you either use the entire carryforward or the carryforward period expires, whichever comes first.⁹ The same logic applies to tax credit carryforwards: you need documentation proving the original credit for every year you apply it.¹ This is one of the most commonly overlooked retention rules, because the supporting records may need to survive a decade or more after the year they originated.

Indefinitely for Fraud or Unfiled Returns

If a fraudulent return is filed or no return is filed at all, there is no statute of limitations. The IRS can assess tax and begin collection proceedings at any time.² Records for any year with an unfiled or fraudulent return should be kept indefinitely because the assessment clock never starts running.

Permanently for Formation Documents

Certain non-tax records should be kept permanently because they prove the business’s legal existence and structure. These include articles of incorporation, corporate minutes, stock ledgers, partnership agreements, and operating agreements. They support the business’s identity as a separate taxable entity, and the IRS or state agencies may request them at any point.

Which Records Belong in Each Bucket

The IRS doesn’t require a specific recordkeeping system, but whatever you use must clearly show income and expenses with supporting documents.⁷ Sorting the paperwork by category makes it possible to apply the right retention period to each.

Income Records

Keep every document that establishes money coming into the business: sales invoices, cash register tapes, receipt books, and bank deposit slips. Monthly bank statements link your sales documents to actual cash flow. Also retain Forms 1099-NEC received from clients for services and Forms 1099-K received from payment processors reporting card transactions and third-party network payments.¹⁰ Any gap between those forms and your books needs to be reconciled and documented before filing. Because income records are the ones most likely to come under the six-year rule, treat six years as the practical floor for this category.

Expense Records

To claim a deduction, you need records showing the amount paid and that the payment was for a legitimate business expense: receipts, canceled checks, and vendor invoices. Credit card statements alone won’t satisfy the IRS; you need the underlying receipt or invoice showing what was actually purchased.

Business meals are deductible at 50% of the cost, but only if you document the amount, date, location, business purpose, and the business relationship of the people present.¹¹ Entertainment, amusement, and recreation expenses are no longer deductible at all, so no documentation regime will save those costs.

If you use a personal vehicle for business, keep a contemporaneous log recording the mileage, date, destination, and business purpose of each trip.¹² You need the log whether you claim the standard mileage rate (70 cents per mile for 2026) or deduct actual vehicle expenses.¹³ For ongoing contracts like equipment leases or office rent, keep the agreement for the life of the contract plus the applicable retention period.

Asset and Depreciation Records

When you buy property used in your business, the purchase price becomes the starting basis for calculating depreciation.¹⁴ Keep the purchase contract, closing statement, and any initial appraisal. After acquisition, keep receipts for every capital improvement separately from routine repairs. Capital improvements add value or extend useful life and get added to the basis; repair costs are deducted in the year paid. When you sell or otherwise dispose of an asset, retain the sale documents showing price, date, and accumulated depreciation claimed.

Employment and Payroll Records

If you have employees, keep time cards, payroll registers, fringe benefit records, and copies of Forms W-4 for each employee.³ Retain copies of quarterly Forms 941, the annual Form 940, and all Forms W-2 issued. Underlying payment records like check stubs or electronic transfer confirmations prove that wages were paid and withheld taxes were remitted.

Digital Asset Records

If your business receives, sells, or exchanges cryptocurrency or other digital assets, the IRS requires records of every transaction. For each one, document the type of digital asset, the date and time, the number of units, the fair market value in U.S. dollars at the time of the transaction, and your cost basis.¹⁵ These records are necessary to calculate capital gains or losses on disposition and to determine the fair market value of digital assets received as business income. Because exchanges and wallets sometimes shut down or lose historical data, keeping your own independent records from the start is the only reliable approach.

What Inadequate Records Can Cost

Failing to keep adequate records doesn’t just mean losing a deduction in an audit. It can trigger the accuracy-related penalty: a flat 20% added to the portion of underpaid tax attributable to negligence or a substantial understatement.¹⁶ Negligence includes any failure to make a reasonable attempt to comply with the tax code, and showing up to an audit without records to support your deductions fits that definition.

For individuals, a substantial understatement exists when the underpayment exceeds the greater of 10% of the tax required to be shown on the return or $5,000. For C corporations (other than S corporations or personal holding companies), the threshold is the lesser of 10% of the required tax (or $10,000, if greater) and $10,000,000.¹⁶ Interest accrues on top of the penalty from the original due date.¹⁷ If you claim the qualified business income deduction under Section 199A, the threshold tightens: the penalty kicks in at just 5% of the required tax rather than 10%.

Rules for Storing Records Electronically

The IRS allows you to store all required records electronically, and most businesses now do. Digital records must meet specific standards that go beyond scanning a receipt and saving the file. The IRS’s electronic recordkeeping framework, established by Revenue Procedure 98-25 and referenced throughout the Internal Revenue Manual, remains the governing standard for machine-readable records.¹⁸

The core requirement is that your system must be able to produce a complete, legible hard copy of any record the IRS requests throughout the entire retention period. If you used proprietary software to create or store records, you need to keep that software functional or migrate the records to a format that’s readable without it. This trips up more businesses than you’d think, especially after switching accounting platforms.

Electronic files must accurately reflect the information in the original source documents, and you need documentation describing how the system works, including its indexing method and the controls ensuring file security and accuracy. The IRS treats that system description as a required compliance document. Digital storage must be protected against loss, unauthorized changes, and corruption, which means access controls, encryption, and a secure off-site backup. Businesses with $10 million or more in assets face heightened scrutiny and may receive a Notice of Inadequate Records if their systems don’t meet the requirements.¹⁸ The IRS needs transaction-level detail during an audit, not summarized totals, so your system must store and index the underlying data behind every reported figure.

1
Internal Revenue Service. How Long Should I Keep Records
2
Office of the Law Revision Counsel. 26 USC 6501 Limitations on Assessment and Collection
3
Internal Revenue Service. Employment Tax Recordkeeping
4
U.S. Department of Labor. Fact Sheet 21 – Recordkeeping Requirements under the Fair Labor Standards Act
5
Internal Revenue Service. Time IRS Can Assess Tax
6
Office of the Law Revision Counsel. 26 U.S. Code 6511 – Limitations on Credit or Refund
7
Internal Revenue Service. Publication 583 (12/2024), Starting a Business and Keeping Records
8
Office of the Law Revision Counsel. 26 U.S. Code 1245 – Gain From Dispositions of Certain Depreciable Property
9
Internal Revenue Service. Instructions for Form 172
10
Internal Revenue Service. What to Do With Form 1099-K
11
Office of the Law Revision Counsel. 26 U.S. Code 274 – Disallowance of Certain Entertainment, Etc., Expenses
12
Internal Revenue Service. Topic No. 510, Business Use of Car
13
Internal Revenue Service. Standard Mileage Rates
14
Internal Revenue Service. Instructions for Form 4562 Depreciation and Amortization
15
Internal Revenue Service. Digital Assets
16
Office of the Law Revision Counsel. 26 USC 6662 Imposition of Accuracy-Related Penalty
17
Internal Revenue Service. Accuracy-Related Penalty
18
Internal Revenue Service. 4.47.2 CAS Technical and Procedural Information