How Long Does a Broker Have to Keep Records: By Broker Type

How long a broker has to keep records depends on what kind of broker you are and what kind of record you’re holding. Securities broker-dealers face the strictest federal rules, with periods running from three years for communications and trade tickets up to the life of the firm for organizational documents. Mortgage brokers follow Regulation Z, which tops out at five years for Closing Disclosures. Real estate and insurance brokers answer to state regulators, with timelines that generally land between three and seven years. On top of all of that, IRS rules impose their own retention periods for tax records.

Securities Broker-Dealers

Broker-dealers operate under the most detailed recordkeeping framework of any broker type. SEC Rules 17a-3 and 17a-4 spell out which records a firm must create and how long each category must survive,¹ and FINRA Rule 4511 requires member firms to preserve all books and records in a format that complies with Rule 17a-4.²

The periods fall into three tiers:

Six years, with the first two easily accessible: general ledgers, balance sheets, income statements, customer account records, and trade blotters.
Three years, with the first two easily accessible: trade confirmations, order tickets, and all written and electronic communications, including emails, text messages, and instant messages.¹
Life of the firm: organizational documents such as articles of incorporation and partnership agreements, plus the records of any successor entity.¹

The “easily accessible” piece matters. Regulators don’t just want proof the records exist somewhere on a backup tape. They want the firm to produce them promptly on demand during the first two years of the retention period.

Electronic records must be stored either in a non-rewriteable, non-erasable (WORM) format or in an audit-trail system that logs every creation, modification, and deletion with timestamps and user identities, under a 2022 amendment to Rule 17a-4.³ Either way, the firm must keep organized, current indexes so any record can be located and produced quickly when a regulator asks.

Mortgage Brokers and Lenders

Mortgage brokers and lenders follow Regulation Z, which sets federal retention periods tied to the type of document. The timelines layer on top of each other, so a single loan file can contain records with different expiration dates.

Closing Disclosures: five years after consummation. If the loan is sold or transferred and the originating lender no longer services it, the Closing Disclosure must be passed to the new owner or servicer, who picks up the remaining retention period.⁴
Loan Estimates and related compliance evidence: three years after the later of consummation, the date the disclosure was required, or the date the action was required.⁴
Loan originator compensation records: three years after the date of each payment. Both the creditor and any loan originator organization must keep records of all compensation received and paid, along with the governing compensation agreement.⁴
General Truth in Lending compliance evidence: two years after the disclosure date or the date action was required.⁴

These are minimums. Enforcing agencies can require creditors to hold records longer when needed for enforcement. As a practical matter, most mortgage professionals retain the entire loan file for five years to match the Closing Disclosure period and avoid sorting documents into different expiration buckets.

Real Estate Brokers

Real estate brokers are licensed by state real estate commissions, and every state sets its own retention timeline. The records at issue include transaction files, listing agreements, buyer agency agreements, purchase contracts, and closing statements.

Most states require brokers to keep transaction records for at least three years after closing, or after the listing expires if the transaction never closed. Some states extend that to five years, and a handful push to seven years for categories like trust account documentation or employment agreements with agents. Because rules vary, check your state real estate commission’s requirements before you set an internal policy.

Even where the state minimum is three years, keeping records for at least six years is a smart hedge. Statutes of limitations for fraud, breach of fiduciary duty, and contract disputes can extend well beyond the state’s retention minimum, and a broker who has already destroyed the file has no way to defend the claim.

Insurance Brokers

Insurance brokers and agents are regulated by state insurance departments, each of which sets its own retention requirements.⁵ The records involved include policy applications, policy documents, claims files, premium payment histories, and client communications.

State requirements generally fall in the range of five to seven years, though the clock starts at different points depending on the record. For active policies, the retention period typically doesn’t begin until the policy expires or is canceled. Claims files often carry their own retention window measured from the date the claim was resolved. Life insurance and annuity contracts can require even longer retention, because the policies themselves may remain in force for decades.

Insurance agents who also sell securities products such as variable annuities must comply with both state insurance rules and federal broker-dealer recordkeeping requirements. Whichever imposes the longer period controls.

IRS Tax Records

Every brokerage business, regardless of type, must also satisfy IRS record retention rules. These run on a parallel track and sometimes exceed the industry-specific periods.

Three years: the standard period for records supporting income and deductions on a return.⁶
Four years: employment tax records, including payroll, withholding, and W-2s, measured from the date the tax becomes due or is paid, whichever is later.⁶
Six years: if you fail to report income exceeding 25% of the gross income shown on your return, the IRS has six years to assess additional tax.⁶
Indefinitely: if you file a fraudulent return or skip filing altogether, there is no statute of limitations.⁶

The four-year employment tax rule catches firms with staff off guard. A brokerage that destroys payroll records at the three-year industry mark could find itself unable to respond to an IRS employment tax audit.

What Happens If You Don’t Keep Them

Recordkeeping violations are not technicalities regulators overlook. The SEC has collected more than $1.5 billion in recordkeeping fines since 2021, much of it tied to off-channel communications on personal texts, WhatsApp, and similar platforms that never reached official archives.

In 2022, the SEC charged 16 firms for failing to preserve electronic communications, with eight major firms each paying $125 million and the total exceeding $1.1 billion.⁷ A 2024 sweep brought charges against 26 more firms and $392.75 million in combined penalties, with individual firm fines ranging from $400,000 to $50 million.⁸

FINRA imposes its own fines on member firms and individual brokers. In a single month of disciplinary actions in October 2025, firm-level fines for recordkeeping and reporting failures ranged from $40,000 to $650,000, and individual brokers who prevented their firms from preserving messages faced personal fines and suspensions of 45 days to six months.⁹

Missing records create litigation risk, too. When records that should exist have been destroyed, courts can instruct juries to assume the missing evidence would have been unfavorable to the party that failed to keep it.

Disposing of Records After the Retention Period

When the clock finally runs out, brokers cannot simply toss old files in a dumpster. Federal law requires anyone who possesses consumer information for a business purpose to dispose of it using reasonable measures that prevent unauthorized access. For paper records, that means shredding, burning, or pulverizing documents so they cannot practicably be read or reconstructed. For electronic media, it means destroying or erasing the data to the same standard.¹⁰

Firms that outsource destruction to a third-party vendor must do due diligence before hiring one, including reviewing independent audits, checking references, and confirming the vendor is certified by a recognized trade association. Signing a contract and walking away is not enough. The firm must monitor the vendor’s compliance on an ongoing basis.¹⁰

1
eCFR. 17 CFR 240.17a-4 – Records to Be Preserved by Certain Exchange Members, Brokers and Dealers
2
FINRA.org. Rule 4511 – General Requirements
3
U.S. Securities and Exchange Commission. Final Rule – Electronic Recordkeeping Requirements for Broker-Dealers, Security-Based Swap Dealers, and Major Security-Based Swap Participants
4
eCFR. 12 CFR 1026.25 – Record Retention
5
FINRA. Insurance Agents
6
Internal Revenue Service. How Long Should I Keep Records
7
U.S. Securities and Exchange Commission. SEC Charges 16 Wall Street Firms with Widespread Recordkeeping Failures
8
U.S. Securities and Exchange Commission. Twenty-Six Firms to Pay More Than $390 Million Combined to Settle SEC Charges for Widespread Recordkeeping Failures
9
FINRA. Disciplinary and Other FINRA Actions Reported for October 2025
10
eCFR. 16 CFR Part 682 – Disposal of Consumer Report Information and Records