Most invoices and sales records should be kept for at least three years after you file the tax return they support, but several common situations push that minimum to four, six, or seven years, and a few push it out indefinitely. If you want one rule for how long to keep invoices and sales records, keep them for the longest period that any federal, state, or contractual obligation imposes on that specific record. Three years is the floor, never the ceiling.
The Three-Year Federal Baseline
The IRS generally has three years from the date you file a return to assess additional tax. That window drives the minimum retention period for most sales receipts, invoices, and expense records.1Office of the Law Revision Counsel. 26 USC 6501 – Limitations on Assessment and Collection If the return isn’t questioned in that period, the IRS generally loses the right to do so.
The clock starts when you actually file, not when the tax year ends. A calendar-year business that files its 2025 return in March 2026 starts the clock in March 2026, which means those records need to survive until at least March 2029. File late and the clock starts later. Businesses that assume December 31 triggers the countdown routinely destroy records a year too early.
When You Need to Keep Them Longer
Several situations extend the retention requirement well past three years. These are the rules that catch businesses off guard, because the longer periods tend to apply precisely when the IRS or a state is already asking questions.
Six Years for Substantial Income Omissions
If you leave out more than 25% of the gross income shown on your return, the IRS gets six years instead of three to assess additional tax.1Office of the Law Revision Counsel. 26 USC 6501 – Limitations on Assessment and Collection For a business reporting $200,000 in gross receipts, omitting more than $50,000 trips the extended window. The IRS calculates gross income for a trade or business as total amounts received from sales before subtracting the cost of goods sold, so even an honest error on the revenue line can cross the threshold.
When this applies, you need every bank deposit record, sales invoice, and payment confirmation for the year in question. Without them, you have almost no way to push back on an IRS determination that income was underreported.
Seven Years for Bad Debts and Worthless Securities
If you claim a deduction for a debt that became worthless or a loss on worthless securities, the limitation period stretches to seven years from the filing deadline of the return for the year of the loss.2Office of the Law Revision Counsel. 26 USC 6511 – Limitations on Credit or Refund Worthlessness is often difficult to pin to a single tax year, and disputes over timing are common. Keep documentation of the original transaction, the debtor’s inability to pay, and your collection efforts.
Indefinitely If a Return Was Fraudulent or Never Filed
There is no time limit at all when a return is fraudulent or was never filed. The IRS can assess tax at any time in either case.1Office of the Law Revision Counsel. 26 USC 6501 – Limitations on Assessment and Collection Records from a year you didn’t file should never be destroyed. Because you can’t predict whether a return might one day be challenged as fraudulent, this rule effectively argues for keeping core records longer than you think you need to.
Four Years for Employment-Related Sales Data
If you have employees, you must keep all employment tax records for at least four years after the date the tax becomes due or is paid, whichever is later.3Internal Revenue Service. How Long Should I Keep Records? Sales data intersects this rule whenever commissions are tied to revenue. The sales figures that drove a salesperson’s pay are also employment tax documentation, and destroying them after three years leaves you a year short.
As Long as You Own the Asset, Plus the Audit Period
Records for business property follow a different logic. Instead of a fixed number of years, you keep them for as long as you own the asset plus the limitation period for the year you dispose of it.4Internal Revenue Service. Publication 583 (12/2024) – Starting a Business and Keeping Records The IRS instructions for Form 4562 are explicit that the information needed to compute depreciation must be part of your permanent records.5Internal Revenue Service. Instructions for Form 4562 (2025)
If you bought a commercial building in 2010 and sell it in 2030, you need records spanning two decades to compute the correct gain. The portion of the gain attributable to prior depreciation can be taxed at a rate as high as 25%, and without the original purchase price and every year’s depreciation detail, most businesses end up paying more than they owe because they can’t prove a higher basis.6Internal Revenue Service. Property (Basis, Sale of Home, Etc.) 5
State Sales Tax: Often Longer Than Federal
Federal rules do not cover state obligations. Across all 50 states, retention requirements for sales tax records range from three to seven years, with many states landing at four. Some states extend their audit window further when income is significantly underreported, and most have no time limit at all for fraud or unfiled returns.
Sales invoices, exemption certificates, and transaction-level point-of-sale records are all fair game in a state audit. Exemption certificates deserve special attention: if you sold goods tax-free based on a customer’s certificate and can’t produce it, the state will assess the uncollected tax against you. For any business operating in multiple states, the only workable approach is to comply with the longest applicable retention period across your footprint.
Three Years After Final Payment on a Government Contract
Federal contractors must keep records available for at least three years after final payment on a contract.7eCFR. 48 CFR 4.703 – Policy That covers sales documentation, accounting data, and any other evidence needed for negotiation, administration, or audit by the contracting agency or the Comptroller General. Individual contract clauses can extend the period further, and if you keep records longer for your own purposes, they must stay available to the government for that longer duration.
Warranty, Litigation, and Insurance Hold Periods
Tax rules are not the only reason to hang on to a sales record. When litigation is reasonably anticipated or already underway, you have a legal duty to preserve all potentially relevant documents, and that duty attaches as soon as you can reasonably foresee a lawsuit, not when one is filed. Destroying records after that point, even under a standard retention policy, can trigger court sanctions ranging from fines to adverse inference instructions telling the jury to assume the destroyed records would have hurt your case.
Warranty and product liability exposure sets its own floor. If you sell goods with a five- or ten-year warranty, the original sales invoice proving the purchase date and terms needs to survive at least that long. Insurance claims work the same way: proving a business interruption or property damage claim usually requires several years of substantiated revenue history, and a business that destroyed records on the shortest tax schedule may find itself unable to support a claim worth far more than the storage would have cost.
What Missing Records Actually Cost You
The consequences of coming up empty during an audit are more than inconvenient. The IRS requires you to substantiate expenses with documentary evidence like receipts, canceled checks, or bills.8Internal Revenue Service. Burden of Proof If you can’t produce records, the IRS disallows the deduction. There is no grace period and no second chance to reconstruct the paperwork.
The burden-of-proof problem runs deeper. In a tax dispute, credible evidence can shift the burden to the IRS to prove you wrong, but that shift only happens if you’ve maintained all records required by the tax code.9Office of the Law Revision Counsel. 26 USC 7491 – Burden of Proof Fail to keep them and you argue your case from the weaker side of the table, with additional tax, interest, and accuracy-related penalties stacking on top of each other.
What Counts as Keeping a Record Electronically
The IRS accepts electronic records in place of paper originals, but with conditions. Under Revenue Procedure 97-22, an electronic storage system must include an indexing system that allows identification and retrieval of specific documents, and every stored record must be legible and readable on screen or in print.10Internal Revenue Service. Revenue Procedure 97-22 “Legible” means every letter and numeral can be positively identified; “readable” means groups of characters form recognizable words and numbers. A blurry scan of a faded receipt fails both tests.
The system also has to maintain an audit trail with enough detail to show who accessed or modified a file, when, and what changed. The IRS requires businesses to maintain complete descriptions of their electronic storage systems, including procedures for use and indexing, and to produce those descriptions on request.
In practice, saving PDFs to a folder on a laptop does not qualify. You need consistent file naming or indexing, regular backups, access controls, and enough structure that an auditor who asks for “all sales invoices from Q3 2024” gets them promptly. Cloud accounting platforms generally meet these requirements. Confirm your provider stores data in a format you can export if you ever switch services.
Destroying Records Once the Time Is Up
Holding records forever is its own risk. Old files full of customer names, payment details, and addresses become a liability if they’re breached, and timely destruction is the last step in a defensible policy.
Under the FTC’s Disposal Rule, any business that possesses consumer information must take reasonable steps to prevent unauthorized access during disposal. For paper, that means burning, pulverizing, or shredding so the information can’t be read or reconstructed. For electronic media, it means destroying or erasing the data so it can’t be recovered.11eCFR. 16 CFR Part 682 – Disposal of Consumer Report Information and Records If you outsource to a third party, the rule expects you to check references, review their security procedures, and look for certification by a recognized industry association.12eCFR. 16 CFR 682.3 – Proper Disposal of Consumer Information
Document what you destroy, when, and how. A formal destruction log is your defense if someone later alleges spoliation. If the records were destroyed on schedule and before any litigation hold attached, the log shows the destruction was routine rather than intentional.
A Practical Retention Schedule
The overlapping timelines make it tempting to keep everything forever. That’s safe for compliance but creates storage cost, security exposure, and a growing pile of data. A tiered schedule by record type works better.
- Routine sales receipts and expense records: at least three years after filing the return they support. Extend to four years if you operate in a state with a longer sales tax audit window, or to six if there is any risk of a substantial income omission.
- Employment-related sales data such as commission calculations and payroll-supporting revenue records: four years after the tax is due or paid.
- Bad debt and worthless security documentation: seven years from the filing deadline for the year of the loss.
- Asset records including purchase agreements, improvement invoices, and depreciation schedules: the entire ownership period plus three years after the return reporting the disposition.
- Government contract records: three years after final payment, unless a contract clause specifies longer.
- Records from unfiled or potentially disputed years: indefinitely.
- Records within the scope of a litigation hold, warranty period, or pending insurance claim: until the matter is fully resolved.
Review the schedule every year, especially if you expand into new states or begin federal contract work. A record that falls into more than one category inherits the longest requirement. The cost of storing a box of invoices or paying for a cloud backup for an extra year is trivial next to the cost of being unable to produce records when an auditor, a court, or an insurer asks for them.3Internal Revenue Service. How Long Should I Keep Records?