After you close a business, most records need to be kept three to seven years, though a handful of corporate documents should be kept permanently and a few employment records can be released sooner. How long to keep business records after closing a business depends on the record type: tax documents follow IRS statute-of-limitations rules, payroll and personnel files follow Department of Labor and EEOC rules, benefit plan records follow ERISA, and injury logs follow OSHA. Getting rid of anything too early can cost you in back taxes, penalties, or lost defenses if a claim surfaces after the business is gone.
Start the Clock by Filing Final Returns
Every retention period below runs from a filing date or a payment date, so the first step is filing final returns and marking them as final. That means a final income tax return for the entity (with the “final return” box checked), final employment tax returns (Form 941 or 944, and Form 940) if you had employees, and W-2s for every employee paid in the final calendar year. C corporations also file Form 966 to report dissolution or liquidation.1Internal Revenue Service. Closing a Business
Skipping a final return doesn’t buy you time. Under 26 U.S.C. § 6501, the IRS assessment clock never starts running if no return is filed, so an unfiled return means the records supporting it must be kept indefinitely.2Office of the Law Revision Counsel. 26 USC 6501 Limitations on Assessment and Collection
Tax Records: Three Years, Sometimes Six or Seven
The default IRS retention period is three years. Section 6501 gives the IRS three years after a return is filed to assess additional tax, so every document supporting your final income tax return — receipts, invoices, 1099s, W-2s you received, bank deposit records, expense logs — needs to stay accessible for at least three years from that filing date.3Office of the Law Revision Counsel. 26 USC 6501 Limitations on Assessment and Collection
Three years is the floor. Two situations push it further, and both are common when a business is winding down.
Six Years for Substantial Omissions of Income
If you leave out more than 25 percent of the gross income reported on the return, the IRS gets six years instead of three to assess additional tax.4Office of the Law Revision Counsel. 26 USC 6501 Limitations on Assessment and Collection Closing a business is exactly the situation where this can be triggered by accident. Liquidating inventory, selling off equipment, canceling debts, and distributing remaining assets can all generate income that is easy to overlook or miscategorize. Keep records documenting final-year revenue and asset dispositions for six years to be safe.
Seven Years for Bad Debts and Worthless Securities
If your final return claims a deduction for a bad debt or a loss from worthless securities, the relevant records need to be kept for seven years from the return’s due date.5Internal Revenue Service. Topic No. 305, Recordkeeping Businesses winding down often write off uncollectible receivables, which makes this seven-year period the operative deadline for many closures.
No Limit for Fraud or Unfiled Returns
There is no statute of limitations if a return was never filed or was filed with the intent to evade tax.2Office of the Law Revision Counsel. 26 USC 6501 Limitations on Assessment and Collection In those cases the underlying records need to be kept indefinitely, or until the liability is resolved.
Employment Tax Records: Four Years
Employment tax records follow their own rule. Federal regulations require employers to keep all employment tax records for at least four years after the date the tax becomes due or is paid, whichever is later.6eCFR. 26 CFR 31.6001-1 Records in General The IRS restates this rule in its guidance on closing a business.1Internal Revenue Service. Closing a Business
Covered documents include everything related to wages paid, federal income tax withheld, Social Security and Medicare contributions, FUTA calculations, and Forms W-4. Because these overlap heavily with what supports your income tax return, the practical approach is to keep all payroll-related documents for the longest applicable period. If your final return also carries a bad debt deduction or a real risk of omitted income, that pushes payroll records to six or seven years too.
Employee and Personnel Files
Different agencies impose different timelines on employee-facing records, and the categories overlap.
Payroll Records Under the FLSA
Basic payroll records — employee names, Social Security numbers, hours worked, wages paid, and pay period details — must be kept for at least three years from the date of last entry. The same three-year rule applies to collective bargaining agreements and records of total sales volume or goods purchased.7eCFR. 29 CFR 516.5 Records to Be Preserved 3 Years
Supplementary records like time cards, work schedules, and wage rate tables fall into a shorter two-year category, running from the date of last entry or last effective date.8eCFR. 29 CFR 516.6 Records to Be Preserved 2 Years
Personnel Records Under the EEOC
The Equal Employment Opportunity Commission requires private employers to keep personnel and employment records for one year from the date the record was made or the personnel action occurred, whichever is later. For an involuntary termination, records must be kept for one year from the termination date.9eCFR. 29 CFR Part 1602 Subpart C Recordkeeping by Employers Covered items include hiring records, application forms, promotion and demotion documentation, and pay decision records.
One year is the regulatory minimum, not a safe destruction date. Discrimination claims can be filed after that window closes, and destroying records prematurely can create an adverse inference in litigation. Keeping personnel files for at least three years after closure is a common practical benchmark.
Benefit Plan Records: Six Years Under ERISA
If your business sponsored any retirement plan, health plan, or other employee benefit plan governed by ERISA, the retention obligation is six years. ERISA Section 107 requires anyone who filed reports for these plans — or would have been required to file but for an exemption — to keep records that verify and explain those filings. The clock runs from the filing date of the relevant documents, such as Form 5500 annual returns.10Office of the Law Revision Counsel. 29 USC 1027 Retention of Records
These records include plan documents, trust agreements, participant data, financial statements, nondiscrimination testing results, and communications sent to participants. Closing a business does not eliminate the obligation to properly terminate any benefit plan, and the Department of Labor can audit plan activity for six years after the final filings. If the business provided health coverage, keep proof of COBRA election notices to departing employees as well.
OSHA Injury and Illness Logs: Five Years
OSHA requires employers to keep the OSHA 300 Log, the annual summary, and the 301 Incident Report forms for five years following the end of the calendar year the records cover.11Occupational Safety and Health Administration. 1904.33 Retention and Updating This period runs regardless of whether the business is still operating, so a workplace injury logged in the final year still needs documentation preserved for five full years after that calendar year ends.
Property and Asset Records
Records establishing the cost basis of business property — purchase agreements, improvement receipts, depreciation schedules, and appraisals — follow the year the property is disposed of, not the year it was acquired. The IRS requires you to keep property records until the statute of limitations expires for the year you sell or otherwise dispose of the property.12Internal Revenue Service. How Long Should I Keep Records Because closing a business usually means disposing of most or all assets in the final year, these records need to survive at least three years past your final return, and longer if the six-year or seven-year exceptions apply.
Watch out for like-kind exchanges. If the business swapped property in a nontaxable exchange during its life and still held the replacement property at closure, records for both the original and replacement properties need to be kept until the limitations period expires for the year the replacement is finally disposed of.12Internal Revenue Service. How Long Should I Keep Records
Insurance Policies
How long to keep insurance documents depends on what the policy was. An occurrence-based policy covers incidents that happen during the policy period regardless of when the claim is filed, even years later. A claims-made policy only covers claims filed during the active period or a tail-coverage extension. If your professional liability was claims-made, you may need to purchase an extended reporting period to protect against late-filed claims.
Either way, keep policy documents, certificates of insurance, and premium payment records for as long as someone could bring a claim tied to that coverage period. State statutes of limitations for contract and tort claims vary, but many run four to six years and some injury claims run longer. Without the policy documents you cannot prove what was covered or submit a late claim to a former insurer.
Corporate Records to Keep Permanently
Some foundational documents should never be destroyed. Articles of incorporation or organization, bylaws, operating agreements, partnership agreements, board meeting minutes, shareholder resolutions, and stock ledgers or membership interest records document who owned and controlled the business throughout its existence. These are what you need if a dispute later arises about who authorized a transaction, how assets were distributed at dissolution, or whether the company was properly formed.
Long-dormant claims can surface years later: product liability suits, environmental cleanup demands, contract disputes. When a former owner dies, their estate may also need these records to establish the basis of an ownership interest or prove distributions were properly handled. Former owners who can produce the corporate record showing they had no authority over a challenged decision are in a much stronger position than those who shredded everything.
A Practical Retention Schedule
Pulling the timelines together, here is what to keep after filing final returns:
- Permanently: articles of incorporation or organization, bylaws, operating agreements, board minutes, stock ledgers, ownership records, and insurance policies for occurrence-based coverage.
- Seven years: tax returns and supporting documents if any final-year return claimed bad debt deductions or worthless security losses.
- Six years: tax return supporting documents if there is any chance gross income was understated by more than 25 percent; also ERISA benefit plan records, measured from the plan’s last Form 5500 filing date.
- Five years: OSHA injury and illness logs and incident reports, measured from the end of the calendar year they cover.
- Four years: employment tax records, measured from the date the tax was due or paid, whichever is later.
- Three years: general income tax records where no extended period applies, and basic payroll records under the FLSA.
- Two years: supplementary payroll records like time cards and wage rate tables.
- One year: personnel records under the EEOC, though keeping them longer is advisable.
When in doubt, seven years covers every federal tax scenario except fraud and unfiled returns, and it exceeds the ERISA, OSHA, and FLSA requirements.
Destroying Records Once the Period Ends
When a retention period expires, do not just toss records in the recycling bin. Business records contain employee Social Security numbers, bank account details, customer information, and tax identification numbers. Paper records should be industrially shredded. For digital records, standard deletion or formatting leaves data recoverable with freely available software; use data-wiping tools that overwrite every sector, or physically destroy hard drives by crushing or drilling through the platters.
Get a certificate of destruction from whatever service handles the job, showing what was destroyed, when, how, and by whom. If a data breach claim or regulatory audit ever questions how sensitive information was handled, that certificate is your proof of a defensible process. Professional on-site shredding services handle both the destruction and the certification in a single visit.