EIDL Loan Recordkeeping Requirements: What Small Businesses Must Know

If you received an SBA Economic Injury Disaster Loan (EIDL) during the COVID-19 pandemic, congratulations—you survived one of the most financially turbulent periods in recent history. But here's the part many borrowers overlook: the recordkeeping obligations don't end when the funds hit your bank account. In fact, they extend years into the future, and failing to comply can result in fines up to 1.5 times your loan amount.

This guide explains exactly what records you need to keep, for how long, and how to build a simple system that keeps you audit-ready at all times.

What Is the EIDL Program?

The Economic Injury Disaster Loan program is an SBA initiative that provides long-term, low-interest financing to businesses that have suffered substantial economic injury due to a declared disaster. The COVID-19 pandemic triggered a massive expansion of the program, resulting in millions of loans to small businesses across the country.

Unlike PPP loans, EIDL loans are not forgivable (though a targeted advance component was available as a grant). They must be repaid over terms of up to 30 years. And with long repayment comes long recordkeeping obligations.

How Long Must You Keep EIDL Records?

The SBA's loan agreement requires borrowers to maintain "current and proper" books and records for:

• The most recent five years, AND
• Three years after your loan matures or is paid in full, whichever is later

For most COVID EIDL borrowers with 30-year loan terms, this means you could be legally obligated to preserve records well into the 2050s. That's not a typo—this is a decades-long commitment.

Additionally, you must maintain itemized receipts for all loan funds spent for at least three years from the date of the final disbursement.

What Documents Must You Keep?

The SBA is specific about what constitutes adequate recordkeeping. Here's a breakdown of the required documents:

Financial Statements

• Income statements (profit and loss)
• Balance sheets
• Cash flow statements
• Full general ledger and chart of accounts

These must be submitted to the SBA no later than three months after the end of each fiscal year. If the SBA requests it, you may also be required to have an independent public accountant prepare an Accountant's Review Report—at your own expense.

Tax Records

• Federal and state business tax returns
• All related tax filings and schedules
• W-2s, 1099s, and payroll tax filings

Loan Fund Usage Documentation

This is where many businesses fall short. The SBA requires detailed proof that you used loan funds only for approved purposes (ordinary and necessary business operating expenses). You must retain:

• Paid receipts and invoices for every expense paid with EIDL funds
• Canceled checks or bank transaction records
• Contracts and purchase orders related to EIDL-funded expenditures
• Payroll records if funds were used for payroll

Business Records

• Insurance policies
• Corporate formation documents and amendments
• Records of earnings distributed and dividends paid
• Compensation records for officers, directors, and any shareholder owning 10% or more of the company's stock

Bank Statements

Monthly bank statements for any account that received or disbursed EIDL funds. This is why many advisors recommend keeping EIDL funds in a dedicated bank account—it creates a clean audit trail without requiring you to reconstruct spending from a mixed account.

What Can the SBA Actually Do?

Understanding the SBA's enforcement powers is essential context for why recordkeeping matters. Under the loan agreement, the SBA has broad rights to:

• Inspect and audit any books, records, or papers related to your business's financial condition
• Copy documents relevant to the loan
• Inspect and appraise business assets, either directly or by requiring you to arrange it at your expense
• Request records from government agencies, including federal, state, and municipal tax records

The SBA Inspector General (SBA-OIG) has been aggressive in investigating EIDL fraud and non-compliance. Even if your use of funds was entirely legitimate, poor recordkeeping can make it difficult to prove that—turning a compliance issue into a legal one.

Approved vs. Unapproved Uses of EIDL Funds

One reason documentation is so critical: loan funds could only be used for specific purposes. Keeping receipts proves your compliance. Approved uses include:

• Working capital and operating expenses (rent, utilities, supplies)
• Accounts payable and fixed debt payments
• Payroll and related costs
• Business continuity expenses directly related to the disaster

Funds could not be used for:

• Paying down other SBA loans
• Expanding business facilities or acquiring fixed assets
• Dividends or bonuses to owners
• Paying off personal debts or obligations

If an audit uncovers misuse, penalties can include repayment of the full loan plus fines up to 1.5× the original loan amount—not including potential criminal liability for intentional fraud.

Building a Practical Recordkeeping System

The good news: you don't need an elaborate system. You need a consistent one. Here's a practical approach:

Step 1: Open a Dedicated Account

If you haven't already, move all EIDL-related transactions through a dedicated business bank account. This single step dramatically simplifies documentation. Every transaction in that account is EIDL-related; every transaction outside is not.

Step 2: Go Digital with Receipts

Paper receipts fade, get lost, or are destroyed in floods and fires—ironic for a disaster loan. Use a document scanning app or your phone camera to digitize every receipt. Store them in organized folders by month and category.

Step 3: Categorize Expenses Immediately

Don't wait until year-end to figure out what you spent. Categorize each expense when it occurs:

• Rent / lease payments
• Payroll
• Utilities
• Inventory and supplies
• Insurance

Consistent categorization makes producing financial statements—and responding to SBA requests—straightforward.

Step 4: Prepare Financial Statements Annually

Your year-end financial statements are required by the SBA. Don't scramble to put these together retroactively. Either work with a bookkeeper who produces them monthly, or schedule a quarterly reconciliation to keep your books close to current.

Step 5: Back Up Everything

Three copies of critical records: one on your computer, one in cloud storage, and one offline backup (external drive or printed copies for essential documents). The SBA retention requirement spans decades—make sure your storage solution is equally durable.

Annual Reporting Requirements

Beyond recordkeeping, EIDL borrowers have ongoing reporting obligations:

1. Annual financial statements: Submit to the SBA within 90 days of your fiscal year end
2. Change of ownership notification: You must notify the SBA before selling or transferring more than 50% of business ownership
3. Change of address or business structure: Notify the SBA of any material changes to the business
4. Collateral requirements: For loans over $25,000, assets pledged as collateral must be maintained and insured

Missing reporting deadlines can trigger technical default on your loan—even if you're current on payments.

Common Recordkeeping Mistakes to Avoid

Mixing Loan Funds with Other Revenue

Using your general operating account for EIDL funds creates a documentation nightmare. You'll need to trace every EIDL dollar through potentially thousands of mixed transactions.

Discarding Receipts Once Expenses Are Paid

"The bill is paid, so I don't need this" is a costly assumption. Every paid receipt is proof that funds were used appropriately.

Not Tracking Payroll Separately

If you used EIDL funds for payroll, you need payroll records—not just canceled checks. This means pay stubs, payroll registers, and tax withholding records tied to the specific payroll periods covered by EIDL funds.

Ignoring the Financial Statement Requirement

Many small business owners don't know that financial statements must be submitted to the SBA annually. Missing this deadline won't immediately result in penalties, but it creates a pattern of non-compliance that complicates future interactions with the agency.

Assuming the Obligation Ends When You Pay Off the Loan

You must retain records for three years after the loan is paid in full. If you make your final payment in 2035, you're still obligated to keep records through 2038.

What Happens During an SBA Audit?

If the SBA audits your loan, here's what to expect:

1. Written notice: You'll receive notification of the audit with instructions
2. Document request: The SBA will specify which records they want to review
3. Review period: You'll have a window (typically 30–60 days) to produce documents
4. Findings and response: If discrepancies are found, you'll have an opportunity to respond before any action is taken

Having organized, complete records transforms an audit from a stressful event into a manageable process. Most audits of borrowers with good documentation resolve without any adverse findings.

When to Hire Professional Help

Consider working with a CPA or bookkeeper who has EIDL experience if:

• Your loan was over $150,000 (higher scrutiny threshold)
• You're unsure whether your fund usage was fully compliant
• You've received any communication from the SBA about your loan
• Your records are incomplete for any period covered by the loan

The cost of professional guidance is modest compared to potential penalties.

Keep Your Finances Organized for the Long Haul

EIDL loan compliance is ultimately a bookkeeping problem—and a solvable one. With proper systems in place, you can meet the SBA's requirements without dedicating significant time each year to the effort.

Beancount.io provides plain-text accounting that gives you complete transparency and version-controlled records—exactly what you need to maintain the kind of long-term, audit-ready documentation the SBA requires. Every transaction is human-readable, exportable, and permanently verifiable. Get started for free and build the financial paper trail that protects your business for years to come.