How Long Should You Keep Business Records? The IRS 3-4-6-7 Year Rules

You filed your 2023 business return on time, paid what you owed, and finally cleared that tax folder off your desk. Two and a half years later, the IRS sends a letter asking for proof of a deduction you barely remember. Can you still find it? And more importantly — were you even required to keep it?

For most small business owners, the real risk is not keeping records too long. It is tossing them too early. The IRS does not have one single "keep everything seven years" rule. It has a set of overlapping clocks — three years, four years, six years, seven years, and in two cases, forever — and which one applies depends on what you reported, what you omitted, and what kind of tax was involved. Get the clock wrong and you lose the ability to prove your numbers when it matters most.

This guide breaks down exactly how long to keep what, why the periods differ, and how to build a simple retention system that keeps you audit-ready without drowning in file boxes or cloud storage bills.

The Core Principle: Keep Records Until the Period of Limitations Runs Out​

The IRS phrase you will see in Publication 583 and on the IRS recordkeeping page is straightforward: keep any record that supports an item of income, deduction, or credit on your return until the period of limitations for that return expires.

The period of limitations is the window in which:

• You can amend a return to claim a refund or credit, or
• The IRS can assess additional tax.

Once that window closes, neither side can generally reopen the year. Your records are your proof during that window. After it closes, many records can go — but not all, because some windows are longer than others, and some never close at all.

A critical timing detail: the clock starts when you file. If you filed before the due date, the IRS treats it as filed on the due date. So an April 10 filing for a calendar-year return still starts its clock on April 15.

The 3-Year Rule: The Default for Most Income Tax Returns​

Keep records for 3 years if none of the longer situations below apply.

This is the baseline for most small businesses. If you filed accurately, reported all income, and are not claiming a loss from worthless securities or bad debts, your income tax records for a given year should be retained for at least three years from the date you filed.

What counts as "records"? Everything that supports the numbers on that return:

• Gross receipts: bank statements, sales invoices, 1099-K and 1099-NEC forms, point-of-sale reports, e-commerce settlement files
• Purchases and inventory: canceled checks, credit card statements, vendor invoices, receiving records
• Expenses: receipts, mileage logs, travel and meal documentation, rent and utility bills
• Payroll, if you have employees: timesheets, pay stubs, tip reports
• The return itself: keep a signed copy of every federal and state return you file

If you later file a claim for credit or refund — for example, an amended return — a related rule applies: keep records for 3 years from the date you filed the original return or 2 years from the date you paid the tax, whichever is later. In practice, that often means you need to hold the underlying documents a little past the normal three-year mark if you paid late or amended later.

Example: You filed your 2023 Form 1040 with Schedule C on April 15, 2024. Under the 3-year rule, you would keep support for that year until at least April 15, 2027. If you later amend 2023 in 2026 to claim a missed credit, the "3 years or 2 years since payment" test re-measures from the amendment and payment dates.

The 6-Year Rule: When You Underreported Income by More Than 25%​

Keep records for 6 years if you omitted income that is more than 25% of the gross income shown on your return.

You do not need to be accused of fraud for this longer period to trigger. If your return showed $200,000 of gross income but you left off $60,000 of additional income (30%), the IRS has six years — not three — to assess additional tax. Your records need to last at least that long.

Why does this matter even if you believe you reported everything? Two common small-business scenarios create unintentional omissions:

• A 1099-NEC or 1099-K arrives late or to an old address and never makes it into your books
• Marketplace or payment-processor income (Stripe, PayPal, Shopify) is recorded net of fees, and the gross amount on the 1099-K does not match your books — the difference looks like unreported income until you can prove the fees

The takeaway is not to inflate your retention period to six years "just in case" for every year, but to understand that if a year had messy income reporting — a new sales channel, a platform migration, a year with a lot of 1099s — you should default to the longer hold for that year.

The 7-Year Rule: Worthless Securities and Bad Debt Deductions​

Keep records for 7 years if you claim a loss from worthless securities or a bad debt deduction.

This one catches founders and lenders by surprise because it is longer than the standard three years for a single line item. If you wrote off a loan to a customer or supplier that went unpaid, or you claimed a stock investment became worthless, the IRS gets seven years to challenge that claim. You need seven years of records to defend it.

Keep for that year:

• The original loan or investment documentation
• Evidence the debt became worthless in the year you claimed it (collection efforts, demand letters, bankruptcy notices, correspondence)
• How you calculated the loss amount
• Any later recoveries, if the debtor eventually paid

If your business extends credit of any kind — net-30 terms, contractor advances, loans to another business you own — treat any year you claim a bad debt loss as a seven-year year.

The 4-Year Rule: Employment Tax Records Are Different​

Keep employment tax records for at least 4 years after the tax becomes due or is paid, whichever is later.

Income tax retention and employment tax retention are separate clocks, and the employment tax clock is longer than the default income tax clock.

This covers:

• Forms 941 (quarterly federal payroll returns), 940 (FUTA), W-2/W-3, and 1099-NEC for contractors if you file them as part of payroll compliance
• Payroll registers, time and attendance records, tip allocations
• Records of fringe benefits, accountable plan reimbursements, and third-party sick pay
• Documents supporting employment tax deposits and any adjustments

The "due or paid, whichever is later" language matters. If you filed and paid late, the four years runs from the later date, not the original due date. Many audits that feel like "income tax" audits are actually employment tax exams focused on worker classification or unpaid withholding — and they reach back a full four years.

Practical tip: Even if you use a payroll provider, keep your own copies. Providers archive data on their schedule, not yours, and access can disappear if you switch vendors. Export quarterly payroll summaries and Forms 941 to your own storage at year-end.

The Forever Rules: When the Clock Never Starts​

You must keep records indefinitely in two situations:

1. You did not file a return for the year. If no return was filed, there is no filing date to start the clock. The IRS can assess tax at any time. Keep whatever income and expense records you have indefinitely, and file the missing return — the clock starts when you do.
2. You filed a fraudulent return. Fraud has no statute of limitations. If a return is fraudulent, the period remains open indefinitely.

These are the only "forever" categories for federal income tax. No honest filing error — even a large one — extends the period to infinity. But the consequence of misclassifying a year as "I filed" when you actually missed a required return (for example, a final short-year return after closing an entity) is that you may believe you are in a three-year window when you are actually in a forever window.

Property and Basis Records: Keep Until You Sell — Plus the Limitations Period​

So far the rules have been about how long after filing. Property breaks that pattern.

Keep records relating to property until the period of limitations expires for the year in which you dispose of the property.

This applies to any property you depreciate, amortize, or deplete, or for which you will later calculate gain or loss on sale. That includes your building, vehicles, equipment, and also intangible property like a liquor license amortized under Section 197.

You need to be able to prove:

• Original cost or basis (purchase price, closing costs, improvements)
• Depreciation, amortization, or Section 179 deductions taken each year
• Business-use percentage (for vehicles and mixed-use assets)
• Improvements versus repairs

If you received property in a nontaxable exchange, your basis in the new property is generally the basis of the old property plus any cash paid. You must keep the records for the old property until the limitations period expires for the year you dispose of the new property. Chain exchanges can mean holding records for decades — the building you exchanged in 2018 still matters when you sell the replacement in 2035.

Common mistake: Owners keep the depreciation schedule but toss the original purchase invoices and closing statements. The schedule without the source documents does not prove basis. Keep both together.

Electronic Records Count — If You Keep Them Right​

The IRS accepts electronic records under Revenue Procedure 98-25 and related guidance, but "electronic" does not mean "a photo of a receipt in your camera roll that you can never find again." To count:

• The electronic copy must be legible and complete, including both sides of documents where relevant.
• It must be retrievable and reproducible in hard copy on request. An auditor will ask you to produce records, not to hand over your phone.
• You must be able to show the record has not been altered — which is why original electronic invoices or bank PDFs are stronger than manually edited spreadsheets alone.

A reliable minimal system for a small business:

1. Scan at the point of receipt. Use a single inbox — an email address like receipts@ or a mobile app that saves to a dedicated cloud folder — so nothing lives only on one person's phone.
2. Name files by date, vendor, and amount. For example, 2024-09-18_OfficeDepot_842-13_receipt.pdf is findable; IMG_4829.jpg is not. Add the expense category if your accounting system does not auto-tag it.
3. Store returns and supporting schedules separately. Keep a permanent folder for each tax year containing the filed return, W-2/W-3 transmittals, 1099 filings, and the workpapers that tie to the return.
4. Back up in two places. A cloud provider plus an annual archive drive or second cloud account. Test a restore once a year.
5. Keep audit trails. If you correct a bookkeeping entry, do not overwrite it. Void, reverse, or journal-adjust with a note. Auditors trust a visible trail more than a clean-looking but untraceable ledger.

Publication 583 emphasizes that you should keep records as long as they are relevant for other purposes even after the tax period closes. Electronic copies make that cheaper — there is no reason to purge at exactly three years if storage is cheap and the data supports better decisions the next year.

State, Insurance, and Lender Rules Often Last Longer Than the IRS​

The IRS periods are floors, not ceilings. Before you shred, check three other clocks:

• State tax authorities. Many states have four-year periods for income and sales tax, and some follow the six-year rule for substantial understatements. Sales tax exemption and resale certificate records are a frequent audit target — states routinely go back three to four years and can go longer if certificates are missing. If you sell in multiple states, apply the longest period among the states where you have nexus.
• Employment and labor records. Federal wage-hour, OSHA, and workers' compensation records have their own retention schedules (often three to five years), and some benefit-plan records should be kept six years or longer under ERISA.
• Lenders, investors, and insurers. A loan covenant or insurance policy may require you to retain financials, inventory counts, or equipment appraisals longer than the IRS does. If you claim a casualty loss, your insurer may require proof of basis and value well after the tax period closes.

When in doubt, keep the overlapping set. Holding payroll and gross-receipts records for five years satisfies both the IRS three-year income rule and the four-year employment tax rule with a buffer for late payments and state add-ons.

A Practical Retention Schedule You Can Actually Follow​

Use this as a starting point and adjust for your entity and state:

For property records "until disposition +7," create a single permanent folder per asset. File the purchase invoice, closing statement, improvement receipts, and annual depreciation entries together so a future preparer does not need to reconstruct history across seven year-folders.

What to Actually Keep — A One-Page Checklist by Category​

If you prefer a checklist to a table, keep these for each year you file:

Income and sales: Monthly bank and card statements, payment processor annual summaries and monthly settlements, sales invoices, 1099s received and sent, sales tax returns and exemption certificates collected from customers.

Costs: Vendor bills and proof of payment, inventory purchase records and physical count sheets, subcontractor invoices and Forms 1099-NEC/W-9, rent and lease agreements.

Payroll: Time records, pay summaries, Forms 941 and annual Forms 940/W-2, records of withholding and benefit deductions, workers' comp audit worksheets and class-code documentation.

Assets: Purchase agreements, financing documents, placed-in-service dates, business-use logs for vehicles, receipts for improvements, disposition closing statements.

Corporate: Filed returns (federal, state, local) with all schedules, estimated tax payment confirmations, extension filings, IRS and state notices and correspondence with your responses.

Keep these in a consistent year-folder structure so you can answer "show me Q3 2023 meal receipts" without hunting across email, a glovebox, and a retired laptop.

When You Can Safely Shred — and When You Should Not​

After the relevant period expires and you have checked nontax obligations, destruction is fine — but do it properly.

• Shred paper containing tax IDs, bank accounts, or payroll information. Do not recycle intact. Use a cross-cut shredder or a certified shredding service and keep the certificate of destruction for that batch.
• Purge electronic files by policy, not by whim. Document your retention schedule in writing — even a one-paragraph policy in your employee handbook counts. Consistent application looks far better in an exam than selective deletions.
• Never destroy records after you receive an IRS notice, audit letter, or subpoena. Once an examination is open or litigation is reasonably anticipated, a legal hold applies. Premature destruction can draw separate penalties and an adverse inference.
• Make an exception for unresolved items. Open net operating loss carryforwards, suspended passive losses, unamortized loan costs, and installment sale balances all carry deductions into future years. Keep the originating year's records until the carryforward is fully used and the period for that final year closes.

Common Mistakes That Make a Routine Notice Expensive​

1. Keeping the return but not the proof. The return is not support — it is the claim. An auditor asks for the receipts, logs, and statements behind the numbers, not just the PDF you filed.
2. Relying on your bank's online portal as your archive. Banks typically provide 12 to 24 months of statements online. After that, copies may be harder to obtain or cost per statement. Download full-year PDFs annually.
3. Mixing personal and business expenses on one card and keeping no allocation. When records are commingled, every personal charge becomes a potential audit question. Separate accounts and keep a brief business purpose note for meals and travel.
4. Tossing W-9s after filing 1099s. Keep every vendor W-9 for at least four years after filing the related 1099. The W-9 is your proof that backup withholding was not required.
5. Forgetting state nexus. A business that registered for sales tax in year two but kept no exemption certificates for year one will struggle if the state audits year one later. States often audit sales tax years that the IRS never examined.

Good Records Do More Than Survive an Audit​

Retention rules are written as minimums for tax defense, but the same records are what let you run the business well. The year you kept clean mileage logs is the year you can confidently claim the standard mileage rate. The year you tracked cost of goods sold by month is the year you can spot margin erosion before it shows up in your bank balance.

That is also why where you keep records matters as much as how long. Records scattered across a point-of-sale system, a payroll provider, a personal inbox, and a shoebox do not behave like records when you need them. They behave like a scavenger hunt. Moving to a single, version-controlled ledger — where every transaction has a source document attached or referenced — turns retention from a chore into a byproduct of doing the bookkeeping right.

Simplify Your Financial Management​

Knowing how long to keep each document is easier when every transaction is already captured, categorized, and tied to its source document in one place. Beancount.io gives you plain-text accounting that is transparent, version-controlled, and AI-ready — so your books stay complete this year and searchable seven years from now, without a black box or vendor lock-in. Get started for free and make audit-ready recordkeeping the default, not the exception.