How Long Should a Small Business Keep Client Records?

How long should a small business keep client records?

No single rule tells you how long to keep every client record. The correct retention period depends on what the document records — the tax item it supports, the employment obligation it documents, or the property transaction it relates to — and on which agency’s requirements apply. The IRS requires you to keep records that support an item of income, deduction, or credit on a tax return until the period of limitations expires, which ranges from three years to no limit at all depending on the scenario. Property records have their own schedule tied to the year you dispose of the asset, and employment tax records must be kept for at least four years. Some documents, including actual filed tax returns, should be kept permanently.

That is the short answer. The rest of this article explains the specific periods by scenario, shows you a retention table with source attribution, maps out the categories that apply beyond the IRS, and gives you a decision process that works when you are not sure which category a document falls into.

One thing to state clearly at the start: this article provides general guidance based on published IRS rules, US Chamber of Commerce guidance, and CPA practice recommendations. It is not legal or tax advice. Your specific obligations depend on your entity type, industry, state, and circumstances, and where the stakes are material you should consult a qualified accountant or tax professional.

Why there is no one-size-fits-all retention period

No single, universal retention rule applies to all types of records (Source: CO- by US Chamber of Commerce). That is the starting point most small business owners discover the hard way: they ask “how long should I keep my records?” expecting a single number, and get back a list of different numbers for different categories.

The reason is that different legal frameworks govern different types of records. Several federal agencies have document retention requirements (Source: CO- by US Chamber of Commerce), including the IRS, OSHA, the EEOC, and the Department of Labor, and they each set their own periods based on the enforcement windows relevant to their jurisdiction. On top of that, state laws and industry-specific regulations may require longer periods than the federal minimum.

The practical consequence is that a flat “keep everything for seven years” policy is not actually a policy. It is the absence of one. It over-retains documents that could safely be disposed of, under-retains documents that should be kept permanently, and gives no basis for defending a retention decision if a question arises later.

How long does the IRS require you to keep records?

The IRS rule is that you must keep records that support an item of income, deduction, or credit shown on a tax return until the period of limitations for that return runs out (Source: IRS). The period of limitations is the window during which you can amend a return to claim a credit or refund, or the IRS can assess additional tax (Source: IRS). Unless otherwise stated, the years are counted from the date the return was filed, and returns filed before the due date are treated as filed on the due date itself (Source: IRS).

The table below summarizes the IRS retention periods by scenario, drawn directly from the published IRS guidance:

The most commonly cited figure — three years — applies to the standard situation where none of the extended-period scenarios apply. But that figure is only the baseline, and it changes the moment a specific situation triggers a longer window.

What happens when income is understated by more than 25%?

This is the scenario that catches businesses that did not think they had anything to worry about. The IRS requires keeping records for six years when you do not report income that you should report, and the unreported amount exceeds 25 percent of the gross income shown on the return (Source: IRS). The six-year period exists because the normal three-year statute of limitations extends to six years when income is substantially understated, and the business needs the records to reconstruct what was actually reported.

The practical implication is that a business owner who was uncertain about whether a payment was reportable income and chose not to include it should retain the records for the longer six-year period, not the standard three.

Is there a situation where the IRS imposes no time limit?

Yes. There is no period of limitations at all if you do not file a return, or if you file a false or fraudulent return. In those scenarios, the IRS can assess tax at any time, which means the records that would demonstrate your tax position should be kept indefinitely. For practical purposes, this means that even if you believe a particular year is safe, the document proving that you filed honestly for that year is the one you should never discard.

Can the IRS go back more than 10 years?

The short answer is yes, the IRS can go back more than 10 years when examining business tax records (Source: MBK CPA). In practice, routine audits rarely extend beyond six or seven years, but the theoretical reach of the agency is longer when no return was filed, when fraud is alleged, or when a substantial understatement is discovered. This is another reason the “keep everything for seven years” shortcut does not eliminate risk — it eliminates risk for routine matters only, and leaves the tail-end scenarios uncovered.

How long should you keep property records?

Property records follow their own schedule because they are not tied to a single tax year. The IRS rule is to keep records relating to property until the period of limitations expires for the year in which you dispose of the property (Source: IRS). This means the retention period does not start when you acquire the property. It starts when you sell, exchange, or otherwise dispose of it, and the clock runs for the normal limitations period after that year’s return is filed.

For example, if you purchased a piece of equipment in 2020, depreciated it over five years, and sold it in 2026, the records supporting the original purchase, the depreciation claimed each year, and the sale itself should all be kept until the period of limitations expires for your 2026 return — which would typically be three years after the 2026 return filing date, or until approximately 2030 in a standard scenario.

This also applies to client records that document property transactions. A client’s invoice for property you sold to them is part of the property record, not merely a transaction record, and its retention period runs from the disposition date, not the invoice date.

How long should you keep employment tax records?

Employment tax records must be kept for at least four years after the date the tax becomes due or is paid, whichever is later (Source: IRS). This covers payroll records, W-2s, W-4s, tax deposit records, and any documents supporting employment tax filings.

The “whichever is later” language matters here because employment taxes are typically deposited on a schedule that may differ from the filing deadline. Use the later of the two dates to be safe.

Employment records also overlap with non-tax employment law requirements. Depending on your industry and state, records related to hiring, termination, compensation, and hours worked may carry their own retention obligations under the FLSA, ADA, ADEA, or other federal and state employment laws.

What other federal requirements affect retention?

Beyond the IRS and employment tax rules, other federal agencies set their own retention periods for documents within their jurisdiction. The US Chamber of Commerce notes that document retention guidelines typically require businesses to store records for one, three, or seven years, with some records required to be kept permanently (Source: CO- by US Chamber of Commerce).

One notably long retention period that affects small businesses in specific industries is the OSHA requirement: documents relating to workers’ exposure to harmful agents must be kept for 30 years after employment ends (Source: CO- by US Chamber of Commerce). This applies to businesses that handle chemicals, industrial materials, or anything where occupational exposure records are required, and the 30-year window is substantially longer than any IRS period.

Small business owners with even one employee in an exposure-related role should verify whether this requirement applies. For most service businesses and offices, this scenario does not apply, but the principle — that industry-specific rules can dramatically extend retention periods — applies everywhere.

What about state and industry requirements?

State and industry regulations may override or extend federal retention requirements (Source: CO- by US Chamber of Commerce). Depending on the type of business, there may be certain records that must be kept for a minimum number of years under state law (Source: MBK CPA).

Common areas where state rules differ from federal guidance include:

• Contract records: some states have longer statutes of limitations for contract disputes than the IRS retention periods.
• Healthcare records: state medical records retention laws often exceed federal healthcare privacy minimums.
• Real estate records: state requirements for property transaction records can differ from the IRS property-disposition rule.
• Financial services: state banking and lending regulations may impose specific retention periods for client transaction records.

The safe approach when two rules conflict is to follow the longer period. A documented retention policy that notes which rule governs each category is significantly better than one that ignores the question and assumes a single period covers everything.

Which records should be kept permanently?

Some records should never be disposed of regardless of how old they get. The category of permanent-retention records includes:

• Actual filed tax returns. Actual tax returns, including canceled checks from tax payments, should be kept permanently (Source: MBK CPA). The return itself is the proof that you filed and what you reported, and its value does not decay with time.
• Business formation documents. Articles of incorporation, operating agreements, partnership agreements, and EIN assignment letters.
• Property acquisition records. Deeds, title documents, and records establishing the original basis of property you still own.
• Year-end financial statements. Annual financial statements that establish the financial position of the business at a point in time.

Supporting documentation from previous years — the receipts, invoices, and worksheets that back up the numbers on the return — should be kept until the chance of an audit passes (Source: MBK CPA). In practice this means following the IRS period-of-limits schedule and adding a buffer for any situation where the extended-period scenarios might apply.

What about canceled leases and notes receivable?

Canceled leases and notes receivable can be kept for 10 years after cancellation (Source: MBK CPA). This is longer than the standard three-year period because the original obligation and any disputes over its cancellation can remain relevant for an extended window. For a small business that has lent money to clients or entered into multi-year contracts, this 10-year period should be applied to any document recording the obligation and its resolution.

When retention guidance conflicts: a practical decision process

When you are not sure which retention period applies to a specific document, follow this sequence:

1. Identify the category. Is the document a tax-supporting record, a property record, an employment record, a lease or receivable, or a general business document? The category determines which rule to apply.
2. Find the applicable period. For tax records, start with the IRS schedule. For property, calculate from disposition. For employment tax, use the four-year rule. For non-regulated documents, use your documented policy period.
3. Check for extended-period triggers. Determine whether any specific situation extends the standard period: a refund claim, a loss claim, substantially understated income, or a failure to file.
4. Check for state and industry overrides. If a state or industry rule requires a longer period, that period governs.
5. When in doubt, keep it longer. The cost of storing a document past its retention period is negligible compared to the cost of not having it when it is needed.

The important principle is that this process should be the same for every document, applied systematically rather than case-by-case based on whoever happens to be deciding that day. A documented retention policy makes the process repeatable and defensible.

When the seven-year shortcut is actually a mistake

Many small business owners adopt a flat seven-year retention period because it sounds cautious and is easy to remember. It is not the worst approach, but it is not a policy either, and it introduces two specific risks.

First, it under-retains permanent records. If actual tax returns, formation documents, and original property records are included in the “purge after seven years” sweep, the business loses the records it should never have discarded. These are the documents that prove the business exists, what it owns, and what it reported.

Second, it over-retains documents that serve no purpose beyond their period. A seven-year-old vendor invoice from a routine purchase has no remaining compliance function once the period of limitations has expired for the year it supported. Keeping it indefinitely accumulates clutter without accumulating protection.

The difference between a flat-period shortcut and a categorized policy is not about spending more on storage. It is about knowing what you have, why it is there, and when it can safely be disposed of.

When this guidance does not apply

This article addresses record retention for small businesses operating in the United States under standard tax and employment law. It does not cover:

• Litigation holds. When a business is involved in pending or reasonably anticipated litigation, a legal hold may require retaining documents beyond their normal retention period until the hold is released, regardless of what the retention policy says.
• Government investigations. Active investigations by regulatory agencies may require preservation beyond normal periods.
• International operations. Businesses with clients, employees, or operations in other jurisdictions face additional retention requirements under those jurisdictions’ laws.
• Industry-specific regulation in detail. Healthcare, financial services, and government contracting each have extensive retention requirements that go well beyond what is summarized here.

If any of these apply to your situation, the general guidance in this article should be supplemented by specific legal or compliance advice for your circumstances.

Where to go from here

If you now have a clearer picture of what to keep and why, the next step is to build a document retention policy that makes these rules repeatable and the record retention checklist that turns them into action.

For small businesses that want a practical starting point without building everything from scratch: categorize your existing records into the groups this article describes, apply the periods in the table to each group, and write down the result. That written record is the beginning of a retention policy, even if it is not yet polished.

If the administrative burden of managing document retention is becoming a significant time cost, Hallermann Consulting helps small businesses simplify repeatable admin work and identify where practical automation can reduce the manual overhead of compliance tasks. A workflow audit can identify which parts of your document management process are worth automating and which are better left to a defined human review step.