Quick answer

A small business needs to keep the documents that support every figure on its tax return: records of income, purchases, expenses and assets. The IRS names these supporting documents in Publication 583, and they include invoices, bank deposit slips, canceled checks, account statements and credit card slips. The general retention period is three years, but retention periods differ by record type, and several situations extend the period to six years, seven years, or indefinitely.

Businesses with employees face additional rules. The US Department of Labor sets at least three years for payroll records and two years for time cards and similar supporting records, and the IRS sets at least four years for employment tax records. Some states add their own rules, and California's sales and use tax records period is at least four years.

What financial records does a small business need to keep?

The core requirement is documents that back up what the business reports. Every income figure, every deduction and every asset on a return should trace to something concrete. The IRS, in Publication 583, sets out what that something looks like for each category.

For gross receipts, meaning the money that comes in, the IRS lists cash register tapes, bank deposit slips, receipt books, invoices and credit card charge slips. For purchases and inventory, it lists canceled checks, cash register tape receipts, credit card sales slips and invoices. For expenses, it lists canceled checks, cash register tapes, account statements, credit card sales slips and invoices. For assets, it lists purchase and sales invoices, real estate closing statements and canceled checks.

Those lists overlap, which is useful. A bank or card statement appears under expenses, and a canceled check appears under purchases, expenses and assets. A business that keeps its account statements and its invoices has covered a large share of what the IRS names.

The practical reading is straightforward. The ledger or software entry is the summary, and the underlying document is the proof. Keeping both, linked together, is what makes a record complete.

Which records are covered by which rule?

Different records fall under different rules, and the rules come from different bodies. Sorting them by type is the clearest way to see what applies.

Tax records, meaning the documents behind income and deductions, are governed by the IRS retention periods covered in the next section. Employment tax records have their own IRS period. Payroll records and supporting wage records fall under the Fair Labor Standards Act, as set out by the US Department of Labor. Sales and use tax records are set by the state, and this page covers California as the documented example. Personnel records are the subject of guidance from the Equal Employment Opportunity Commission.

A single document can sit in more than one category. A payroll register may be both a Fair Labor Standards Act record and the basis for an employment tax filing, and the longer of the applicable periods is the one that protects the business. The sections below give each period with its source.

How long should tax records be kept?

The IRS, in its guidance on how long to keep records, sets a default of three years. That default applies unless one of three exceptions does. The exceptions are under-reporting income by more than 25% of the gross income shown on the return, not filing a return at all, and filing a fraudulent return.

Each situation has its own period, according to the same IRS guidance:

  • Records should be kept for six years if income that should have been reported was left off the return and the omitted amount is more than 25% of the gross income shown on the return.
  • Records should be kept indefinitely if no return was filed.
  • Records should be kept indefinitely if a fraudulent return was filed.
  • Records should be kept for seven years for a claim for a loss from worthless securities or a bad debt deduction.

The first three are the exceptions to the three-year default. The seven-year period applies to a specific kind of claim and is separate from them.

The reasoning behind a longer period is simple. The IRS can look back further in the situations where a return was incomplete, missing or false, so the supporting records have to last as long. A business that has never had any of those problems will usually be working with the three-year default, but it cannot always know in advance which period will end up applying.

How long should employment tax records be kept?

The IRS sets a separate period for employment tax records: at least four years after the date the tax becomes due or is paid, whichever is later. That is longer than the general three-year default, and it is measured from a different starting point.

The "whichever is later" wording matters. If a payment is made after its due date, the four years run from the payment, not the deadline. A business that pays late therefore holds its records for longer than one that pays on time.

This period applies to the records behind employment taxes. It does not replace the Department of Labor periods for payroll records, which are covered next, and a business with employees should expect to satisfy both.

What does the Department of Labor require for payroll records?

The US Department of Labor, in Fact Sheet 21 on Fair Labor Standards Act recordkeeping, says that each employer shall preserve for at least three years payroll records, collective bargaining agreements, and sales and purchase records. That is the first of two periods in the fact sheet.

The second period is two years. It applies to the supporting records behind wage calculations: time cards, piece work tickets, wage rate tables, work and time schedules, and records of additions to or deductions from wages.

The split between the two periods is easy to blur, so it helps to state it plainly. The core payroll record is held for at least three years. The working documents that feed it are held for at least two years.

Two details are worth noting. First, the three-year period includes sales and purchase records, which a business might not think of as payroll material. Second, these periods are minimums, and they sit alongside the IRS four-year employment tax period. A business that holds payroll material for four years satisfies all three.

What about personnel records?

The Equal Employment Opportunity Commission also publishes recordkeeping requirements for personnel records. The retention periods for those records are not covered on this page, and no figure is stated here because none has been verified for this article.

A business with employees should check the EEOC's recordkeeping guidance directly. The point to take from this page is that personnel records are a separate category with a separate rule, and that the Department of Labor and IRS periods above do not automatically cover them.

Do state rules add anything?

They can. States set their own recordkeeping requirements for taxes they administer, and the periods are not the same everywhere.

California is a documented example. The California Department of Tax and Fee Administration, in Publication 116, says sales and use tax records should be kept for at least four years. It adds that the period is longer if the business is being audited: all records covering the audit period should be retained until the audit is complete.

The audit rule is the part most often missed. A four-year clock does not run out while an audit of the covered period is open. The records stay until the audit ends.

Other states' periods are not covered here. A business outside California, or one that collects taxes in several states, should check each relevant state tax agency directly rather than assuming the California figure applies.

Why does a separate business account matter for recordkeeping?

Because every other record is easier to keep when business money moves through its own account. The IRS says this directly in Publication 583: "One of the first things you should do when you start a business is open a business checking account." It adds that the business account should be kept separate from the personal one.

The same publication says to use the business account for business purposes only, and to indicate the source of deposits and the type of expense in the checkbook. It calls the business checkbook "your basic source of information for recording your business expenses."

That framing is worth taking literally. The account statement is itself one of the supporting documents the IRS names for expenses. If personal and business spending share an account, each statement becomes a document that has to be picked apart before it can serve as proof of anything.

For someone who has not yet formed a business or separated the money, this is the first step, ahead of any record system. ZenBusiness handles the formation, the EIN and the registered agent, and offers a free accounting consultation to customers who form an entity with it. It does not offer business banking, so the account itself is opened with a bank of the owner's choice. ZenBusiness also sells ZenBusiness Money Pro, a bookkeeping service priced at $30 per month as of 2026-10-06, covering custom invoicing, revenue and expense tracking, and tax preparation tools.

How should records be organised so the periods are easy to follow?

Group by the rule that governs them, not by the date they arrived. A simple structure follows the categories above.

Tax records go in one group, held for at least the IRS default of three years and longer where an exception applies. Employment tax records go in a second, held for at least four years after the tax is due or paid, whichever is later. Payroll records and wage supporting documents go in a third, held for at least three years and two years respectively. State tax records go in a fourth, held for the period the state sets.

Because the longest period in each group governs, a practical shortcut is to hold everything in a group for its longest applicable period. That avoids sorting individual pages and costs only storage. It is a convenience, not a legal requirement, and the periods above remain the actual rules.

A short written retention note helps. One page that lists each category, its period and its source takes ten minutes to write and spares the business from rediscovering the rules at the point of an audit.

Where does software fit?

Bookkeeping software is a place to hold records and a way to produce summaries, and it does not change what the rules require. It is useful for the features that serve the official layer: connecting to the business bank account so statements are captured, attaching a receipt or invoice to each transaction, and keeping data accessible for the full retention period.

That last point is the one worth testing before committing to any tool. What happens to stored data and attachments if a subscription ends is not published in a comparable form across providers, so it is a question to ask directly. A tool that cannot return the records at the end of the retention period has not done the job.

The IRS also publishes general recordkeeping guidance and the periods above are not specific to any format. Whether electronic copies satisfy a given requirement is not covered on this page, and the relevant agency's guidance is the place to confirm it before discarding paper originals.

What should a business do if it has fallen behind on records?

Start by stopping the loss. Keep every document from today forward, and collect what can be retrieved for earlier periods: bank and card statements are usually the easiest to re-download, and vendors can often re-send invoices.

A missing receipt does not erase the transaction. The account statement still shows the date, amount and payee, and the IRS names account statements among the supporting documents for expenses. Keep a note of anything that cannot be recovered.

Be especially careful with records for any year in which no return was filed. The IRS period for that situation is indefinite, so those records should be kept rather than discarded.

Frequently asked questions

Is there one retention period for everything? No. The period depends on the type of record and the rule that governs it. The IRS default is three years, with six years, seven years and indefinite periods in specific situations, and other agencies set their own.

Are the Department of Labor periods maximums or minimums? The source language says employers shall preserve the records for at least the stated period, so they are minimums.

Do records have to be kept on paper? Whether electronic copies satisfy a particular requirement is not covered on this page. The relevant agency's guidance should be checked before paper originals are discarded.

What if an audit is open when the retention period ends? For California sales and use tax records, the state says records covering the audit period should be retained until the audit is complete. The same caution is sensible for any audit, though other agencies' audit rules are not covered here.

Do these rules apply to every type of business? The IRS and Department of Labor materials cited here are federal. Which rules apply to a particular business depends on its structure, its employees and the states where it operates, so a tax professional can confirm the specifics.

Sources

This is general information, not legal, tax or accounting advice, and requirements vary and change.