How to Establish Document Retention Requirements for Business Clients

Under IRC §6001, every person liable for tax is required to keep books and records sufficient for the IRS to determine correct tax liability — but the Code doesn't specify which records to keep or how long. That specificity lives in the statute of limitations under IRC §6501, the strict substantiation requirements of IRC §274(d), and decades of examination practice. For CPAs, the practical job is translating those authorities into a client-facing retention schedule that matches actual risk: most records need seven years, some need to be kept indefinitely, and a few have asset-specific timelines that extend through a sale that hasn't happened yet. Clients who lack records when the IRS asks can't deduct what they can't prove — and reconstruction after the fact rarely survives scrutiny.

Prerequisites

Client's list of active entities (S-Corps, partnerships, C-Corps, SMLLCs) and their tax years
Current document storage setup — paper, cloud, or combination
Client's prior examination history and any open IRS correspondence, which may affect applicable statute periods
For capital-intensive clients or those with real estate: a list of current capital assets and their placed-in-service dates

Step 1: Understand the Statute of Limitations Tiers That Govern Every Retention Period

Document retention is driven almost entirely by the IRS's window to assess additional tax. Once the statute of limitations on a return closes, the IRS cannot assess additional tax for that year — and there is no legal obligation to retain records beyond what is needed for other purposes. The governing authority is IRC §6501.

The three-tier statute structure:

Situation	Assessment Limitation Period
Standard return, filed timely	3 years from the later of the return's due date or actual filing date (IRC §6501(a))
Substantial omission of income (>25% of gross income omitted)	6 years from the due date or filing date (IRC §6501(e)(1))
False or fraudulent return	No limitation — IRS may assess at any time (IRC §6501(c)(1))
Failure to file a return	No limitation (IRC §6501(c)(3))
NOL, capital loss, or credit carryback	3 years from the carryback year's due date

The practical minimum: Seven years from the return's filing date covers the 6-year substantial omission statute plus one year of buffer. Most CPA practices use seven years as the default retention floor for income tax records.

The exception for carryforwards: NOL carryforwards, capital loss carryforwards, and charitable contribution carryforwards create an open lookback window that extends beyond the standard statute. A client who generated an NOL in 2018 and is still applying it in 2025 must retain the 2018 records — and all carryforward computation records — until the carryforward is exhausted plus the statute period on the year it is last applied. In practice, this can extend retention obligations for NOL carryforward records by a decade or more.

No statute for fraudulent returns: The IRS's unlimited lookback for fraudulent returns is not theoretical. If fraud is asserted on a return, no statute bars the assessment — which is why documentation of the reasoning behind return positions is essential even for older years where routine records have been destroyed.

Step 2: Retain Income Tax Returns and Supporting Workpapers

The filed return — along with the workpapers supporting each position taken — should be retained for the full seven-year minimum.

Returns to retain:

Copies of all filed federal returns: Form 1040, Form 1120-S, Form 1065, Form 1120, and all applicable schedules and attachments
State and local returns for each jurisdiction where the client filed
Amended returns (Form 1040-X, Form 1120-X) and documentation supporting each amendment
Extensions filed (Form 4868, Form 7004) as evidence of timely extension

Supporting workpapers:

Income reconciliation: gross receipts reconciled to bank deposits, 1099-K reconciliation, sales records
Schedule C or Schedule E workpapers for pass-through income
Entity return workpapers: income and loss allocations, K-1 preparation support, basis schedules

K-1 and basis records: S-Corp shareholders and partners must retain basis schedules — the running computation of stock or partnership basis that determines whether distributions or losses are deductible. Stock basis for S-Corp shareholders (IRC §1366) and partnership capital account basis (IRC §705) must be maintained cumulatively from initial investment through final disposition. A shareholder who cannot reconstruct basis cannot substantiate loss deductions and cannot calculate gain or loss on disposition. These records must be retained indefinitely through the ownership period and for the full statute period after final disposition.

Step 3: Maintain Business Expense Documentation Through the Open Audit Window

The general rule under Treas. Reg. §1.6001-1(a) requires records so long as they may become material to any internal revenue law. For most expense categories, that means seven years. For categories subject to IRC §274(d) strict substantiation, the practical standard is more demanding.

Vehicle expenses (IRC §274(d)):

Contemporaneous mileage logs: date, destination, business purpose, business relationship of any accompanying party, odometer reading for each trip
Receipts for actual costs if using the actual expense method (fuel, maintenance, insurance, financing costs)
The Cohan rule — allowing deductions based on credible estimates where receipts are unavailable — does not apply to vehicle expenses; strict substantiation is required and reconstruction after the fact is given minimal weight

Meals (IRC §274(n)):

Receipt for each meal
Note on the receipt: business purpose, names and business relationships of attendees
Post-TCJA, entertainment expenses are generally nondeductible (IRC §274(a)); retain records establishing that claimed expenses qualify as business meals, not entertainment

Travel expenses (IRC §274(d)):

Receipts for transportation, lodging, and incidental costs
Business purpose of the travel and names of business associates met

Home office (IRC §280A): For a full walkthrough of the qualification tests and how these records interact with the deduction calculation, see Home Office Deduction for Self-Employed Clients: The CPA's Complete Guide.

Photographs or a diagram of the dedicated space and its square footage
Total home square footage and the allocation basis
Expense records for mortgage interest or rent, utilities, repairs, and property taxes, prorated by the business-use percentage

Employee compensation:

Payroll records including Forms W-2, Form 941, and state equivalents, for the statute period
Documentation of bonuses, reimbursements, and fringe benefit calculations

Charitable contributions:

Written acknowledgment from the charity for each contribution of $250 or more (IRC §170(f)(8))
Qualified appraisal for donated property valued above $5,000 (Treas. Reg. §1.170A-13(c))
For conservation easements: retain all appraisals, correspondence, and Form 8283 documentation indefinitely, given active IRS examination programs targeting these transactions

Step 4: Track Capital Asset Records Through Sale and Beyond

Capital asset records carry the longest retention obligation: they must be kept from the date of acquisition through the full statute period following the asset's sale. For long-held real estate or equipment, this can span 30 or more years.

What to retain for each capital asset:

Purchase documents: sales contract, settlement statement, or invoice establishing original cost basis
Closing costs allocated to basis: legal fees, title insurance, broker commissions at acquisition
Capital improvement records: documentation of each improvement's cost and completion date, which increase adjusted basis
Depreciation schedules: Form 4562 history from placed-in-service date through disposition, preserving the accumulated depreciation computation that feeds the gain or loss calculation at sale
Disposition records: settlement statement or sale contract showing gross proceeds and selling costs

Why basis records outlast the return: A client who purchased commercial real estate in 2000 and sells it in 2030 cannot accurately calculate gain without the original purchase documents and a complete improvement and depreciation history. The statute on the 2030 return runs through 2036 or 2037 — meaning the 2000 purchase records may be needed until then. Destruction of basis records at seven years is a common and costly error.

Section 1031 like-kind exchanges: Records from the relinquished property carry through to the replacement property. The basis of the replacement property includes the carryover basis from the relinquished property. Retain exchange documents, qualified intermediary correspondence, and the original basis computation for the relinquished property until the replacement property is sold plus the full statute period on the sale year.

Cryptocurrency and digital assets: Cryptocurrency is property under IRS Notice 2014-21. Every disposal — sale, exchange for another coin, or use to purchase goods — is a taxable event requiring a basis, proceeds figure, and holding period. Records needed per transaction: acquisition date, purchase price (cost basis), exchange or platform, disposal date, proceeds received, and the fair market value source for each transaction. Exchange account histories are frequently purged or become inaccessible when clients close accounts; transaction histories must be exported and preserved contemporaneously. Blockchain transaction IDs serve as secondary evidence. Clients using multiple exchanges and self-custody wallets must maintain records from all sources. The same seven-year minimum applies; clients with unreported prior-year activity face the six-year substantial omission statute if income was materially understated. For the full cryptocurrency reporting framework and the specific records required to substantiate Form 8949, see Cryptocurrency Tax Reporting for CPAs.

Bonus depreciation and Section 179: Property fully expensed via bonus depreciation or Section 179 still has an "unadjusted basis" that matters for the Section 199A Method 2 calculation — 2.5% of unadjusted basis enters the QBI deduction cap regardless of how the property was depreciated. Retain placed-in-service documentation and Form 4562 election records through the full statute period even for property with zero remaining depreciable basis. For how unadjusted basis interacts with the QBI deduction cap, see How to Apply Bonus Depreciation and Section 179 for Business Clients in 2025.

Step 5: Handle Special Categories — NOL Carryforwards, S-Corp Board Minutes, and QSBS

Several document categories require retention periods that extend well beyond the standard seven-year rule.

Net Operating Loss carryforwards:

Under IRC §172, NOLs generated after 2017 carry forward indefinitely (limited to 80% of taxable income in the year applied). The statute of limitations on the loss year remains open for IRS challenge as long as the carryforward appears on a return within the open assessment period. A 2018 NOL applied against 2026 income must be supported by 2018 records — which must be retained until the carryforward is fully exhausted plus the statute period on the last year of application. Document the NOL computation thoroughly in the loss year and maintain a continuity schedule tracking the carryforward amount through each year it is applied.

S-Corp board minutes and reasonable salary documentation:

Board minutes documenting annual salary decisions should be retained for the full statute period following each return they support — generally seven years per return. Because the IRS may examine salary decisions across multiple open years simultaneously, an unbroken chain of annual documentation with no gaps is the standard. Minutes from a salary determination covering a return still within the statute period should not be destroyed. For how salary decisions should be structured and documented, see How to Calculate and Document a Reasonable S-Corp Salary. The same documentation serves as the primary defense if the IRS asserts reclassification — for how unreasonable salary positions are selected and examined, see IRS Audit Triggers and Defense: A CPA's Guide to Protecting Business Clients.

QSBS (IRC §1202) stock:

Qualified Small Business Stock held for eventual gain exclusion under §1202 must be documented from issuance: original stock certificate or subscription agreement, proof of the issuing corporation's gross assets at the time of issuance (not exceeding $50 million), the corporation's active business status throughout the holding period, and proof of original-issue purchase at initial issuance. Retain these records indefinitely through the sale and for the full statute period afterward. Given the potential to exclude $10 million or more in gain at zero federal tax, the documentation standard must be treated as permanent. For the complete QSBS qualification framework — confirming original issuance, monitoring the active business requirement annually, and tracking the five-year holding period — see QSBS Guide 2025: How to Qualify for the IRC §1202 Gain Exclusion Under OBBBA.

Employment tax records:

Employment tax records — Forms W-2, Form 941, state withholding and unemployment returns, individual employee wage histories — must be retained for four years from the later of the date the tax was due or paid, under Treas. Reg. §31.6001-1(e). This is a shorter but separate obligation from income tax records; maintain a distinct employment tax file organized by year.

Exception for Employee Retention Credit claims: Clients who filed Form 941-X to claim the Employee Retention Credit are subject to an extended five-year statute of limitations under the Inflation Reduction Act of 2022 (P.L. 117-169, §80604). Retain the Form 941-X, supporting payroll records by employee and quarter, government orders relied upon for any suspension-of-operations eligibility argument, and quarterly gross receipts documentation for five years from the date the amended return was filed. ERC examinations are currently an active IRS enforcement priority. For documentation requirements and audit defense strategy specific to ERC claims, see Employee Retention Credit Audit Defense.

For clients who engage both employees and independent contractors, retain worker classification documentation — contracts, the multi-factor analysis memo, Form SS-8 correspondence, and 1099-NEC filing records — for the same seven-year period as income tax records. The IRS's Section 530 safe harbor (Revenue Act of 1978) requires a complete 1099-NEC filing record for every year relief is sought, and misclassification examinations typically cover all open years simultaneously. For the complete classification framework — including the IRS three-category test, Section 530 relief conditions, and the Voluntary Classification Settlement Program — see How to Classify Workers as Employees or Independent Contractors Under IRS Rules.

Step 6: Establish Electronic Records Systems That Satisfy IRS Requirements

Rev. Proc. 98-25 authorizes the IRS to accept electronic records in lieu of paper originals — provided the electronic storage system meets specific requirements. Clients who maintain records exclusively in digital format must ensure compliance.

IRS requirements for electronic recordkeeping:

Accurate reproduction: The system must produce exact reproductions of original documents, including all information and formatting
Indexing and retrieval: Records must be organized so that any specific record can be retrieved and produced in hard copy upon IRS request
Security: The system must prevent unauthorized access, alteration, or deletion; backup copies must be maintained separately from the primary system
Accessibility: The IRS must be able to access and review records using standard equipment — not proprietary software unavailable to the government

Cloud storage and document management systems: Standard business platforms (Google Drive, Dropbox, Box, Microsoft SharePoint) can satisfy these requirements if records are systematically organized by client, year, and document category and if access controls prevent modification of retained records. Organize by tax year and document type to facilitate production on examination notice.

What cannot be retained only electronically: Some documents retain legal significance that electronic copies don't fully replicate — original stock certificates, notarized documents, original signed contracts, original deeds and title instruments. For tax records specifically, scanned reproductions of original receipts, statements, and returns are IRS-acceptable.

Destruction policy: A written document retention and destruction policy with automatic destruction dates provides a defensible framework for systematic disposal after the retention period expires. Destruction of records after the applicable period is legal — and preferable to indefinite retention of outdated files that create storage costs without legal benefit. The policy should identify each record category, its retention period, and the authorized destruction method (shredding for paper; certified deletion for digital).

Step 7: Build a Retention Schedule Into the Client Engagement

The most common reason clients lack records is that no one established a retention requirement at the outset. Incorporating a schedule into the annual engagement process prevents the deficit.

Engagement letter language:

Include in every new client engagement letter — and review annually at the start of each filing year — that the client is responsible for maintaining the original records supporting each return position and that the CPA's workpaper file is not a substitute for the client's own recordkeeping. Specify the minimum retention periods appropriate to the client's profile. For clients with capital assets, NOL carryforwards, or S-Corp salary positions, note the extended retention obligations explicitly. Engagement letters should also establish the scope of representation and the client's duty to provide accurate information — requirements that intersect with the practitioner's obligations under IRS Circular 230, including the diligence standard that governs every return position a CPA takes.

Annual retention review:

At year-end or return completion, confirm with each client:

What records have been created for the current tax year (mileage log, meal receipts, home office documentation, payroll records, board minutes)
What prior-year records are now past the retention period and can be systematically destroyed under the written destruction policy
Whether any capital asset records need to be updated for current-year improvements, partial dispositions, or exchange events

Client-facing retention schedule:

Document Type	Minimum Retention Period
Income tax returns (federal and state)	7 years from filing date
W-2 and 1099 forms received	7 years
Business expense receipts and logs	7 years
Payroll records (employer records)	4 years from tax due or paid
Capital asset purchase documents	Life of asset + 7 years after disposition
Capital improvement records	Life of improvement + 7 years after disposition
Section 1031 exchange records	Life of replacement asset + 7 years after sale
NOL carryforward source-year records	Carryforward exhaustion + 7 years
S-Corp board minutes	7 years after applicable return statute closes
QSBS acquisition and holding documentation	Indefinite through sale + statute period
Partnership or S-Corp basis schedules	Indefinite through ownership + statute period

For the filing deadline calendar that governs when returns become part of the open statute period, see Business Tax Return Deadlines 2025. For the audit selection mechanisms that determine when examination risk actually materializes, see IRS Audit Triggers and Defense: A CPA's Guide to Protecting Business Clients.

Common Mistakes

Destroying capital asset records at seven years. A client who purchased a warehouse in 2005 and destroyed the purchase documents in 2012 cannot establish adjusted basis for a future sale. Capital asset records must survive through the full statute period after the asset is sold — not seven years from acquisition.

Failing to retain NOL computation workpapers. An NOL is often computed at filing and the workpapers discarded. If that carryforward is still being applied against income a decade later, and the IRS challenges the carryforward amount, the original computation cannot be verified. Document every NOL at the source year and maintain a continuity schedule through each year of application.

Treating mileage logs as optional. Vehicle deductions are subject to IRC §274(d) strict substantiation — a contemporaneous log is required, not optional. A reconstructed log prepared at tax time, at audit time, or after the fact is given minimal weight by IRS examiners and is frequently disallowed in full. Require mileage log maintenance as a condition of claiming the deduction, not as an afterthought at filing.

Discarding S-Corp salary documentation after a few years. The IRS can examine salary positions for multiple open years simultaneously. A salary challenge in 2025 may review 2022, 2023, and 2024 together. Annual board minutes and BLS documentation must cover each year within the examination window — not just the current year.

Assuming CPA workpapers substitute for client records. The CPA's workpaper file is prepared for professional purposes and is not a substitute for the underlying client documentation. If the client lacks original records, the CPA's summary analysis does not replace them. The engagement letter should make this division of responsibility explicit.

Applying the 3-year statute as the retention floor. The standard 3-year statute applies only when gross income is accurately reported. Clients with substantial income — particularly those with inconsistent 1099 reporting, pass-through income that the AUR system may flag, or cash-intensive businesses — face the 6-year statute if a substantial omission issue later surfaces. The 3-year floor is not safe for most business clients; seven years is the appropriate minimum.

FAQs

What is the minimum time to keep federal tax returns?

The IRS standard statute of limitations is three years from the later of the return's due date or filing date (IRC §6501(a)). However, the IRS has six years when gross income is understated by more than 25% (IRC §6501(e)(1)), and no limitation for fraudulent returns or failure to file. Most practitioners recommend seven years as the minimum retention period for income tax returns and all supporting records — this covers the six-year substantial omission statute with one year of buffer.

Do clients need to retain records for years when they had a net operating loss?

Yes, and for longer than normal. The records supporting the NOL computation must be retained from the loss year through the full period the carryforward is applied, plus the statute of limitations on the final year in which the NOL appears on a return. A 2019 NOL applied against 2027 income must be supported by 2019 records through at least 2030 or 2031. Document the NOL computation thoroughly in the loss year — reconstructing it later is difficult and unreliable.

How long should S-Corp board minutes be kept?

Board minutes documenting salary decisions should be retained for the full statute period applicable to each return they support — generally seven years per return. Because the IRS may examine salary decisions across multiple open years simultaneously, maintain a continuous chain of annual documentation. Minutes from a salary determination covering a return still within the statute period should not be destroyed. For clients who have operated as S-Corps for many years, retain all minutes indefinitely or through the date when all covered returns are outside the longest applicable statute.

Can the IRS require records older than seven years?

Yes, in specific circumstances. If a return was fraudulent or not filed, there is no statute of limitations (IRC §6501(c)). For NOL and carryforward positions, the lookback extends to the source year regardless of its age. For capital assets, original purchase records are needed until the asset is sold and the statute on the sale year closes. Clients with long-held real estate, stock with carryover basis from a 1031 exchange, or NOL carryforwards from older years should not apply a blanket seven-year rule to those records.

What electronic recordkeeping systems does the IRS accept?

Under Rev. Proc. 98-25, the IRS accepts electronic records that produce accurate reproductions of originals, are indexed for retrieval upon request, include access controls to prevent unauthorized alteration, and can be produced in hard copy. Standard business cloud platforms (Google Drive, Microsoft SharePoint, Box) can satisfy these requirements if records are organized by year and document type. The IRS must be able to access and review electronic records without proprietary software.

What happens if records are destroyed in a natural disaster?

Destruction by fire, flood, or other casualty is not automatically fatal to a deduction, but it shifts the burden to the taxpayer to demonstrate records existed and their approximate content through secondary evidence — bank statements, third-party testimony, photographs, or reconstruction from surviving records. Courts have occasionally allowed deductions based on secondary evidence where the casualty is credible and the reconstruction methodology is sound. For business clients in disaster-prone areas, off-site or cloud backup of all tax records is basic risk management. Document the backup system's existence in the engagement file.

Do business records and personal records have different retention periods?

The basic statute of limitations structure is the same for business returns (Form 1120, 1120-S, 1065) and individual returns (Form 1040). However, business records often have longer practical retention obligations — capital asset records, employment tax records (four years), payroll records, S-Corp basis schedules, and entity formation documents that carry permanent corporate records significance beyond the tax context. Maintain business and personal records in separate files organized by year; corporate formation documents, stock certificates, and operating agreements should be retained permanently regardless of tax statute periods.

How does the CP2000 process affect record retention obligations?

A CP2000 notice can be issued by the IRS Automated Underreporter program for any year still within the open statute period. The records needed to respond to a CP2000 — information returns, gross receipts records, basis documentation — are the same records required under the standard seven-year retention schedule. For clients who have received CP2000 notices in the past, retain records for all years within the open statute period without exception. For the complete step-by-step CP2000 response methodology, see How to Respond to an IRS CP2000 Notice.

Arvori helps CPAs track document retention deadlines across their client roster, flag upcoming records disposal windows, and maintain audit-ready documentation so examination responses don't get derailed by missing records. Learn more at arvori.app.

Document Retention Requirements for Business Clients: A CPA's Complete Guide