How Long Should Businesses Keep Important Documents?

Why a Document Retention Schedule Matters

A document retention schedule isn’t just an organizational tool. It defines how long specific records must be kept to satisfy legal, regulatory, and operational requirements, and it tells your team exactly when those records become eligible for destruction.

Without one, businesses often default to keeping everything indefinitely — which increases storage costs, makes audits harder, and creates liability when sensitive records pile up past their useful life. A clear retention policy protects the business during audits and litigation, and it supports controlled, defensible destruction when records reach end of retention. Your records storage setup should make it easy to track what you have, when it was filed, and when it comes up for review.

Tax Records

The IRS generally recommends keeping tax returns and supporting documentation for a minimum of three years from the filing date. However, that window extends based on circumstances. If a business underreports income by more than 25%, the IRS has six years to audit. If fraud is involved, there is no statute of limitations.

General tax record retention guidelines:

Tax returns and supporting documentation: 7 years (conservative standard)
Employment tax records: 4 years after the tax is due or paid
Records related to property: Until the property is sold, plus 3–7 years

For most businesses, keeping tax records for seven years is the safest baseline. It covers the standard three-year window, the extended six-year window, and leaves room for disputes tied to employment taxes.

Employee and HR Documents

HR files carry some of the longest and most varied retention requirements. Federal law governs many of these timelines, and state requirements sometimes extend them further.

Standard HR document retention timelines:

I-9 forms: 3 years from hire date or 1 year after termination, whichever is later
Payroll records: 3–4 years (IRS and FLSA requirements)
Employee personnel files: 7 years after termination (conservative standard)
FMLA records: 3 years
OSHA injury and illness logs: 5 years
Background check and pre-employment records: 1–3 years depending on use
Benefit plan documents (ERISA): 6 years

HR records that include Social Security numbers, medical information, and wage data carry additional sensitivity. Once they clear retention requirements, they belong in a secure destruction routine, not a general recycling bin.

Keep Your Records Organized Until It’s Time to Let Go

IRM provides off-site records storage for Indianapolis-area businesses, with bar code tracking, a 24/7 web portal, and next-business-day retrieval. When your records reach end of retention, IRM handles secure shredding and issues a Certificate of Destruction. One vendor, one process, full accountability from storage through destruction.

Contact IRM to Get Started

Financial Statements

Financial statements support tax filings, audits, investor reviews, and loan applications. Many businesses treat these records as permanent, but a structured retention approach limits long-term storage burdens without sacrificing compliance.

Financial document retention guidelines:

Bank statements and reconciliations: 7 years
Accounts payable and receivable records: 7 years
General ledgers and year-end financial statements: Permanently (or 10 years minimum)
Expense reports and supporting documentation: 7 years
Invoices and billing records: 5–7 years
Audit reports: Permanently

Annual financial statements and general ledgers are typically kept permanently because they serve as the historical record of the business. Supporting documentation tied to specific tax years follows the standard seven-year retention baseline.

Legal Contracts and Agreements

Active contracts should be retained for as long as the agreement is in force plus the applicable statute of limitations for breach of contract claims — which in Indiana is generally 10 years for written contracts.

Contract and legal document retention guidelines:

Active contracts and agreements: Duration of contract plus 10 years
Expired vendor and supplier contracts: 5–7 years after expiration
Settlement agreements: Permanently
Litigation records and legal correspondence: 10 years after resolution
Licensing agreements and intellectual property records: Duration plus 5–7 years

Legal contracts that involve real estate, business assets, or intellectual property often warrant permanent retention. When in doubt, businesses should consult legal counsel before destroying contracts tied to ongoing obligations or potential claims.

Insurance Documents

Insurance records support claims, audits, and coverage disputes that may arise years after a policy expires.

Insurance document retention guidelines:

Active policies: Duration of coverage plus 3 years
Expired policies (general liability): Permanently (claims can arise long after policy expiration)
Accident and incident reports: 5–10 years
Claims records and settlement documentation: 10 years after resolution
Workers’ compensation records: 10 years after last activity

Expired general liability policies are one of the more common retention oversights. Because claims can surface years or decades later, particularly in cases involving bodily injury or environmental damage, most risk managers and attorneys recommend keeping general liability policies permanently.

Corporate Records

Corporate records define the legal existence of the business and should generally be retained permanently or for the life of the company.

Corporate document retention guidelines:

Articles of incorporation and bylaws: Permanently
Board meeting minutes and resolutions: Permanently
Stock certificates and ownership records: Permanently
Annual reports: Permanently
Business licenses and permits: Duration plus 3 years after expiration
Trademark and patent records: Duration plus 3 years

Corporate governance records are not candidates for routine destruction. They establish the company’s legal standing and ownership history, and they may be required during audits, acquisitions, or litigation at any point.

What to Do When Retention Periods Expire

A retention schedule only protects the business if it connects to a consistent destruction process. Records that have cleared their retention periods but remain in storage create unnecessary risk. Sensitive information in expired files is just as vulnerable as active records — it just no longer serves a legitimate business purpose.

Compliant destruction starts with verification. Before anything is destroyed, confirm the record isn’t subject to a litigation hold, regulatory investigation, or audit. Once cleared, secure shredding is the appropriate path for any document that contains personal data, financial information, or confidential business details. Simply tossing records into the trash or a standard recycling bin doesn’t meet the destruction standards set by FACTA, HIPAA, GLBA, or most state privacy laws.

Why Indianapolis Businesses Trust Indiana Records Managers

IRM is Indiana’s only locally owned records storage and shredding company, and that distinction matters when your records require consistent, accountable handling. Every call goes to a local team. Every pickup runs on a predictable schedule. There are no national call centers, no surprise fees, and no unclear chains of custody.

IRM serves businesses across regulated industries — including legal, finance, healthcare, insurance, manufacturing, and government — where retention requirements are specific and disposal has to be documented. IRM’s off-site storage uses bar code tracking and a web portal that supports 24/7 inventory search, so your team can find what it needs without digging through a storage room.

For businesses handling volume purges at end of retention, IRM supports secure, compliant destruction through locked collection, controlled transport, and cross-shredding at a secure facility. A Certificate of Destruction is available upon request — documentation that matters when you need to show that records were handled properly.