Business Tax Records: Retention Periods and Penalties

Keep most business tax records for at least three years after you file the return, but plan on six years for income documentation, four years for payroll, seven years for bad debt or worthless securities deductions, and as long as you own the asset plus three years for property records. Knowing how long to keep business tax records comes down to matching each document to the longest period the IRS has to audit the return it supports.¹ Destroy records too early and you lose the ability to prove deductions in an examination. Hoard everything indefinitely and you pay for storage while increasing your exposure if the records are breached.

Three Years Is the Floor

The default retention period is three years from the date you filed the return or the return’s original due date, whichever is later.² If you file early, the clock still starts on the due date. A calendar-year C corporation’s Form 1120 is due on the 15th day of the fourth month after the tax year ends, which for most businesses means April 15.³ A 2025 return filed March 1, 2026 has records that should survive until at least April 15, 2029.

Three years covers a straightforward return with no unusual items. The situations below extend that window, and because you don’t always know at filing time which extension might apply, most businesses treat six years as the practical minimum for income documentation.

Four Years for Payroll

All employment tax records must be kept at least four years after the date the tax becomes due or is paid, whichever is later.⁴ That covers Forms W-2, W-4, 940, and 941, along with payroll registers, time sheets, fringe benefit records, and proof that withheld taxes were remitted. The Department of Labor separately requires three years for payroll records and two years for the wage computation records behind them,⁵ so the four-year IRS rule is the longer floor and the one to plan around.

Six Years for Substantial Omissions of Income

If a business omits gross income exceeding 25% of what it reported, the IRS gets six years to assess additional tax rather than three.² If your return showed $400,000 in gross income and you actually earned $501,000, the $101,000 omission exceeds 25% of the reported figure, and the six-year window applies.⁶ You may not know in advance whether the IRS will characterize an item that way, so the conservative approach is to keep all income-related records for six years.

Seven Years for Bad Debts and Worthless Securities

When you claim a deduction for a bad debt or a loss from worthless securities, you have seven years from the return’s due date to file a claim for credit or refund related to that deduction.⁷ Keep the supporting records for the full seven years.⁸ The longer period reflects how long it can take to establish that a debt is truly uncollectible or a security genuinely worthless.

Asset Records Until You Sell, Plus Three Years

Records that establish the cost basis of business property must be kept as long as you own the asset, plus the statute of limitations period for the year you sell or dispose of it.⁸ For real estate or equipment held for decades, that can mean 20 or 30 years of retention.

What you actually need: the purchase contract, closing statement, and any initial appraisal to establish starting basis; receipts for every capital improvement, filed separately from routine repairs; and, when you eventually sell, the sale documents showing price, date, and accumulated depreciation.⁹ Gain on sale is often taxed as ordinary income to the extent of prior depreciation, a rule known as depreciation recapture.¹⁰ If you can’t prove the depreciation you actually claimed, the IRS may assume you took the maximum allowable amount, which increases recapture income.

NOL and Credit Carryforwards Until Fully Used

If your business generates a net operating loss carried forward to offset income in future years, keep the records supporting that loss for three years after you either use the entire carryforward or the carryforward period expires, whichever comes first.¹¹ The same logic applies to tax credit carryforwards: documentation of the original credit must survive every year you apply it.¹ This is one of the more commonly overlooked rules, because the underlying records may need to outlive their original tax year by a decade or more.

Indefinitely for Unfiled or Fraudulent Returns

There is no statute of limitations when a fraudulent return is filed or no return is filed at all. The IRS can assess tax and open collection at any time.² Records for any year with an unfiled or fraudulent return should be kept indefinitely, because the assessment clock never starts.

What Counts as a Record

The IRS doesn’t require a specific system, but whatever you use must clearly show income and expenses with supporting documents.⁸ The categories below are what most businesses need to retain across the timelines above.

Income Documentation

Every document establishing money coming in: sales invoices, cash register tapes, receipt books, bank deposit slips, and monthly bank statements linking sales to actual cash flow. Retain Forms 1099-NEC received from clients and Forms 1099-K received from payment processors reporting card transactions and third-party network payments.¹² Any gap between these forms and your books needs to be reconciled and documented before filing.

Expense Documentation

To claim a deduction, you need records showing the amount paid and that the payment was a legitimate business expense. Credit card statements alone don’t satisfy the IRS. Keep the underlying receipt or invoice showing what was actually purchased.

Business meals are deductible at 50%, but only if you document the amount, date, location, business purpose, and the business relationship of the people present.¹³ Entertainment expenses are no longer deductible at all; the Tax Cuts and Jobs Act permanently eliminated the deduction for entertainment, amusement, and recreation, so no documentation saves those costs.

If you use a personal vehicle for business, keep a contemporaneous log recording mileage, date, destination, and business purpose of each trip.¹⁴ The log is required whether you claim the standard mileage rate (70 cents per mile for 2026) or actual expenses.¹⁵ For ongoing contracts like equipment leases or office rent, keep the agreement for the life of the contract plus the applicable retention period.

Digital Asset Records

If your business receives, sells, or exchanges cryptocurrency or other digital assets, the IRS requires records of every transaction: type of digital asset, date and time, number of units, fair market value in U.S. dollars at the time, and cost basis.¹⁶ Because exchanges and wallets sometimes shut down or lose historical data, keeping your own independent records from the start is the only reliable approach.

What Inadequate Records Cost

Failing to keep adequate records doesn’t just mean losing a deduction in an audit. It can trigger the accuracy-related penalty: a flat 20% added to the portion of your underpaid tax attributable to negligence or a substantial understatement.¹⁷ Negligence includes any failure to make a reasonable attempt to comply with the tax code, and arriving at an audit without records to support your deductions fits that definition.

For individuals, a substantial understatement exists when the underpayment exceeds the greater of 10% of the tax required to be shown on the return or $5,000. For C corporations (other than S corporations or personal holding companies), the threshold is the lesser of 10% of the required tax (or $10,000, if greater) and $10,000,000.¹⁷ Interest accrues on top of the penalty from the original due date.¹⁸

If you claim the qualified business income deduction under Section 199A, the threshold tightens: the penalty kicks in at 5% of the required tax rather than 10%.¹⁷ Given how many pass-through businesses claim the QBI deduction, the recordkeeping bar is effectively higher for them.

Storing Records Electronically

The IRS allows all required records to be stored electronically, and most businesses do. Digital records must meet specific standards that go beyond scanning a receipt. The IRS’s electronic recordkeeping framework, established by Revenue Procedure 98-25 and referenced throughout the Internal Revenue Manual, remains the governing standard for machine-readable records.¹⁹

The core requirement is that your system must be able to produce a complete, legible hard copy of any record the IRS requests throughout the entire retention period. If you used proprietary software to create or store records, you need to either keep that software functional or migrate the records to a format readable without it. This catches businesses after they switch accounting platforms and lose access to historical data locked in the prior system’s format.

Electronic files must accurately reflect the original source documents, and you need documentation describing how the system works, including its indexing method and the controls ensuring file security and accuracy. The IRS treats this system description as itself a required compliance document. Storage must be protected against loss, unauthorized changes, and corruption through access controls, encryption, and secure off-site backup. Businesses with $10 million or more in assets face heightened scrutiny and may receive a Notice of Inadequate Records if their systems fall short.¹⁹ The IRS needs transaction-level detail during an audit, not just summarized totals, so your system must store and index the underlying data behind every reported figure.

1
Internal Revenue Service. How Long Should I Keep Records
2
Office of the Law Revision Counsel. 26 USC 6501 Limitations on Assessment and Collection
3
Internal Revenue Service. Publication 509 (2026), Tax Calendars
4
Internal Revenue Service. Employment Tax Recordkeeping
5
U.S. Department of Labor. Fact Sheet 21 – Recordkeeping Requirements under the Fair Labor Standards Act
6
Internal Revenue Service. Time IRS Can Assess Tax
7
Office of the Law Revision Counsel. 26 U.S. Code 6511 – Limitations on Credit or Refund
8
Internal Revenue Service. Publication 583 (12/2024), Starting a Business and Keeping Records
9
Internal Revenue Service. Instructions for Form 4562 Depreciation and Amortization
10
Office of the Law Revision Counsel. 26 U.S. Code 1245 – Gain From Dispositions of Certain Depreciable Property
11
Internal Revenue Service. Instructions for Form 172
12
Internal Revenue Service. What to Do With Form 1099-K
13
Office of the Law Revision Counsel. 26 U.S. Code 274 – Disallowance of Certain Entertainment, Etc., Expenses
14
Internal Revenue Service. Topic No. 510, Business Use of Car
15
Internal Revenue Service. Standard Mileage Rates
16
Internal Revenue Service. Digital Assets
17
Office of the Law Revision Counsel. 26 USC 6662 Imposition of Accuracy-Related Penalty
18
Internal Revenue Service. Accuracy-Related Penalty
19
Internal Revenue Service. 4.47.2 CAS Technical and Procedural Information