Most business invoices and sales records should be kept for at least three years after you file the tax return they support, but that is the floor, not the ceiling. How long to keep invoices and sales records really depends on what the record documents and who might come asking: the IRS gets six years to assess tax when income is substantially understated, seven years for bad debt deductions, and no time limit at all when a return is fraudulent or was never filed. Asset records, state sales tax rules, government contracts, and litigation exposure can each push retention well past the basic three-year mark.
The Three-Year Federal Minimum
The IRS can assess additional tax within three years after you file a return, or three years after the due date if you filed early. That statute of limitations sets the standard retention period for most sales receipts, invoices, and expense records.1Office of the Law Revision Counsel. 26 USC 6501 – Limitations on Assessment and Collection
The clock starts when you actually file, not when the tax year ends. A calendar-year business that files its 2025 return in March 2026 must keep those records until at least March 2029. File late, and the clock starts later. Many businesses assume December 31 triggers the countdown. It doesn’t.
When You Need to Keep Records Longer
Several situations push retention past three years, and they tend to arise precisely when the IRS is already looking hard at a return.
Six Years for Substantial Income Omissions
If you leave out more than 25% of the gross income shown on your return, the IRS gets six years to assess additional tax.1Office of the Law Revision Counsel. 26 USC 6501 – Limitations on Assessment and Collection For a business reporting $200,000 in gross receipts, omitting more than $50,000 triggers the extended window. The IRS calculates gross income for a trade or business as total amounts received before subtracting cost of goods sold, so even honest errors on the revenue line can cross the threshold.
When six years is in play, you need every bank deposit record, sales invoice, and payment confirmation covering the return in question. Without them, challenging an IRS determination that income was underreported is nearly impossible.
Seven Years for Bad Debts and Worthless Securities
If you claim a deduction for a debt that became worthless or a loss on worthless securities, the limitation period runs seven years from the filing deadline of the return for the year you claim the loss.2Office of the Law Revision Counsel. 26 USC 6511 – Limitations on Credit or Refund Worthlessness is often difficult to pin to a specific year, and disputes over timing are common. Keep documentation proving the original transaction, the debtor’s inability to pay, and your collection efforts.
Indefinitely for Fraud or Unfiled Returns
No time limit applies when a return is fraudulent or was never filed. The IRS can assess tax at any point in either case.1Office of the Law Revision Counsel. 26 USC 6501 – Limitations on Assessment and Collection If your business skipped filing for a year, records from that year should never be destroyed. Since you can’t predict whether a return might later be challenged as fraudulent, this rule effectively argues for longer retention than you might otherwise choose.
Four Years for Employment-Related Sales Data
If you have employees, employment tax records must be kept for at least four years after the date the tax becomes due or is paid, whichever is later.3Internal Revenue Service. How Long Should I Keep Records? This matters for sales records whenever compensation is tied to revenue. Commission calculations pull sales data into employment tax documentation, so destroying those records after three years leaves you a year short of the payroll requirement.
State Sales Tax Rules Often Run Longer
Federal retention periods don’t cover your state obligations. States that impose sales and use tax set their own audit windows, and these frequently run longer than three years. Retention requirements for sales tax records range from three to seven years across the states, with many landing at four. Some states extend the audit window further when income is significantly underreported, and most have no time limit for fraud or unfiled returns.
Sales invoices, exemption certificates, and transaction-level point-of-sale data are all fair game during a state sales tax audit. Exemption certificates deserve special care: if you sold goods tax-free based on a customer’s certificate and can’t produce it during an audit, the state will assess the uncollected tax against you.
For any business operating in multiple states, the practical rule is to follow the longest applicable retention period. If your state requires four years and the IRS requires three, keep the records four years. Map each operating location against its specific mandate.
Asset Records Follow a Different Logic
Records for business property aren’t governed by a fixed number of years. You keep them as long as you own the asset, plus the audit period after you dispose of it. IRS Publication 583 is explicit on this point.4Internal Revenue Service. Publication 583 (12/2024) – Starting a Business and Keeping Records The instructions for Form 4562 add that the information needed to compute depreciation must be part of your permanent records.5Internal Revenue Service. Instructions for Form 4562 (2025)
When you sell business property, you calculate gain or loss based on the original cost, any improvements, and the depreciation you’ve claimed. A commercial building bought in 2010 and sold in 2030 requires records spanning two decades to compute the correct taxable gain. Depreciation recapture on real property can be taxed at rates as high as 25%,6Internal Revenue Service. Property (Basis, Sale of Home, Etc.) 5 and without records showing the purchase price and each year’s depreciation, you cannot accurately compute recapture. Businesses that get this wrong usually pay more than they owe because they can’t prove a higher basis.
Government Contract Records
Businesses that perform work under federal contracts face an additional requirement under the Federal Acquisition Regulation. Contractors must keep records available for at least three years after final payment on a contract.7eCFR. 48 CFR 4.703 – Policy These include sales documentation, accounting data, and any other evidence needed for contract negotiation, administration, or audit by the contracting agency or the Comptroller General. Individual contract clauses can extend the period further, and contractors who keep records for their own business purposes beyond three years must keep them available to the government for that longer duration.
What Missing Records Actually Cost
Missing records don’t just create inconvenience during an audit. They shift the legal landscape against you.
The immediate consequence is losing deductions. The IRS requires you to substantiate expenses with documentary evidence like receipts, canceled checks, or bills.8Internal Revenue Service. Burden of Proof Can’t produce records during an examination? The IRS disallows the deduction. No grace period, no chance to reconstruct.
The burden of proof issue runs deeper. If you introduce credible evidence in a tax dispute, the burden can shift to the IRS to prove you wrong. That shift only happens if you’ve maintained all records required by the tax code.9Office of the Law Revision Counsel. 26 USC 7491 – Burden of Proof Fail to keep records, and you’re stuck proving your own case from a weak position.
Beyond disallowed deductions, the IRS can add an accuracy-related penalty of 20% of the underpayment for negligence or substantial understatement of income tax.10Office of the Law Revision Counsel. 26 USC 6662 – Imposition of Accuracy-Related Penalty The penalty stacks on top of the additional tax, turning a recordkeeping failure into a significantly larger bill.
Non-Tax Reasons to Keep Records Longer
Tax rules aren’t the only driver. Once litigation is reasonably anticipated or underway, your business has a legal duty to preserve all potentially relevant documents. This litigation hold requires you to suspend any routine destruction that might affect records tied to the dispute. Sales records, customer communications, and shipping confirmations all fall within a typical hold. The preservation duty attaches when a lawsuit becomes reasonably foreseeable, not when it’s filed, and destroying records after that point can result in court sanctions ranging from fines to adverse inference instructions that tell the jury to assume the destroyed records would have hurt your case.
Warranty and product liability claims create their own demands. If you sell goods with a five- or ten-year warranty, the original sales invoice needs to survive at least that long. Product liability claims may require tracing a specific item’s distribution chain back to the point of sale, which means transaction-level detail well beyond what tax law requires.
Insurance claims are another driver. Proving a business interruption or property damage claim usually requires detailed revenue history, and many insurers expect several years of substantiated financial records to calculate actual losses.
A Practical Retention Schedule
The overlapping timelines make it tempting to keep everything forever. That’s compliant but creates storage costs, security exposure, and an ever-growing pile of data. A tiered schedule by record type works better.
- Routine sales receipts and expense records: at least three years after filing the return they support. Extend to four years if your state has a longer sales tax audit window, or six years if there’s any risk of a substantial income omission.
- Employment-related sales data such as commission calculations: four years after the tax is due or paid.
- Bad debt and worthless security documentation: seven years from the filing deadline for the year you claim the loss.
- Asset records including purchase agreements, improvement invoices, and depreciation schedules: the entire ownership period plus three years after the return reporting the disposition.
- Government contract records: three years after final payment, unless a contract clause requires longer.
- Records from unfiled or potentially disputed years: indefinitely.
Review the schedule annually, especially if the business expands into new states or takes on federal contract work. The longest applicable period always controls, and a record that falls into multiple categories inherits the longest requirement.3Internal Revenue Service. How Long Should I Keep Records?
Destroying Records Once the Time Is Up
Once every applicable retention period has expired, holding records indefinitely creates its own risk. Outdated files with customer names, payment details, and addresses become a liability if breached.
Federal law governs disposal of records containing consumer information. Under the FTC’s Disposal Rule, any business that possesses consumer information must take reasonable steps to prevent unauthorized access during disposal. For paper records, that means burning, pulverizing, or shredding so the information can’t be read or reconstructed. For electronic media, it means destroying or erasing the data so it can’t be recovered.11eCFR. 16 CFR Part 682 – Disposal of Consumer Report Information and Records
If you outsource destruction, the rule expects due diligence: check references, review the vendor’s security procedures, and look for certification by a recognized industry association.12eCFR. 16 CFR 682.3 – Proper Disposal of Consumer Information
Document what happens. A destruction log showing what was destroyed, when, and by what method is your defense if someone later claims spoliation. If records were destroyed on schedule and before any litigation hold was triggered, the log proves the destruction was routine rather than intentional.