How Long to Keep Business Invoices: 3, 6, or 7 Years

Most business invoices should be kept for at least three years after you file the tax return they support, but how long to keep business invoices really depends on what each one documents. Routine vendor bills clear at three years. Invoices tied to assets, bad debts, payroll, or a return that understated income need six, seven, or in some cases permanent retention.

The Three-Year Default

The IRS generally has three years from the date you file a return to assess additional tax.¹ Every invoice, receipt, or ledger entry that supports income, a deduction, or a credit on that return needs to survive at least that long.² If you filed before the due date, the clock starts on the due date instead of the day you actually filed.³

Three years handles the bulk of what most small businesses generate: vendor invoices, office supplies, utilities, advertising, travel, and other day-to-day operating costs. If the IRS hasn’t questioned the return by then, those records have done their job.

When You Need Six or Seven Years

Two situations extend the retention period well past three.

The first is underreported income. If you leave out more than 25% of the gross income shown on your return, the IRS gets six years to assess additional tax rather than three. Intent doesn’t matter; a math error that crosses the 25% line triggers the same extended window. There is one escape: if the omitted amount was disclosed on the return or an attached statement in enough detail for the IRS to identify it, the six-year period doesn’t apply.¹ Because you rarely know at filing time whether a significant gap exists, the practical response is to keep records for six years anytime the return involved unusual, complex, or hard-to-value income items.

The second situation is bad debt or worthless securities. If you claimed a deduction for a debt that went bad or securities that lost all value, keep the supporting invoices, loan documents, and correspondence for seven years.²

Asset Invoices Follow the Asset

Invoices for equipment, vehicles, real estate, and other business property follow a different rule. Keep them for as long as you own the asset, plus the applicable statute of limitations after you dispose of it.³ You need the original invoice to calculate depreciation while you hold the asset, and to figure gain or loss when you sell or scrap it.²

A machine bought in 2020 and sold in 2033 needs its purchase invoice retained until at least 2036, three years after the return for the sale year. Depreciation schedules and invoices for improvements to the asset need to survive just as long. This is the category where records go missing most often. People clean out the file room at the three-year mark without realizing the asset clock hasn’t even started.

Employment and Payroll Invoices

Employment records answer to several agencies, and the periods don’t match.

Under the Fair Labor Standards Act, basic payroll records, collective bargaining agreements, and sales and purchase records must be kept for at least three years. Supplementary records such as time cards, daily start and stop times, wage rate tables, and work schedules have a shorter two-year requirement.⁴ State labor rules often run longer, so check state requirements before discarding anything at two years.

Form I-9 has its own formula: three years after the hire date or one year after the employee stops working for you, whichever is later.⁵

ERISA requires records related to employee benefit and pension plans to be kept for at least six years after the filing date of the plan’s annual report.⁶ If your business sponsors a 401(k), health plan, or pension, plan documents, contribution records, and participant statements all sit under that six-year floor.

OSHA requires the 300 Log, annual summary, and 301 Incident Report forms to be saved for five years after the end of the calendar year they cover. The 300 Log has to be updated during that five-year period if you discover new recordable injuries or reclassify old ones.⁷

State Sales Tax and Contract Invoices

State tax authorities set their own audit lookback periods for sales and use tax, and those periods don’t always line up with the federal three-year standard. Most states allow three to six years to assess, with longer windows when returns were never filed or when fraud is suspected. Purchase invoices, resale certificates, and exemption certificates need to last through that full lookback so you can justify why you didn’t collect tax on a given transaction. If you operate in multiple states, align your retention schedule to the longest window among them.

Invoices tied to a business contract should be kept for the life of the contract plus the statute of limitations for breach-of-contract claims in your state. Most states allow four to six years to bring a contract dispute to court, with longer periods in some jurisdictions for contracts under seal. Holding the original contract, change orders, and every associated invoice through that window protects you if a dispute surfaces after the work is done.

Records That Never Get Thrown Out

Some documents have no expiration date. There is no statute of limitations when a business files a fraudulent return with intent to evade tax, or fails to file a required return at all.⁸ In those cases, the IRS can assess tax at any time, so every document supporting the return (or the return that should have been filed) needs to be preserved indefinitely.¹

Core corporate documents belong in the same permanent category. Articles of incorporation, bylaws, stock ledgers, partnership agreements, and board meeting minutes establish the business’s legal existence and authority. Losing them can stall a sale, complicate financing, or undermine your standing in court.

Litigation Suspends the Schedule

Any retention schedule gets paused the moment litigation becomes reasonably foreseeable. Once you receive a demand letter, learn about a regulatory investigation, or hold internal discussions about a potential claim, you have a duty to preserve every document that could be relevant to the dispute. The obligation starts before any lawsuit is filed and applies whether you might be sued or considering suing.

Destroying records covered by a litigation hold, even if they had already cleared the normal retention period, can bring spoliation sanctions. A court can instruct the jury to assume the destroyed records were unfavorable to you, or impose monetary penalties. Having a written retention policy actually cuts against you if you deviate from it only for documents tied to the dispute, because selective destruction reads as intentional. Issue a written hold to every employee who might have relevant files, suspend routine destruction for those categories, and keep the hold in place until the matter is fully resolved.

What Happens If You Can’t Produce the Invoice

The practical consequence of missing records during an audit is straightforward: the IRS disallows any deduction or credit you can’t substantiate. You owe the additional tax plus interest back to the original due date. On top of that, an accuracy-related penalty of 20% of the underpayment applies whenever the shortfall results from negligence or a substantial understatement of tax, rising to 40% for gross valuation misstatements.⁹

If the failure to keep records was willful, it becomes a criminal matter. Willful failure to keep required records is a misdemeanor punishable by a fine of up to $25,000 ($100,000 for corporations), up to one year in prison, or both.¹⁰ The Department of Labor can also impose civil money penalties for FLSA recordkeeping violations.¹¹ When a wage dispute arises and you can’t produce time records, courts routinely accept the employee’s version of the hours worked.

Storing Invoices Digitally

The IRS doesn’t require paper originals. You can scan invoices and store them digitally, but your electronic storage system must be able to index, store, preserve, retrieve, and reproduce the records in a legible format.³ Legible means printable or exportable to media an auditor can read. If your backup drive is corrupted or the cloud provider has shut down when the IRS asks, you’re in the same position as someone who shredded the originals.

Keep backups in more than one location, verify periodically that files are readable, and make sure the storage format won’t be obsolete before the retention period ends. A PDF in a major cloud service will outlast a proprietary accounting file from a vendor that may not exist in five years. When migrating accounting systems, export or print legacy data before decommissioning the old platform.

Disposing of Invoices Safely

Once an invoice has cleared every applicable retention window and isn’t subject to a litigation hold, destroy it. Invoices contain vendor details, pricing, and sometimes personal information that shouldn’t sit in an unlocked storage unit indefinitely. Cross-cut shred paper. Wipe electronic files with software designed for the purpose, or physically destroy the storage media.

Keep a written retention and destruction policy that lays out what gets kept, for how long, and how it gets destroyed. Following a documented policy consistently is a strong defense against a spoliation claim, because it shows destruction was routine rather than targeted. Log the date, the type and date range of records destroyed, the method, and who authorized it. If you use a commercial shredding service, request and file a certificate of destruction.

Quick-Reference Retention Periods

General expense invoices and receipts: 3 years after filing the return they support
Returns with a possible income understatement over 25%: 6 years
Bad debt or worthless securities deductions: 7 years
Asset purchase invoices: life of the asset plus 3 years after disposal
Payroll records and collective bargaining agreements: 3 years
Time cards and wage rate tables: 2 years
Form I-9: 3 years from hire or 1 year after separation, whichever is later
Employee benefit plan records: 6 years after the annual report filing
OSHA safety logs: 5 years after the calendar year covered
State sales tax records: varies, typically 3 to 6 years
Fraudulent or unfiled returns: permanently
Corporate formation documents and minutes: permanently

When in doubt, seven years is the safe default. It covers the longest non-permanent IRS window and exceeds most state lookback periods. The cost of a few extra boxes or cloud backups is trivial next to losing a deduction because you destroyed the invoice one year too early.

1
Office of the Law Revision Counsel. 26 U.S. Code 6501 – Limitations on Assessment and Collection
2
Internal Revenue Service. How Long Should I Keep Records?
3
Internal Revenue Service. Publication 583, Starting a Business and Keeping Records
4
eCFR. 29 CFR Part 516 – Records to Be Kept by Employers
5
U.S. Citizenship and Immigration Services. 10.0 Retaining Form I-9
6
U.S. Department of Labor. Recordkeeping in the Electronic Age
7
Occupational Safety and Health Administration. 1904.33 – Retention and Updating
8
Internal Revenue Service. Topic No. 305, Recordkeeping
9
Office of the Law Revision Counsel. 26 U.S. Code 6662 – Imposition of Accuracy-Related Penalty
10
Office of the Law Revision Counsel. 26 U.S. Code 7203 – Willful Failure to File Return, Supply Information, or Pay Tax
11
U.S. Department of Labor. Civil Money Penalty Inflation Adjustments