For most corporations, the safe answer to how long to keep corporate tax returns is at least seven years, and often longer. The IRS’s ordinary audit window is three years, but several common situations quietly stretch that deadline, and a corporation that shreds files at the three-year mark can lose the ability to defend a legitimate deduction, a carryforward, or the basis in an asset it still owns.
The Three-Year Baseline
The IRS generally has three years from the later of the return’s due date (including extensions) or the actual filing date to assess additional tax on a Form 1120. Filing early does not shorten the window; the IRS treats an early return as filed on the due date. That three-year period, the Assessment Statute Expiration Date, is the floor for retention when a corporation has no carryforwards, no foreign activity, and no unresolved deductions. For most real corporations, the exceptions below push the number higher.
When the IRS Gets More Time
Three situations extend the assessment window, and each one changes how long the underlying records need to survive.
Six years for a substantial omission of income. If a corporation leaves out gross income exceeding 25% of what it reported, the assessment window doubles to six years. The rule catches innocent mistakes as well as intentional ones: a revenue misclassification or a timing error can trigger it. Keep records supporting every income line for at least six years.
No limit for fraud or an unfiled return. A fraudulent return filed with intent to evade tax, or a return that was never filed at all, carries no statute of limitations. The IRS can assess and collect at any point. Records for any year touched by either issue should be kept permanently.
Seven years for bad debts and worthless securities. A corporation has seven years from the return’s due date to file a refund claim tied to a bad debt or worthless security loss. Retain the supporting records that long, because the corporation may need to prove both the original basis and the circumstances of the worthlessness.
Carryforwards Reset the Clock
This is where retention decisions go wrong most often. Net operating losses arising in tax years beginning after December 31, 2017, can be carried forward indefinitely under the Tax Cuts and Jobs Act, with the annual deduction capped at 80% of taxable income (computed without regard to the NOL itself). A large loss can take many years to absorb.
The IRS can examine and adjust a carryforward amount even after the statute of limitations has closed on the year the loss originated. A $2 million NOL generated in 2020 and still being used against income in 2030 is fair game during an audit of the 2030 return, and the corporation needs the 2020 records to defend the number. The practical rule: keep every record supporting an NOL or credit carryforward until the carryforward is fully absorbed, then hold them at least three more years for the statute on the last year of use. Ten years or more is normal.
Employment Tax Records
Records supporting employment taxes, including Form 941 quarterly filings, payroll registers, wage calculations, withholding, and benefit allocations, must be kept for at least four years after the fourth quarter return for the year is filed. That four-year floor applies even if the corporation’s income tax records for the same period could otherwise be discarded sooner.
International Filings Extend the Window
Corporations with foreign subsidiaries, accounts, or transactions face longer and stricter timelines.
When a corporation is required to file an international information return such as Form 5471 for a controlled foreign corporation, the statute of limitations on the entire tax return does not start running until three years after the required information is actually furnished. If the form is never filed or is incomplete, the window on items tied to the foreign entity stays open indefinitely, and a willful failure can leave the entire return open for examination. Records tied to any international filing should be kept at least three years after the information return goes in, and often much longer.
Foreign bank account reports are separate. Corporations required to file FinCEN Form 114 (the FBAR) must keep account records for at least five years from the FBAR’s due date, and that clock runs independently of the income tax retention period.
Assets, Depreciation, and Basis
Records for depreciable property follow the asset, not the return. Purchase invoices, capital improvement records, and depreciation schedules must be retained until the asset is fully disposed of, plus the statute of limitations for the year of disposition. Equipment sold in 2026 generates a records requirement running until at least 2029 for every year of depreciation claimed on it.
Like-kind exchanges under Section 1031 extend the chain further. Because the replacement property inherits the basis of the original, the original property’s records must survive until the replacement is sold in a taxable transaction, plus the applicable statute period. A property that has passed through multiple exchanges may carry records spanning decades.
Basis records for major assets deserve permanent treatment until disposition. Without the original purchase file, the corporation cannot calculate depreciation or compute gain and loss on a sale, and holding periods are unpredictable.
State and Local Retention
State revenue agencies operate on their own timelines. Most impose a three- to four-year statute for corporate income tax, and sales and use tax, franchise tax, and unemployment insurance records each carry their own periods, usually three to four years.
For a multistate corporation, the governing principle is simple: retain each record for the longest period required by any authority with jurisdiction. If the federal period is three years but a state where the corporation has nexus imposes four, the four-year period controls. Identify the longest applicable period across every jurisdiction the corporation touches, and use that as the baseline.
Records to Keep Permanently
Some documents should never be destroyed. Articles of incorporation, bylaws, stock issuance and transfer records, and board meeting minutes establish the corporation’s legal existence, ownership, and governance, and they surface in mergers, financing, and litigation well outside any tax context.
Retirement plan records deserve a similar approach. ERISA Section 107 requires records supporting plan filings, including Form 5500, nondiscrimination testing, and financial documentation, to be kept at least six years from the filing date. Section 209 separately requires employers to maintain records sufficient to determine benefits due each employee, including plan documents, census data, deferral elections, contributions, and distributions. Benefit disputes surface long after employment ends, and many practitioners retain plan records permanently.
Amended Returns and Refund Claims
A corporation that finds an error on a prior return can file Form 1120-X to claim a refund, but only within the later of three years from the filing date or two years from the date the tax was paid. Bad debt and worthless security claims get seven years from the original due date.
A corporation cannot file an amended return without the records to back it up. Destroying files at the three-year mark can lock the corporation out of a refund it is otherwise still entitled to pursue. Keeping records through the full refund claim period preserves the option.
Litigation Holds Override Everything
Once a corporation knows or reasonably should know that litigation is likely, it must suspend routine destruction and preserve all potentially relevant records, whether or not a suit has been filed. Courts sanction spoliation harshly: disputed facts can be deemed established against the corporation, evidence can be excluded, monetary sanctions can be imposed on the company and its counsel, and in serious cases claims can be dismissed or default judgment entered. A retention policy that keeps destroying records during anticipated litigation is worse than no policy at all, because it documents the systematic failure to preserve.
What Happens When Records Are Missing
Federal law requires every business to keep books and records sufficient to establish the amounts on its returns. When records are incomplete or gone, the IRS reconstructs income indirectly. The bank deposits method totals everything deposited, backs out identifiable non-income items, and treats the rest as taxable. The net worth method infers income from changes in assets and liabilities. The expenditures method works backward from what the corporation spent. The burden then falls on the corporation to disprove the result, and without records that burden is close to impossible.
On top of the reconstructed tax, the IRS can impose an accuracy-related penalty of 20% of the underpayment for negligence or substantial understatement. Losing the records does not excuse the penalty. It usually makes the negligence finding easier.
Written Policy, Digital Storage, Secure Destruction
A written retention policy specifies who is responsible for each category of records, how long each is kept, and how disposal happens. Consistency matters: a written policy demonstrates that any destruction was routine rather than targeted, which matters if the destruction is later questioned.
Electronic records are acceptable to the IRS but must meet specific standards. The system must ensure accurate and complete transfer of records to electronic media, prevent unauthorized alteration or deletion, provide a clear audit trail from source document to general ledger to return, and produce legible readable copies on demand, including paper copies if requested. Documentation of the system’s processes must be available during an examination. One trap: if the corporation stops maintaining the hardware or software needed to read its electronic records, the IRS treats those records as destroyed. Any system migration should verify that legacy records remain accessible in the new environment.
When the longest applicable retention period has run and no litigation hold is in effect, dispose of records in a way that prevents recovery. Shred or pulp paper. Use cryptographic erasure or degaussing for digital media; deleting files or reformatting a drive is not enough, because standard recovery tools can still pull the data back. Log what was destroyed and when, as part of the retention policy’s audit trail.