Question

What records must a business keep, and for how long?

Vault Verified
Curated Intelligence
Definitive Source
Answer

Enough to support every figure in your accounts and tax returns, kept for a statutory minimum period that varies by record type and jurisdiction — and the burden of proof is on you, not on the authority.

What must generally be kept:

Sales and income — invoices, receipts, till records, platform statements.

Purchases and expenses, with the original evidence. A bank statement showing a payment is not sufficient evidence of a deductible expense; you need the invoice or receipt showing what was bought.

Bank statements for all business accounts.

VAT records where registered, including a VAT account reconciling what was charged and reclaimed.

Payroll records — pay, deductions, pension contributions, employee details, right-to-work evidence.

Assets, including purchase records for anything capitalised.

Stock records where relevant.

Statutory company records — registers of members, directors and persons with significant control, minutes and resolutions.

Typical retention periods, which differ by country: broadly around six years from the end of the relevant accounting period for company tax records, and a shorter period for sole traders in some systems, with longer periods for payroll, pensions and anything under investigation. Where a return is late or under enquiry, keep everything until resolved.

Digital is acceptable in most jurisdictions, provided records are complete, legible and retrievable — and in several, digital record-keeping is now mandatory for tax. Photographing receipts and discarding paper is generally fine, with the caveat that the images must be readable and backed up.

Data protection cuts the other way. Personal data should not be kept longer than necessary, so "keep everything forever" is not a safe policy for customer and employee records. Set a retention schedule that satisfies both obligations.

What good practice looks like: capture receipts at the point of spending rather than in a shoebox; reconcile monthly rather than annually; keep a documented retention policy; and back up to somewhere the business controls, since losing records does not remove the obligation.

General information, not tax or legal advice; periods vary by country.

Related Questions