AuditsTally Tax team · · 6 min read

The audit-ready file: what to keep, and for how long

Good records turn an audit into a short exchange of documents. Here's what belongs in your file and the retention periods that actually matter.

Why records matter more than the return

In an audit, the burden is generally on you to support what you reported. The return is a summary; your records are the proof. If you can't document a deduction, it can be disallowed even if the expense was real.

The law behind this is short. Section 6001 of the Internal Revenue Code requires taxpayers to keep records sufficient to show whether they owe tax. The IRS lets you choose any recordkeeping system that clearly shows income and expenses, so there's no required software or format. What matters is that the evidence exists and you can produce it.

An organized file makes most audits straightforward. The IRS asks for support, you provide it, and the matter closes. A disorganized one invites the examiner to reconstruct your income from other sources, which rarely works in your favor.

What the IRS does when records are thin

When books are missing, incomplete, or don't hang together, examiners can use indirect methods to estimate income. The most common is the bank deposits method: total everything deposited into your accounts, subtract what can be shown to be non-taxable, and treat the rest as income.

The IRS's own manual tells examiners to subtract transfers between accounts, returned checks, loans, and gifts. But you have to show that a deposit falls into one of those buckets. A $40,000 deposit you remember as a transfer from savings or a loan from a relative looks like unreported income until you document it.

This is why the file needs to cover money coming in, not just expenses going out. For business returns, analyzing bank accounts is part of the IRS's standard minimum income checks.

What to keep

Think of your file as the evidence behind every number on your return. IRS Publication 583 groups supporting documents by type; here is a practical version.

  • Copies of filed returns, including all schedules, statements, and elections
  • Income records: W-2s, 1099s, K-1s, brokerage statements, invoices you issued, deposit records, and point-of-sale or platform reports
  • Statements for every business bank account, credit card, and loan
  • Receipts and invoices for deductible expenses, with the business purpose noted where it isn't obvious
  • Mileage logs kept during the year, if you deduct vehicle use
  • Home office records: square footage of the space and the home, plus the related expenses
  • Charitable acknowledgments and any required appraisals
  • Purchase, improvement, and depreciation records for property and investments, to establish basis
  • Payroll records, W-9s from contractors, and copies of information returns you filed
  • Documentation for non-income deposits: loan agreements, transfer confirmations, gift letters, sale closing statements

The details that make a record hold up

A bank or card statement proves that you paid something, but not always what it was for. Publication 583 says a check statement should show the check number, amount, payee, and posting date; an electronic transfer should show the amount, payee, and date; and a card statement should show the amount, payee, and transaction date. Pair that proof of payment with an invoice or receipt that shows what you bought.

Some categories carry stricter rules. Travel, gifts, and vehicle expenses must be substantiated with records showing the amount, time, place, and business purpose, and those records should be made at or near the time of the expense. A mileage log rebuilt from memory two years later is far weaker than one kept as you drive.

Business purpose is the element owners most often skip. A $600 restaurant charge is just a number. The same charge with a note reading "dinner with J. Patel re: Q3 engagement" is a deduction you can defend.

How long to keep it

Retention periods track how long the IRS has to assess additional tax, or how long you have to claim a refund. The clock generally starts when you file, and a return filed early is treated as filed on the due date. These are the periods the IRS publishes:

  • 3 years: the general rule for most income tax records
  • 3 years from filing or 2 years from paying the tax, whichever is later: if you file a claim for credit or refund after you file
  • 6 years: if you didn't report income that you should have, and it's more than 25% of the gross income shown on the return
  • 7 years: if you file a claim for a loss from worthless securities or a bad debt deduction
  • No limit: if you don't file a return or file a fraudulent one
  • At least 4 years: employment tax records, measured from the date the tax becomes due or is paid, whichever is later
  • Property records: until the period of limitations expires for the year in which you dispose of the property

Practical rules that save you later

Because many situations stretch past three years, a lot of advisors suggest keeping most records for at least seven. Storage is cheap; reconstruction is not.

Basis records deserve special attention. Say you bought a rental property in 2012 for $310,000 and spent $85,000 on improvements over the years. If you sell in 2026, those purchase and improvement records determine your gain, and they need to survive until the limitations period for your 2026 return runs out, likely 2030 or later. The same logic applies to carryovers such as capital losses, net operating losses, and depreciation, which affect future returns.

Keep filed returns permanently. They're small, and they're often the fastest way to answer a question years later.

Your state may have its own, sometimes longer, assessment period, and lenders, insurers, or licensing boards may require records for longer than the IRS does. Check before you shred anything.

Make it digital, and make it findable

Electronic records are generally acceptable, but the IRS applies the same requirements to them as to paper: complete, legible, and retrievable. Revenue Procedure 97-22 covers electronic storage systems, including scanned images, and expects an indexing system that lets you find a specific record.

If you use accounting software, the IRS treats its data files as part of your books and records and can request a backup copy during an exam. When you switch platforms, export and keep the old company file in its original form rather than relying on summary reports.

A structure that works for most businesses:

  • One folder per tax year, with subfolders for income, expenses, assets, payroll, and the filed return
  • File names that start with the date and vendor, for example 2026-03-14 Delta flight SFO-JFK
  • Backups in at least two places, one of them off-site or in the cloud
  • A permanent folder for entity documents, basis records, and carryover schedules that never gets purged

Common gaps we see in audit files

Most record problems aren't about fraud. They're about missing context that was obvious at the time and is gone three years later.

  • Personal and business spending in the same account, forcing a line-by-line explanation of every transaction
  • Large deposits with no documentation of their source
  • Card statements with no receipts or business purpose for meals, travel, or gifts
  • Vehicle deductions with no contemporaneous mileage log
  • Asset purchases expensed or depreciated with no invoice showing the date placed in service
  • Contractor payments with no W-9 on file

Frequently asked questions

Can I throw away paper receipts once I've scanned them?

Generally yes, if the scans are complete, legible, and you can retrieve them on request. The IRS applies the same standards to electronic records as to paper, so a blurry or cropped image isn't enough. Keep originals of anything that is hard to reproduce, such as signed agreements or appraisals.

Is a bank statement enough to prove a business expense?

A statement proves payment, but usually not what was purchased or why. For most expenses you want the statement plus an invoice or receipt. For travel, meals, gifts, and vehicle use, the rules are stricter and require a record of the amount, time, place, and business purpose.

How long should I keep records for a business I've closed?

Keep them at least until the limitations period expires for the final return, and longer for anything tied to assets you sold or distributed. Employment tax records must be kept at least four years after the tax was due or paid, whichever is later. Many owners keep the full file for seven years after the final return.

What if I'm audited and I'm missing records?

You can often reconstruct support from third parties: bank and card statements, vendor account histories, emails, calendars, and statements from the people involved. Reconstructed records carry less weight than contemporaneous ones, but they are far better than nothing. It's usually worth having a representative organize that reconstruction before you respond.

Do I need to keep my accounting software file, or just the reports?

Keep the data file. The IRS considers electronic accounting records to be part of your books and can ask for a backup copy during an examination. Reports alone may not show the transaction-level detail an examiner wants.

The bottom line

Keep the evidence behind every number, including the source of large deposits, organized by year and easy to retrieve. Three years is the floor, seven is a sensible default, and basis and carryover records stay until well after the related return closes.

This guide is general information, not tax, legal or accounting advice for your situation. Rules and inflation-adjusted figures change; confirm current-year details with a credentialed professional before acting.

Free review

Get help with IRS audits & notices

A free 30-minute review with a CPA or enrolled agent. We look at your last return and what’s changed, answer your questions, and send a fixed quote. No obligation.