Business Record Keeping: What to Keep, How Long and How to Organise It

Good business record keeping is one of those jobs nobody gets excited about, until the day a tax authority asks a question, a customer disputes an invoice or a lender wants to see your numbers. Clear records protect you in all three situations. They also show you, month by month, whether your business is actually making money. This guide explains what records a small business should keep, how long to keep them in the US, the UK and the EU, how data protection rules such as GDPR affect customer records, and how to build a simple system that takes minutes a week.

The rules below are a practical overview, not legal or tax advice. Retention periods depend on your country, your business structure and your situation, so confirm the details with your accountant or the official guidance linked in each section.

Why Business Record Keeping Matters

Records are not just paperwork for the tax office. Done well, they give you:

• Proof for tax purposes. If your figures are questioned, receipts, invoices and bank statements are your evidence. Without them, you may lose deductions or face penalties.
• Better decisions. Up-to-date records show which products, clients and months are profitable. They feed straight into the numbers in our guide to small business KPIs.
• Healthier cash flow. When you know who owes you what and when bills are due, you can chase late payers early and avoid surprises. Our tips on improving business cash flow all start with accurate records.
• Easier funding and a higher sale price. Banks, investors and buyers want clean, organised accounts. Messy records slow everything down and reduce trust.
• Legal protection. Contracts, emails and signed agreements help you settle disputes with customers, suppliers or staff.

What Records Should a Small Business Keep?

The exact list depends on your business, but most small companies and sole traders need these categories:

Sales and income records

Every invoice you issue, till or payment platform reports, records of cash takings, and any other income such as interest or grants. Keep credit notes and refunds too.

Expense and purchase records

Receipts and supplier invoices for everything you claim as a business cost: stock, software subscriptions, equipment, travel, rent, utilities and professional fees. A photo or scan is usually acceptable if it is clear and complete.

Bank and payment records

Business bank statements, card statements, loan agreements and records from payment providers. Keeping a separate business bank account makes this far easier and is required for limited companies.

Payroll and staff records

If you employ people: pay records, tax and social security deductions, pension contributions, contracts, working hours and holiday records.

Sales tax and VAT records

In the UK and EU, VAT-registered businesses must keep VAT invoices, VAT returns and the records behind them. In the US, businesses that collect state sales tax need records of taxable sales and the tax collected in each state.

Assets, contracts and company documents

Purchase records for equipment, vehicles and property, plus leases, insurance policies, key contracts, licences, and company formation documents such as articles of association or operating agreements.

How Long to Keep Business Records: US, UK and EU

This is the question most owners ask. Here are the main rules for each region.

United States (IRS)

The IRS guidance on how long to keep records sets out several periods based on how long the IRS can review a return:

• 3 years from the date you filed in most cases.
• 6 years if you failed to report income that is more than 25% of the gross income shown on your return.
• 7 years if you claim a loss from worthless securities or a bad debt deduction.
• At least 4 years for employment tax records, after the tax becomes due or is paid, whichever is later.
• Indefinitely if you do not file a return or file a fraudulent one.

Records relating to property and equipment should be kept until the review period ends for the year you sell or dispose of the asset. Many US accountants simply recommend keeping core tax records for 7 years to be safe. State rules may add extra requirements.

United Kingdom (HMRC)

• Limited companies: keep records for 6 years from the end of the last company financial year they relate to, and longer in some cases, for example for assets expected to last more than 6 years or if HMRC has opened a compliance check. HMRC can fine a company up to GBP 3,000 for not keeping proper accounting records.
• Sole traders: keep records for at least 5 years after the 31 January submission deadline of the relevant tax year.
• VAT: VAT records are normally kept for 6 years.
• Payroll: PAYE records are kept for 3 years from the end of the tax year they relate to.

Making Tax Digital is also changing how UK records are kept. VAT-registered businesses already keep digital records and file through compatible software. For Income Tax, sole traders and landlords with qualifying income over GBP 50,000 had to start using Making Tax Digital from 6 April 2026, with the threshold falling to GBP 30,000 from April 2027 and GBP 20,000 from April 2028, according to HMRC’s guidance.

European Union

There is no single EU retention period. The EU VAT rules require businesses to keep invoices, but each member state sets its own time limits, and they are often longer than in the US or UK. Periods of roughly 5 to 10 years are common. Germany, for example, requires books and annual accounts to be kept for 10 years, while France keeps accounting documents for 10 years under its commercial code. If you trade in several EU countries, keep records for the longest period that applies and check the local rules with an accountant.

GDPR and Customer Records: Do Not Keep Data Forever

Tax law tells you the minimum time to keep financial records. Data protection law pushes the other way for personal data. Under the EU GDPR and the UK GDPR, the storage limitation principle says you should keep personal data only for as long as you need it for the purpose you collected it.

In practice that means:

• Write a simple retention schedule. List each type of personal data you hold (customer contact details, marketing lists, job applications, staff files) with how long you keep it and why.
• Separate legal duties from marketing. You may need to keep an invoice with a customer’s name for 6 to 10 years for tax reasons, but that does not mean you can keep emailing them forever. Marketing consent and old leads should be reviewed and cleaned regularly.
• Delete or anonymise on time. When the retention period ends, securely delete paper and digital copies, or anonymise data you still want for statistics.
• Handle erasure requests correctly. If a customer asks you to delete their data, you can usually keep what the law requires, such as invoices, but should remove the rest.
• Protect what you keep. Use strong passwords, two-factor authentication and access controls, and know where your software stores data, especially if you use tools hosted outside the EU or UK.

A Simple Record-Keeping System for Small Businesses

You do not need complicated software to keep good records. You need a routine. Here is a system that works for most small businesses:

1. Open a dedicated business bank account and run every business payment through it.
2. Use cloud accounting software. Tools such as Xero, QuickBooks or FreeAgent connect to your bank, match transactions and create invoices. In the UK, pick one that supports Making Tax Digital.
3. Capture receipts immediately. Photograph or forward each receipt on the day you get it, rather than saving a shoebox for the end of the year.
4. Use one clear folder structure. For example: Year > Sales / Expenses / Bank / Payroll / VAT / Contracts. Name files with the date, supplier and amount.
5. Back up automatically. Keep at least one copy in a secure cloud service and one offline or in a separate account.
6. Book a weekly 30-minute admin slot. Reconcile the bank feed, chase unpaid invoices and file new documents.
7. Review once a year. After your year-end accounts are done, archive the year and securely delete anything past its retention period.

The same habit applies to the rest of your software. A good CRM, email platform or funnel builder keeps customer history in one place instead of scattered across inboxes. You can compare options in our software reviews before you choose.

Common Record-Keeping Mistakes to Avoid

• Mixing personal and business spending in one account, which makes every transaction harder to explain.
• Relying on bank statements alone. A statement shows a payment, not what it was for. Keep the invoice or receipt too.
• Leaving everything until the tax deadline, when details are forgotten and receipts are lost.
• Keeping no backup of digital records.
• Holding personal data forever “just in case”, which creates GDPR risk.
• Throwing records away too early, before the retention period for your country has ended.

Final Thoughts

Business record keeping is simple once it becomes a habit: keep the right documents, know how long your country requires you to hold them, protect customer data under GDPR, and spend a few minutes each week keeping everything up to date. Your reward is lower stress at tax time, faster answers for lenders and a clear view of how your business is really performing. If you are planning the next stage of growth, our guide on how to write a business plan shows how to turn those records into a plan. Start with the seven-step system above, and good business record keeping will look after itself.