What records are legally required to be kept by a small business?

There is no single master list that applies to every small business. Your legal recordkeeping obligations depend on what you do, who you employ, and where you operate. That said, a few broad categories apply to almost every business, and understanding them is the foundation of a sound records management program.

Tax and financial records

Tax authorities expect you to keep records that support the income, deductions, and credits reported on your returns — invoices, receipts, bank statements, payroll filings, and supporting ledgers. The IRS advises keeping these long enough to cover the period in which a return can be examined or amended, which commonly runs several years and longer in certain situations. Keep these until the relevant limitation period has passed.

Employment and payroll records

If you have employees, federal labor law imposes its own recordkeeping duties. Under the Fair Labor Standards Act, employers must retain payroll records, hours worked, wage rates, and similar data for defined periods. Separate rules from agencies governing equal employment, safety, benefits, and immigration eligibility add further requirements. Each category may carry a different retention period, so they should be tracked individually.

Industry- and activity-specific records

Many obligations are tied to what your business actually does. Healthcare, financial services, food handling, environmental permits, professional licensing, and government contracting all carry sector-specific recordkeeping rules. State and local laws add another layer. There is no substitute for identifying the regulations that apply to your particular business.

Other commonly required records

• Corporate and formation documents — articles of organization, bylaws, ownership records, and meeting minutes.
• Contracts and agreements — kept at least through the life of the agreement plus any limitation period for disputes.
• Insurance and property records — supporting claims, depreciation, and ownership.

How to get it right

Rather than memorizing periods, build a retention schedule: inventory the records you hold, research the legal and operational requirement for each, assign a retention period and disposition, and apply it consistently. Avoid keeping everything “just in case” — over-retention raises costs and expands your exposure in litigation and data breaches. When obligations are unclear, consult a qualified attorney or accountant familiar with your jurisdiction and industry.