Blog
How Long to Keep Tax Documents: A Guide for Clients and Firms
September 6, 2026
"How long do I need to keep this?" is one of the most common questions clients ask, and it's also one of the most common gaps in a firm's own recordkeeping. The honest answer isn't a single number — it depends on the document, what it supports, and whether you're the client holding onto your own copy or the firm holding it on their behalf. Here's the actual breakdown.
The General Rule: Three Years
For most individual and business tax returns, the IRS's standard audit window is three years from the date you filed (or the due date, if later). That covers the majority of routine returns — W-2 income, standard deductions, typical small business filings. If nothing unusual is flagged in that window, the return is generally considered closed.
When Three Years Isn't Enough
- Underreported income by more than 25% — the IRS can go back six years
- No return was filed, or the return was fraudulent — there's no time limit at all
- Bad debt deduction or worthless securities — seven years
- Employment tax records — at least four years from the date the tax was due or paid, whichever is later
- Property, investments, and depreciable business assets — as long as you own the asset, plus the standard three-to-six-year window after you dispose of it, since the original purchase records establish basis for that eventual sale
That last category is the one that trips up the most clients and firms alike — a document tied to an asset purchased a decade ago can still be relevant today, long after the return it was originally filed with has aged out.
Client Retention vs. Firm Retention
These are related but genuinely separate obligations. A client needs to know how long to personally hold onto their own copies — mainly so they have something to hand over if a question ever comes up. A firm's obligation is different in kind: IRS recordkeeping guidance and the FTC Safeguards Rule both expect firms to retain client records securely, with defined retention periods and an access trail, as part of a documented information security program rather than an informal habit. We've covered what that formal obligation looks like in our post on the Written Information Security Plan requirement — retention schedules are one of the specific things a WISP is expected to define.
Where This Connects to Document Management
Knowing the retention rule for a document type only matters if there's a system actually applying it. In practice, that means retention can't be a note in a policy binder that nobody checks — it needs to be attached to the document at the moment it's filed, so a 1099 and a piece of routine client correspondence are handled on different clocks automatically, without a staff member having to remember which rule applies to which folder years later. We covered the broader version of this in our guide to document management for accountants — retention is one piece of that larger lifecycle, alongside organization, access control, and retrieval.
Why Off-the-Shelf Retention Settings Usually Get It Wrong
A generic file storage tool, if it offers retention settings at all, typically applies one rule to everything in a folder — which means a firm either over-retains routine documents it no longer needs (unnecessary data-security exposure under the Safeguards Rule) or under-retains the property and investment records that need to survive far longer than a standard return. Getting this right requires rules that vary by document type and client situation, which is exactly the kind of logic a one-size-fits-all platform isn't built to handle. We build retention rules around the specific document types and client mix a firm actually has — a firm doing individual returns and a firm managing rental property clients don't need the same schedule, so they shouldn't be forced onto one. For the fuller picture of how this fits alongside intake, categorization, and client communication, see our complete guide to AI for accountants.
Frequently Asked Questions
How long should I keep my tax documents?
The IRS generally recommends keeping tax returns and supporting records for at least three years from the filing date, since that's the standard window for an audit. That window extends to six years if you underreported income by more than 25%, and there's no time limit at all if a return was never filed or was fraudulent. Some records — like those tied to property, investments, or business assets — need to be kept for as long as you own the asset, plus several years after.
Do these retention rules apply to my firm, or just to clients?
Both, but differently. Clients need to know how long to hold onto their own copies of returns and receipts. Firms have a separate, often stricter obligation: IRS recordkeeping guidance and the FTC Safeguards Rule expect firms to retain client tax and financial records securely for defined periods, with access logs and a documented policy — not just a general sense of "we keep things a while."
What happens if a client asks for a document years after I stop needing it for compliance?
This is exactly where a lot of firms get caught off guard — either they deleted something a client still needed, or they're still holding files years past any requirement because nobody ever went back to purge them. A defined retention schedule, applied automatically by document type, solves both problems: nothing is kept longer than required, and nothing is discarded before a client (or the firm) might legitimately need it again.
Should I keep physical copies or digital copies?
The IRS accepts digital records as long as they're accurate, accessible, and can be reproduced legibly if requested. For most firms, digital is the more practical and secure choice — no fire, flood, or lost-box risk, and it's far easier to apply consistent retention and access rules to a digital system than to a filing cabinet.
Can retention just be handled with a rule of thumb, like "keep everything for seven years"?
A single blanket rule is simple but usually wrong in both directions — it keeps some records (routine correspondence) far longer than necessary, creating unneeded data-security exposure, while under-retaining other records (property and investment basis documents) that need to be kept much longer than seven years. Retention rules that vary by document type, applied automatically, get this right without asking staff to remember exceptions.
This is part of our complete guide to AI for accountants.
Want retention rules built around your firm's actual document types?
We set up filing and retention logic that matches your specific client mix — not a generic one-size-fits-all schedule.
Book a Free Consultation