Document Retention Guidelines
How long to keep tax, financial, medical, legal and business records, and the moment each one is safe to shred. A clear schedule for New Hampshire homes and offices.
Trusted across Southern NH since 2007. Zero data breaches.
Quick answers
- ✓ Tax returns: keep indefinitely
- ✓ Tax receipts and W-2s: about 7 years
- ✓ Bank and card statements: about 1 year
- ✓ IDs, deeds and wills: keep permanently
- ✓ HIPAA patient records: at least 6 years
How long should you keep a document?
Every household and office collects paper that has to be kept for a while, then destroyed. Get the timing wrong in either direction and it costs you.
Hold a record too long and it becomes a liability. Old tax files, closed-account statements and former-employee paperwork sitting in a basement or a back office are exactly what a thief or a careless mistake turns into identity theft or a compliance problem. Destroy a record too early and you may need it back, for an audit, a warranty claim, an insurance dispute or a tax question, and it is gone.
This guide gives you a working retention schedule: how long to keep the records most people and businesses handle, and the point at which each one is safe to shred. It is organized by category so you can find what you need quickly, whether you are clearing a closet at home or setting a policy for an office.
One rule sits behind all of it. When a retention window closes, the record stops protecting you and starts working against you. That is the moment to destroy it securely, not to file it deeper. If you would rather talk through a purge, call 978-636-0301.
The document retention schedule
Common, widely used retention periods by category. Treat these as a starting point and confirm the specifics for your situation.
Tax records
| Record | Keep for | Why |
|---|---|---|
| Filed tax returns | Keep indefinitely | The return itself takes almost no space. Keeping it is cheap insurance against a future question or a lost record. |
| Supporting receipts, W-2s, 1099s, deduction records | 7 years | The IRS reviews 3 years routinely, 6 years for a large under-report, and 7 for bad-debt or worthless-security claims. |
| Records for property you still own | Until sale, then 7 years | You need them to prove your cost basis when the property is sold. |
| Payroll tax records (business) | At least 4 years | The IRS requires employment-tax records for 4 years after the tax is due or paid. |
Banking and everyday financial records
| Record | Keep for | Why |
|---|---|---|
| Bank statements | About 1 year | Keep longer and file with your tax records if a statement supports a deduction or a major purchase. |
| Credit card statements | About 1 year | Shred once you have reconciled the charges, unless a statement is needed for taxes or a warranty. |
| Pay stubs | Until your W-2 arrives | Check the stubs against your annual W-2, then shred them. |
| ATM and deposit receipts | Until reconciled | Shred as soon as they match your statement. |
| Investment and brokerage statements | 7 years | Keep purchase confirmations until you sell the holding, since they establish your cost basis. |
| Loan and financing documents | Loan term, then 7 years | Keep proof that the loan was paid off in full. |
Identity and legal documents to keep permanently
Some records are not on a shredding schedule at all. Keep these, ideally in a fireproof box or a safe-deposit box. When one is replaced, destroy only the superseded version.
| Record | Keep for | Why |
|---|---|---|
| Birth and death certificates, Social Security cards | Permanently | Core identity records that are slow and costly to replace. |
| Marriage certificates and divorce decrees | Permanently | Needed for legal, benefit and estate purposes. |
| Wills, trusts and estate documents | Permanently | Keep the current version safe and accessible to your executor. Destroy superseded drafts. |
| Property deeds and vehicle titles | As long as you own it | After a sale, keep a copy with your tax records to prove the transaction. |
| Military discharge papers (DD-214) | Permanently | Required for benefits and very difficult to replace. |
Property, home and insurance records
| Record | Keep for | Why |
|---|---|---|
| Mortgage documents | While you own the home, then 7 years | Keep the closing package and proof of payoff after a sale. |
| Home improvement and repair records | While you own the home | They raise your cost basis and can reduce the tax on a future sale. |
| Insurance policies (home, auto, health) | While active | Shred a superseded policy once the replacement is in force and no claim is open against the old one. |
| Warranties and product manuals | Until the warranty ends | Keep the receipt with the warranty in case you need to make a claim. |
| Rental and lease agreements | Lease term, then 3 years | Useful for deposit disputes and any tax deduction tied to the property. |
Medical and health records
| Record | Keep for | Why |
|---|---|---|
| Personal medical history and immunization records | Keep ongoing | Useful for life and not something to shred. Store a current copy where your family can find it. |
| Explanation of benefits and medical bills | 1 to 3 years | Keep longer if a charge is disputed or claimed on your taxes. Shred once the matter is resolved. |
| Prescription information and pharmacy receipts | About 1 year | Prescription labels carry your name, address and medication. Shred them, do not just toss them. |
| Patient records held by a medical practice | At least 6 years | HIPAA requires covered entities to keep required documentation 6 years. State medical-record laws may require longer. |
Business and employment records
| Record | Keep for | Why |
|---|---|---|
| Business tax returns and filings | 7 years | The backbone of any audit response. Keep the returns themselves longer if storage allows. |
| Payroll records | At least 4 years | Required under IRS employment-tax rules. The Department of Labor sets its own minimums for wage records. |
| Employee personnel files | Several years after separation | Many employers keep these about 7 years. Some records, such as I-9 forms, have their own separate rules. |
| Signed contracts and agreements | Term, then 7 years | Keep the executed copy well past expiration in case a dispute surfaces later. |
| Invoices, accounts payable and receivable | 7 years | They support your tax filings and your financial records. |
| Job applications, reviews, terminated-employee files | Per your retention policy | Destroy on a set schedule once the window closes, rather than letting them pile up. |
The cost of keeping records too long
A retention schedule is not about tidiness. It is about closing the window where an old document can hurt you.
Held too long
Every record you keep past its window is a small, standing risk. A box of decade-old client files is a breach waiting to happen. Former-employee paperwork is sensitive personal data you no longer have a reason to hold. Old account statements are a roadmap for fraud. The longer paper sits, the more of it there is to lose, and the harder it is to even know what you have.
- More personal data exposed if there is a break-in or a careless mistake
- More records an attorney or auditor can demand in a dispute
- Storage space and staff time spent guarding paper you do not need
Destroyed too soon
The other mistake is just as costly. Shred a record before its window closes and you can be left without proof when you need it most.
- No receipts to back a deduction if the IRS asks
- No policy or contract to point to in a dispute
- No cost-basis records when you sell a home or an investment
The schedule above is the middle path: keep each record exactly as long as it protects you, then destroy it.
How to set a retention policy that runs itself
For an office, the goal is a system that does not depend on anyone remembering. Four steps get you there.
1. Write the schedule down
Put your retention periods in a one-page document by record type. Use the schedule above as the starting draft, then have your accountant or attorney confirm the categories that carry compliance weight.
2. Date your files
Label boxes and folders with a destroy-by year, not just a content description. When the year arrives, the decision is already made and nobody has to relitigate it.
3. Purge on a calendar
Pick a recurring date, often right after tax season, to clear everything that has reached its destroy-by year. A scheduled locked bin makes this continuous instead of a once-a-year scramble.
4. Destroy it on the record
Use a service that issues a Certificate of Destruction for every purge. That certificate is the proof that your policy was followed, which is exactly what an auditor wants to see.
Digital files have a retention window too
Going paperless changes where records live, not whether they expire. A retention schedule still applies, and so does secure destruction.
Scanned statements, exported reports and saved email attachments follow the same clock as their paper versions. A digital tax record is still a 7-year record. A digital patient file held by a practice is still a 6-year HIPAA record. The schedule above works whether the document sits in a filing cabinet or a folder on a drive.
The difference is what happens at the end. When digital records reach the end of their window, deleting a file is not the same as destroying it, and a factory reset does not wipe a drive clean. Old hard drives, USB drives, backup tapes, CDs and retired phones hold years of recoverable data long after the files appear gone. When a computer is replaced or a backup is retired, the device itself has to be physically destroyed.
A complete retention policy covers both sides. Shred the paper when its window closes, and physically destroy the media that held the digital copies. New Hampshire Document Shredding handles both in a single job, with a Certificate of Destruction for each device. See our hard drive and media destruction service for details.
Destroy expired records securely
A retention schedule only works if the last step is real destruction. A recycling bin or a curbside trash bag is not secure disposal.
Once a record reaches the end of its window, it should be destroyed so it cannot be read or reconstructed. Paper put out with the recycling travels intact through several pairs of hands, and a single readable page, an old statement, a prescription label, a signed form, is enough for identity theft or a compliance failure. FACTA, HIPAA and New Hampshire RSA 359-C all expect proper destruction, not just disposal.
New Hampshire Document Shredding makes the final step simple. Drop off your expired records at our secure Tewksbury facility, or book a scheduled pickup and we will collect them. Everything is destroyed on industrial equipment, 100% of the shredded paper is recycled, and every job ends with a signed Certificate of Destruction. See our shredding rates for exact pricing, or call 978-636-0301 for a quote.
Time for a purge? We make it easy.
Bring your expired records to us, or schedule a pickup. Transparent pricing, no contracts, and a certificate every time.
Document retention FAQ
Common questions about keeping and destroying records.
How long should I keep tax returns?
How long should a business keep employee records?
What documents should never be shredded?
How long do HIPAA records need to be kept?
Is recycling old documents the same as shredding them?
What is the easiest way to destroy a backlog of old records?
Keep what protects you. Shred the rest.
When a record reaches the end of its window, destroy it securely. Book drop-off or a pickup today, with a signed certificate every time.