Document Retention Guidelines | NH Document Shredding
📚 Free Resource

Document Retention Guidelines

How long to keep tax, financial, medical, legal and business records, and the moment each one is safe to shred. A clear schedule for New Hampshire homes and offices.

Trusted across Southern NH since 2007. Zero data breaches.

Quick answers

  • ✓ Tax returns: keep indefinitely
  • ✓ Tax receipts and W-2s: about 7 years
  • ✓ Bank and card statements: about 1 year
  • ✓ IDs, deeds and wills: keep permanently
  • ✓ HIPAA patient records: at least 6 years
2007Trusted Since
0Data Breaches
600+Clients Served
100%Certificate Rate
A+BBB Rating

How long should you keep a document?

Every household and office collects paper that has to be kept for a while, then destroyed. Get the timing wrong in either direction and it costs you.

Hold a record too long and it becomes a liability. Old tax files, closed-account statements and former-employee paperwork sitting in a basement or a back office are exactly what a thief or a careless mistake turns into identity theft or a compliance problem. Destroy a record too early and you may need it back, for an audit, a warranty claim, an insurance dispute or a tax question, and it is gone.

This guide gives you a working retention schedule: how long to keep the records most people and businesses handle, and the point at which each one is safe to shred. It is organized by category so you can find what you need quickly, whether you are clearing a closet at home or setting a policy for an office.

One rule sits behind all of it. When a retention window closes, the record stops protecting you and starts working against you. That is the moment to destroy it securely, not to file it deeper. If you would rather talk through a purge, call 978-636-0301.

The document retention schedule

Common, widely used retention periods by category. Treat these as a starting point and confirm the specifics for your situation.

Tax records

RecordKeep forWhy
Filed tax returnsKeep indefinitelyThe return itself takes almost no space. Keeping it is cheap insurance against a future question or a lost record.
Supporting receipts, W-2s, 1099s, deduction records7 yearsThe IRS reviews 3 years routinely, 6 years for a large under-report, and 7 for bad-debt or worthless-security claims.
Records for property you still ownUntil sale, then 7 yearsYou need them to prove your cost basis when the property is sold.
Payroll tax records (business)At least 4 yearsThe IRS requires employment-tax records for 4 years after the tax is due or paid.

Banking and everyday financial records

RecordKeep forWhy
Bank statementsAbout 1 yearKeep longer and file with your tax records if a statement supports a deduction or a major purchase.
Credit card statementsAbout 1 yearShred once you have reconciled the charges, unless a statement is needed for taxes or a warranty.
Pay stubsUntil your W-2 arrivesCheck the stubs against your annual W-2, then shred them.
ATM and deposit receiptsUntil reconciledShred as soon as they match your statement.
Investment and brokerage statements7 yearsKeep purchase confirmations until you sell the holding, since they establish your cost basis.
Loan and financing documentsLoan term, then 7 yearsKeep proof that the loan was paid off in full.

Identity and legal documents to keep permanently

Some records are not on a shredding schedule at all. Keep these, ideally in a fireproof box or a safe-deposit box. When one is replaced, destroy only the superseded version.

RecordKeep forWhy
Birth and death certificates, Social Security cardsPermanentlyCore identity records that are slow and costly to replace.
Marriage certificates and divorce decreesPermanentlyNeeded for legal, benefit and estate purposes.
Wills, trusts and estate documentsPermanentlyKeep the current version safe and accessible to your executor. Destroy superseded drafts.
Property deeds and vehicle titlesAs long as you own itAfter a sale, keep a copy with your tax records to prove the transaction.
Military discharge papers (DD-214)PermanentlyRequired for benefits and very difficult to replace.

Property, home and insurance records

RecordKeep forWhy
Mortgage documentsWhile you own the home, then 7 yearsKeep the closing package and proof of payoff after a sale.
Home improvement and repair recordsWhile you own the homeThey raise your cost basis and can reduce the tax on a future sale.
Insurance policies (home, auto, health)While activeShred a superseded policy once the replacement is in force and no claim is open against the old one.
Warranties and product manualsUntil the warranty endsKeep the receipt with the warranty in case you need to make a claim.
Rental and lease agreementsLease term, then 3 yearsUseful for deposit disputes and any tax deduction tied to the property.

Medical and health records

RecordKeep forWhy
Personal medical history and immunization recordsKeep ongoingUseful for life and not something to shred. Store a current copy where your family can find it.
Explanation of benefits and medical bills1 to 3 yearsKeep longer if a charge is disputed or claimed on your taxes. Shred once the matter is resolved.
Prescription information and pharmacy receiptsAbout 1 yearPrescription labels carry your name, address and medication. Shred them, do not just toss them.
Patient records held by a medical practiceAt least 6 yearsHIPAA requires covered entities to keep required documentation 6 years. State medical-record laws may require longer.

Business and employment records

RecordKeep forWhy
Business tax returns and filings7 yearsThe backbone of any audit response. Keep the returns themselves longer if storage allows.
Payroll recordsAt least 4 yearsRequired under IRS employment-tax rules. The Department of Labor sets its own minimums for wage records.
Employee personnel filesSeveral years after separationMany employers keep these about 7 years. Some records, such as I-9 forms, have their own separate rules.
Signed contracts and agreementsTerm, then 7 yearsKeep the executed copy well past expiration in case a dispute surfaces later.
Invoices, accounts payable and receivable7 yearsThey support your tax filings and your financial records.
Job applications, reviews, terminated-employee filesPer your retention policyDestroy on a set schedule once the window closes, rather than letting them pile up.
Please note: These periods are general guidance based on widely used practice, not legal or tax advice. Retention requirements vary by state, industry and individual situation, and rules change. Confirm your specific obligations with your accountant or attorney before destroying business or compliance records.

The cost of keeping records too long

A retention schedule is not about tidiness. It is about closing the window where an old document can hurt you.

Held too long

Every record you keep past its window is a small, standing risk. A box of decade-old client files is a breach waiting to happen. Former-employee paperwork is sensitive personal data you no longer have a reason to hold. Old account statements are a roadmap for fraud. The longer paper sits, the more of it there is to lose, and the harder it is to even know what you have.

  • More personal data exposed if there is a break-in or a careless mistake
  • More records an attorney or auditor can demand in a dispute
  • Storage space and staff time spent guarding paper you do not need

Destroyed too soon

The other mistake is just as costly. Shred a record before its window closes and you can be left without proof when you need it most.

  • No receipts to back a deduction if the IRS asks
  • No policy or contract to point to in a dispute
  • No cost-basis records when you sell a home or an investment

The schedule above is the middle path: keep each record exactly as long as it protects you, then destroy it.

How to set a retention policy that runs itself

For an office, the goal is a system that does not depend on anyone remembering. Four steps get you there.

1. Write the schedule down

Put your retention periods in a one-page document by record type. Use the schedule above as the starting draft, then have your accountant or attorney confirm the categories that carry compliance weight.

2. Date your files

Label boxes and folders with a destroy-by year, not just a content description. When the year arrives, the decision is already made and nobody has to relitigate it.

3. Purge on a calendar

Pick a recurring date, often right after tax season, to clear everything that has reached its destroy-by year. A scheduled locked bin makes this continuous instead of a once-a-year scramble.

4. Destroy it on the record

Use a service that issues a Certificate of Destruction for every purge. That certificate is the proof that your policy was followed, which is exactly what an auditor wants to see.

Digital files have a retention window too

Going paperless changes where records live, not whether they expire. A retention schedule still applies, and so does secure destruction.

Scanned statements, exported reports and saved email attachments follow the same clock as their paper versions. A digital tax record is still a 7-year record. A digital patient file held by a practice is still a 6-year HIPAA record. The schedule above works whether the document sits in a filing cabinet or a folder on a drive.

The difference is what happens at the end. When digital records reach the end of their window, deleting a file is not the same as destroying it, and a factory reset does not wipe a drive clean. Old hard drives, USB drives, backup tapes, CDs and retired phones hold years of recoverable data long after the files appear gone. When a computer is replaced or a backup is retired, the device itself has to be physically destroyed.

A complete retention policy covers both sides. Shred the paper when its window closes, and physically destroy the media that held the digital copies. New Hampshire Document Shredding handles both in a single job, with a Certificate of Destruction for each device. See our hard drive and media destruction service for details.

Destroy expired records securely

A retention schedule only works if the last step is real destruction. A recycling bin or a curbside trash bag is not secure disposal.

Once a record reaches the end of its window, it should be destroyed so it cannot be read or reconstructed. Paper put out with the recycling travels intact through several pairs of hands, and a single readable page, an old statement, a prescription label, a signed form, is enough for identity theft or a compliance failure. FACTA, HIPAA and New Hampshire RSA 359-C all expect proper destruction, not just disposal.

New Hampshire Document Shredding makes the final step simple. Drop off your expired records at our secure Tewksbury facility, or book a scheduled pickup and we will collect them. Everything is destroyed on industrial equipment, 100% of the shredded paper is recycled, and every job ends with a signed Certificate of Destruction. See our shredding rates for exact pricing, or call 978-636-0301 for a quote.

Time for a purge? We make it easy.

Bring your expired records to us, or schedule a pickup. Transparent pricing, no contracts, and a certificate every time.

Document retention FAQ

Common questions about keeping and destroying records.

How long should I keep tax returns?
Keep the filed returns themselves indefinitely. They are small and easy to store. Keep the supporting receipts, W-2s and deduction records for about 7 years, which covers the longest period the IRS normally looks back.
How long should a business keep employee records?
Most employers keep personnel files for several years after an employee leaves, often about 7 years. Payroll records should be kept at least 4 years under IRS rules, and some records such as I-9 forms have their own separate requirements. Confirm the specifics with your accountant or attorney.
What documents should never be shredded?
Keep core identity and legal records permanently: birth and death certificates, Social Security cards, marriage and divorce records, wills and trusts, military discharge papers, and deeds or titles for property you still own. Store them in a fireproof box or safe-deposit box.
How long do HIPAA records need to be kept?
HIPAA requires covered entities to retain required documentation for at least 6 years. State medical-record laws can require longer. When the window closes, those records must be destroyed in a documented, HIPAA-compliant way.
Is recycling old documents the same as shredding them?
No. Recycling moves paper intact through several hands, and one readable page is enough for fraud or a compliance failure. Secure shredding destroys the document first, then recycles the shredded material, so you get both the security and the environmental benefit.
What is the easiest way to destroy a backlog of old records?
For a one-time backlog, drop the records off at our Tewksbury facility or book an off-site pickup. For an office that wants to stay current, a scheduled locked bin keeps the purge continuous. Every job ends with a signed Certificate of Destruction.

Keep what protects you. Shred the rest.

When a record reaches the end of its window, destroy it securely. Book drop-off or a pickup today, with a signed certificate every time.