Document retention is not a glamorous topic, but it is a practical necessity. Keeping documents longer than required wastes storage and increases privacy liability. Destroying documents too early eliminates evidence you may need for a dispute or an audit.
This guide covers how long to retain the key vendor compliance documents and the legal frameworks that drive those requirements.
W-9 and 1099 Tax Documents
Retention period: derive it from the information return and applicable period of limitations.
The IRS says record-retention periods depend on the action, expense, or event the record supports. Common federal periods include three years in many cases, six years for certain omitted-income cases, seven years for certain bad-debt or worthless-security claims, and indefinite retention for fraudulent or unfiled returns. These are not a universal seven-year mandate for W-9s.
W-9s support information reporting. Keep the form and related evidence for the period your tax adviser maps to the return, backup-withholding history, corrections, and any open examination.
Also retain:
- 1099-NEC copies filed with the IRS
- Evidence of TIN matching requests
- Any backup withholding records
Certificates of Insurance
Retention period: map it to claims, contracts, project law, and policy terms.
Insurance evidence may be relevant after a vendor relationship ends. Retain the COI, endorsements, and any verification for the period selected with your broker and counsel based on occurrence versus claims-made coverage, completed operations, contractual claims, and litigation holds.
For construction work, statutes of limitation and repose vary by jurisdiction and claim. Obtain project-specific legal guidance.
Vendor Contracts
Retention period: Duration of contract plus the applicable statute of limitations for contract disputes.
Contract limitation periods and accrual rules vary by jurisdiction and claim. Set the schedule with counsel rather than adopting a generic seven-year rule.
For contracts involving real property, intellectual property, or ongoing obligations (like licensing agreements or ongoing service commitments), the retention period may be indefinite or tied to the term of the underlying obligation.
ACH Authorization Forms
Retention period: identify the ACH entry type and governing agreement first.
Nacha authorization and proof-retention rules differ by receiver, entry type, authorization channel, and Standard Entry Class code. The frequently cited two-year rule applies in specified authorization contexts; it is not a universal rule for every business-to-business vendor credit. Follow your ODFI agreement and the current Nacha rules. See the ACH vendor-payment guide.
Also retain records of any changes to banking information: when the change was made, by whom, and the new authorization form.
Professional and Business License Records
Retention period: map it to the licensing rule, work, contract, and possible claims.
Keep verification evidence long enough to show the status, scope, and source checked for the work period. The appropriate time depends on licensing-board rules, project law, contract terms, claims, and litigation holds.
Employment and Independent Contractor Records
IRS requirement: 4 years for employment tax records.
State unemployment and workers' compensation records: verify each applicable state rule.
For independent contractor records, retain the classification analysis, agreement, evidence of the actual relationship, and payment records for the longest applicable tax, wage-and-hour, unemployment, workers' compensation, contract, or litigation period identified by counsel. The IRS four-year employment-tax rule is an authoritative federal baseline for records to which it applies, not a complete classification-record schedule.
Building a Retention Policy
A document retention policy accomplishes two things: it ensures you keep what you need, and it provides legal cover for destroying what you do not.
A company that retains documents indefinitely can be compelled to produce years of historical records in litigation. Systematic, policy-driven destruction of documents after their retention period ends is legally defensible. Ad hoc destruction of documents when litigation is threatened (or after the retention period if you had reason to anticipate litigation) is not.
Elements of a practical retention policy:
- Document categories and their retention periods, aligned to legal requirements
- Responsible parties for each category
- Destruction procedures: how documents are destroyed at the end of the retention period (and how electronic records are deleted)
- Litigation hold procedures: how the normal destruction schedule is paused when litigation or regulatory investigation is reasonably anticipated
Review your retention policy annually or whenever the law in your industry changes.