Written by
John
Published on
April 1, 2026
"How long do we have to keep this?" is one of the most common questions we hear from businesses before a scanning or shredding project.
It's also one of the most important. Destroy records too early and you could face regulatory penalties, lose a legal dispute, or fail an audit. Hold on to everything forever and you're paying rent on physical storage for documents that should have been gone years ago.
California businesses face a patchwork of federal IRS guidelines, California state regulations, and industry-specific rules — all with different retention periods. This guide cuts through the complexity with plain-English answers organized by record type and industry.
Important: This guide is for general informational purposes. For specific legal or compliance questions, consult your attorney or CPA.
Here are the most common record types, how long to keep them, and the authority behind the requirement:
Financial & Tax Records
Tax returns and supporting documents — Keep 7 years. IRS— the statute of limitations runs 3 years for standard audits, 6 years if income was under reported. Seven years gives you a safe buffer.
Business financial statements — Keep 7 years. IRS and general accounting best practice.
Accounts payable and receivable — Keep 7 years. Supports tax returns and audit documentation.
Bank statements and reconciliations — Keep 7 years. Covers California FTB and IRS audit exposure windows.
HR & Employment Records
Payroll records — Keep 4 years. IRS and California EDD both require 4 years.
EmployeeI-9 forms — Keep 3 years from hire or 1 year after termination — whichever is later. Federal IRCA requirement. Keep these separate from general personnel files.
Employee personnel files — Keep 3 years after termination. California FEHA. Keep separate from I-9 records.
Workers' compensation Insurance records — Keep 5 years from date of injury. California Labor Code.
Contracts & Legal Documents
General contracts and agreements — Keep 4 years after expiration. California statute of limitations for written contracts (CCP §337).
Corporate formation documents — Keep Permanently. Articles of incorporation, bylaws, board minutes — keep forever.
Property deeds and titles — Keep Permanently. Keep for as long as you own the property, and indefinitely after.
Industry-Specific Records
Escrow files (DRE-regulated) — Keep 3 years minimum. California Business & Professions Code §10148.
Escrow files (DFPI-regulated) — Keep 5 years minimum. California Financial Code §1737.3. We recommend retaining all escrow files for 5 years to satisfy both regulators.
Client files — civil law matters — Keep 5 years minimum. California Rule 1.15; LACBA recommends 5 years after matter closes.
Client files — estate planning — Keep Indefinitely. California Probate Code §710. Original instruments must be held until properly released —there is no expiration date.
Patient medical records — adults — Keep 10 years from last treatment. California Medical Information Act (CMIA), Health & Safety Code §123111.
Patient medical records — minors — Keep Until age 28. CMIA. Extends to cover the full adult statute of limitations period.
HIPAA privacy records — Keep 6 years from creation. 45CFR §164.530(j). Overlaps with CMIA — the 10-year CMIA standard is generally more conservative and advisable.
California escrow companies operate under two separate regulatory frameworks — the Department of Real Estate (DRE) and the Department of Financial Protection and Innovation (DFPI) —with slightly different retention requirements. The DRE requires 3 years under Business & Professions Code §10148; the DFPI requires 5 years under Financial Code §1737.3. Our recommendation: retain all escrow files for 5 years minimum to satisfy both.
One advantage unique to escrow: scanning costs can typically be charged directly to the transaction, making digitization essentially cost-neutral for the office.
California has some of the strictest medical record retention requirements in the country. The California Medical Information Act (CMIA) requires patient records to be retained for a minimum of 10 years from the last date of treatment for adult patients — and until the patient reaches age 28 for minors. HIPAA adds a separate 6-year requirement for privacy-related records. Most practices should plan for at least 10 years as the working standard.
California doesn't set a single universal retention period for client files, but California Rule of Professional Conduct 1.15 requires client trust account records to be kept for at least 5 years. The LA County Bar Association recommends 5 years for potentially significant materials in civil matters. Estate planning documents may need to be held indefinitely under Probate Code §710. Criminal matter files should not be destroyed without the client's consent during their lifetime.
For most standard business records, the IRS 7-year guideline is a reliable default — it covers the longest audit exposure window (6 years for under reported income) with a year of buffer. California's statute of limitations for most written contracts is 4 years (CCP§337). HR records generally follow a 3–4 year window after an employee's termination, with workers' comp extending to 5 years.
Meeting retention requirements doesn't mean keeping paper — it means keeping the records. Digitized documents satisfy retention obligations in almost all circumstances, at a fraction of the storage cost.
• Eliminate storage costs: A filing cabinet full of paper becomes a folder on a hard drive. A storage unit becomes a cloud backup. The obligation stays the same —the cost drops dramatically.
• Find records in seconds: A searchable digital archive means no more digging through boxes when an audit or dispute requires a specific document.
• Clean destruction at end of retention period: When records reach the end of their window, digital deletion is clean and complete. A scanning program means you shred once at the start — not repeatedly over the years.
• Chain of custody documentation: Professional scanning creates an auditable record of what was scanned, when, and how it was handled — useful if records are ever challenged.
Need Help Managing Your Records?
Turn Source Imaging helps Southern California businesses digitize their archives, meet retention requirements, and safely shred records that have passed their retention window — with pickup directly from your office or storage unit.
📞 Contact us at (714)-276-1111 for a free consultation.
About Turn Source Imaging
Turn Source Imaging provides professional document scanning and digitization services for businesses throughout Southern California. We work with escrow companies, medical practices, law firms, production companies, and general businesses to digitize archives, meet compliance requirements, and eliminate storage costs.