Delete too much and you can’t back up a deduction. Keep everything and you expose years of mail to a breach. Here’s how to find the middle ground.
TL;DR
- The IRS generally suggests keeping records that support your tax return for three years from the date you filed.
- Employment tax records need to be kept at least four years after the tax becomes due or is paid, whichever is later.
- Some situations require longer: six years for unreported income over 25 percent of gross income and seven years for worthless securities or bad debt deductions.
- Other agencies, including the Department of Labor and the EEOC, have their own recordkeeping rules, so check before you delete anything employment related.
- Write a one page policy, apply the longest period that fits each category, and export a copy of the mailbox before any bulk deletion.
Old email piles up faster than almost anything else in a small business. At some point you have to decide what to delete, and guessing wrong cuts both ways. This guide explains how to build a simple retention policy around federal recordkeeping rules, so the decision takes an afternoon instead of a worry session.
Why Deleting Everything (or Keeping Everything) Is a Mistake?
Delete too much, and you can lose records you need. The IRS puts the burden of proof on you, which means you must be able to substantiate the income and expenses on your tax return. An email with a supplier quote, a client agreement or a paid invoice can be the difference between a clean deduction and a disallowed one.
Keep everything forever, and you have the opposite problem. A mailbox holding ten years of messages holds ten years of payment requests, customer data and passwords reset links for an attacker to exploit if the account is ever compromised. Old mail about wire transfers and unpaid invoices is exactly the material used in business email compromise. More stored mail also means more to search when you actually need to find something.
What Federal Rules Say About Keeping Business Records?
The good news is that federal tax rules are flexible about format. The law does not require any special kind of records, only a system that clearly shows your income and expenses. Electronic records count the same as paper ones.
The periods, though, are specific. The IRS bases them on the period of limitations, the window in which you can amend a return or the IRS can assess additional tax. Here is what the IRS says:
| Record | How long to keep it |
|---|---|
| Records supporting income, deductions or credits on a return | 3 years from the date you filed |
| Claim for a loss from worthless securities or a bad debt deduction | 7 years |
| Unreported income that was more than 25% of gross income on the return | 6 years |
| Employment tax records | At least 4 years after the tax is due or paid, whichever is later |
| Records tied to property you own | Until the period of limitations runs out for the year you dispose of the property |
| No return filed, or a fraudulent return | Indefinitely |
Also keep copies of your filed tax returns. They help when preparing future returns and when filing an amended one.
Tip
Before any bulk deletion, export a copy of the mailbox and store it somewhere separate. Undoing a mass delete is hard, but keeping an archived copy is cheap.
Do Employment Emails Have Their Own Rules?
Yes, and the tax rule is only the starting point. If you have employees, you must keep all employment tax records for at least four years after the tax becomes due or is paid, whichever is later. Email that documents payroll, hiring and personnel decisions falls in that window.
Beyond the IRS, other agencies have their own recordkeeping requirements for employment records, and those rules vary by the type of record and by state. Check the guidance from the Department of Labor, the EEOC and your state agency, or ask a qualified professional, before setting a shorter deadline for anything employment related. When in doubt, keep it longer.
Setting a Retention Policy You Can Actually Follow?
A policy nobody follows is worse than a simple one that runs on autopilot. One page is enough:
- List your categories. Tax related records, employment records, property records and routine mail.
- Assign a period to each. Use the longest period that applies, such as four years for anything touching employment taxes.
- Set a default for routine mail. Nonrecord email, like scheduling threads and newsletters, can go on a short automatic schedule.
- Name a person and a date. Someone runs the cleanup twice a year, and it actually happens.
- Cover attachments. The invoice in an email is the record, not the email itself.
This policy should cover every mailbox tied to the business, including any addresses on your own domain. If you are still sending mail from a personal account, our guide to using your own email domain explains why a business address makes records easier to separate in the first place.
What to Do Before You Delete Old Email?
Run through a short checklist:
- Confirm the period of limitations has expired for the year the message relates to.
- Check with your insurance company and creditors, who may require you to keep records longer than the tax rules do.
- Keep anything tied to property you still hold, since you need it to figure gain or loss when you sell.
- Export an archive copy of anything you delete in bulk.
- Hold off entirely if your return is under examination or you have received an IRS notice. Well organized records are what help you answer those letters.
A scheduled cleanup also pairs well with regular inbox maintenance. Our article on keeping a busy inbox under control covers the habits that stop the pile from rebuilding the week after you clear it.
Quick answers
Q: How long should I keep business emails for tax purposes?
A: The IRS generally suggests three years from the date you filed the return for records supporting income, deductions or credits. Employment tax records need at least four years after the tax becomes due or is paid.
Q: Can I just keep every email forever?
A: You can, but years of stored mail raises your storage costs and gives an attacker who breaks in far more material to use. A retention policy keeps what matters and clears out the rest on a schedule.
Q: Do employment emails have their own retention rules?
A: The IRS requires employment tax records to be kept at least four years. Other federal and state agencies have their own requirements for employment records, and those rules vary, so check the official guidance or ask a qualified professional.
Q: What should I check before deleting old email?
A: Confirm the retention period has expired, check whether your insurance company or creditors require longer, and export a copy of the mailbox first. If your return is under examination or you received an IRS notice, keep everything until the issue is resolved.
Email services change their settings and menus often. This guide is general information, not legal or professional security advice; check your provider’s help pages and official sources such as FTC.gov and CISA.gov.
