Skip to content

Business Record Keeping

BusinessLast reviewed: 1 April 20255 min

Keeping good business records is both a legal requirement and essential for running your business effectively. HMRC can inspect your records for up to six years — and poor records can result in tax investigations, penalties, and unnecessary stress.

Key points

  • Limited companies must keep accounting records for at least 6 years from the end of the financial year they relate to.
  • Sole traders must keep Self Assessment records for at least 5 years after the 31 January submission deadline.
  • Records must be complete, accurate, and available for HMRC inspection on request.
  • HMRC's Making Tax Digital programme requires most businesses to keep digital records from April 2026.
  • You must keep records of all income and expenditure, including invoices, receipts, bank statements, and payroll records.
  • Failure to keep adequate records can result in penalties of up to £3,000 per tax year.

What Records Must You Keep?

Both sole traders and limited companies must keep accurate records of all financial transactions. At a minimum, your records should include:

  • Sales and income: Invoices raised, receipts, till rolls, bank transfers received
  • Purchases and expenses: Supplier invoices, receipts for business expenditure, expense claims
  • Bank statements: For all business accounts, including credit card accounts used for business
  • Payroll records: If you employ staff — see our Employment Records guide for detail
  • VAT records: If you are VAT-registered — VAT returns, VAT account, import/export records
  • Stock records: If applicable — stock valuation at year-end, movements in and out

Limited companies must also maintain:

  • Statutory registers (directors, shareholders, PSC register)
  • Minutes of board meetings and shareholder meetings
  • Copies of resolutions passed
  • Share certificates and transfer forms

How Long Must Records Be Kept?

The retention period depends on your business structure and the type of record:

  • Limited company accounting records: 6 years from the end of the financial year (Companies Act 2006)
  • Self Assessment (sole traders and partnerships): 5 years after the 31 January deadline for the relevant tax year — so records for 2023/24 must be kept until 31 January 2030
  • VAT records: 6 years (or 10 years if you use the VAT MOSS scheme)
  • Payroll records: 3 years after the tax year to which they relate (but best practice is 6 years)
  • Statutory registers (limited companies): Must be kept at the registered office indefinitely and made available for inspection

If HMRC has opened a formal tax investigation, you must keep all relevant records until the enquiry is formally closed — do not destroy records during an open enquiry.

Making Tax Digital and Digital Records

Making Tax Digital (MTD) is HMRC's programme requiring businesses to keep digital records and submit tax information digitally. The current timetable:

  • MTD for VAT: Already mandatory for all VAT-registered businesses — digital records and digital submission required
  • MTD for Income Tax Self Assessment (ITSA): Mandatory from April 2026 for sole traders and landlords with income above £50,000; from April 2027 for those with income above £30,000

MTD for ITSA requires you to keep digital records and make quarterly updates to HMRC rather than a single annual tax return. You will need compatible software (such as QuickBooks, Xero, FreeAgent, or Sage) to comply.

Even before MTD becomes mandatory for your business, keeping digital records using accounting software offers significant advantages: real-time visibility of your financial position, automatic bank feeds that reduce manual data entry, and easier preparation of accounts and tax returns.

HMRC Compliance Checks

HMRC has the power to open a compliance check (tax enquiry) into any tax return within certain time limits — typically 12 months from the filing date for straightforward enquiries, or up to 20 years if fraud is suspected. During a compliance check, HMRC can require you to produce your business records for inspection.

Signs of poor record keeping that can trigger an investigation include:

  • Significant discrepancies between reported income and lifestyle
  • Large or unexplained cash transactions
  • Implausible expense claims relative to turnover
  • Figures that are inconsistent with industry benchmarks

If HMRC finds your records are inadequate, they can issue a penalty of up to £3,000 per tax year for failing to keep proper records, in addition to any tax, interest, and penalties arising from the underlying error. Keeping complete, organised records is your best protection.

Frequently asked questions

Can I keep records digitally rather than on paper?
Yes — HMRC accepts digital records. In fact, Making Tax Digital increasingly requires it. You can scan paper receipts and invoices and discard the originals, provided the digital copies are legible and complete. Use accounting software or a structured folder system with consistent naming conventions. Keep digital backups in at least two locations (e.g. cloud storage plus a local copy).
I have lost some receipts. What should I do?
First, try to obtain duplicates from suppliers. For small amounts, bank or credit card statements showing the payment can sometimes substitute as evidence. If you claimed expenses and HMRC challenges them without receipts, you may need to reconstruct records from other evidence. Going forward, use an expense management app (such as Dext or Hubdoc) to photograph receipts immediately after purchase — this minimises loss.
Do I need to keep records for a business that has now closed?
Yes. Closing a business does not end your record-keeping obligation. You must keep records for the periods described above even after the business has ceased trading. For a dissolved limited company, records should have been transferred to the directors or shareholders before dissolution. Tax obligations and HMRC's ability to investigate do not automatically end when a business closes.
What personal information within business records must I protect under GDPR?
Business records that contain personal data about individuals (customers, employees, suppliers) are subject to UK GDPR. You must not keep personal data for longer than necessary, and you must protect it appropriately. For example, customer invoices should be retained for tax purposes (typically 6 years), but personal data that is no longer needed for any legitimate purpose should be deleted. See our data protection guide for more detail.
How long must business records be kept?
For limited companies, the Companies Act requires accounting records to be retained for at least 6 years from the end of the financial year to which they relate (3 years for private companies not subject to the full regime, though 6 years is best practice). Sole traders must keep Self Assessment records for at least 5 years after the 31 January submission deadline. VAT records must be kept for 6 years. PAYE and payroll records must be kept for 3 years after the end of the tax year.
What should you do if you lose business records?
Contact your bank, suppliers, and clients to obtain duplicate invoices or statements. HMRC accepts reconstructed records where originals are genuinely lost, provided you can explain the circumstances and provide the best available evidence. For a tax investigation, contemporaneous records are always stronger, so it is essential to rebuild what you can and document your efforts. Going forward, use cloud accounting software and scan receipts immediately to reduce the risk of loss.

Official bodies and resources

HM Revenue & Customs

Government

Responsible for collecting taxes, paying some forms of state support, and administering national insurance.

Companies House

Government

Incorporates and dissolves limited companies, registers company information, and makes it available to the public.

Information Commissioner's Office

Regulator

The UK's independent authority for data protection and information rights, enforcing the UK GDPR and Data Protection Act 2018.

Was this page helpful?

Disclaimer

This information is for general guidance only and does not constitute legal advice. You should seek qualified legal help if your situation requires it.