Contractor Records Retention Requirements

Records retention for contractors spans federal statutes, state regulations, and contract-specific mandates that collectively govern which documents must be kept, in what format, and for how long. Failure to maintain compliant records exposes contractors to audit findings, penalty assessments, contract disqualification, and civil liability. This page covers the primary retention categories, the legal mechanisms that establish minimum holding periods, decision rules for overlapping requirements, and the scenarios where standard timelines are insufficient.

Definition and scope

Contractor records retention refers to the legally mandated preservation of documents generated or received during the performance of contracting work. The scope extends across payroll records, safety logs, tax filings, insurance certificates, project correspondence, subcontractor agreements, and environmental compliance documentation. Requirements originate from at least four distinct regulatory layers: federal agency rules, the Internal Revenue Code, state labor and licensing statutes, and the terms of individual contracts.

The Fair Labor Standards Act (29 C.F.R. Part 516) requires that payroll records, including employee hours worked and wages paid, be retained for a minimum of 3 years, with supplementary records such as time cards held for 2 years. The Occupational Safety and Health Administration (OSHA 29 C.F.R. § 1904.33) mandates that injury and illness records be preserved for 5 years following the year to which they relate. Federal contractors operating under the Davis-Bacon Act must retain certified payroll records for 3 years after project completion (29 C.F.R. § 5.5(a)(3)(ii)), a requirement detailed further in contractor Davis-Bacon Act compliance.

Tax-related records follow Internal Revenue Service guidance. The IRS generally recommends retaining employment tax records for at least 4 years after the tax is due or paid, whichever is later (IRS Publication 583). Contractors with employees misclassified as independent contractors may face extended audit exposure, making retention alignment with classification status a compliance-critical decision covered in independent contractor classification compliance.

How it works

Retention obligations are triggered by the nature of the document and the regulatory body that governs the underlying activity. Retention clocks typically start on one of three dates: the date the document is created, the date the project or contract ends, or the date the tax year closes. Federal acquisition regulations (FAR 4.703) require contractors receiving federal awards to retain contract-related records for 3 years after final payment, with extensions applying to litigation holds and audit resolution periods.

State requirements layer on top of federal minimums and frequently exceed them. California's Division of Labor Standards Enforcement, for example, requires payroll records to be maintained for 3 years under Labor Code § 1174, while California's Contractors State License Board requires licensees to retain financial records sufficient to demonstrate solvency. Florida Statute § 489.129 authorizes disciplinary action against contractors who fail to maintain adequate project records. Where state and federal minimums conflict, the more stringent requirement governs.

Document format rules have shifted as agencies have codified electronic recordkeeping. OSHA permits electronic storage of injury and illness records provided the data remains accessible and retrievable during inspection (29 C.F.R. § 1904.40). The IRS similarly accepts electronic records under Revenue Procedure 98-25, which specifies system documentation and indexing standards.

A structured breakdown of minimum federal retention periods by record type:

Payroll and wage records — 3 years (FLSA, 29 C.F.R. Part 516)
Time cards and work schedules — 2 years (FLSA supplementary records)
Injury and illness logs (OSHA 300) — 5 years (29 C.F.R. § 1904.33)
Federal contract records (FAR) — 3 years after final payment
Employment tax records — 4 years after tax due or paid (IRS Publication 583)
Davis-Bacon certified payrolls — 3 years after project completion
Environmental compliance records (EPA) — varies by program; hazardous waste manifests require 3 years under 40 C.F.R. § 264.74

Common scenarios

Multi-jurisdiction projects: A contractor operating across state lines must satisfy the retention floor in each state where work was performed. A contractor completing work in New York and Pennsylvania cannot apply the lower of the two standards uniformly; separate files organized by project jurisdiction are the standard approach.

Subcontractor relationships: Prime contractors bear responsibility for maintaining records demonstrating that subcontractors met applicable wage, safety, and licensing requirements. This creates a derivative retention obligation — the prime must hold subcontractor-sourced records, including certified payrolls and insurance certificates, for periods matching or exceeding the prime's own obligations. Subcontractor compliance management practices directly shape how those obligations are documented.

Litigation holds: When a contractor becomes aware of pending litigation or a government investigation, the standard retention clock is suspended indefinitely for all records that may be relevant. Destruction of documents after a litigation hold attaches can constitute spoliation, carrying sanctions independent of the underlying dispute.

Project closeout vs. contract closeout: Construction projects often involve a gap between substantial completion and final contract payment. Retention periods tied to final payment may extend significantly beyond the date work stopped on site.

Decision boundaries

Federal minimum vs. state minimum: Apply whichever is longer. Do not rely on federal minimums in states that have enacted stricter standards.

Tax records vs. employment records: These run on different clocks for the same document. A payroll register that satisfies both FLSA and IRS requirements must be held for the longer of the two applicable periods — typically 4 years rather than 3.

Electronic vs. paper: Electronic records are permissible under most federal programs, but the storage system must meet the agency's specific requirements for indexing, accessibility, and backup. A records system compliant with IRS standards may still fall short of OSHA's inspection-accessibility requirement.

Routine destruction vs. active hold: Absent litigation or audit notice, records may be destroyed upon expiration of their applicable retention period. Once a hold is triggered — by a formal notice of investigation, a subpoena, or internal legal notification — destruction of any covered record is prohibited regardless of where it falls in the retention calendar.

Contractors seeking a broader compliance framework should review contractor compliance documentation and the enforcement consequences addressed in contractor compliance penalties and enforcement.

References

📜 8 regulatory citations referenced · 🔍 Monitored by ANA Regulatory Watch · View update log