ATO Record Keeping Requirements: What Australian Small Businesses Need to Keep (and for How Long)
Not sure what records the ATO expects you to keep, or for how long? Here's a clear guide to staying compliant — and audit-ready — without drowning in paperwork.
There’s a particular kind of dread that hits when you hear the words “ATO audit.” It’s usually followed by a frantic search through inboxes, bank statements, and that one drawer where receipts go to die.
The truth is, most small business owners know they need to keep records. But the details — what exactly to keep, in what format, and for how long — tend to be fuzzy. And fuzzy record keeping is exactly the kind of thing that turns a routine ATO review into a nightmare.
Let’s clear it up.
The five-year rule
The ATO’s headline requirement is simple: keep all business records for at least five years. That clock starts from whichever is later — the date you prepared or obtained the record, or the date the transaction was completed.
So if you lodge your 2025–26 tax return in October 2026, you’ll need to keep those records until at least October 2031.
There are a few exceptions where records need to be kept longer. Superannuation records, for example, should be retained for at least ten years. And if you’ve claimed a capital asset as a deduction, you’ll need records for the entire time you own the asset plus five years after you dispose of it.
When in doubt, keep it longer.
What records you actually need to keep
The ATO doesn’t expect you to hoard every piece of paper that passes through your business. But they do expect a fairly comprehensive paper trail. Here’s what falls under their requirements.
Income records. Invoices you’ve issued, cash register tapes or POS summaries, records of any cash income, and bank statements showing deposits. If money came into your business, there should be a record of it.
Expense records. Supplier invoices and bills, receipts for purchases, credit card and EFTPOS statements, and records of any cash payments. Every dollar going out needs documentation showing what it was for and when it happened.
GST records. If you’re registered for GST, you need to keep tax invoices for all sales and purchases over $82.50 (including GST). For sales under that amount, a regular receipt will do. Your BAS worksheets and any GST calculations also need to be retained.
Employee and payroll records. Wages paid, PAYG withholding amounts, super contributions, leave balances, employment contracts, and TFN declarations. With Single Touch Payroll, much of this is reported digitally — but you still need to retain the underlying records.
Bank and financial records. Bank statements, loan documents, lease agreements, and any records of financial transactions. These form the backbone of your financial trail.
Asset records. Purchase receipts, depreciation schedules, and disposal records for any business assets — vehicles, equipment, computers, fit-outs. These matter for both depreciation claims and capital gains calculations.
Year-end records. Your tax return, financial statements, any stocktake records, and the working papers used to prepare them.
Digital records are not just okay — they’re encouraged
Gone are the days when the ATO expected manila folders stuffed with paper receipts. Digital records are fully accepted, and in many cases the ATO actively encourages them.
You can snap a photo of a paper receipt and throw away the original, as long as the digital copy is clear, complete, and a true reproduction. The same goes for scanned invoices, digital bank statements, and records stored in cloud accounting software.
There are a few rules around digital storage worth knowing. Your records need to be stored in a way that prevents them from being altered or damaged. You need to be able to produce them if the ATO asks — which means having backups and not relying on a single device. And if anything is encrypted or password-protected, you’ll need to be able to provide access.
Cloud accounting software handles most of this automatically. Your transactions are backed up, time-stamped, and stored in a format the ATO can work with. It’s one of the strongest arguments for moving off spreadsheets — not just efficiency, but compliance.
What happens if your records aren’t up to scratch
The ATO has the power to issue penalties for inadequate record keeping. These can range from administrative penalties of up to 20 penalty units (currently $6,260) for failing to keep records, to more serious consequences if poor record keeping leads to incorrect tax returns.
Beyond formal penalties, bad records create practical problems. If you can’t substantiate a deduction, the ATO can simply disallow it. If your income records are incomplete, they may estimate your income — and their estimates tend not to be generous.
During an audit, the burden of proof is on you. “I’m pretty sure I spent that” doesn’t cut it without a receipt or bank record to back it up.
A record-keeping system that actually works
The best record-keeping system is one you’ll actually use consistently. Here’s what that looks like in practice.
Use cloud accounting software. Connect your bank accounts and let transactions flow in automatically. This creates a real-time, accurate record of your finances without manual data entry. Modern tools can even categorise most transactions for you using AI.
Digitise everything immediately. When a paper receipt hits your hand, photograph it and file it digitally. Don’t let paper pile up — it’s the fastest path to lost records and missed deductions.
Reconcile regularly. Weekly bank reconciliation takes five minutes and catches errors before they compound. It also means your records are always audit-ready, not just when you scramble before tax time.
Separate business and personal finances. This is one of the simplest things you can do for clean records. A dedicated business bank account and credit card means every transaction in those accounts is a business transaction. No more trying to remember whether that lunch was a client meeting or a catch-up with a friend.
Back up your data. If you’re using cloud software, this is handled for you. If you’re storing records locally, set up automatic backups to an external drive or cloud service.
The records most small businesses forget
Some records slip through the cracks more than others. Motor vehicle logbooks are a common one — if you’re claiming business use of a vehicle, the ATO expects a logbook covering at least 12 continuous weeks. Home office expenses need documentation too, including how you calculated the business-use percentage.
Travel records are another gap. Business travel claims need receipts and a record of the business purpose. “I went to Sydney for work” isn’t enough — you need to show what the trip was for and how it related to earning income.
And if you’re paying contractors, keep copies of their invoices along with records showing they provided an ABN. Without an ABN, you’re required to withhold tax from payments — and you’ll need records proving you either withheld or had a valid ABN on file.
Keep it simple, keep it current
Record keeping doesn’t have to be a burden. The businesses that struggle with it are usually the ones trying to do everything in a batch at the end of the quarter (or worse, the end of the financial year).
A few minutes a day — scanning a receipt, checking a bank feed, approving a categorisation — adds up to compliance without the stress. And when the ATO does come knocking, you’ll have everything they need, right where you can find it.