Business records: ten-year retention is not a reason to keep everything forever
Separate accounting retention, usable evidence and personal-data limits. An ordinary cloud folder is not an archival policy.
Retention and retrieval are different achievements
A business can keep thousands of files and still be unable to produce the version that matters in a dispute. It can also retain personal data long after the original purpose has ended. Federal SME-portal and data-protection guidance were checked on 16 October 2026. The accounting rule described by the SME portal requires accounting books and supporting records, management reports and audit reports to be retained for ten years, running from the financial year’s end. That rule does not mean every email, duplicate identity document and informal note must remain accessible forever. Start by identifying document categories and the reason each is retained.
Make the archive capable of showing integrity
Electronic storage needs more than enough disk space. Ask how a record’s origin, integrity, readability and retrieval are preserved across software changes and staff departures. The SME portal explains that modifiable storage, including ordinary cloud storage, raises additional archival requirements. A file extension alone does not establish compliance. Distinguish a backup used to recover operations from an archive designed to preserve a record. Ask the provider for an explanation of controls, export options and responsibilities, and have the actual arrangement assessed where necessary. Do not destroy originals merely because a scanner or cloud subscription has been purchased without first validating the complete process.
A hypothetical invoice dispute years later
Imagine a small supplier receives a complaint about work completed four years earlier. It finds the invoice but cannot locate the accepted quotation, delivery record or final contractual version. Keeping accounting records has not automatically preserved the whole evidential story. The owner creates a linked matter file and asks the legal adviser which documents are relevant, rather than editing old records to make them agree. This example establishes no limitation period or outcome. It shows why retrieval should be tested before a conflict. Store the original evidence with its context and access controls so an authorised person can understand what happened without relying on someone’s memory.
Apply data minimisation without deleting evidence blindly
The PFPDT explains that the data-protection law does not itself impose one universal retention period; proportionality, purpose and relevant legal duties must be considered. Build a schedule by category, identifying the responsible person and review point. A live dispute, a specific obligation or another justified need may require an individual assessment before deletion. Conversely, a general fear of future litigation is not a sound operational reason to give everyone permanent access to all personal files. Restrict access and distinguish working copies from authoritative records. Ask a qualified adviser when duties conflict instead of using a blanket ten-year rule for every type of information.
Test retrieval and align the legal-insurance file
Choose a closed matter and check whether an authorised colleague can retrieve the signed version, supporting records and relevant correspondence without help from the original employee. Document gaps and improve the process going forward, preserving genuine historical records. Keep the applicable legal-protection policy and claim-notification instructions available, but do not assume insurance can recreate missing evidence or cover an existing dispute retrospectively. Review retention after changing accounting platforms or document providers. Clearwise can help organise the insurance side of that review while legal and records specialists assess compliance. The useful result is an archive that is proportionate, secure and usable when needed, not simply a growing folder nobody dares to clean.
Sources and further reading
Original Clearwise analysis. External reporting provides context; rules and contract terms must be verified with the competent authority or provider. Some press articles may require a subscription.
Apply this to your situation
Compare your actual documents and clarify what matters before making a commitment.
Request a free consultationGeneral guidance, not a binding quote or personalised legal, tax or investment advice. Examples are hypothetical and results are not guaranteed.
