HMRC Record Keeping: How Long Must You Keep Invoices?

HMRC's Record Retention Rules

HMRC requires you to keep invoices and financial records for a set period. Destroy them too early and you risk penalties. Keep them too long and waste storage space.

Limited Companies: 6 Years

If you operate as a Limited Company, the Companies House Act 2006 requires you to keep business records for 6 years. This includes:

• All invoices issued
• All invoices received (from suppliers)
• Bank statements
• Receipts and expense records
• Contracts and agreements

Calculation: 6 years from the end of the accounting year in which the record was created.

Example: Invoice dated 15 May 2026 in your company's financial year ending 31 December 2026. You must keep it until 31 December 2032 (6 years from the end of that financial year).

Sole Traders & Self-Employed: 5 Years

If you're self-employed (Self Assessment), HMRC requires 5 years of records. This includes invoices, receipts, and business expense documentation.

Calculation: 5 years from the deadline for the tax return filing.

Example: Invoice dated 15 May 2026 on your 2025–26 tax year. Your tax return is due 31 January 2027. You must keep it until 31 January 2032 (5 years from the filing deadline).

VAT-Registered Businesses

If you're VAT registered, the same 6-year or 5-year rules apply, but HMRC is particularly strict about VAT invoices. Missing or incorrectly formatted VAT invoices trigger compliance warnings.

Why Cloud Storage Is Essential for Retention

Risk 1: Physical File Loss

Storing invoices in filing cabinets is risky:

• Office fire or flood destroys records
• Pest damage (rats, insects)
• Someone accidentally throws them out
• Office relocation = invoices go missing

Risk 2: Hard Drive Failure

Your laptop dies. Hard drive crashes. If invoices are only on your computer, they're gone. And you have no 6-year-old backup to recover from.

Risk 3: No Audit Trail

HMRC wants to know: when was this invoice created? When was it modified? Who sent it? With paper files or local computer storage, you have no digital proof.

Risk 4: Access Problems

You retire. Your business partner leaves. The person with the password to the filing cabinet is gone. New team members can't access records to answer HMRC questions during an audit.

Best Cloud Storage Solutions for UK Invoices

1. Google Drive

Cost: Free (15 GB) or £1.59–£9.99/month for more storage Security: Encrypted at rest and in transit, two-factor authentication available Best for: Small sole traders and freelancers Pros: Easy sharing with accountant, automatic backups, access from any device Cons: Limited GDPR compliance features compared to enterprise tools

2. Microsoft OneDrive / Microsoft 365

Cost: Free (5 GB) or £5.99–£19.99/month for Microsoft 365 Security: Encrypted, compliant with HIPAA and GDPR Best for: Businesses already using Microsoft Office Pros: Integrates with Excel, Word; version control; DPA available Cons: Can be slower than alternatives for large file counts

3. Dropbox

Cost: Free (2 GB) or £9.99–£19.99/month Security: Encrypted, ISO 27001 certified, GDPR compliant Best for: Teams sharing invoice access Pros: Excellent file versioning (restore old versions), granular sharing permissions Cons: More expensive than alternatives for solo users

4. Sync.com

Cost: Free (5 GB) or £5.99–£14.99/month Security: End-to-end encrypted, zero-knowledge (even Sync.com can't access your files) Best for: Privacy-conscious businesses handling sensitive invoices Pros: Maximum privacy, GDPR compliant, UK-friendly Cons: Less well-known, smaller feature set than Google Drive

5. Invoice Software With Built-In Cloud Storage

Examples: Xero, Wave, InvoiceForged, HoneyBook Cost: £10–£50/month Security: Enterprise-grade encryption, automatic backups, audit logs Best for: Businesses that want invoicing + storage + accounting integration Pros: One place for everything; automatic archiving; HMRC-ready format Cons: Higher cost than generic cloud storage, but includes more features

How to Organise Invoices for 6-Year Retention

Folder Structure

Invoices/
├── 2026/
│   ├── January/
│   ├── February/
│   └── ... (one folder per month)
├── 2025/
├── 2024/
└── etc.

Or by customer:

Invoices/
├── Client A/
│   ├── INV-001.pdf (2026-01-15)
│   ├── INV-002.pdf (2026-02-10)
├── Client B/
└── etc.

Pro tip: Use consistent naming (INV-YYYY-MM-DD-ClientName.pdf) for easy searching.

Backup Strategy

Never rely on a single cloud provider. Implement:

1. Primary: Google Drive or OneDrive (daily auto-sync)
2. Secondary: External hard drive (monthly manual backup)
3. Tertiary: Archive to a sealed storage box (annual printout or DVD, stored off-site)

Metadata Preservation

Cloud storage automatically preserves:

• File creation date
• Last modified date
• Upload timestamp
• Editing history (version control)

This proves to HMRC: "This invoice was created on 15 May 2026 and has not been modified since."

Compliance Considerations

Geographic Data Residency

Invoices contain customer data. If your cloud provider stores data outside the UK, you must ensure:

• Data is encrypted (provider can't access it)
• You have Standard Contractual Clauses (SCCs) in place if stored in the US
• Provider is GDPR compliant

UK-safe providers: Sync.com, OneDrive (UK data centres), some Dropbox plans.

Audit Trail for HMRC

If HMRC audits you, they may ask: "Show me proof these invoices were issued on the dates you claim." Cloud storage with version history proves this because:

• The file was uploaded on X date at X time
• The file has never been modified (version history is clean)
• The file is encrypted, so you didn't alter it after creation

Automatic Retention Policies

Using Google Drive or OneDrive

Create a calendar reminder: "Delete invoices from 2017" on 31 December 2023 (6 years after 2017). This ensures you:

• Don't accidentally keep invoices too long (wasting space)
• Don't delete too early (breaking HMRC rules)

Using Invoice Software

Many invoice tools auto-archive invoices older than 6 years. Check your provider's retention policy:

• Does it auto-delete after 6 years? (Usually not — most keep indefinitely)
• Does it provide export/archive functionality?
• Can you download all invoices as a batch?

What If You've Lost Old Invoices?

If you discover you've only kept invoices for 2 years (not 6), and HMRC audits you:

1. Be honest. Explain your storage issues.
2. Provide alternative proof. Bank statements, customer payment records, receipts.
3. Accept penalties. HMRC may charge penalties for inadequate record-keeping (usually £100–£1,000 for genuine mistakes).
4. Fix going forward. Implement cloud storage immediately.

FAQ

Do I have to store invoices as PDFs?

No. Any format works: PDF, Word, image (JPG/PNG of a scanned invoice), email. However, PDF is recommended because it preserves formatting and is standard.

Can I delete invoices after the 6-year period ends?

Yes. After the retention period, you can securely delete them. Use file shredding software (not just "delete") to ensure they can't be recovered.

What if a customer asks for their invoice after 6 years?

You're not legally required to keep or provide it. However, it's good customer service to search your archives if you still have it. If deleted, explain the retention policy.

Do cloud backups count as retention?

Yes. Automatic cloud backups (Google Drive, OneDrive) count as retention. HMRC doesn't require physical filing cabinets — digital is acceptable and preferred.

Stop worrying about invoice storage. InvoiceForged automatically stores and archives all invoices for 6 years in encrypted cloud storage, HMRC-ready. Start free (3 invoices per week).