Nonprofit Record Keeping: What You’re Required to Keep (And for How Long)
Quick Summary
- Form 990 (Part VI, Line 14) asks every filing nonprofit whether it has adopted a written document retention and destruction policy, and your answer becomes part of public record.
- The IRS requires every nonprofit, including 501(c)(3) organizations, to maintain books and records that support all income and expenses reported on annual filings.
- Some documents must be kept permanently, including Articles of Incorporation, board meeting minutes, the IRS Determination Letter, and year-end financial statements.
- Secure offsite storage helps Augusta nonprofits protect permanent records without crowding their office.
There’s a question on the IRS Form 990 that a lot of nonprofits don’t realize is there until they’re already filling out the form. Part VI, Line 14 asks whether your organization has adopted a written document retention and destruction policy. Your answer becomes part of your public 990, where any funder or watchdog group can read it.
Most small nonprofits answer no. Many didn’t know a policy was expected, and even fewer have one written down. The IRS doesn’t require a policy in order to keep your tax-exempt status. But it does require records that back up everything you report on your annual return, and a written policy is how you make that consistent.
Here’s what your nonprofit needs to keep and what a written record retention policy should cover so you can answer yes next year.
What the IRS Actually Requires
The IRS standard is broader than most people expect. According to their requirements, tax-exempt organizations must keep books and records sufficient to show compliance with tax law. That means you need documentation behind every line on your Form 990, even if you file the simpler 990-N postcard or aren’t required to file at all.
Your records have to back up everything your nonprofit reports on its annual return: income, expenses, program activity details, and unrelated business income if you have any. If the IRS examines your organization, missing documentation can put your tax-exempt status at risk.
What to Keep Permanently
Some records should never be thrown away. The National Council of Nonprofits and most CPA firms agree that the following documents belong in your permanent file:
- Articles of Incorporation and any amendments
- Bylaws
- Board meeting minutes and annual membership meeting minutes
- IRS Determination Letter (your official 501(c)(3) approval)
- Corporate resolutions
- Year-end financial statements and independent audit reports
- Federal and state tax returns, including Form 990 and 990-T
- Real estate deeds, mortgages, bills of sale, and leases
- Major contracts and insurance policies
These are the records that tell the story of your organization. Without them, you may struggle to prove your 501(c)(3) status during a grant review or audit.
How Long Do You Have to Keep Records for a Non-Profit Organization?
For everything that doesn’t need to be kept forever, here’s a general retention schedule used by most nonprofit accountants:
| Document Type | Suggested Retention |
|---|---|
| Bank statements and reconciliations | 7 years |
| Accounts payable and receivable records | 7 years |
| Donor acknowledgment letters | 7 years |
| Grant award agreements and reports | 7 years after grant closeout |
| Payroll records | 7 years |
| Employee personnel files | 7 years after termination |
| Form W-2, W-4, and 1099s | 4 years minimum |
| Expired contracts | 7 years after expiration |
Keep in mind that these are general guidelines, not federal mandates. Your state laws and your specific funders may require longer retention periods. Georgia nonprofits should check both state law and any contractual requirements from their grantors.
How Long Do You Have to Keep Board Meeting Minutes?
Permanently. Board meeting minutes are part of the official record of your nonprofit’s governance and decision-making. The IRS specifically asks on Form 990 whether your organization documents board meetings, and minutes are often the first thing requested during any audit or legal proceeding. Annual membership meeting minutes get the same treatment.
Federal Grant Records Retention Requirements
If your nonprofit receives federal grant funding, you fall under the Uniform Guidance (2 CFR 200). The federal standard is that grant records must be kept for at least three years after the date of submission of your final expenditure report. If any litigation or audit begins before that three-year clock runs out, records must be kept until the matter is fully resolved.
Some federal agencies require longer retention. Real property and equipment records often need to be kept for three years after final disposition of the asset, not after the grant closeout. Read your grant agreement carefully because the retention clock varies.
Building a 501(c)(3) Document Retention Policy
A written 501(c)(3) document retention policy turns scattered habits into routine practice. It’s also what makes a “yes” answer on Line 14 an honest one. The policy doesn’t have to be long. For most small nonprofits, a few pages is plenty.
A good policy covers:
- The categories of documents your nonprofit creates (financial, governance, program, HR, donor)
- The retention period for each category
- Who is responsible for storage and destruction
- How destruction will be documented
- A litigation hold procedure that pauses scheduled destruction when legal action is anticipated
You don’t need to start from scratch. The Nonprofit Risk Management Center offers a free sample record retention policy for nonprofits that you can download and customize. The IRS also publishes general recordkeeping requirements for exempt organizations worth reviewing as you build your policy, and the National Council of Nonprofits has a sample template from AICPA.
Good to Know
Email counts as a record. Every nonprofit document retention policy should specifically address how emails are stored and when they get deleted, because the IRS treats business emails the same as any other document.
Where Records Live Matters
A retention policy only works if your records are actually safe. For most small Augusta nonprofits, that’s where storage becomes a question. Filing cabinets in a closet work until they don’t. A burst pipe or a flooded basement can wipe out years of documentation in an afternoon.
Digital backups help, but if your only copies of permanent records live on someone’s laptop or in a single cloud account, you’re one staff transition or password reset away from a problem.
This is where secure offsite records storage earns its keep. A climate-controlled, NARA-certified facility protects permanent records from physical damage and provides chain-of-custody documentation that demonstrates due diligence during an audit. When the time comes to destroy records on schedule, secure shredding with a certificate of destruction closes the loop on your policy.
Frequently Asked Questions
What is the document retention policy for Form 990?
Form 990 asks the nonprofit to confirm whether it has adopted a written document retention and destruction policy (Part VI, Section B, Line 14). The 990 itself, along with its supporting documentation, should be retained permanently. The underlying records that support the figures on the 990 should be kept long enough to cover IRS audit periods and any longer retention required by state law or funders.
Do small nonprofits really need a written document retention policy?
Yes. The IRS asks about it on Form 990, and even nonprofits that file the 990-N postcard need to maintain records of their activities and finances. A written policy gives staff and volunteers clear guidance and protects the board from accusations of selective document destruction.
Can we store nonprofit records digitally instead of on paper?
Yes, and many nonprofits do. The IRS accepts digital records as long as they’re complete and accessible during an examination. Your retention policy should address backup procedures and what happens when staff turn over or vendors change platforms.
How do we destroy records securely once their retention period ends?
Secure shredding through a service that provides a certificate of destruction is the standard practice. The certificate documents that records were destroyed in accordance with your policy and is what you’d produce if anyone later questioned the destruction.
Set Up a Records Practice That Protects Your Mission
Building a nonprofit document retention policy is one of those board projects that pays off in ways you don’t see until you need them. Until an auditor asks for documentation you can’t produce, the work feels invisible. After that point, the upfront effort is the difference between a clean review and a long week of explanations.
Augusta Data Storage works with nonprofits across the CSRA on secure offsite records storage and scheduled destruction. Our NARA-certified facility provides climate-controlled protection for your permanent records, and our secure shredding services include certificates of destruction that document compliance with your policy.
Ready to take records management off your board’s worry list? Contact Augusta Data Storage today for a quote on secure storage for your nonprofit.