Alex is Sprintlaw's co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
If you’re running a small business, it’s easy to treat “paperwork” as something you’ll sort out later. But document retention isn’t just admin - it’s part of staying compliant, protecting your cashflow, and being able to prove what happened if anything is ever questioned.
In practice, document retention requirements in New Zealand affect almost every business, whether you’re a sole trader with a simple spreadsheet or a growing company with staff, contractors, suppliers and lots of customer transactions.
This guide breaks down what you generally need to keep, how long you need to keep it, and how to build a retention system that’s practical (and doesn’t take over your life).
What Are Document Retention Requirements In New Zealand?
Document retention requirements in New Zealand are the legal and practical rules around:
- what business records you need to keep (for example, tax invoices, payroll records, contracts, and company decisions);
- how long you need to keep them (often 7 years for many financial and company records, but not always); and
- how you need to store them so they’re accessible, accurate, and can be produced when required.
These requirements matter because a “we can’t find it” situation can quickly turn into a problem with:
- the IRD (tax audits and penalties);
- employment disputes (leave, pay, disciplinary records);
- customer complaints or disputes (what was promised, what was delivered); and
- shareholders, investors, or a buyer (if you’re selling or raising capital).
It can also be a privacy issue. Holding onto documents “just in case” - especially if they contain personal information - can create unnecessary risk if you don’t have a good reason to keep them.
Which New Zealand Laws Commonly Drive Document Retention?
There isn’t just one law that sets document retention requirements in New Zealand. Different legal obligations apply depending on what your business does and how it’s structured.
Here are some of the most common legal areas that drive retention obligations for small businesses.
Tax And Accounting Records (IRD Requirements)
Most businesses will have record-keeping obligations under New Zealand tax law. While the exact requirements depend on your circumstances (GST-registered or not, employees or not, etc.), it’s generally expected that you keep enough records to support what you’ve reported to the IRD.
Common examples include:
- sales invoices and receipts
- expense receipts and supplier invoices
- bank statements and reconciliations
- GST records (if registered)
- income records and accounting reports
A common retention period you’ll hear (and one that is often required for core tax records) is 7 years. Many businesses treat this as a baseline for tax and accounting documents - but it won’t automatically apply to every record your business creates.
Important: Sprintlaw can help with your legal documents and compliance systems, but we don’t provide tax or accounting advice. Your accountant (or the IRD) can confirm the record-keeping rules that apply to your situation.
Employment Records (If You Have Staff)
If you employ staff, you’ll need to keep employment-related records to show you’re meeting your obligations around wages, leave, and entitlements. Even if you have a great culture and no issues, you still need to be able to prove what was paid and why.
This often ties back to having clear written documents in place from the start, like an Employment Contract, plus accurate payroll and leave records.
Records you may need to retain include:
- signed employment agreements and variations
- timesheets and wage/time records
- holiday and leave records
- kiwisaver and payroll documentation
- disciplinary and performance documentation (where relevant)
In many cases, employers are required to keep wage/time and holiday/leave records for at least 6 years. Depending on the record type (and whether there’s a dispute or another legal obligation in play, such as health and safety), it may be appropriate to keep some documents for longer - but privacy considerations still apply.
Privacy And Personal Information (Privacy Act 2020)
If your documents contain personal information - for example customer contact details, employee file notes, CCTV footage, medical information, or credit checks - the Privacy Act 2020 is relevant.
One key principle is that you shouldn’t keep personal information for longer than you need it for the purpose you collected it. That means “keep everything forever” can actually be the wrong approach.
It’s worth thinking about privacy compliance alongside document retention, including having a fit-for-purpose Privacy Policy (especially if you collect personal information online).
Company Records (If You Operate Through A Company)
If you run your business through a company, you’ll have additional record-keeping responsibilities (and more stakeholders who may need transparency).
Depending on how your company is set up, you may need to retain things like:
- share registers and share issuances/transfers
- director and shareholder resolutions
- company minutes
- financial statements
- governing documents such as a Company Constitution
As a practical point, many company accounting records need to be kept for at least 7 years, while certain governance records (like minutes and resolutions) may need to be kept long-term so you can evidence decisions over the life of the company.
If there are multiple owners, a properly drafted Shareholders Agreement can also help clarify decision-making and what records should exist (and who can access them).
What Business Documents Should You Keep (And Why)?
When business owners think of document retention requirements in New Zealand, they often focus on tax. That’s important - but it’s not the full picture.
A more useful approach is to group documents into categories, then apply retention and storage rules to each group.
Financial And Tax Records
These are the documents that support what you’ve declared (or will declare) to the IRD and what your accountant relies on.
- invoices issued and received
- receipts
- bank statements and lending records
- asset purchase records (for depreciation, warranties, etc.)
- GST and PAYE records
Why they matter: If you’re audited, you need to be able to show how you arrived at your numbers. If you can’t, it can expose your business to penalties, reassessments, and a lot of stress.
Contracts And Key Commercial Documents
Your contracts are often your first line of defence when something goes wrong. If you don’t retain them (including versions and variations), you may struggle to enforce payment terms, scope boundaries, or liability clauses.
Depending on your business, this might include:
- supplier agreements
- service agreements and statements of work
- website terms and customer terms
- leases and licence agreements
- NDAs and confidentiality arrangements
For example, if you operate from a commercial premises, keep signed versions of your lease documents and any later changes. If you’re reviewing or negotiating a lease, a Commercial Lease Review can also help make sure the “paper trail” reflects what you actually agreed.
Why they matter: A contract you can’t find is much harder to rely on in a dispute. Good retention also helps if you’re selling your business and a buyer asks for key contracts during due diligence.
Employment And Contractor Records
Even small teams generate lots of sensitive documents quickly.
- employment agreements, variations, and onboarding paperwork
- pay records, timesheets, leave records
- independent contractor agreements (and invoices)
- health and safety training and incident records
- performance processes and warnings (if applicable)
Why they matter: If there’s an employment dispute, you’ll need to show what happened and that you followed a fair process. If you use contractors, written agreements can help reduce confusion about deliverables, payment, and IP ownership. (Retention is part of making those agreements enforceable in practice.)
Customer, Sales And Marketing Records
If you advertise, sell online, or run promotions, keep records of what you offered and what the customer accepted.
- quotes and proposals
- customer orders and confirmations
- refund and complaint correspondence
- advertising approvals and claims substantiation (where relevant)
Why they matter: Under consumer law, disputes often come down to what was represented and what was agreed. Having a clear audit trail can resolve issues quickly and fairly.
Governance And Ownership Records
These are especially important if you operate through a company, have investors, or are planning for growth.
- incorporation documents
- shareholder and director decisions (minutes/resolutions)
- cap table/share register
- share transfers and issue documents
Why they matter: These records support who owns what, who approved what, and whether decisions were made properly. That’s crucial for disputes, fundraising, and business sale due diligence.
How Long Do You Need To Keep Business Records In NZ?
This is the part most business owners want a straight answer on - and we get it.
The tricky bit is that there isn’t one single retention period that applies to every document. Different documents have different drivers (tax, employment, privacy, contract enforcement, and industry regulation).
That said, here are practical guidelines many New Zealand small businesses use as a starting point:
The Common “7 Year” Baseline
A lot of business record-keeping uses a 7-year retention period because it’s commonly required for core tax records and also appears across company accounting record requirements. As a general rule of thumb, many businesses keep:
- financial and tax records for at least 7 years
- supporting documents (invoices, receipts, bank records) for at least 7 years
This doesn’t mean “7 years for everything” - it’s a common default for tax-related materials, and you should adjust it based on the type of record and any specific legal obligations that apply.
Employment Records Often Need Longer Thought
Employment records often have specific minimum retention requirements (commonly 6 years for wage/time and holiday/leave records), and what’s appropriate can depend on:
- the type of record (pay and leave records vs performance notes)
- whether there’s an ongoing dispute or potential claim
- whether you have separate obligations (for example health and safety records)
It’s also important to manage privacy risk: keep what you need, but don’t keep sensitive information indefinitely without a clear reason.
Contracts: Keep Them For The Life Of The Relationship (And Beyond)
For contracts and legal documents, a practical approach is:
- keep them for as long as the contract is active (including renewals); and
- keep them for a sensible period after termination in case a dispute arises or you need to rely on clauses that survive termination.
In New Zealand, many civil claims must be brought within defined limitation periods (often 6 years for contractual claims), so businesses commonly keep key contracts and related correspondence for at least that long after the relationship ends - and longer for high-value, long-term, or higher-risk arrangements.
If you’re unsure what “sensible” means for your situation, it’s worth getting advice - especially for higher-value contracts, long-term supply arrangements, leases, or anything involving IP.
Privacy Principle: Don’t Keep Personal Information Longer Than Necessary
When personal information is involved, it’s not just about keeping documents long enough - it’s about not keeping them for longer than you should.
A good retention policy often includes:
- a defined purpose for each category of personal information
- a retention period tied to that purpose
- a secure deletion process (including backups)
If your business handles sensitive personal information (for example health data), it’s especially important to get your process right.
How Should You Store Business Records (Digital Vs Paper)?
Document retention requirements in New Zealand aren’t just about “keeping” records - they’re also about being able to produce them if you need to.
Most small businesses now store records digitally, and that’s usually fine, as long as your system is reliable and secure.
What “Good Record Storage” Looks Like In Practice
A good document retention system usually has:
- one source of truth (so staff aren’t saving different versions in different places)
- clear naming conventions (dates, counterparty, document type)
- version control for contracts and policies
- access controls (especially for HR and customer personal information)
- backups that are regularly tested
- a deletion process (so old documents don’t just pile up forever)
Be Careful With Personal Information And Sensitive Files
From a risk perspective, the most common issues we see aren’t “you didn’t keep enough” - they’re:
- you kept sensitive information in an insecure place;
- too many people had access to it;
- you kept it for too long without a lawful purpose; or
- you didn’t have a plan for what happens if there’s a data breach.
If your business collects personal information, it’s worth aligning your retention system with your privacy compliance documents (including your Privacy Policy and internal processes).
Don’t Forget Emails, Text Messages And “Informal” Agreements
In real life, agreements often happen over email, online chats, or even text messages - and those records can become important later.
For example, if a customer dispute turns on what was promised, an email thread might be the best evidence you have.
So, your retention approach shouldn’t only cover “formal PDFs”. It should also cover where key conversations live and how you’ll retrieve them if needed.
How Do You Set Up A Simple Document Retention Policy For Your Small Business?
A retention policy sounds like something only large organisations need - but a simple version is one of the best “set and forget” legal foundations you can put in place.
Here’s a practical way to do it without overcomplicating things.
Step 1: List The Document Categories You Actually Use
Start with your real-world business activities. Most small businesses can cover 90% of their needs with categories like:
- tax and accounting
- sales and customer records
- supplier and contractor records
- employment and HR
- company governance (if applicable)
- marketing and promotions
Step 2: Assign A Retention Period To Each Category
Use a baseline (often 7 years for core tax and accounting records), then adjust where privacy or practical risk suggests a different approach (for example, common 6-year minimums for certain employment records, or longer periods for major contracts and governance documents).
If you’re not sure, that’s normal - the right retention period can depend on your industry, the type of work you do, and your risk profile.
Step 3: Decide Where Each Category Will Live
Keep it simple. For example:
- Contracts folder (with subfolders by supplier/customer)
- Finance folder (by financial year)
- HR folder (restricted access)
- Governance folder (company resolutions, share records, constitution)
For governance documents, make sure you’re retaining signed copies of key decisions and keeping them together with the documents they relate to (for example, shareholder decisions alongside your constitution and cap table).
Step 4: Build In A Deletion Routine (Yes, Really)
This is the step that makes your system sustainable.
If you don’t have a deletion routine, you end up with:
- storage overload;
- higher privacy risk (more personal data sitting around); and
- less confidence that you’re relying on the “right” version of a document.
Even a quarterly calendar reminder to archive and delete can make a huge difference.
Step 5: Make Sure Your Legal Documents Are Properly Drafted
Retention only works if the underlying documents are clear and enforceable.
For example, if you’re relying on contracts with suppliers, customers, or staff, it’s worth making sure you have properly drafted agreements in place (rather than generic templates that don’t match how your business actually operates). If you operate a company, having a clear Company Constitution and Shareholders Agreement can also make record-keeping and decision-making much smoother.
Key Takeaways
- Document retention requirements in New Zealand can come from multiple areas of law, including tax, employment, privacy, and company governance.
- Many businesses use a 7-year baseline for core tax and financial records, but not every document should automatically be kept for 7 years.
- Employment records often have different minimum periods (commonly 6 years for wage/time and holiday/leave records), and you should balance retention with privacy risk.
- Contracts, employment records, and governance documents are often just as important as financial records, especially if a dispute arises or you plan to sell your business.
- If you hold personal information, you should avoid keeping it longer than necessary and store it securely to reduce privacy and data breach risk.
- A simple retention policy should cover categories, timeframes, storage locations, access controls, and a deletion routine so your system stays practical as you grow.
- Good retention supports good compliance - but it works best when you have the right documents in place from day one (like an Employment Contract, Privacy Policy, Company Constitution, and Shareholders Agreement where relevant).
If you’d like help setting up your document retention process, reviewing your contracts, or making sure your business is protected from day one, you can reach us at 0800 002 184 or team@sprintlaw.co.nz for a free, no-obligations chat.








