The short answer: keep every invoice as a complete, unaltered PDF, named one way every time, filed by year and month, for as long as your country requires — and keep the bank statement that proves each payment beside it. Do that, and a tax audit becomes a short exercise in finding files, not a reconstruction of your business history. This guide gives you the retention periods, the naming system and the filing habits for small businesses in the EU and US.
Year → month → one PDF per invoice, named YYYY-MM-INV-number-client.pdf, with paid invoices stamped PAID and filed beside their bank evidence. No second system, no "misc" folder, no renaming later. Everything below is just that rule, explained.
Retention periods differ, and they are long — which is why a durable system matters more than a clever one. The figures below are the commonly applied rules; always confirm the current rule for your country and business type, because this guide is not tax advice.
Rule of thumb: when in doubt, keep it for 10 years. Storage is cheap; a missing invoice in year seven is expensive. Start the habit with today's invoices using our invoice generator, and bring older invoices into the same system with our merge PDF tool where a month's documents need combining.
Germany's 10-year retention rule means an invoice issued in November 2026 must still be producible in November 2036 — a decade in which laptops die, email accounts close and cloud services change their terms. That single fact kills every archiving plan that depends on one inbox, one laptop or one provider's goodwill. A PDF on your own drive, plus a backup copy elsewhere, is the only format that survives all three. Paper fades, inboxes close, but a well-named PDF in two places is still there in 2036.
Use one pattern, every time: YYYY-MM-INV-number-client.pdf — for example, 2026-10-INV-1042-acme.pdf. The year-month prefix sorts every folder chronologically without thinking; the invoice number finds the document in seconds; the client name lets you search without opening files. Never use names like "invoice-final-v2.pdf" — they are unfindable in a year, and an auditor will not wait while you guess which "final" is final. Received invoices follow the same pattern with the supplier's name: 2026-10-SUP-office-supplies.pdf. If an invoice arrives as a photo, convert it with our JPG to PDF tool before filing, and keep the photo too.
Auditors rarely ask for anything exotic. They ask for the invoices behind your tax-return figures, the bank statements showing the payments, and the contracts or delivery notes behind large items. The winning preparation is therefore boring: for every figure in your return, a filed PDF exists that proves it. Three habits make that true. First, file the invoice the week it is issued or received — a monthly filing session turns into a quarterly backlog, which turns into a missing folder. Second, attach the payment evidence: a PAID stamp with the payment date on the invoice copy, plus the bank statement line, closes each item visibly. Third, summarise monthly: a statement of account per client turns a pile of invoices into one checkable page, which is exactly what an auditor wants to see first.
In most EU countries and the US, a complete, readable, unaltered PDF counts as the record — the key word is unaltered. Never edit an issued invoice PDF afterwards; if it is wrong, issue a credit note (our credit note maker handles that) and keep both documents. Scan paper invoices promptly, at readable resolution, and check the scan before shredding anything — a blurry scan is worse than no scan because it looks like a record but proves nothing. Keep paper originals for anything unusual: signed originals, cash receipts and anything your accountant flags, until you have confirmed the digital rule for your case. And keep two copies of the archive: your working drive plus a separate backup, because a single drive is a single point of failure over a 10-year horizon.
Here is the privacy contrast that matters for tax records. Server-upload tools — including Adobe's online tools and most free converters — copy your invoices to their servers when you process them. Their retention policies, breach notifications and data-residency rules then govern your financial documents, not yours, and you cannot verify deletion. Browser-only tools, like every tool on this site, process the file on your own device: the PDF never leaves the tab, nothing is stored for you, and your archive lives only where you put it. For a holiday photo the difference is trivial; for ten years of invoices it is the whole decision. That is also why our accounting privacy guide recommends the same rule: financial documents never go through an uploader you do not control.
It depends on your country: Germany generally requires 10 years, France 10 years, the UK 5 years after the filing deadline for the self-employed and 6 years for limited companies, and the US Internal Revenue Service generally 3 years from filing. Always check your own country's current rule — this guide is not tax advice.
In most EU countries and the US, yes, provided the PDF is complete, readable and unaltered, and you can produce it on request. Germany's GoBD rules even allow properly documented scanning to replace paper originals. Keep the PDF exactly as received or issued — never edit it afterwards.
One pattern, used every time: year, month, invoice number, client, for example 2026-10-INV-1042-acme.pdf. The date sorts the folder, the number finds the invoice, and the client name lets you search without opening files.
They ask for the invoices behind your tax return figures, the bank statements that show the payments, and the contracts or delivery notes behind large items. If every figure in your return traces to a filed PDF in seconds, the audit is short.
If your country allows properly documented digital archiving, a complete PDF is usually enough — but keep paper for anything unusual (signed originals, cash receipts, documents your accountant flags) until you have confirmed the digital rule for your case.
Server-upload tools copy your financial documents to someone else's servers, where retention and breach policies are theirs, not yours. For invoices and tax records, browser-only tools that never upload are the safer choice — your archive should live on devices and backups you control.
Mark them paid and file them with the payment evidence. Stamping a copy PAID with the payment date, keeping the bank statement line beside it, and updating your statement of account turns a paid invoice from a loose end into a closed record.

Educational content only. Nothing on this site is legal or professional advice.