How Long Does a Broker Have to Keep Records: Rules by Type

How long a broker has to keep records depends on the type of broker and the type of record. Securities broker-dealers face the strictest federal rules, with periods running from three years up to the life of the firm. Mortgage brokers keep records under Regulation Z for two to five years depending on the document. Real estate and insurance brokers answer to state regulators, with typical windows of three to seven years. On top of all of that, every brokerage business also has to satisfy IRS retention rules, which sometimes outlast the industry-specific ones.

Securities Broker-Dealers

Broker-dealers operate under the most detailed framework of any broker type. SEC Rules 17a-3 and 17a-4 spell out which records a firm must create and how long each must survive,¹ and FINRA Rule 4511 requires member firms to preserve books and records in a format that complies with those SEC rules.²

The periods fall into three tiers:

Six years, with the first two easily accessible: general ledgers, balance sheets, income statements, customer account records, and trade blotters.
Three years, with the first two easily accessible: trade confirmations, order tickets, and all written and electronic communications, including emails, text messages, and instant messages.¹
Life of the firm: organizational documents such as articles of incorporation and partnership agreements, plus the records of any successor entity.¹

The “easily accessible” requirement matters more than it sounds. Regulators want the firm to produce records promptly on demand during those first two years, not eventually retrieve them from a backup tape.

Electronic records must sit in either a non-rewriteable, non-erasable (WORM) format or an audit-trail system that timestamps every creation, modification, and deletion, records who made each change, and can recreate the original if it was altered. Either way, the firm needs current indexes so any record can be located quickly.³

Mortgage Brokers and Lenders

Mortgage brokers and lenders follow Regulation Z, which sets retention periods by document type. A single loan file can hold records with different expiration dates.

Closing Disclosures: five years after consummation. If the loan is sold or transferred and the original lender no longer services it, the Closing Disclosure passes to the new owner or servicer, who picks up the remainder of the five years.⁴
Loan Estimates and related compliance evidence: three years after the later of consummation, the date the disclosure was required, or the date the action was required.⁴
Loan originator compensation records: three years after the date of each payment. Both the creditor and any loan originator organization must keep records showing all compensation received and paid, along with the governing agreement.⁴
General Truth in Lending compliance evidence: two years after the disclosure date or the date action was required. This is the baseline for records that do not fall into the categories above.⁴

Enforcing agencies can require longer retention if needed. As a practical matter, many mortgage firms keep the entire loan file for the full five years to match the Closing Disclosure period and avoid sorting documents into separate expiration buckets.

Real Estate Brokers

Real estate brokers are licensed by state real estate commissions, and every state sets its own timeline. The records at issue include transaction files, listing agreements, buyer agency agreements, purchase contracts, and closing statements.

Most states require at least three years after closing, or after a listing expires if the transaction never closed. Some states extend that to five years, and a handful push to seven years for categories like trust account documentation or employment agreements with agents. There is no single national standard, so checking your state real estate commission’s rules is essential.

Even where the minimum is three years, holding records for at least six is a practical hedge. Statutes of limitations for fraud, breach of fiduciary duty, and contract disputes can run past the minimum retention window, and a broker who has already destroyed the file has no way to defend the claim.

Insurance Brokers

Insurance brokers and agents are regulated by state insurance departments, each with its own retention rules.⁵ Applications, policy documents, claims files, premium payment histories, and client communications all fall under those rules.

State requirements generally run five to seven years, but the clock starts at different points depending on the record type. For active policies, the retention period typically does not begin until the policy expires or is canceled. Claims files often carry their own window measured from the date the claim was resolved. Life insurance and annuity contracts can require even longer retention because the policies themselves may stay in force for decades.

Insurance agents who also sell securities products such as variable annuities must comply with both state insurance rules and the federal broker-dealer requirements above. Whichever imposes the longer period controls.

IRS Tax Records

Every brokerage business also has to meet IRS retention rules, which run on a parallel track and sometimes outlast the industry-specific ones.

Three years: the standard period for records supporting income and deductions on a return, absent special circumstances.⁶
Four years: employment tax records — payroll, withholding, W-2s — measured from the date the tax becomes due or is paid, whichever is later.⁶
Six years: if you fail to report income exceeding 25% of the gross income shown on your return, the IRS has six years to assess additional tax, so the supporting records need to last at least that long.⁶
Indefinitely: fraudulent returns or unfiled returns carry no statute of limitations. Keep those records forever.⁶

The four-year employment tax rule catches brokerages with agents or staff off guard. A firm that clears out payroll files at three years could find itself unable to respond to an IRS employment tax audit.

What Happens If Records Aren’t Kept

Recordkeeping violations are not technicalities. The SEC has collected more than $1.5 billion in fines for recordkeeping failures since 2021, most of it tied to off-channel communications — business discussions on personal text messages and messaging apps that never made it into official archives.

In 2022, the SEC charged 16 firms for widespread failures to preserve electronic communications between 2018 and 2021. Eight of them, including Goldman Sachs, Morgan Stanley, and Citigroup, each paid $125 million, with total penalties exceeding $1.1 billion.⁷ A second wave in 2024 brought charges against 26 more firms and combined penalties of $392.75 million, with individual fines ranging from $400,000 to $50 million.⁸

FINRA also fines member firms and individual brokers. Brokers who kept their firms from preserving messages have drawn personal fines and suspensions ranging from 45 days to six months.⁹

Beyond regulatory fines, missing records create litigation risk. When records that should exist have been destroyed, courts can instruct juries to assume the missing evidence would have been unfavorable to the party that failed to keep it.

Disposing of Records After the Retention Period

When the retention period ends, brokers cannot simply throw old files in a dumpster. Federal law requires anyone who holds consumer information for a business purpose to dispose of it using reasonable measures that prevent unauthorized access. Paper records must be shredded, burned, or pulverized so they cannot practicably be read or reconstructed. Electronic media must be destroyed or erased to the same standard.¹⁰

Firms that outsource destruction to a third-party vendor must perform due diligence before hiring one, including reviewing independent audits, checking references, and confirming certification by a recognized trade association. The firm has to keep monitoring the vendor after the contract is signed, not just before.¹⁰ Broker-dealers subject to the Gramm-Leach-Bliley Act have additional obligations under the FTC’s Safeguards Rule, which requires a written information security program that covers customer data from collection through disposal.

1
eCFR. 17 CFR 240.17a-4 – Records to Be Preserved by Certain Exchange Members, Brokers and Dealers
2
FINRA.org. Rule 4511 – General Requirements
3
U.S. Securities and Exchange Commission. Final Rule – Electronic Recordkeeping Requirements for Broker-Dealers, Security-Based Swap Dealers, and Major Security-Based Swap Participants
4
eCFR. 12 CFR 1026.25 – Record Retention
5
FINRA. Insurance Agents
6
Internal Revenue Service. How Long Should I Keep Records
7
U.S. Securities and Exchange Commission. SEC Charges 16 Wall Street Firms with Widespread Recordkeeping Failures
8
U.S. Securities and Exchange Commission. Twenty-Six Firms to Pay More Than $390 Million Combined to Settle SEC Charges for Widespread Recordkeeping Failures
9
FINRA. Disciplinary and Other FINRA Actions Reported for October 2025
10
eCFR. 16 CFR Part 682 – Disposal of Consumer Report Information and Records