Bookkeeping
CRA Record Keeping: A Practical Guide for Ontario Small Businesses
Understand CRA records, six-year retention and exceptions, Canadian storage requirements, document trails and Ontario employment-record considerations.
Sources checked: . General educational information; no individual professional review is implied.
On this page
Good bookkeeping is not only about categorizing expenses. It creates a trail from an actual business event to the figures reported in your accounts and tax returns. An Ontario small business needs records that explain what happened, why it was a business transaction, and how the amounts were calculated. A folder full of bank statements or an accounting dashboard without supporting documents may not answer those questions.
This guide focuses on CRA record-keeping requirements and a practical approach to collecting, reviewing, storing, and retrieving information. It also identifies why Ontario employment records may need a separate retention schedule. The examples are hypothetical and the suggested workflow is not a legal checklist covering every industry. Your obligations can depend on business structure, record type, outstanding proceedings, and other laws. Use the linked official guidance and obtain advice for your circumstances.
Understand the purpose of supporting records
A transaction record should do more than establish that a payment occurred. An invoice can identify the supplier, purchaser, goods or services, date, price, and tax details. A contract may explain the business arrangement. A receipt can establish payment. Together, these documents support classification and reporting. No single document necessarily answers every question about a complex purchase.
For example, a card statement showing a $900 charge from a technology vendor does not show whether the charge was for a laptop, a subscription, or a personal purchase. It also may not provide the information needed to support an input tax credit. Obtain the detailed invoice and record the business purpose. If an item has mixed use, retain the basis for allocation.
CRA's keeping-records resources describe the responsibility to maintain adequate books and supporting documentation [1]. Treat them as a foundation for your system, not merely a requirement to accumulate paper. The useful test is whether another person could understand a transaction without relying entirely on the owner's memory. Organize evidence while the event is recent and people involved can still explain it.
Separate business activity from owner activity
Using dedicated business accounts can make reconciliation easier, although the legal and banking arrangements should suit the entity. The bookkeeping system still needs to identify transfers, owner contributions, withdrawals, and reimbursements. A deposit is not automatically revenue, and a payment is not automatically a business expense. Clear labels and supporting explanations reduce ambiguity.
Suppose an owner transfers $3,000 into the business bank account to fund a purchase. Recording that deposit as sales would overstate revenue. The correct treatment depends on the entity and the nature of the contribution. Similarly, a personal expense paid with a business card should not simply remain in a deductible-expense account. Flag it and determine the appropriate recording.
Maintain a process for expenses initially paid personally. Obtain the invoice, identify the business purpose, and document any reimbursement or amount owed. Avoid recording both the original expense and reimbursement as separate expenses. Regular owner review can resolve uncertainty before it accumulates. Sensitive transactions deserve advice, especially where corporate shareholder balances or other tax consequences may be involved.
Create a consistent intake process
Choose one routine for collecting documents: a secure upload folder, approved receipt-capture tool, or scheduled handover. Specify who submits documents and by when. Include supplier invoices, sales invoices, credit notes, payment reports, payroll records, and financing information. A consistent intake route is easier to monitor than documents scattered across personal inboxes, messages, and devices.
A simple naming convention can include date, supplier, document number, and type. Do not put unnecessary personal identifiers in filenames. Link the file to the ledger entry where possible. Keep the original information and check that images are readable. A blurry receipt uploaded quickly can be harder to reconstruct later than a document reviewed carefully at intake.
Use a missing-document register rather than guessing. Record the transaction, amount, expected document, person responsible, and follow-up date. If evidence cannot be recovered, discuss the implications before claiming an expense or tax credit. A workflow that flags uncertainty honestly is stronger than one that claims every transaction is complete merely because software assigned it a category.
Record transactions with enough detail
A chart of accounts should match the business and support useful reporting. Too few categories can conceal important costs; too many can produce inconsistent coding. Establish a short coding guide for recurring purchases and define when staff must ask for review. Include the treatment of refunds, deposits, transfers, and owner transactions rather than covering only ordinary invoices.
Consider a service business buying office supplies and longer-lived equipment from the same supplier. A rule that codes every payment to that vendor as office expense may be inappropriate. Review the invoice contents. The decision about current expense versus capital property is not determined by the vendor's name. Retain any judgment or allocation needed for the reporting and tax treatment.
Tax codes also need review. Ontario's standard HST rate is 13% for applicable supplies made in Ontario, but place-of-supply and type-of-supply rules matter [2]. Do not assume every purchase includes recoverable HST or every customer sale uses the same code. Keep the evidence supporting unusual treatment and refer uncertain transactions to someone with the appropriate knowledge.
Reconcile rather than rely on a feed
Bank feeds can reduce manual entry, but they are not independent proof of completeness or correct classification. Reconcile every relevant bank and credit-card account to its statement. Check opening balances, missing transactions, duplicated imports, fees, transfers, and outstanding items. Save the completed reconciliation so another reviewer can understand the recorded position at the date.
Payment processors need their own reconciliation. A deposit may represent multiple sales reduced by fees and refunds. For example, a platform could collect $2,000 from customers, retain $60 in fees, and deposit $1,940. That deposit alone does not reveal revenue, tax collected, refunds, or the fee's tax treatment. Use the transaction-level settlement information and document the reconciliation.
Review customer and supplier schedules as well. A bank reconciliation cannot reveal every invoice that should have been entered but was omitted. Compare statements, aged balances, and transaction reports. The objective is a connected set of records: source documents, detailed ledgers, independent statements, and reconciliations that agree or clearly explain differences.
Apply the CRA retention rule correctly
CRA states that required records and supporting documents generally must be kept for six years from the end of the last tax year they relate to [3]. For individuals, the tax year is generally the calendar year; for corporations, it is the fiscal period. Do not count six years from the purchase date and assume the result is always the correct destruction date.
For an ordinary record relating only to an individual's 2026 tax year, the general rule points to keeping it through the end of 2032. That illustration assumes timely filing and no exception, objection, appeal, or other reason to retain it longer. It is not authorization to destroy a particular file. Confirm the applicable facts before applying a schedule.
CRA identifies important exceptions. Historical information affecting long-term acquisitions, disposals, share registries, or winding up may need indefinite retention. Late-filed income-tax returns, objections, appeals, and directions from CRA can extend retention [3]. Record types should therefore have distinct rules and holds. A general policy saying delete everything after six years is not adequate for all circumstances.
Plan where electronic records are kept
CRA requires records at the place of business or residence in Canada unless it gives written permission to keep them elsewhere. Records stored outside Canada and accessed electronically from Canada are not considered records kept in Canada [3]. A cloud provider's convenient login does not by itself establish that your record-location arrangements meet the requirement.
Before choosing a system, ask where records and backups are stored, what can be exported, and how you will provide usable records if requested. Discuss whether your arrangement satisfies CRA's guidance or requires written permission. Privacy rules concerning outsourcing are a separate issue; meeting one set of requirements does not automatically meet the other.
Keep control of the business account and a workable access plan. If a bookkeeper or provider holds records, document how you can retrieve them, including after the relationship ends. The business cannot assume that outsourcing makes record responsibilities disappear. Ask for a handover process and periodically verify that exports and supporting documents remain readable.
Preserve usable information when systems change
A software migration should include more than opening balances. Identify the reports, transaction details, source documents, and history needed for future review. Test exports before cancelling access to the old platform. A PDF summary may be useful for reading but may not preserve all the detail or format needed to verify tax information.
Use a sample retrieval exercise: find an old invoice, identify its ledger entry, trace its payment, and show the relevant reconciliation. Repeat for a refund, a payroll transaction, and an owner reimbursement if applicable. If the chain breaks, improve the migration plan before the old system becomes unavailable. This is a recommended control, not a prescribed CRA testing frequency.
Backups should also be tested for restoration, with permissions suited to the sensitivity of information. Keep a documented recovery process and designated responsible person. A backup that no one can restore is not a dependable safeguard. Avoid placing sensitive client or employee information in unapproved messaging tools simply because they are convenient for a temporary handover.
Keep Ontario employment records on their own schedule
If the business has employees covered by Ontario's Employment Standards Act, provincial record obligations add another layer. The official guide describes retention periods for personal information, hours, wage statements, agreements, vacation records, and other categories [4]. The periods are not all identical, and particular employee categories or circumstances can involve exceptions.
The guide generally requires specified hours records for three years after the relevant day or week, and wage-statement information for three years after it was provided. Vacation time and vacation pay records generally must be kept for five years after the record was made [4]. A federal tax retention period may also apply to payroll-related records. Apply the relevant obligations together, not whichever period is shortest.
Maintain role-based access and avoid collecting unrelated sensitive information. Schedule retention reviews carefully and preserve records under a legal or regulatory hold. This article does not determine whether every provincial provision applies to a particular employee or employer. Use the Ontario guide and appropriate employment advice to establish the actual payroll record schedule.
Prepare for requests without creating unnecessary exposure
Organized records make it easier to answer a request from an accountant, lender, or regulator. Confirm the identity of the requester, the purpose, and the specific scope before sharing. Provide information through an appropriate channel and keep a record of what was sent. The fact that documents must be retained does not mean everyone should have unrestricted access.
A practical package might include the trial balance, reconciliations, relevant invoices, and an explanation of significant adjustments. Label the reporting period and version clearly. Do not remove inconvenient transactions or rewrite history to create a tidier package. Corrections should be documented and traceable. If a request is unclear or involves a dispute, obtain advice before responding.
Avoid putting SINs, banking details, or tax documents in a general website inquiry. Start with a description of the issue and ask how documents should be transferred securely. Good bookkeeping includes information handling, not only numerical accuracy. The linked online-accounting guide explains additional considerations for permissions, provider assessment, and recoverability.
Build a routine you can sustain
Start with a weekly document intake and a regular reconciliation cycle suited to your transaction volume. Review missing documents and unusual entries with the owner. At year-end, reconcile the final adjustments back to the system so that the next opening balances are correct. A sustainable process prevents a last-minute reconstruction exercise from becoming the normal way the business operates.
Evaluate quality using concrete checks: can you retrieve the evidence, explain the coding, reconcile the payment, and reproduce the report? Those checks are more meaningful than the number of files captured or transactions processed. Training may be needed if recurring mistakes show that staff do not understand the business purpose or review process.
LMAR's bookkeeping service page describes on-site, remote, and outsourced support. Bring your current system, document-storage arrangements, and missing-record issues to a discussion. Before destroying records early, note that CRA requires written permission and cannot authorize destruction of records required under laws it does not administer [3]. A proper retention review is a decision based on applicable requirements, not simply a storage-cleanup task.
Official sources & research dates
Numbered references link to the official pages below. Source page modification dates are shown only where supplied by the publisher. A source-check date is not a professional sign-off, and rules may change. Some BDC downloads require a form; their linked explanatory pages are publicly readable.
- Keeping recordsCanada Revenue Agency · Checked October 18, 2026Back to sources
- Charge and collect GST/HST: rates, invoices and reportingCanada Revenue Agency · Checked October 18, 2026 · Source modified April 8, 2026Back to sources
- Where to keep records, for how long, and permission to destroy them earlyCanada Revenue Agency · Checked October 18, 2026 · Source modified August 3, 2026Back to sources
- Employment Standards Act guide: record keepingGovernment of Ontario · Checked October 18, 2026 · Source modified February 5, 2026Back to sources