CRA Bookkeeping Requirements for Canadian Small Businesses

June 9, 2026 · 11 min read

Every Canadian small business owner has a legal obligation to keep financial records. This isn't optional, and it isn't just good practice — it's a requirement under the Income Tax Act and the Excise Tax Act. The Canada Revenue Agency can request your records at any time, and if you can't produce them, the consequences range from denied deductions to significant penalties.

The good news is that CRA bookkeeping requirements are straightforward once you understand them. This guide covers exactly what the CRA expects you to keep, how long you need to keep it, what format is acceptable, and what happens if your records don't hold up to scrutiny.

The Legal Basis for Record-Keeping

The obligation to keep records comes from two main pieces of legislation:

The Income Tax Act requires every person carrying on a business in Canada to keep records and books of account that are sufficient to determine their tax obligations and entitlements. This applies to sole proprietors, incorporated businesses, partnerships, and self-employed individuals.

The Excise Tax Act imposes similar requirements for businesses registered for GST/HST — you must keep records that support the amounts reported on your GST/HST returns, including both the tax you collected and the input tax credits you claimed.

The CRA also has the authority under both acts to inspect, audit, and request records. Failing to keep adequate records is itself an offence under the Income Tax Act, separate from any tax owing.

What Records Does the CRA Require You to Keep?

The CRA requires you to keep records that support every line on your tax returns. In practice, this means:

Income Records

• Sales invoices issued to customers or clients
• Cash register tapes or point-of-sale records
• Bank deposit slips matched to income
• Electronic payment records (Stripe, PayPal, e-transfer confirmations)
• Contracts for services rendered
• T4 slips, T5 slips, and other information slips if applicable

Expense Records

• Receipts for every business expense claimed as a deduction
• Invoices from suppliers and service providers
• Bank and credit card statements
• Cancelled cheques or electronic payment confirmations
• Expense reports for employees if applicable

GST/HST Records (if registered)

• Records of all taxable, zero-rated, and exempt sales
• GST/HST collected on each sale
• Receipts for input tax credit claims, with supplier GST/HST registration numbers
• Filed GST/HST returns and any correspondence with the CRA

Payroll Records (if you have employees)

• Payroll records including hours worked and wages paid
• Records of deductions (CPP, EI, income tax)
• T4 slips issued to employees
• Records of employer contributions

Asset Records

• Purchase invoices for capital assets (equipment, vehicles, computers)
• Records of improvements to assets
• Disposition records when assets are sold or scrapped
• CCA (Capital Cost Allowance) schedules

Business Account Records

• Business bank account statements — all of them, for all accounts
• Loan agreements and records of loan repayments
• Records of shareholder loans if incorporated

How Long Do You Need to Keep Records?

The standard CRA record retention period is six years from the end of the last tax year to which the records relate.

In practical terms: if your fiscal year ends December 31, 2026, you need to keep records related to that year until at least December 31, 2032.

Exceptions to the Six-Year Rule

Longer retention may be required in these situations:

• If you file a late return: the six years runs from the date you actually filed, not the due date
• If a tax year is under objection or appeal: keep records until the matter is fully resolved, plus two years
• For capital assets: keep records for as long as you own the asset plus six years after the year you dispose of it — because CCA claims and adjusted cost base calculations span the entire ownership period
• For corporate records: minute books, share registers, and other corporate records must be kept for the life of the corporation plus two years after dissolution

The practical rule: when in doubt, keep it longer. Storage is cheap. CRA reassessments are not.

Records You Can Destroy After Two Years

Some records have shorter retention periods: - Duplicate deposit slips where the information is already in bank statements - Certain supporting documents where the information has been captured elsewhere

However, the CRA is conservative in defining these exceptions. If you're unsure whether a document falls into a shorter retention category, keep it for six years.

What Format Are Records Acceptable In?

This is one of the most important and most misunderstood aspects of CRA requirements — and it directly affects how you set up your bookkeeping system.

Digital Records Are Fully Accepted

The CRA explicitly accepts digital records as long as they are a true and accurate copy of the original document. This means:

• A clear photograph of a paper receipt, stored digitally, satisfies the CRA's source document requirement
• Scanned PDFs of invoices are acceptable
• Electronic invoices and receipts (PDFs emailed to you, digital receipts from apps) are acceptable in their original digital form
• Accounting software records, including exports, are acceptable

The CRA's guidance (Information Circular IC05-1R1) confirms that electronic records meeting the requirements are equivalent to paper records.

Requirements for Digital Records

For digital records to be acceptable, they must be: - Accessible: you must be able to retrieve and produce them on CRA request - Readable: the content must be legible — blurry photos of receipts may not be accepted - Complete: the record must capture all the information from the original document - Unaltered: the digital record must be an accurate representation of the original

You Don't Need to Keep Paper If You Have Digital

Once you have a clear, complete digital copy of a receipt, you are generally not required to keep the paper original. This is a significant practical advantage — you can photograph receipts immediately and discard the paper, as long as your digital storage is reliable and accessible.

What "Reliable and Accessible" Means in Practice

The CRA expects that if they request records, you can produce them promptly — typically within a reasonable timeframe specified in an audit notice. Records stored in a cloud service you can no longer access, on a hard drive that has failed, or in an accounting system you've cancelled are not "accessible" in the CRA's view.

Reliable digital storage means: - Backed up in at least two locations (local + cloud, or two cloud services) - Organized so specific records can be found quickly - Stored in a format that will remain readable (PDF and common image formats are safe; proprietary formats from discontinued software are risky)

The CRA Audit Process

Understanding what actually happens during a CRA audit helps you understand why record-keeping matters and what "adequate records" means in practice.

Types of CRA Reviews and Audits

Desk review: the most common. A CRA officer reviews your return and may request specific documents by mail. You respond by sending the requested records. If your records are organized and complete, a desk review is typically resolved quickly with no adjustment.

Correspondence audit: similar to a desk review but more extensive. The CRA requests a broader range of documents, still handled by mail or through My Account.

Field audit: a CRA auditor visits your business location (or your accountant's office) to review records in person. Less common for small businesses, but triggered by significant discrepancies, prior compliance issues, or industry-specific audit programs.

Net worth audit: used when the CRA suspects unreported income. The auditor compares your assets and lifestyle to your reported income. Very difficult to defend against without detailed records.

What Auditors Look For

CRA auditors follow systematic procedures. For a typical small business audit, they will:

1. Request all financial records for the period under review
2. Reconcile reported income to bank deposits and other income indicators
3. Test expense claims against source documents
4. Verify GST/HST collected and ITCs claimed
5. Identify any discrepancies between reported amounts and what the records support

The most common audit adjustments for small businesses involve: - Expenses claimed without adequate supporting receipts - GST/HST ITCs claimed without proper documentation (especially missing registration numbers) - Personal expenses mixed into business records - Unreported income identified through bank deposit analysis - Capital expenditures claimed as current expenses

Your Rights During an Audit

You have the right to be represented by an accountant or tax professional during an audit. You are not required to answer questions without representation, and you can request that communications go through your representative.

If you disagree with an audit result, you can file a Notice of Objection within 90 days of receiving the reassessment. Objections are reviewed by the CRA's Appeals division, independent of the original auditor.

Penalties for Inadequate Records

Failing to keep adequate records has real financial consequences.

Denied Deductions

The most common consequence is simply that expenses without supporting receipts are denied. If you claim $10,000 in business expenses but can only produce receipts for $7,000, the CRA reassesses your income upward by $3,000 and you pay tax on the difference — plus interest from the original due date.

GST/HST ITC Denials

ITCs claimed without proper documentation — particularly missing supplier GST/HST registration numbers on purchases over $30 — are denied. The CRA assesses the denied ITCs as additional tax owing, plus interest.

Failure to Keep Records Penalty

Under section 238 of the Income Tax Act, failure to keep required records is an offence punishable by a fine of $1,000 to $25,000, imprisonment of up to 12 months, or both. In practice, this penalty is rarely imposed for first-time issues — the CRA typically focuses on the tax adjustment — but it demonstrates that inadequate record-keeping is treated as a serious compliance matter.

Gross Negligence Penalty

If the CRA concludes that inadequate records contributed to a significant understatement of tax, a gross negligence penalty of 50% of the understated tax can be applied on top of the tax and interest owing.

Building a CRA-Compliant Bookkeeping System

The requirements sound extensive, but a well-organized system makes compliance straightforward. Here's what works in practice:

Separate Business and Personal Finances

Open a dedicated business bank account and business credit card. Use them exclusively for business. This single step eliminates the most common audit trigger — mixed personal and business transactions — and makes your records far cleaner and more defensible.

Capture Receipts Immediately

The moment you have a receipt — paper or digital — capture it. Take a photo immediately, or save the email receipt to your bookkeeping system. Receipts fade, get lost, and become unreadable. A receipt you don't have is a deduction you can't defend.

Record Transactions Regularly

Monthly is the minimum. Weekly is better. Daily for high-volume businesses. The longer you wait, the harder it is to remember the business context of transactions — and context matters for explaining expenses to a CRA auditor.

Keep a Mileage Log if You Claim Vehicle Expenses

Vehicle expense claims are one of the most commonly audited items for small businesses. The CRA requires a mileage log showing the date, destination, purpose, and kilometres for every business trip. Without a log, vehicle expense claims are difficult to defend.

Document the Business Purpose of Meals and Entertainment

Write on the receipt (or in your bookkeeping notes) who you met with and the business purpose of the meal. "Client lunch — discussed Q3 contract renewal" is a defensible record. A restaurant receipt with no context is not.

Use Software That Stores Source Documents

Whether you use accounting software, an AI bookkeeping tool, or a combination, make sure your system stores the original receipt or invoice alongside the transaction record. A transaction record without the source document attached satisfies the bookkeeping requirement but not the CRA's source document requirement.

Back Up Regularly

Your records need to survive a hard drive failure, a ransomware attack, or a flooded office. Cloud storage with automatic backup — iCloud, Google Drive, Dropbox, or a purpose-built accounting platform — ensures your records are accessible even if your hardware isn't.

How AI Bookkeeping Supports CRA Compliance

AI bookkeeping is particularly well-suited to meeting CRA requirements because it addresses the two most common failure points: missing source documents and inconsistent categorization.

Every receipt processed through an AI bookkeeping system is stored digitally, linked to the transaction record, and accessible on demand. If the CRA requests records for a specific period, you can produce them quickly and completely — exactly what auditors expect.

The AI's consistent categorization also reduces the risk of audit adjustments. When the same type of expense is coded the same way every time — with the correct tax treatment applied automatically — your records are clean, consistent, and far easier to defend than manually-entered books where the same expense appears in three different categories over twelve months.

For GST/HST specifically, an AI bookkeeping tool that correctly identifies and records the tax component of every receipt gives you an accurate ITC claim with the documentation to support it — reducing both the risk of denied credits and the time spent reconstructing records at filing time.

CRA Compliance Checklist for Small Businesses

• Keep all income records: invoices, bank deposits, payment confirmations
• Keep all expense receipts with supplier name, date, amount, and GST/HST number (for purchases over $30)
• Keep records for a minimum of six years from the end of the relevant tax year
• Keep capital asset records for the ownership period plus six years
• Store digital records in a readable, accessible, backed-up format
• Maintain a mileage log if claiming vehicle expenses
• Document business purpose on meals and entertainment receipts
• Keep GST/HST returns and all supporting records if registered
• Keep payroll records and T4 slips if you have employees
• Separate business and personal finances — dedicated business account

The Bottom Line

CRA bookkeeping requirements are not designed to be burdensome — they're designed to ensure that the amounts reported on tax returns can be verified. For a business with organized, complete records, a CRA review is a straightforward process that resolves quickly with no adjustment.

The businesses that have problems are the ones that can't produce records when asked — not because they did anything wrong, but because they didn't build the habit of capturing and keeping their financial documents.

Start with the basics: separate your business and personal finances, capture every receipt digitally as it arrives, and review your records monthly. Build those three habits and you'll meet the CRA's requirements without difficulty — and you'll have the organized financial records that make running and growing your business significantly easier.

AI Bookkeeping by Time2Win Inc. keeps a complete, CRA-compliant digital record of every transaction — source documents included. Try it free at ai-bookkeeping.ai.