Singapore Records Retention Requirements 2026: How Long Must Companies Keep Documents?
Every Singapore company is bound by at least four different retention clocks — and most compliance teams can only name one of them. Records retention in Singapore is governed not by a single statute but by overlapping requirements from IRAS, ACRA, MOM, MAS, and the PDPA, each with its own minimum period, trigger date, and penalty regime. Keep records too briefly and you face fines, disallowed tax claims, or regulatory action. Keep them too long and you may breach the PDPA's Retention Limitation Obligation. This guide consolidates the statutory retention periods every Singapore organisation must know in 2026, explains the tension between deletion and preservation duties, and shows how a structured digitisation and archival strategy — the approach Micrographics Data has delivered for Singapore institutions since 1989 — resolves both.
What Are Singapore's Statutory Record Retention Periods?
A record retention period is the legally mandated minimum time an organisation must keep a document, counted from a defined trigger date such as the Year of Assessment, the end of the financial year, or the end of a business relationship. In Singapore, the core requirements are:
| Regulator / Law | Record type | Minimum retention period |
|---|---|---|
| IRAS — Income Tax Act 1947, GST Act | Accounting records, source documents, invoices, receipts, bank statements | 5 years from the relevant Year of Assessment (or end of the GST accounting period) |
| IRAS — Enterprise Innovation Scheme cash payouts (s37R) | Records supporting EIS claims | 7 years |
| ACRA — Companies Act 1967, s199 | Accounting records explaining transactions and financial position | 5 years after the end of the financial year; 5 years after dissolution for struck-off or wound-up companies |
| MOM — Employment Act, Employment (Employment Records, Key Employment Terms and Pay Slips) Regulations 2016 | Employee records and salary records | Latest 2 years for current employees; the last 2 years of records kept for 1 year after an ex-employee leaves |
| MAS — Notice 626 (banks) and parallel sector notices | Customer due diligence and transaction records | 5 years from the end of the business relationship (CDD) or the transaction date; longer where court proceedings are ongoing |
| PDPA 2012 — s25 Retention Limitation Obligation | Any document containing personal data | No fixed period — must cease retention once the collection purpose is served and no legal or business need remains |
| Limitation Act 1959 | Contracts and commercial documents | No mandated period, but contract claims may be brought within 6 years — the practical retention floor for agreements |
Two features of this table catch companies out. First, the trigger dates differ: IRAS counts from the Year of Assessment, ACRA from the financial year end, MAS from the end of the customer relationship. A single client file can carry three different destruction dates. Second, these are minimums, not targets — litigation holds, ongoing IRAS objections, or MAS inspections suspend the clock entirely.
Penalties are not theoretical. Failure to keep proper records under the Companies Act exposes the company and its officers to fines and potential imprisonment, while IRAS may disallow expense claims, capital allowances, or GST input tax where documentation cannot be produced.
The Retention Trap: When PDPA Says Delete but IRAS Says Keep
The Retention Limitation Obligation under Section 25 of the PDPA requires organisations to cease retaining documents containing personal data — or anonymise them — as soon as the collection purpose is no longer served and retention is no longer necessary for legal or business purposes. This creates an apparent conflict: HR files, customer invoices, and KYC records all contain personal data, yet IRAS, ACRA, and MAS require them to be kept for years.
The resolution is in the statute itself. The PDPC's Advisory Guidelines on Key Concepts confirm that retention required by other written law is a legitimate legal purpose — the PDPA yields where a statutory retention duty applies. The PDPC's guidance also recognises the Limitation Act's 6-year window for contract claims as a valid basis for continued retention.
What the PDPA does prohibit is indefinite, unmanaged retention. Organisations that keep everything forever "just in case" — a common default in Singapore offices where paper simply accumulates — are the ones exposed. PDPC enforcement decisions have penalised organisations for retaining personal data long after any purpose was served. The compliance answer is a documented retention schedule: a policy that maps every record class to its statutory minimum, its business justification, and a defined disposal or preservation action at expiry. A retention schedule converts an unmanageable archive into a defensible one — and it is the single document a PDPC or MAS inspector will ask for first.
Which Records Can Be Kept Digitally — and Which Deserve an Analogue Layer?
Singapore regulators broadly accept properly imaged digital records. IRAS's record keeping guides expressly permit business records to be kept in electronic media and imaging systems without prior approval from the Comptroller, provided the requirements in its guides are met — the images must be complete, legible, and retrievable throughout the retention period. MOM likewise accepts employment records in soft or hard copy. For the 5-to-7-year retention classes, professionally scanned, OCR-indexed digital records are the operationally superior format: searchable, PDPA-access-request-ready, and free of the floor space costs of paper.
The calculus changes for records with retention horizons beyond a decade — or none at all. Every company holds a class of records that effectively never expires: statutory registers and minute books that live as long as the company, title and property documents, intellectual property records, heritage and founding documents, and engineering drawings for long-lived infrastructure. For these permanent-class records, purely digital storage carries format-migration risk, ransomware exposure, and media lifespans measured in years, not generations.
This is where hybrid preservation earns its place. Archival silver halide microfilm such as Micrographics Data's 35MGD-HR — rated LE500 under ISO 18906 and ISO 18902 storage conditions, on a PET-125 polyester base at 850 lines/mm resolution — provides a 500-year, ransomware-immune, human-readable analogue layer. Digital files can be written directly to microfilm using a computer output microfilm system such as the AW3 Archive Writer, giving permanent-class records a preservation master that no cyberattack, cloud outage, or format obsolescence can touch. The result is a two-tier architecture: digital for access and compliance retrieval, microfilm for records that must outlive every retention schedule.
Managing Retention at Scale: Cloud Enterprise AI Document Management and Collection Management Systems
A retention schedule is only as good as the system that enforces it. A cloud enterprise document management system (DMS) or digital asset management (DAM) platform applies retention rules automatically: every record carries metadata for its class, trigger date, and disposal or preservation action, so destruction dates are computed rather than remembered. Modern AI-enabled platforms go further — classifying incoming documents on ingest, extracting dates and entities through OCR and machine learning, flagging records due for disposition, and maintaining the immutable audit trail that PDPC, IRAS, and MAS inspectors expect. Role-based access controls and full-text retrieval also make PDPA access and correction requests answerable in minutes rather than days.
For organisations managing collections rather than transactional paperwork — museums, galleries, archives, foundations, and corporates with heritage holdings — a collection management system is the equivalent governance layer. Qi, the enterprise-grade collection management and DAM platform distributed in Singapore by Micrographics Data, manages catalogue records, digitised assets, rights, and provenance in one cloud environment, so preservation masters on microfilm and access copies in the cloud remain permanently linked. For built-environment records — as-built drawings, O&M manuals, fire safety and compliance documents — ARC Facilities puts AI-searchable building information in the hands of facilities teams instantly.
The architecture that satisfies every Singapore regulator in 2026 is therefore three-tier: AI-powered cloud DMS or collection management for daily governance and retrieval, indexed digital images for the 5-to-7-year statutory classes, and LE500 archival microfilm for permanent-class records.
Building a Compliant Retention and Digitisation Workflow
A defensible records programme for a Singapore organisation follows four steps. First, classify: inventory record types and map each to its statutory retention period from the table above, noting the correct trigger date. Second, digitise: convert active paper holdings through a professional document scanning service with chain-of-custody documentation, PDPA-compliant data handling, and OCR indexing, then load the images into a governed cloud DMS or collection management system so retention rules, access controls, and audit trails are enforced automatically. Third, disposition: at expiry, apply the scheduled action — secure destruction for personal-data records under the PDPA, or transfer to the permanent preservation tier for records of enduring legal, corporate, or heritage value. Fourth, preserve: commit permanent-class records to archival microfilm as the long-term master.
Micrographics Data has operated this workflow for government, financial, heritage, and corporate clients in Singapore since 1989 — from secure enterprise scanning at our Commonwealth Drive facility to digital-to-microfilm conversion on the AW3. The outcome is the same in every engagement: records that satisfy IRAS, ACRA, MOM, MAS, and PDPC simultaneously, at lower cost than storing paper that no regulator asked you to keep.
Key Questions Answered
How long must a Singapore company keep invoices and accounting records?
At least 5 years from the relevant Year of Assessment under IRAS requirements, which aligns with the Companies Act requirement of 5 years after the end of the financial year. Companies claiming Enterprise Innovation Scheme cash payouts must keep supporting records for 7 years.
How long must employers keep employee records in Singapore?
Under the Employment Act regulations in force since 1 April 2016, employers must keep employee and salary records covering the latest 2 years for current employees. For ex-employees, the last 2 years of records must be retained for 1 year after the employee leaves.
Can records be destroyed once the retention period expires?
Generally yes — and where the records contain personal data, the PDPA's Retention Limitation Obligation expects disposal or anonymisation once no legal or business purpose remains. Destruction should follow a documented retention schedule and be suspended where litigation, an IRAS objection, or a regulatory investigation is ongoing. Records of enduring corporate or heritage value should instead be transferred to permanent archival preservation.
Do scanned records satisfy IRAS and MOM requirements?
Yes. IRAS permits records to be kept in electronic media and imaging systems without prior approval, provided they remain complete, legible, and retrievable per its record keeping guides. MOM accepts employment records in soft or hard copy. Professional scanning with quality control and indexing ensures images meet the retrievability standard for the full retention period.
Do we need document management software to comply with retention requirements?
No law mandates specific software, but regulators expect records to be retrievable, complete, and auditable throughout their retention period — and expect disposal to be systematic under the PDPA. A cloud enterprise AI document management system or collection management platform such as Qi automates retention triggers, access controls, and audit trails, turning a written retention schedule into an enforced one.
What about records that must be kept permanently?
Statutory registers, minutes, titles, IP records, and heritage documents effectively have no expiry. For these, archival microfilm rated LE500 (500-year life expectancy under ISO 18906/ISO 18902 conditions) provides a preservation layer immune to ransomware, format obsolescence, and cloud failures — readable with nothing more than light and magnification.
Put Your Retention Schedule on a Compliant Footing
Micrographics Data Pte Ltd has been Singapore's records and archival specialist since 1989. Whether you need PDPA-compliant corporate document scanning, digital-to-microfilm conversion on the AW3 Archive Writer, the Qi cloud collection management and DAM platform, or 35MGD-HR archival microfilm supplies for permanent-class records, our team will map your record classes to Singapore's statutory retention requirements and design the workflow to match.
Contact us: sales@micrographicsdata.com | +65 6472 7255
Sources
- IRAS — Record Keeping Requirements (Corporate Income Tax): https://www.iras.gov.sg/taxes/corporate-income-tax/basics-of-corporate-income-tax/record-keeping-requirements
- IRAS — Keeping Records (GST): https://www.iras.gov.sg/taxes/goods-services-tax-(gst)/basics-of-gst/invoicing-price-display-and-record-keeping/keeping-records
- IRAS e-Tax Guide — Simplified Record Keeping Requirements for Small Businesses (s37R EIS 7-year requirement): https://www.iras.gov.sg/media/docs/default-source/e-tax/etaxguide_srk-for-small-businesses.pdf
- Singapore Statutes Online — Employment (Employment Records, Key Employment Terms and Pay Slips) Regulations 2016: https://sso.agc.gov.sg/SL/EmA1968-S148-2016
- MOM — Employment Records: https://www.mom.gov.sg/employment-practices/employment-records
- PDPC — Advisory Guidelines on Key Concepts in the PDPA, Ch 18 (Retention Limitation Obligation): https://www.pdpc.gov.sg/-/media/files/pdpc/pdf-files/advisory-guidelines/ag-on-key-concepts/advisory-guidelines-on-key-concepts-in-the-pdpa-17-may-2022.pdf
- MAS — Notice 626, Prevention of Money Laundering and Countering the Financing of Terrorism – Banks (record keeping, para 12; amendment effective 1 Jul 2025): https://www.mas.gov.sg/regulation/notices/notice-626
- Drew & Napier — Records Retention: Overview (Singapore), Practical Law: https://www.drewnapier.com/DrewNapier/media/DrewNapier/Records-Retention-Overview-(Singapore).pdf
- CNPLaw — Employment Law Guide: Maintaining Detailed Employment Records: https://www.cnplaw.com/employment-law-guide-2020-maintaining-detailed-employment-records/