How to keep your Business Records Safe in the Long-Term
As a retailer, you need to keep records for years. Government regulations, legal needs, or even access to old customer data are all important! I sometimes had to access very old information just for commercial reasons, 20+ years ago.
Now, have you thought about how long your digital records will last?
Sadly, the hard drives and discs we use aren't built to last centuries, unlike the old carvings archaeologists have been uncovering up to today. Let's look into long-term storage, so you make the right choices.
How Long to Keep Retail Records
In Australia, retailers should keep POS system records, invoices, receipts, daily reports, and end-of-day summaries for at least five years. However, seven years is safer under Australian Tax Office guidelines. Keep payroll records for a full seven years, too. Extend that period if the records relate to assets, warranties, or legal disputes.
Here is a detailed table of the times required, I have put together and by who wants it
Business Record Retention & Disposal Schedule
| Record Category | Specific Record Examples | Retention Period | Governing Body (Link) | Suggested Action After Period |
|---|---|---|---|---|
| Tax & Revenue | Invoices, receipts, bank statements, BAS, GST records. | 5 Years from the date of lodgement. | ATO | Secure Destruction |
| Depreciating Assets | Receipts for equipment, vehicles, or property used for business. | Life of Asset + 5 Years after disposal. | ATO | Secure Destruction |
| Employee Records | Pay slips, hours worked, leave balances, tax file declarations. | 7 Years from the date the record was made. | Fair Work | Secure Destruction |
| Superannuation | Proof of payments, choice of fund forms, contribution reports. | 5 Years | ATO | Secure Destruction |
| Company Governance | Minutes of meetings, registers of members/directors. | 7 Years | ASIC | Archive permanently if historical |
| Customer Personal Data | Contact details, marketing preferences, IDs for verification. | Destroy immediately once the purpose is fulfilled. | OAIC (Privacy Act) | Secure Deletion / De-identify |
| Work Health & Safety | Incident reports, risk assessments, training logs. | 5 Years (varies by State, e.g., WorkSafe VIC). | State Govt / Cyber Security | Archive |
| Legal/Contracts | Signed contracts, leases, insurance policies. | 7 Years after the contract ends. | General Law | Review/Destroy |
I will add that, personally, I am not in favour of deletion unless you have to, as you never know when you might need the information. For example, a client of mine is involved in a case linked to 2006. When records this old are missing, courts accepted that as reasonable, but then it becomes their word against the other party's. This is not a good position to be in!
We call this a Potential Litigation Hold.
What Lasts, What Doesn't, and How to Make it Better
- Cloud storage: Theoretically, it lasts forever, but there will be issues.
- Magnetic Tapes to the Rescue? These can, under ideal conditions, last a long time, but few of us actually have the specialised equipment. Besides, it's often a pain to use.
- Old-fashioned Hard Drives: Most last about 3-7 years, though a lucky few last longer. To keep them, you need to use them; otherwise, they deteriorate after about two years.
- Optical Discs: Please aim for quality; write-once media like Verbatim Gold have longer longevity, and the cheaper ones have much less. For CDs and DVDs, you are looking at 5 to 100 years, depending on the type. When I went to the Verbatim website and looked at their warranty here, I noticed they only offer a 2-year warranty, which does not include a data retention guarantee. The courts may have something to say about that, but few people want to have to argue this in court.
Most people today, when considering very long-term storage, look to DVDs because they are both convenient and economical. If you go this route, here is how to do it:
Protecting Your Precious Data on CDs and DVDs:
It depends on three main factors:
- Have more than one backup. I argue that you do not have a backup if you have only one. These two backups should be stored in different locations so that if anything happens to one, the other is safe elsewhere.
- You need good-quality DVDs. There are good reasons why they are a bit dearer. This comes from a Canadian government study, which you can find here.

- Environment matters! Pick a place:
- Cool & Dry: Store items at around 20°C with about 40% humidity.
Caution: Heat and humidity are the silent killers! This can be a problem, as we often exceed this in the summer. Do you have a cellar? Avoid garages or attics where temperatures can swing wildly!
- The Dark Side: Store discs in cases out of direct sunlight. I put a sealed plastic bag over them.
- Peace & Quiet: Avoid putting the discs where they will be moved or dropped.
Using DVDs for archiving business and POS records has distinct advantages and drawbacks, especially compared to modern hard drives or cloud storage.
Pros of DVD Storage
- Long lifespan: High-quality, archival-grade discs (such as those with a gold metal layer) can last 50 to 100 years when stored in the right environmental conditions.
- Tamper-proof: Standard recordable DVDs (DVD-R or DVD+R) are write-once media, meaning that once your data is burned onto the disc, it cannot be accidentally deleted, overwritten, or infected by ransomware.
- True offline security: DVDs provide "air-gapped" cold storage. Because they sit on a shelf rather than being connected to a network, they are completely immune to online hacking or cloud policy deletions.
- Excellent for chunking: DVDs are great for archiving specific, yearly projects (like a disc labelled "FY2025 Accounts"); other methods, like the cloud, tend to mix up your data.
Cons of DVD Storage
- Low capacity: A standard DVD holds 4.7 GB, dual-layer 8.5 GB. Suitable for text reports and spreadsheets but insufficient for larger files, requiring the management of multiple discs.
- Slow write speeds: Burning data is slower than on fast SSDs and USB drives.
- Vulnerable to damage: DVDs degrade within 5-10 years due to heat, humidity, sunlight, or scratches, often going unnoticed until it's too late.
- Limited hardware support: Modern computers rarely have built-in DVD drives.
Cloud Storage
As the limitations of physical storage have become increasingly apparent, cloud storage emerges as a compelling solution for preserving your digital legacy. In theory, entrusting your data to a reputable cloud provider can overcome many of these problems.
Pros:
- Accuracy: Today, many Cloud storage providers offer an astonishing rate of accuracy in their storage capacity. One I saw doing an online search offering 99.999999999% (that's 11 9s!) data durability. That far exceeds the reliability of any physical media.
- Dispersed storage: Many Cloud providers store your data across multiple geographically dispersed data centres, ensuring redundancy and resilience.
- Easy access: Your data is available on demand from any internet-connected device, anytime, anywhere.
Cons:
- Cost: Generally, it costs, though many, like Google and Microsoft, offer a limited free plan.
- Future uncertainty: Considering the time frame we are looking at here, a cloud provider could go out of business, change its policies, and who knows what else.
- Policy: Some cloud providers, e.g. Google, state that they "reserve the right to delete an inactive Google Account and its activity and data if you are inactive across Google for at least two years." So every two years, you have to log in to your account and say, "Hey, this account is still active." It's not a big ask, but it's not entirely set-and-forget.
- Remembering passwords: Cloud accounts rely on account names, passwords, and, increasingly, mobile numbers. Over the next 10 to 20 years, how will you remember these details? Will you have the same mobile number then? If someone else has access to your account and its passwords, they can also access your data.
- Control: In an overall sense, you do lack control.
- Privacy concerns: Be aware of potential changes in data privacy laws or a provider's terms of service. Although few of my clients have an issue here now, the privacy laws are slowly turning to the idea that much data businesses store must be held in Australia, not an issue now, but who knows in 10 to 20 years.
Summing up:
Overall, my preference would be to burn two copies of my business records onto a good-quality DVD. Put them with your business records in a safe place in your house in a protective box, as seen here:

I would then put a copy on a free service like Google, which I could access anytime, anywhere.
If you decide to go this route, here is a suggested policy
Management of Archived Physical Media (DVD/CD)
Effective Date: [Insert Date]
Objective: To ensure business compliance with the Privacy Act 1988 and ATO record-keeping requirements when using non-rewritable storage media.
Access Controls (Security)
Physical Lockdown: All archived DVDs containing personal or financial information are stored in a secured room, fireproof cabinet or safe.
Restricted Access: Only [Insert Job Title, e.g., Business Owner] is authorized to access the archive.
No Active Use: Staff are strictly prohibited from accessing, copying, or disclosing personal data from archived discs for marketing or general business operations.
Labelling & Warning
Every archived disc or its protective sleeve must be clearly labelled with a Generic Warning.
Label Template: “ARCHIVED DATA: [Year Range]. Contains personal information. Access restricted. DO NOT USE.
Final Disposal (Destruction)
If you decide to destory the disc, it must be irretrievably destroyed.
Note: Simply throwing a disc in the general waste or scratching it by hand is not sufficient.
Conclusion
Long-term record storage isn't just about compliance; it's about keeping your retail history available and trustworthy for years to come.
Want to get your data storage sorted? Contact us for a free consultation!
Frequently Asked Questions (FAQ)
Q: Can I leave my POS backups on a USB thumb drive in a drawer?
A: No, I highly advise against this. USB flash drives use similar technology to SSDs. If sitting unpowered in a draw for years, they can lose their charge, and your data may silently corrupt or vanish. They are great for moving files around today, but terrible for 10-year storage.
Q: Does the ATO accept digital copies, or do I need the original paper receipts?
Info: The Australian Tax Office (ATO) accepts digital copies of your records and receipts, provided they are true, clear, and complete copies of the original. Once you have securely backed up the digital file (like on a DVD and in the cloud), you don't necessarily need to keep the fading paper thermal receipts.
Q: What is the best brand of DVD for long-term archiving?
A: Look for "Archival Grade" or "Gold" DVDs. Brands like Verbatim (specifically their Gold Archival range) or CMC Pro are widely trusted. They use a gold reflective layer that resists oxidation and degrades much better than the cheap silver discs you buy in bulk at the supermarket.
Q: Is it enough to email the backup to myself?
A: I do that, and it's okay for a quick, temporary backup, but it shouldn't be your only long-term strategy. Emails can be accidentally deleted, end up in junk folders, or become inaccessible if your email provider changes policies or you get locked out of your account 10 years from now.
Written by:

Bernard Zimmermann is the founding director of POS Solutions, a leading point-of-sale system company with 45 years of industry experience, now retired and seeking new opportunities. He consults with various organisations, from small businesses to large retailers and government institutions. Bernard is passionate about helping companies optimise their operations through innovative POS technology and enabling seamless customer experiences through effective software solutions.











