The 22-category master schedule that resolves state statute-of-repose periods, OSHA rules, and tax timelines into one defensible disposal date per record type.
How long do you have to keep construction documents?
For most commercial construction records, plan on holding them at least as long as your state’s construction-defect statute of repose after substantial completion. Commonly 6 to 10 years, and 10+ years in states like California, Florida, and Texas. That is the longest clock in the building for private commercial work, and it governs contracts, change orders, inspections, submittals, as-built drawings, and certificates of insurance. Payroll and employment records follow separate federal minimums (typically 3 to 5 years under FLSA and IRS rules, longer under Davis-Bacon on federally funded jobs). OSHA medical and exposure records run 30 years. Tax and accounting backups follow IRS minimums of 7 years.
The 22-category table below breaks this down record type by record type, daily reports, RFIs, submittals, payroll, closeout, COIs, and the rest, so you have one defensible disposal date per row instead of a single blanket “keep everything” or “purge at 7 years” policy.
Why commercial construction firms need a records retention schedule, not just a cleanup day
Commercial construction has a records problem that nobody talks about openly: there is no single federal authority telling you how long to keep what. On a federal contract, FAR 4.703 at least gives you a baseline. On a private commercial or public-owner project with no federal nexus, you are stitching retention rules together from state contract law, state tax authority, the statute of repose for construction defects, your insurance carrier’s requirements, OSHA regulations, IRS guidance, and whatever your attorney last told you three years ago. Most GCs and primes end up with one of two failure modes. The first is keeping everything forever, every daily report, every RFI response, every change-order backup going back to the 2011 strip-mall job, which is a storage and discovery cost problem. The second is destroying records on an informal “we cleaned out the server room” schedule, losing key documents before the statute of repose has run, and finding out about it when a defect claim lands six years after substantial completion.
The statute of repose is the number that most commercial construction firms underweight. On a federal project, the longest clock is typically FAR 4.703 or OSHA’s medical record rule. On a commercial project, the construction-defect statute of repose is often the longest clock in the building, and it varies from state to state in ways that matter. California’s statute of repose for latent construction defects runs 10 years from substantial completion. Florida’s is 10 years. Texas is 10 years from substantial completion for improvements to real property. New York is 3 years for injury, but the breach-of-contract clock can extend much longer. The consequence is that contracts, change orders, inspection records, and as-built drawings for commercial projects frequently need to be held for a decade or more. Long after the project has closed, the job number has been archived, and the superintendent has moved on.
The other complexity on commercial work is insurance. A certificate of insurance for a subcontractor on a 2022 project needs to be retained long enough that if a claim surfaces in 2030 you can prove the sub was covered when the work was done. That means the COI retention period is typically the full statute of repose, not just a few years past final payment. Same for occurrence-based general liability policies, warranty documentation, and any work involving long-tail environmental or habitability exposure.
What this schedule does is resolve all of that into a single operator’s working document. For each of the 22 record categories a commercial GC or prime actually handles, it names the controlling authority, the retention period, and the trigger event, so your project coordinator, office manager, and CFO are all running off the same disposal calendar instead of making independent judgment calls at every closeout. Use it as the master index for your project closeout binder, your annual records purge, your insurance carrier review, and your next attorney-client records policy session. Update it when you enter a new state market. Re-check it annually against live regulations.
What this schedule is not: it is not a legal records policy, it is not state-specific legal advice, and it does not replace your attorney’s review for projects in states with unusual repose periods or project types with special retention obligations (environmental remediation, historic preservation, public housing). The schedule is the operator’s starting point. The thing that gets your team 90% of the way there before counsel finalizes it.
Who this schedule is for
- Commercial general contractors managing closeout binders across active and completed private projects
- Prime contractors on public-owner commercial work needing a defensible multi-year disposal calendar
- Project executives and project managers responsible for post-closeout records management on large projects
- Office managers and records administrators running annual purge cycles and server-room cleanouts
- CFOs and controllers owning the intersection of tax retention, financial records, and insurance claim documentation
- Risk managers and compliance officers responsible for insurance carrier documentation and construction-defect exposure
If you are a federal GC or your project has a federal nexus, you will also want our federal records retention schedule for contractors. It handles FAR, Davis-Bacon, OFCCP, OSHA, and CMMC overlays that do not apply on purely commercial work.
The 22 record categories the schedule covers
The schedule covers 22 record categories every commercial GC or prime handles. Each row resolves the controlling retention period and trigger event. Set up once per firm, reviewed annually, updated when you enter a new state or take on a project type with unusual exposure:
- Prime contracts and contract amendments Retention through the full construction-defect statute of repose in the project’s state, typically 6–10 years from substantial completion depending on jurisdiction, plus the underlying financial and tax retention requirements. The signed prime contract, all written amendments, and any change directives issued by the owner are a single retention unit. California: 10 years from substantial completion. Texas: 10 years. Florida: 10 years. New York: breach-of-contract SOL often extends well past 6 years. Identify the controlling state before setting the disposal date.
- Subcontract agreements and amendments Same statute-of-repose floor as the prime contract. Typically 6–10 years from substantial completion. Subcontract files include the agreement, all amendments, executed scope-of-work exhibits, prequalification documentation, and final lien releases. The whole packet is one retention unit. Subcontract files that are the basis for unresolved disputes or claims extend indefinitely until the claim is resolved and the SOL has run.
- Change orders and change directives Retain through the statute of repose. Change orders are among the most frequently subpoenaed records in construction-defect and delay litigation. The backup behind each change order (cost support, RFI chain, field directives, schedule impacts) gets retained with the change order file. Constructive changes that were resolved informally but never formally converted still get captured here if they affected scope, price, or schedule.
- Subcontractor certificates of insurance (COIs) Retention through the full construction-defect statute of repose for the project’s state. Typically 8–12 years, often longer when tail exposure is significant. No specific statute mandates COI retention, but the controlling logic is simple: if a defect claim surfaces eight years after completion and you cannot produce the sub’s COI showing they were covered during performance, you are unilaterally holding the exposure that was supposed to be on their carrier. Insurance counsel routinely advises holding all project COIs for the full repose period regardless of any contractual retention clause.
- General liability occurrence-based policy records Retain permanently or for the life of the firm, whichever is longer. Occurrence-based GL policies cover claims arising from events that occurred during the policy period. Meaning a 2022 policy year is still the applicable coverage document for a claim filed in 2031 about work performed in 2022. The policy itself, the declarations page, endorsements, and any certificates issued under it are a permanent retention item for a construction firm.
- Requests for information (RFIs) and responses Retain through the statute of repose. General RFIs follow the project record (6–10 years from substantial completion). RFIs that drove design clarifications, scope changes, or are cited in change orders travel with the change-order file and get the same retention period as that change order. The RFI log, the master index of all RFIs submitted and their disposition status, is retained as a project closeout document.
- Submittals, shop drawings, and approvals Retain through the statute of repose. Approved submittals are a primary record type for construction-defect defense. They document that materials and methods were reviewed and accepted before installation. Rejected submittals with documented reasons are also retained; they establish that deficiencies were flagged and corrected. As-built submittals roll into the as-built drawing retention row.
- As-built drawings and record documents Retain for the design life of the building, typically 20–30 years or longer for commercial structures, or through the end of the owner’s ownership plus the statute of repose, whichever is longer. As-builts are routinely requested years or decades after construction for renovations, additions, and due-diligence investigations. Most owners contractually require permanent retention; confirm the contract clause.
- Inspection records and quality control reports Retain through the statute of repose. Third-party special inspection reports (structural steel, concrete, soils, fire-stopping, etc.) are among the most relied-upon records in construction-defect defense. Daily QA/QC reports follow the project record. Independent inspection agency reports for code-compliance purposes often have a separate retention requirement set by the local building department, confirm at permit issuance.
- Daily project reports and field logs Retain through the statute of repose. Daily reports are the contemporaneous evidence base for claims, delay analyses, and change-order disputes. A daily report from Day 47 that captures the reason for a concrete pour delay is worth significantly more in litigation than a reconstruction from memory three years later. Flag daily reports from periods of known dispute or delay for extended retention through litigation resolution.
- Safety logs, OSHA 300/300A, and incident records OSHA 300 log: 5 years per 29 CFR 1904.33, running from the end of the calendar year the log covers. OSHA 300A annual summary: same 5-year rule. OSHA 301 incident reports: 5 years. Employee exposure records (chemical, silica, lead, noise, asbestos): 30 years per 29 CFR 1910.1020. Medical records for workers with occupational exposure: duration of employment plus 30 years. The occupational exposure rules are the longest clock in this schedule on most commercial projects.
- Hazard communication and SDS records Safety Data Sheets: 30 years per 29 CFR 1910.1020 (treated as exposure records), triggered from last use of the chemical. HazCom training records: 5 years per 29 CFR 1910.1200. Track separately because the trigger events differ. SDS retention runs from last use, training retention from training date.
- Employee training and certification records General OSHA safety training: retain 5 years per OSHA or duration of employment, whichever is longer. OSHA 10-hour and 30-hour cards: retain duration of employment plus 5 years. Site-specific safety orientation records: 5 years from completion of work on the project. Equipment operator certifications: retain through the certification period plus 5 years, or duration of employment, whichever is longer.
- Drug-free workplace and substance testing records DOT-regulated drug and alcohol testing records: 1–5 years depending on test type per 49 CFR Part 40 (negative pre-employment: 1 year; positive results, refusals, supervisory training: 5 years). Non-DOT substance testing records for projects requiring drug-free workplace programs: retain 5 years per applicable state DFWP statute.
- LSWBE / M/WBE participation records Retain 3–5 years past project completion depending on the public-owner’s requirements. Most public commercial projects (municipal, port, transit, school districts) impose M/WBE participation requirements with their own record-retention clauses in the prime contract. Check the contract clause and apply the longer period.
- Environmental permits and SWPPP records SWPPP: retain 3 years after permit-coverage termination per EPA NPDES rules. SWPPP inspection logs and corrective action records: same 3-year rule from permit termination. Site environmental monitoring data for projects involving contaminated sites: retain 10 years or per the remediation agreement, whichever is longer.
- Warranty documentation and extended warranty programs Retain warranty certificates, manufacturer extended warranties, and contractor warranty letters through the full warranty period plus the statute of repose. Standard commercial construction warranties run 1 year for general contractor work; roofing, waterproofing, mechanical, and specialty systems often carry 5–10 year manufacturer warranties.
- Payment records, lien waivers, and bond documentation Lien waivers (conditional and unconditional, progress and final): retain through the applicable state mechanics lien SOL plus the statute of repose. The lien waiver that proves a sub was paid and released its lien rights is a defense document for the full repose period. Final sworn owner affidavits and lien releases: retain permanently or through the owner’s ownership plus repose.
- Financial records, cost reports, and job cost ledgers Retain 7 years per construction-industry standard (driven by IRS audit window and state tax authority). Job cost ledgers, cost-to-complete reports, general ledger entries tied to projects, accounts payable and receivable documentation: 7 years minimum. Audited financial statements: 7 years per CPA professional standards. Bonding-related financial submissions: 10 years per most surety requirements.
- Tax records. Payroll, income, and sales/use Federal income tax records: 3 years from the return filing date per IRS (7 years if reporting losses or fraud suspected). Payroll tax records (941, 940, W-2s, 1099s): 4 years per IRS, but typically held 7 years to align with state requirements. The practical standard across the industry is 7 years for all tax-adjacent records.
- Project closeout binders and commissioning records Retain through the statute of repose. The closeout binder, final payment documentation, punchlist completion records, certificate of substantial completion, certificate of final completion, as-built submittal index, operations and maintenance manuals, training documentation for building systems, is the primary defense document when an owner asserts the project was not completed as specified.
- IT records, email, and project management platform data Project-related email (owner communications, subcontractor correspondence, design team coordination): retain through the statute of repose. Many firms apply a blanket 7-year email retention policy; this falls short of the repose period on most commercial projects. Project management platform data: export and retain in a durable format at project closeout. Do not rely on vendor-hosted data surviving for 10 years after your subscription ends.
How to implement this retention schedule for your firm
Set up the schedule once for your firm, then maintain it as a living document reviewed annually and updated at every new state or project-type entry:
- Walk the 22 rows. Identify which categories apply to your current project portfolio. For each active row, confirm the controlling state (the state of construction for statute-of-repose purposes) and look up the repose period for that state. Enter the period directly in the schedule.
- For each row, fill in: the controlling authority or citation, the retention period, the trigger event (substantial completion, final payment, calendar year end, etc.), the storage format, and the responsible owner role. Owner role is the most-often-skipped field. Without a named owner, retention doesn’t survive the next reorg.
- Identify any rows that don’t apply to your firm’s current work (no DOT-regulated drug testing, no environmental permits, no public M/WBE requirements). Mark those rows N/A but keep them in the schedule. They activate when you take on a project that triggers them.
- At each project closeout, populate a project-specific retention summary: the project number, substantial completion date, repose-period end date, and the location of the records (server path or physical box location). This becomes the index your team uses for the annual purge review.
- Schedule the annual review for the same time each year. Typically at fiscal year-end or before the spring office cleanout. At the review: compare active rows against current regulations, update trigger dates for projects that have reached closeout milestones, and run the disposal authorization sign-off for any records that have cleared their retention period and are not subject to a litigation hold.
- Before any disposal cycle, verify against active litigation holds and open insurance claims. One record destroyed under an active hold creates evidence-spoliation exposure that is far more expensive than the storage cost it saved. Build the hold check into the annual sign-off as a non-negotiable gate.
Stop managing your retention schedule in a shared Google Doc
The 22 rows above take a commercial GC a full day to set up properly. Looking up statutes of repose by state, reconciling OSHA rules against tax timelines, assigning owners, and building the annual purge calendar. Multiply that by 30 active states of operation, 4 project types with different repose periods, and a portfolio of 80 closed jobs sitting in various stages of the retention clock, and you have built another full-time records-management position out of a task that should run automatically. Contracts Connected’s compliance dashboard keeps every record category indexed against the controlling regulation, every retention period anchored to the correct trigger event, and every disposal pre-cleared against active litigation holds, so your office manager, CFO, and compliance officer all see the same schedule, the same disposal calendar, and the same audit-ready closeout binder for every active and recently-closed project.
For educational purposes. These templates, checklists, and trackers are operator-built starting points designed to help you move faster on the kind of work that usually drowns construction admins in email chains. They are not legal, insurance, accounting, or tax advice. Each project, jurisdiction, and contract has its own quirks. Review the document, refine the language, and consult your attorney, broker, CPA, or compliance officer before relying on it for a live project decision.
Frequently asked questions about commercial construction records retention
How long should a commercial GC retain construction records?
There is no single answer. It depends on the record type, the state of construction, and the nature of the project. The floor for most project records on commercial work is the construction-defect statute of repose in the state where the project was built. That period ranges from 6 years (some states) to 10 years (California, Florida, Texas, and others) from substantial completion. Tax records add a separate 7-year obligation. OSHA occupational exposure records add 30 years for workers with hazardous-material exposure. The practical approach: identify the longest applicable clock for each record category, apply it, and document the reasoning. This schedule resolves that analysis for the 22 most common record categories.
What is the construction-defect statute of repose and why does it matter?
The statute of repose is a hard deadline on construction-defect claims. It bars claims filed after a fixed number of years from substantial completion or some other triggering event, regardless of when the defect was discovered. Unlike a statute of limitations (which can be tolled while a defect is hidden), the statute of repose is an absolute cutoff. It matters for records retention because any record that could be relevant to a construction-defect defense, contracts, change orders, inspection reports, submittals, as-builts, COIs, warranty documents, needs to survive until after the repose period has run. In a 10-year repose state, a project that reached substantial completion in 2026 has repose running through 2036 at the earliest.
Do commercial GCs need to retain subcontractor COIs after the project closes?
Yes. A certificate of insurance documents that the subcontractor had coverage in place when the work was performed. If a construction-defect claim arrives five or eight years after completion and names the sub, you need the COI to pursue tender to the sub’s carrier, or to establish that the sub was covered for contribution purposes. Most insurance and risk management counsel advise retaining all project COIs through the full statute of repose for the project’s state. For commercial projects in 10-year repose states, that means holding subcontractor COIs for 10 years after substantial completion.
What records are most important to retain for construction-defect defense?
The highest-value records in a commercial construction-defect defense are: (1) the executed prime contract and all change orders, they define what was actually agreed to; (2) approved submittals and shop drawings, they document that materials and methods were reviewed and accepted; (3) special inspection reports, they establish code compliance was independently verified; (4) as-built drawings, they show what was actually built; (5) subcontractor COIs, they establish who carried coverage when; and (6) daily project reports, they provide contemporaneous evidence of conditions, weather, workforce, and events. These six categories should be treated as priority retention items with the most conservative disposal dates in any records schedule.
How should commercial construction firms handle email and project platform data retention?
Email and project management platform data (RFIs, submittals, daily reports, correspondence in Procore, Autodesk, Plangrid, etc.) are project records subject to the same retention rules as paper documents. The practical risk: most firms apply a blanket 7-year email retention policy that falls short of the statute of repose on a 10-year-repose commercial project. The fix is a project-closeout step that exports project-relevant email threads and project platform data into a durable archive (not vendor-hosted) at substantial completion, tagged to the project number and stored for the full repose period. Do not rely on a SaaS platform to retain your records for 10 years after you stop paying for the subscription.
When does the retention clock start. Project award, substantial completion, or final payment?
It depends on the record category and the controlling authority. For most project records on commercial work, the most conservative and defensible trigger event is substantial completion. It is the most clearly defined milestone in the prime contract and it starts the statute of repose clock in most states. Final payment is a reasonable trigger for financial and tax records (accounts payable, lien waivers, job cost). Calendar year-end is the trigger for OSHA 300 logs. Date of last chemical use is the trigger for SDS records. When in doubt, use the trigger event that produces the latest disposal date. Conservative retention is almost always cheaper than defending a claim without the records.