What Records Does the IRS Actually Ask For in a Small Business Audit?

For a small business owner, few pieces of mail land harder than one from the IRS. Most of the dread comes from not knowing what an audit actually involves: what gets asked for, and what happens if you cannot produce it. The process turns out to be more procedural and less dramatic than it feels. An audit is the IRS checking whether the numbers on a return are supported by records, and the records it asks for are ordinary business documents you were already expected to keep.

How an audit actually starts

The IRS is specific about first contact. According to the IRS audits page, if your return is selected, the agency will notify you by mail, and it "won't initiate an audit by telephone." A phone call that claims to be opening an audit is a scam signal rather than the real process.

From there, an audit is conducted either by mail or through an in-person interview to review your records. In both cases the IRS provides a written request for the specific documents it wants to see. You are not left guessing at what to bring. The request names the items.

The lookback is bounded too. The IRS generally includes returns filed within the last three years, can add years if it identifies a substantial error, and usually does not go back more than six. That three-to-six-year audit window overlaps with the retention period for many ordinary business records, though some records carry longer requirements. The window does not close just because a company shuts down, which we cover in can the IRS audit a closed business.

The documents a small-business request usually names

The specifics vary with what is being examined, but a request to a small business tends to ask for the same categories of records:

• Receipts and invoices that support your income and expenses.
• Bank statements and credit card statements for the business accounts.
• Canceled checks or other proof of the payments you made.
• Books and ledgers, meaning your general ledger and the reports built from it.
• Payroll records, if you had employees.
• Prior tax returns for the years under review.
• Loan agreements, along with the purchase and sale documents for business assets.

The examiner works in a particular direction. They start from a number on your return, trace it to the entry in your books that produced it, and then ask for the source document behind that entry. A profit and loss report showing $18,000 of equipment expense is only a starting point; the request is to produce the invoice for a specific purchase and show which transaction it belongs to. That is why a summary report is never enough by itself. The document has to connect back to the transaction.

Where those records live if you use QuickBooks

If your books are in QuickBooks Online, most of that list is already inside one system. The general ledger and the reports built from it, the customer invoices, the receipts and bills attached to individual transactions, and the payroll reports all live in your company file. For an active business, an audit request is mostly a matter of running the right reports and opening the right transactions.

Cancellation changes that. When you cancel a paid subscription, Intuit holds the company in read-only mode for 12 months and then deletes it permanently, and a cancelled trial gets only 90 days. During the read-only window you can still log in and pull documents, so an audit that arrives in that year is manageable. After deletion, the ledger, the invoices, the attached receipts, and the payroll reports are gone, and support cannot bring a deleted company back.

The linkage is the fragile part. An audit request often comes down to producing source documents, whether for whole categories of expenses or for one specific transaction, and the connection between a receipt and the entry it supports is exactly what QuickBooks drops when you export attachments in bulk. Intuit's own documentation on exporting receipts says the files come out separately from the transactions they were attached to, so a plain export leaves you with a folder of files and no record of which expense each one backs. We cover that gap in detail in our guide to exporting attachments linked to their transactions.

What if you cannot produce a record

Missing a document is not automatically a disaster, and it helps to be factual about what actually happens. If a receipt is gone, the usual first move is reconstruction: pulling the bank or credit card statement that shows the payment, or asking the vendor for a duplicate invoice. Many records can be rebuilt from a second source this way.

Where reconstruction fails, the practical consequence is narrow. The examiner can disallow the specific deduction you cannot support, which raises the tax owed on that item and can add interest and penalties. It is a line-item outcome confined to the entries you cannot back up, rather than a verdict on the whole return. The way to avoid it is to keep the supporting documents accessible for the full retention period, which our guide on how long to keep business records after closing lays out.

How you respond to the request, and whether to handle an audit yourself or have someone represent you, is a judgment call for your CPA or an enrolled agent. Preparing the records is the part you can control ahead of time.

Keeping the records answerable

An audit is, at bottom, a request to match documents to numbers. It goes smoothly when the source documents are complete and each one can be tied back to the transaction it supports. It goes badly when the records are scattered, or when the company that held them has already been deleted. If your books are in QuickBooks Online and you are winding the business down, the safe move is to build a complete, verified copy while the company is still open, before the read-only window runs out. If you would rather not assemble it by hand, that is the service we run: the full ledger, every report in cash and accrual basis, and every attachment preserved with its original filename and linked back to the transaction it documents, all checked against your live books before you cancel. Our guide to what happens to your data after cancellation covers exactly how much time the read-only year gives you.