HR Paperwork for Small Business: What to Keep and Why

Most small companies build their employee records the same way. Someone opens a folder for the first hire, adds a spreadsheet around the fifth, and moves everything into a shared drive by the time the tenth person starts. None of those steps is a mistake. The trouble surfaces later, when a payroll correction or a benefits audit requires one specific document from three years back and nobody can say whether it was ever created. Employee records do not collapse all at once. They erode one missing signature at a time, and nobody notices the gap until somebody outside the company asks to see the file. By then the question has stopped being administrative. It is whether the business can demonstrate what it actually did, on what date, and with whose approval.

That is a poor moment to start organizing.

What belongs in a personnel file

A personnel file holds the documents that describe the employment relationship itself: the offer letter, the signed agreement, job description, pay rate changes, promotions, disciplinary notes, training records, and the acknowledgment that the person received the handbook.

Three categories do not belong in that same file, and small businesses mix them constantly. Medical information, including anything related to disability or leave, needs a separate confidential file. Immigration verification forms belong in their own binder or folder, because an inspection can demand those without touching anything else. Payroll deduction authorizations and tax withholding elections sit in a third place, usually with whoever runs payroll.

Keeping them apart is not bureaucratic fussiness. It limits who sees what when a file gets handed over.

Employee identification numbers thread through everything else

Every record above has to attach to a person, and names are terrible identifiers. Two Sarah Millers, one legal name change, one rehire after four years away, and the payroll history splits into pieces that nobody can reassemble without guesswork.

This is what internal employee numbers solve. They give payroll, scheduling, time records and benefits enrollment a single value to sort by, and they survive name changes and rehires. Most small companies set the format casually, then discover the consequences at scale: numbers that encode the hire year stop sorting correctly after a decade, numbers that encode the department break when someone transfers, and numbers reused after a departure quietly merge two people’s histories. A short explanation of what an employee ID number is and how the format should be built settles most of this before the first payroll run, which is considerably cheaper than repairing it at fifty employees.

Pick a format that carries no meaning. Sequential works.

Where review documentation falls apart

Performance records are the weakest part of employee documentation in nearly every small company, and the reason is structural rather than lazy. Reviews happen once a year, the manager writing them has twelve other things due that week, and the form asks for written comments that nobody wants to compose.

So the comments get thin. “Great year, keep it up” reads fine in January and is worthless eighteen months later when the same employee is being managed out and someone asks what was documented. A record that says nothing specific is functionally the same as no record, except it also contradicts whatever the company now claims about performance. Managers staring at a blank comment box usually reach for whatever comes to mind first, and keeping a reference list of performance review phrases nearby at least pushes the wording toward something concrete: what happened, when, and what changed afterward. Specificity is the whole point of the exercise. A note recording that a project shipped two weeks late because requirements were not confirmed with the client is useful a year from now. A note recording that someone “shows initiative” is not.

How long to keep employee records

Retention periods differ by document type and by jurisdiction, so the safe habit for a small business is to keep the longest applicable period rather than tracking each one separately.

Payroll and tax records sit at the long end and generally need several years past the employment relationship. Hiring materials, including applications and interview notes from candidates who were never hired, have their own retention window, which surprises people who assume rejected applications can be deleted immediately. Records tied to workplace injury or exposure run far longer than anything else, sometimes decades.

The practical rule is simpler than the regulation. Do not delete employment paperwork on an ad hoc basis, and never during an active dispute.

Deleting records after a claim has been filed converts a paperwork problem into a much more serious one, and that distinction is lost on companies who treat their shared drive as something to tidy up quarterly.

An audit that takes about an hour

Pull three employee files at random. One recent hire, one long-tenured person, one who left in the past two years. For each, check whether the file contains a signed agreement, a current pay rate with the date it changed, a handbook acknowledgment, and at least one dated performance note. Then check whether medical and immigration documents were stored separately.

Whatever is missing from those three is almost certainly missing from most of the others.

The departed employee matters most in this exercise, because that file is the one most likely to be requested by someone with a lawyer. It is also the file least likely to have been completed, since the paperwork that closes out employment competes with hiring a replacement.

What this looks like when it works

A small company with functioning employee records can answer three questions in under ten minutes: what this person was paid and when it changed, what they were told about performance and on what date, and who has access to their file. None of that requires software or a dedicated HR person. It requires a consistent identifier, a folder structure that separates confidential material, and enough discipline to write a sentence when something notable happens rather than reconstructing the year every December.

Companies that get audited or sued rarely lose because the underlying facts were against them. They lose because they could not produce a document showing what happened, and the absence of that document became the story.