A letter requesting documents always arrives at the worst possible time. At one organization, pulling everything together takes an evening, because it all lives in one structure. At another, it kicks off three weeks of panic: emails to a former bookkeeper, minutes reconstructed after the fact, a determination letter hunted down in an old inbox somewhere.
The difference between these two organizations didn't show up on the day the letter arrived. It built up over years, one document saved on time after another.
An audit, opening a bank account, and grant due diligence all ask for the same basic set: formation documents, your determination letter, EIN, board minutes, COI declarations, filed 990s, state filings, financial records, major contracts. Being ready for an audit and being ready for grant money turn out to be the exact same kind of organized.
Some documents an organization keeps forever, because sooner or later, someone will ask for them. Formation documents and bylaws. Your determination letter and EIN. Board minutes and resolutions. Your COI policy and annual declarations. Every 990 you've ever filed. State filings. Financial records. Major contracts and grants, both received and given. Donation records.
This isn't a "just in case" list. It's exactly what a bank, a funder, and the IRS each ask for, just at different moments and phrased differently.
Some documents get kept permanently: formation documents, the determination letter, board minutes. These are the organization's memory, and they don't expire.
Other documents get kept for a set period. Financial source documents, for instance, usually live around seven years, though your CPA can confirm the exact period for your situation. Simple rule: when in doubt, keep it longer, not shorter. Deleting something extra is always easier than recovering something you've lost.
The real difference between the two organizations from the opening isn't a matter of personality, it's one decision: where the documents live. "Somewhere in Maria's inbox" isn't a system. One folder structure that mirrors this checklist is.
An audit isn't even the only reason to get organized here. The same documents get requested by a bank when you open an account, and by a funder during due diligence. An organization ready for an audit is automatically ready for money too.
Below is a document retention checklist: categories of documents, how long each one gets kept, and a note on where it usually comes from and where to file it. Check off what you already have, and you'll see your gap list for the coming month.
Your completed retention checklist, marked up: what you already have, what's missing. Your gap list becomes your plan for the coming month, concrete and short. In your Binder, this checklist becomes the table of contents for the entire organization's file.
How often do audits actually happen?
Less often than people fear. But you need to stay ready constantly, since banks and funders ask for the same documents far more often than the IRS does.
How long do I need to keep financial documents?
Usually around seven years, but confirm the exact period for your situation with your CPA, since it depends on the type of document.
What do I do if a document is missing?
Make a list of the gaps and close them one at a time. It's better to start keeping what's missing from now on than to pretend everything was always there.
Does everything have to be stored digitally?
Not necessarily, but one folder structure, physical or digital, works far better than documents scattered across different people's inboxes.
That completes Level I: you've read your organization, its bylaws, its board, and the documents that protect it. Next, the course moves from paperwork to the infrastructure of the first few weeks: your bank account, your website, verifications, and the chain that opens the door to dozens of resources.