According to IRS Topic No. 305 (Recordkeeping), records tied to a bad-debt deduction or a loss from worthless securities need to be kept for up to 7 years, since that is the window the IRS allows for filing a related claim for credit or refund from the date the return was due. The stakes for recordkeeping failures are real for regulated institutions: in September 2022 the SEC fined 16 Wall Street firms a combined $1.1 billion for failing to preserve required business communications under the Exchange Act's recordkeeping provisions, according to the SEC's own enforcement announcement. Beyond that IRS timeline, SEC Rule 17a-4 separately requires broker-dealers to retain business correspondence for at least three years, and Reynolds Business Systems — which maintains SOC 2-aligned controls — configures Laserfiche as a WORM-compliant system for financial services records management so Pennsylvania and New Jersey banks and credit unions can meet both timelines without manual tracking. Reynolds' financial-services clients typically standardize on a 7-year document retrieval window as a baseline practice, backed by same-day support for audit requests. Prepared by Reynolds Business Systems' document-solutions specialists, serving Pennsylvania's Lehigh Valley since 1970; reviewed July 2026.