By L.Kenway BComm CPB Retired
This is the year you get all your ducks in a row! Start by starting ... and keep it simple. Consistency beats perfection.
Published May 15, 2026
WHAT’S IN THIS ARTICLE
A. The Foundation | B. Building Your Archive | C. Running Your System | Acronyms Used
BACK TO >> Build Financial Resilience
RELATED >> What is a CRA Audit Trail | Business Record Retention | Data Storage Considerations
The app is the working system. The exported PDF is the permanent record.This page and this site is written for people who are already in business. Articles use standard bookkeeping and tax terms without stopping to define them. If you hit an unfamiliar term, the Terms & Acronyms page is available for your reference. That said, I have included some popular acronyms at the bottom of this page as well.
Don't let unfamiliar language slow you down. Reading this site works the same way as reading the news. The first few times it feels like a lot, but the vocabulary builds faster than you think. Keep coming back and before long it clicks.
JUMP TO >> The Problem With “It’s In The App” | What Makes A CRA-Grade System? |The Two-Layer Distinction | What Accountants Actually Preserve
Most solopreneurs today do their bookkeeping in software. That is fine. The problem is what happens when the software changes.
In December 2024, Bench Accounting, A Vancouver-based bookkeeping service with over 12,000 clients, shut down with two days' notice. Customers lost access to years of financial records overnight. Yearend was approaching and the deadline was immovable. A solution was found, customers got access back ... but boy did it cause a lot of angst.
The scenario above doesn't happen often. These are the more likely ones that could affect your business. Your bank stops supporting the feed. The app raises its price and you switch. The platform gets acquired and the export format changes. You upgrade your computer and the local install stops working. The company folds. Your subscription lapses for 60 days and you lose access to two years of history.
None of these are hypothetical. They have all happened to real small business owners.
And here is the uncomfortable part. CRA does not care what happened to your app. If you are selected for a review or audit, the obligation to produce records is yours. CRA requires you to keep records for a minimum of six years from the end of the last tax year (which really means seven years) to which they relate. Seven years is a long time for any software subscription to stay stable, affordable, and accessible.
The other risk is subtler. AI hype. New tools promise to categorize everything automatically, connect to every account, and make bookkeeping invisible. Some of them are genuinely useful. But invisible bookkeeping is also unverifiable bookkeeping. When a CRA auditor asks you to trace a deposit to an invoice, “the app handled it” is not an answer that will serve you well.
The fix is not to abandon your software. It is to build an independent archive alongside it ... one that does not depend on any app staying alive, staying affordable, or staying the way it is today.
CRA doesn't prescribe a specific system. But it does set the bar your system has to clear. Four benchmarks:
Electronic records are explicitly acceptable to CRA, provided they meet all four of these tests. The rest of the article is about building a system that clears every one of them ... without depending on any particular software staying alive to do it.
For full retention rules including keep-forever categories: Business Record Retention
This is the foundation of everything that follows, and it is how accountants, controllers, and auditors think about recordkeeping.
Layer 1: Operational systems. QuickBooks, Xero, Wave, bank feeds, AI tools. These are your working environment. You use them every day to categorize, reconcile, invoice, and run reports. They are enormously useful. But professionals treat them as temporary. Subscriptions end. Platforms pivot. Software gets acquired or sunsetted.
Layer 2: Permanent records. PDFs, CSVs, source documents, exports, and backups that live outside the software. These are your archive. They do not depend on any vendor staying in business. For the most part, they do not require a subscription to open. They are yours.
The key insight that most solopreneurs miss:
Building this two-layer system is what this article is about. It is not complicated. It does not require expensive tools. It requires discipline and a clear understanding of what you are trying to preserve ... and why.
Before we talk about what to save and how, it helps to know what an auditor is actually looking for. Professional accountants structure their records around six layers, and each one serves a specific verification purpose.
CRA specifically requires enough detail to reconstruct and verify taxes and income. That means the trail has to run in both directions: from the financial statements back down to the source documents, and from any source document back up to what was reported on your return.
Most solopreneurs have the source documents. Few have the full trail.
JUMP TO >> The Complete Archive Layer | Avoidable Audit-Risk Habits | Format Rules That Survive Time | Your File Naming System | Where To Store It | The AI Risk Nobody Is Talking About
Here is what belongs in your permanent archive. This is a professional-grade list, written for someone doing their own books. You will not need every item in every year. But you should know what each one is and why it matters.
JUMP TO >> Bank & Credit Card Statements | Invoices Issued | Expense Receipts | Year-end Reports | GST/HST and Payroll Reporting | Tax Filings | Accounting Policies
Download your statements as PDFs every month, directly from your financial institution’s online portal. Do not rely on your accounting app to store these. Banks keep online statements accessible for a limited time (often 12 to 18 months) and then they disappear from the portal. By the time CRA asks for a statement from three years ago, it may no longer be available for download.
One PDF per account per month. Saved the day you close the books for that month. This is your proof of payment for every expense and your verification of every deposit. Include payment processor exports here too ... Stripe, PayPal, Square ... downloaded monthly as CSV.
Every invoice you issue to a client should be saved in a format you can produce on demand.
If you invoice through software, export each invoice as a PDF or set up a routine to export them monthly in a batch.
Sequential invoice numbers matter here. CRA expects to see a complete, unbroken sequence. If you can produce every invoice from number 1001 to 1087 with no gaps, you are telling a consistent story. A gap in the sequence invites questions.
Keep a digital copy of every receipt (photo, scan, or email confirmation) organized by month. The key is that the copy needs to be readable five years from now. A photo buried in your camera roll, unsorted, is not a records system. A renamed file in a dated folder is.
CRA’s requirements for what makes a legitimate receipt are covered in detail here. The short version. The receipt needs to show who, what, when, and how much. If it does not, write it in the file name.
One important note from the research. Your accounting system should not be the only place receipts live. Software attachments can disappear during migrations. OCR systems fail. When you export your archive, receipts need to travel with it as standalone files ... not just as attachments inside the app.
This is the category most solopreneurs skip entirely, and it is the one that matters most for proving your numbers.
At the end of each fiscal year (or month-end or quarter-end), export the following from your accounting software and save them as PDFs:
Keep a copy of every GST/HST return you file and every payroll summary you produce. If you have employees or contractors, add your T4 and T4A summaries. These are the documents that let CRA cross-reference what you reported on your income tax return against what your other filings imply. Discrepancies between income reported on your T2125 and what your GST filings are one of CRA’s automated triggers. Your archive makes those two numbers reconcilable.
Keep a PDF copy of every tax return you file — T1, T2125, GST/HST returns — for every year. If you use NETFILE, save the confirmation number and the filed return. If a professional prepares your return, ask for a copy.
Keep every piece of CRA correspondence in the same archive: notices of assessment, reassessment letters, review letters, reference numbers. CRA’s default delivery is now your online portal and a notice is considered delivered the day it arrives there, whether you open it or not. Download and save every notice as a PDF when it arrives.
This one is overlooked by almost everyone who does their own books, and it matters more than most people realize.
Your chart of accounts is the list of categories you use to classify every transaction ... revenue, expenses, assets, liabilities. If you have been in business for three years and you switch from Wave to QuickBooks, or from any one system to another, your historical numbers only make sense if someone can see how you categorized things. Without the chart of accounts, future-you cannot explain past-you’s numbers.
It's very important for audit continuity. Otherwise future-you cannot explain historical numbers. Keep a short document called Accounting-Policies.pdf that notes a few key decisions:
This document does not need to be long but it should be comprehensive.
A records system is only as strong as the habits that feed it. You can have the right folder structure, the right file naming convention, and the right storage strategy ... and still end up with records that won’t hold up under CRA scrutiny, because of what happened upstream.
These are the three workflow habits most likely to create gaps in an otherwise solid system. They are avoidable. They are common. And unlike the risks covered in What Triggers Tax Audits in Canada ... which are about how CRA selects returns ... these are entirely within your control.
Contemporaneous means created in the ordinary course of business before there is reason to be defensive about them.
CRA does not require that every record be created at the exact moment of a transaction. A reconciliation completed at period-end, books brought to a bookkeeper at year-end and posted before you're return is filed, a management note written before you file, a description on a meal receipt with clients written right at the table stating the business discussed, who was present ... all of these meet the standard. The records were created as part of running your business, not in response to CRA scrutiny.
A problem arises specifically when CRA makes contact. If gaps exist in your records at that point, anything created or reconstructed after CRA reaches out carries a credibility problem. Not necessarily because it is wrong but because there is now a reason to question whether it reflects what actually happened or what you need it to say.
Contemporaneous records carry weight because they reflect what you knew and what you decided at the time. A note on a transaction completed in February for February is evidence. The same note completed in November the next year, when CRA is asking questions, is an explanation ... and those are not the same thing. CRA and the Tax Court treats them differently.
Throughout this section, when you see the word contemporaneous, that is what it means: made then, not now.
The Habit
Capturing documents and categorizing transactions as two separate steps, with attachment deferred to 'later'. Later becomes never. By year-end, you have a clean set of books and a pile of unattached receipts that no longer match cleanly to specific transactions.
The Risk:
A transaction in your GL without a source document is a number with no proof. The entry tells CRA what you claimed. The source document tells them why it was a legitimate business expense. Without the attachment, you have half a record ... and half a record is not a defensible one.
The Fix
Attach the source document at the time of posting, every transaction, every period. What that means in practice depends on your system:
The Habit
Changing how expenses are categorized from period to period ... or year to year ... without a deliberate reason. Sometimes it is a different decision in a busy month. Sometimes it is a chart of accounts that does not map cleanly to the T2125, so judgment calls vary. Either way, the result is inconsistency that shows up in your filings.
The Risk
CRA’s risk-scoring systems compare your expense ratios against industrybenchmarks and your own prior-year filings. A category that shifts significantly from one year to the next raises your risk score without any underlying change in your actual business activity. Inconsistency also creates year-end reclassification work that did not need to exist.
The Fix
Start with a chart of accounts that maps to your T2125, and apply it consistently every period. Consistency matters. An expense consistently applied to the wrong category is easier to explain and correct than six months of posting it to different accounts.
QBO and other bookkeeping programs make it easy to do by showing you where you categorized this transaction last time. Also, there is a spot in the setup where you can set the default account for a supplier.
If you make a deliberate categorization change ... a new expense type, a correction to a prior approach ... document it in your period-end management notes. A contemporaneous note explaining the change is far more credible to a CRA reviewer than a reclassification that appears without explanation.
The Habit
Deferring bank and credit card reconciliations until year-end (or until tax time) rather than closing them out at the end of each period. This often happens because the books feel current when transactions are being posted regularly.
The Risk
Small errors compound. A duplicate entry in February is still there in December. A missed transaction in April creates a variance that takes hours to trace. A bank error that would have been caught in March goes unchallenged for nine months.
The Fix
Reconcile every account ... chequing, savings if used for business, every business credit card ... at the close of every period. Monthly is the standard. Quarterly is acceptable if your weekly habits are solid and your transaction volume is low. Download the reconciliation report in PDF format and file it for each account with your period records as soon as it is produced.
The research document on professional archiving is explicit about this, and it maps to a useful reference table. Here it is translated for a solopreneur context.
There are two principles behind this list:
What not to rely on exclusively
Do not rely exclusively on proprietary accounting backups, app-specific databases, AI-generated summaries, or undocumented automations. These all share the same vulnerability ... they require the original system to remain functional and accessible to be useful.
Screenshots are not records
A screenshot of your bank balance is not a bank statement. A screenshot of an invoice in your accounting app is not a source document. Screenshots have no metadata, no audit trail, and no guarantee of completeness. Always export from the source.
Start the way you intend to end. A consistent naming convention costs nothing to implement and saves hours of searching years later. One convention is:
Everyday Examples:
Independent copies. That is the whole principle. Your archive cannot live in only one place, and it cannot live only inside your accounting app.
A practical three-location approach:
What "backup" actually means
A backup is not just a copy that exists. It is a copy you have verified you can restore. Many people have backups they have never tested. When the moment comes to open a file from three years ago, they discover the backup is corrupted, the folder structure changed, or the files are in a format they can no longer open. The backup existed. It just did not work.
AI bookkeeping tools introduce a risk that did not exist five years ago ... silent retroactive mutation. This is when a model update changes how it categorizes historical data without notifying you. A transaction coded as Office Supplies in January may be silently recoded as Equipment in March when the AI updates its logic.
For daily working purposes, this is a minor nuisance. For a CRA audit, it is a serious problem. If an auditor compares your filed return to what your books say today, and those numbers do not match because the AI revised history, you have no clean explanation.
Think of it this way
AI can help you produce books. But source evidence proves books. The AI’s output is a working document. The source evidence is the permanent record.
The practical protection for most solopreneurs is your year-end snapshot. Locking what your books said at the time of filing. That's covered in the Annual Immutable Snapshot section below.
If you use AI Agents actively, there's an additional layer worth knowing about. I'll use QBO as an example. QBO has always allowed you to modify prior periods. It would ask you whether you want the change to apply going forward or retroactively. My personal rule has always been if I reported the information to CRA, you not change retroactively. You correct it going forward only. If you haven't closed year-end, adjusting journal entries to reclassify transactions is also available. I'm not sure how QBO has programmed their new AI Agents but I would expect them to follow the same closed-period logic and prompt before changing historical data. Something worth verifying with your specific tool.
For those who want the deeper protection, you can manually export bank feed transactions before AI categorization is applied or download transactions directly from you bank on a regular basis. This gives you a permanent record of original data before AI touches it. For most solopreneurs this is overkill. With AI Agents becoming standard in SaaS (software as a service) subscriptions, it's worth knowing the option exists.
JUMP TO >> CRA-Records Grade Workflow | The One Task Most People Skip | Feeding Your Archive | CRA-Records Grade Checklist | Solo CEO Move
The system described in this article comes down to five moments and three locations. Here's what it looks like in practice.
CRA-Grade Records System WorkflowOnce a year (tax time is a natural trigger) do a restore test.
It takes fifteen minutes. Open your Financial Archive. Navigate to the folder from two years ago. Pick three files at random: a bank statement, a financial report, and a tax return. Open each one. Can you read them? Are they complete? Could a CRA auditor sitting across the table from you follow the trail?
If yes, your archive is working. If no, you have found the gap now, while you still have time to fix it.
Ask yourself one more question while you are there. If you had to hand this folder to a CRA auditor tomorrow (or to your accountant) could they follow your trail without asking you a single question? Clear folder names, consistent file naming, complete records by year.
This is what you are building.
During a CRA audit, the ideal position to be in is this: “Here is the exact year-end archive, unchanged since filing.” You open the folder. Everything is there. Statements, ledger, source documents, reconciliations, tax filings. The auditor can follow the trail from the filed return all the way back to the source documents ... without you having to reconstruct anything from memory. It's an ideal position but it is not the ideal audit strategy.
🦆 Duck Wisdom
The principle of least disclosure is the ideal strategy during an audit. So NEVER give a CRA auditor open access to your file archives. It encourages a fishing expenditure and no context or explanations which leads to an auditor making assumptions.
Immutable means something is incapable of being changed, modified, or altered over time. That's what you are aiming for. Verifiable means you have tested that you can restore the backup copy.
You feed your working archive all year with monthly, quarterly and then locking it after you've fed it the year-end package. At the end of each fiscal year, after your books are closed and your return is filed, create one package that captures everything for that year ... and then never alter it.
Example
The folder or zip file name tells the story:
Inside it you'll find:
Once assembled, this package does not get edited. Append-only means if you find an error later, you document the correction separately. You do NOT reach back into the closed year and change it. This creates defensible history. A file with a consistent creation date and no modification history is far more credible than one that has been edited repeatedly.
Copy this folder to your cloud, your local drive, and your annual offline backup. It is your year’s work in one place, readable by anyone, without any software required.
Once you've created your YYYY-Final-Books folder structure explained earlier, here's what to put in it and when.
Monthly
Quarterly
Year-end
At Filing
Annually
Open your cloud storage and create a folder called Financial Archive . Inside it, create a subfolder for the current year. Create subfolders inside that for Bank Statements, Receipts, Invoices Issued, and Year-End. Put this month’s bank statement PDF in the Bank Statements folder, named with the YYYY-MM-DD convention. Create a Naming-Key.txt file in the root with your abbreviation decisions. That is the whole task. The system builds itself one file at a time from here.
These are the acronyms used specifically on this page. If I missed any, please check the Site Glossary.
AI: Artificial Intelligence
AP: Accounts Payable
API: Application Programming Interface
AR: Accounts Receivable
ASPE: Accounting Standards For Private Enterprises
BS: Balance Sheet Statement
CCA: Capital Cost Allowance
CHQ: Chequing
CRA: Canada Revenue Agency
COA: Chart of Accounts
CSV: Comma separated value
GL: General Ledger
GST: Goods and Services Tax
HST: Harmonized Sales Tax
JPG or JPEG: Joint Photographic Experts Group
P&L: Profit and Loss Statement, Income Statement
PDF: Portable Document Format
QBO: QuickBooks Online
T1: Income Tax And Benefit Return tax form
T2125: Statement of Business or Professional Activities tax form
T4: Statement of Remuneration Paid tax slip
T4A: Statement of Pension, Retirement, Annuity, and Other Income tax slip
(A)TB: (Adjusted) Trial Balance
XLSX: Microsoft Excel Open XML Spreadsheet
YE: Yearend