The CRA Six-Year Rule for Canadian Accountants: How to Organize and Archive Client Tax Files Without Putting Them in the Cloud

Short answer: The CRA generally requires you to keep records for six years from the end of the last tax year they relate to — and you can meet that obligation without uploading six years of clients' SINs and slips to a cloud document system. The CRA accepts readable, accessible electronic records, so an organized, on-device archive — one clearly named, OCR-searchable merged PDF per client per year, stored under your own control with backups — satisfies the rule while keeping the data on your machine. The retention requirement is real; the assumption that "secure archive = someone else's cloud" is not.

Not legal or tax advice. This is a general explainer for Canadian accountants and bookkeepers. The Income Tax Act, CRA guidance, your CPA body, PIPEDA, and Quebec's Law 25 set the actual rules — confirm your specific obligations and retention periods with qualified counsel.

What the six-year rule actually says

The headline number most accountants know is right: keep records for six years. The detail that trips people up is when the clock starts. The CRA's general rule is six years from the end of the last tax year the records relate to — not six years from when you happened to file. A few cases change the math:

• Personal (T1) returns: generally six years after the end of the tax year.
• Late-filed returns: the six years generally run from the date the return was actually filed.
• Objections, appeals, and audits: if a return is under dispute or review, you may need to keep the records longer — until the matter is resolved and the normal period has passed.

The safe operating assumption for a practice is simple: do not destroy a client year until you are certain the full retention period has run and no dispute is open. When in doubt, keep it. Storage is cheap; reconstructing a destroyed file under audit is not.

What counts as a "record" you have to keep

The CRA can ask to see the documents that substantiate the numbers on a return, so the supporting slips matter as much as the return itself. For a typical Canadian or Québec client, that means:

Electronic copies are fine. The CRA accepts digital records as long as they stay readable, accessible, and producible on request for the entire retention period. A pile of unnamed scans technically "kept" but impossible to find on demand is the failure mode to avoid.

The assumption every archiving guide gets wrong

Search "how to archive client tax files" and almost every result assumes the answer is a cloud document management system or client portal — upload everything to TaxDome, SmartVault, Canopy, or a TitanFile-style portal and call it secure. Those are real products with real security programs. But notice the unstated premise: to keep records safely for six years, you must hand six years of your clients' SINs and slips to a third party.

That premise is not in the Income Tax Act. The CRA wants readable, accessible records produced on request — it does not require a SaaS vendor. For the privacy-conscious solo accountant who is uneasy storing thousands of clients' most sensitive identifiers on someone else's servers, the more honest framing is: a secure archive is one that is organized, on-device, and where you hold the keys — not necessarily one that lives in someone else's encrypted cloud.

A local-first archive that is actually audit-ready

The hard part of a local archive isn't storage — it's findability. "Keep it on a drive" fails the moment the CRA asks for the 2022 RRSP support for one specific client and you're staring at folders of scan_0047.pdf. The prep step the SERP never mentions: collapse each client's loose slips into one ordered, OCR'd, searchable merged PDF per client per year, on-device. Then the archive is both compliant and re-findable. A workflow that holds up:

1. One folder per client per tax year. /Archive/2025/Tremblay-Marie/. Predictable, boring, reliable.
2. Merge each year into a single ordered PDF. Point a local tool at the loose scans — T4s, T5s, RL-1s, RRSP receipts — and let it classify, order, and export one merged file. PDF Insight does this on-device: an 11-document bundle becomes one correctly ordered PDF in roughly 100 seconds on a 16GB Mac, bilingual EN/FR so RL slips and French labels are handled natively.
3. Make it searchable with on-device OCR. Scanned slips become text you can search inside the PDF — so "find the 2022 donation receipt" is a search, not an archaeology dig.
4. Name to a fixed convention. 2025_Tremblay-Marie_T1-bundle.pdf. Sortable, greppable, instantly identifiable years later.
5. Back up under your control. An encrypted external drive plus a second offline copy. Backups are about durability, not about handing the data to a third party.

Because every step happens on your machine, there is no cloud account holding the data, and no "where did that SIN go?" to answer when a client — or a regulator — asks. The internet cable can stay unplugged the whole time.

The honest trade-off

Local-first archiving is not magically "more secure" than every cloud vendor in the abstract — a well-run cloud DMS with strong access controls can be very secure. What on-device archiving does is remove an entire category of risk: third-party transmission, third-party storage, data-residency questions, and the consent and disclosure obligations that attach the moment client data leaves your control. You trade "trusting a vendor's security program" for "running a disciplined backup routine yourself." For a solo practice, that is often the trade you actually want.