Attendance Records and Wage-and-Hour Compliance: What to Keep and How Long

Short answer: under the US Fair Labor Standards Act, employers must keep payroll records for at least three years and the records that wage computations are based on — time cards, work schedules, wage-rate tables, records of additions to or deductions from wages — for at least two years. The FLSA does not mandate any particular timekeeping method. A paper sheet, a punch clock and a mobile app are all equally legal. What matters is that the records are complete, accurate, and producible.

That last word is where companies get hurt. In a wage-and-hour dispute the employer carries the burden of producing accurate records of hours worked. When an employer cannot, courts have long allowed employees to establish hours by reasonable inference — which in practice means the employee's recollection becomes the working number. Bad recordkeeping does not just create a fine. It shifts the entire evidentiary footing of the dispute against you.

Table of contents

• What the FLSA actually requires you to record
• Retention periods: the matrix
• Where state law goes further
• Seven recordkeeping mistakes that cost real money
• What a wage-and-hour audit actually looks like
• What a defensible attendance system looks like
• FAQs

General information as of July 2026, not legal advice. Verify with the US Department of Labor Wage and Hour Division, your state labor agency, and counsel before setting policy.

What the FLSA actually requires you to record

For every non-exempt employee, federal regulations require a defined set of data points. Most HR teams can name four or five of them; there are more than a dozen.

#RecordCommon gap 1Employee full name and social security number— 2Address including zip codeNever updated after a move 3Birth date, if younger than 19Missed for seasonal/student hires 4Sex and occupation— 5Time and day of week the workweek beginsFrequently undefined entirely 6Hours worked each dayRecorded weekly instead of daily 7Total hours worked each workweek— 8Basis on which wages are paid ("$15/hr", "$800/week")Missing for multi-rate employees 9Regular hourly pay rateNot recomputed when bonuses apply 10Total daily or weekly straight-time earnings— 11Total overtime earnings for the workweekBlended incorrectly for multi-rate work 12All additions to or deductions from wagesUniform/equipment deductions undocumented 13Total wages paid each pay period— 14Date of payment and pay period covered—

Item 5 deserves special attention. The workweek is the unit of overtime calculation, and it must be a fixed, regularly recurring period of 168 hours. If you have never formally defined when your workweek starts, you have a gap that affects every overtime calculation you have ever run — and it is the first thing an investigator asks for.

Retention periods: the matrix

Record typeFederal minimumAuthority Payroll records, collective bargaining agreements, sales and purchase records3 yearsFLSA Time cards, work schedules, wage-rate tables, records of additions/deductions2 yearsFLSA Payroll tax records4 yearsIRS FMLA-related records (covered employers)3 yearsFMLA Employment/hiring records, applications1 year (2 for federal contractors)EEOC / Title VII I-9 forms3 years after hire or 1 year after termination, whichever is laterUSCIS OSHA injury and illness records5 yearsOSHA Benefit plan records (ERISA)6 yearsERISA

The practical rule: retention periods stack rather than compete. Where two rules cover the same record, the longer one governs. Most well-run companies simply adopt a single retention floor — commonly four to seven years for anything payroll-adjacent — because tracking eight different clocks per document type is how records get destroyed early by accident.

One caveat that overrides everything above: once litigation is reasonably anticipated, a legal hold suspends all routine destruction. Deleting records on schedule after you have notice of a claim is a separate and much more serious problem than the underlying wage dispute.

Where state law goes further

Federal requirements are the floor, not the ceiling. Several states impose longer retention, additional data points, or employee access rights that federal law does not:

• Longer retention. Some states require payroll records for six years rather than three.
• Meal and rest break documentation. States with mandated break rules — California most prominently — expect records demonstrating breaks were provided, and premium pay when they were not.
• Employee access rights. Many states give employees a statutory right to inspect or receive copies of their own payroll records within a defined window, often 21 to 30 days, with penalties for failure.
• Wage statement content. Itemised pay-statement requirements vary considerably and carry their own per-violation penalties independent of whether wages were correct.

If you employ people in more than one state, build to the strictest state's standard rather than maintaining parallel practices. The overhead of divergence exceeds the cost of over-compliance.

Seven recordkeeping mistakes that cost real money

1. Rounding in the employer's favour. Rounding time to the nearest quarter-hour is permissible only if it is neutral over time. Systematic rounding down is a wage violation that compounds across every employee and every pay period.
2. Automatic meal-break deductions. Auto-deducting 30 minutes regardless of whether the break was taken is one of the most common sources of collective wage claims. If an employee works through lunch, that is compensable time.
3. Off-the-clock work. Pre-shift setup, post-shift cleanup, and after-hours messages are hours worked if the employer knew or should have known. "We told them not to" is not a defence when you paid for the output.
4. Undefined workweek. See above. Without a fixed workweek, overtime is uncomputable and indefensible.
5. Editing time records without an audit trail. Legitimate corrections happen — a forgotten punch, a system outage. What matters is that the original value, the changed value, who changed it and why are all preserved. A system where a manager can silently overwrite a punch is worse than paper.
6. Treating exempt classification as a filing decision. Misclassifying a non-exempt employee as exempt does not remove the recordkeeping obligation; it creates back-pay liability for every unrecorded overtime hour. Our classification guide covers the tests.
7. Records that live in one person's spreadsheet. If the office manager leaves and takes the laptop, the records are effectively gone. Retention obligations do not care about your staffing.

What a wage-and-hour audit actually looks like

A DOL investigation typically follows a predictable shape, and knowing it removes most of the panic:

1. Notice and records request. Payroll records, time records, and the workweek definition for a defined period — commonly two years.
2. Employee interviews. Conducted privately, typically including both current and former employees.
3. Reconciliation. The investigator compares what employees describe against what your records show. Discrepancies are where findings come from.
4. Findings and back-wage computation. If records are inadequate, computation proceeds on the best available evidence, which is usually employee testimony.

The single best preparation is the ability to produce, on request, a complete daily hours record with an audit trail for any employee over any period. If you can generate that in ten minutes, an audit is an inconvenience. If it takes three weeks of spreadsheet archaeology, it is an existential event.

What a defensible attendance system looks like

Six properties. A system with all six is defensible; one missing any of them has a gap that will be found.

PropertyWhy it matters Employee-initiated punchesRecords what the employee attests to, not what a manager entered on their behalf Immutable audit trailEvery edit preserves the original value, the editor and the reason Location or device verificationCorroborates presence; the most effective control against buddy punching Daily granularityFederal rules require hours worked each day, not weekly totals Break tracking that distinguishes paid from unpaidRemoves auto-deduction exposure Export on demandYou must be able to produce records in a usable format quickly, and after you stop paying the vendor

That last point is worth emphasising because it is a procurement question, not a features question: ask any attendance vendor what happens to your records if you cancel. Your retention obligation runs for years after the subscription ends. A platform that will not give you a complete historical export is a compliance liability regardless of how good the product is.

For a scored comparison of platforms against these criteria, see our guide to the best attendance tracking software. If your team is hourly and shift-based, the restaurant and hospitality guide covers the additional tip and multi-venue requirements.

Key takeaways

• FLSA: payroll records 3 years, timekeeping records 2 years. IRS payroll tax records 4 years. Retention rules stack — the longest wins.
• No specific timekeeping method is required, but records must be complete, accurate and producible.
• When records are inadequate, the employee's account of hours worked can become the operative evidence.
• Define your fixed workweek in writing — overtime is uncomputable without it.
• Automatic meal deductions and systematic rounding are the two most common sources of back-wage liability.
• Any edit to a time record must preserve the original value, the editor and the reason.
• Confirm you can export complete historical records if you leave your vendor — the obligation outlives the subscription.

Frequently asked questions

How long must employers keep employee time records?

Under the FLSA, at least two years for records on which wage computations are based, including time cards, work schedules and wage-rate tables, and at least three years for payroll records. IRS rules require payroll tax records for four years, and several states require longer. Apply whichever period is longest.

Is a paper time sheet legal?

Yes. The FLSA does not prescribe a timekeeping method — time clocks, paper sheets and digital systems are all acceptable. The requirement is accuracy and completeness. Paper is legal but hard to defend, because it has no audit trail and no way to demonstrate that entries were not altered.

Can employers round employee time?

Rounding is permitted if it is neutral over time and does not systematically favour the employer. Rounding that consistently reduces recorded hours results in unpaid wages and is a common finding in wage-and-hour investigations.

Do salaried employees need time records?

Employees properly classified as exempt do not require hours-worked records under the FLSA, though other records still apply. The risk is that classification is frequently wrong — if an employee is later found to be non-exempt, the absence of hours records makes the back-pay exposure much harder to limit.

What happens if an employer has no time records in a wage dispute?

The employer carries the burden of producing accurate records. Where records are missing or inadequate, employees may establish hours worked by reasonable inference, and the employer must produce evidence to rebut it. In practice this often means the employee's estimate becomes the starting figure.

Do I need to record meal breaks?

Federal law does not require meal breaks, but where breaks are provided, bona fide meal periods of 30 minutes or more are generally unpaid while short rest breaks are compensable. Several states mandate breaks and expect documentation. Automatically deducting a meal period without verifying it was taken is a significant liability.

Attendance records you can produce in ten minutes

TracefyHR records employee-initiated check-ins with geolocation verification, keeps a full audit trail on every edit, and exports complete historical attendance and payroll records to Excel or PDF on demand — included in the flat $20–$49/month plan. See how leave and attendance work, or review our data handling and security practices.