Digital record keeping: what the CRA actually accepts

“Can I just scan everything and throw the paper out?” is one of the most common questions a small business owner asks, and the short answer is yes. The longer answer matters, because the CRA's acceptance of electronic records carries conditions about format, location, quality and backup that most shoebox-to-cloud conversions never consider.

The core rule: readable, not merely stored

Subsection 230(4.1) requires that persons who keep records in an electronic format retain them in an electronically readable format for the prescribed period, even when hard copy is available. The CRA defines an electronic record as any information recorded in an electronically readable format, and electronically readable as information supported by a system capable of producing an accessible and useable copy.

That word “useable” is doing real work. An accessible copy means the taxpayer must provide records to CRA auditors in a format letting them process and analyse the data on CRA equipment. A folder of flat images is storage, not necessarily a readable accounting record. Where records are converted between formats, the taxpayer is responsible for ensuring they remain reliable and readable and that nothing relevant is lost or altered.

Where the records have to live

This is the point most often assumed away in a cloud-first business. Records must be kept at the person's place of business or residence in Canada, or another place designated by the Minister, and made available to CRA officers on request. The CRA's position is that records kept outside Canada and accessed electronically from Canada are not considered to be records in Canada.

There is a route through it. Where records are maintained electronically outside Canada, the CRA may accept a copy provided it is made available in Canada in an electronically readable and useable format with adequate detail to support the returns filed. Authorization to maintain records elsewhere may also be granted by the Minister, subject to written terms and conditions. Businesses hosted on servers outside Canada carry the same responsibilities as everyone else.

Scanned receipts: the imaging standard

Imaging reproductions of books of original entry and source documents have to be produced, controlled and maintained according to the applicable national standard of Canada for electronic images as documentary evidence. The CRA sets out what an acceptable imaging program requires, and it reads less like “take a photo” and more like a controlled process:

• A log recording the date of imaging, the signatures of the persons authorizing and performing it, a description of the records imaged, and whether source documents were destroyed after imaging and on what date.
• Imaging software that maintains an index permitting immediate location of any record, and that inscribes the imaging date and the name of the person who did the imaging.
• Images of commercial quality, legible and readable when displayed on a screen or reproduced on paper.
• Equipment in good working order available, after reasonable notification, to view or reproduce a hard copy of the image.

Where that is met, paper source documents that have been imaged to the standard may be disposed of and their images kept as permanent records. Where imaging is done by a third party, the taxpayer is still responsible for ensuring it was done acceptably.

Records that were born electronic

There is a distinction worth internalising. Where documents are initially created, transmitted or received electronically, those documents constitute records that must also be retained electronically — printing them and keeping the printout is not a substitute. Source documents include sales and purchase invoices, cash register receipts, formal written contracts, credit card receipts, delivery slips, deposit slips, work orders, dockets, cheques, bank statements and tax returns, and can include emails and other correspondence where relevant for tax purposes.

The CRA also expects an audit trail: the electronic records must show a path from the source documents through to the summarised financial accounts, with enough detail to substantiate summarised information. For internet-based transactions that can extend to web logs, transaction emails and digital signatures where they form part of the record.

Backups are part of the obligation

Backup is treated as a compliance matter rather than an IT preference. The CRA expects procedures ensuring that backups do not overwrite prior period backups or logs, that logs state how long a medium is retained before being overwritten, and that there is periodic testing that backed-up records can actually be restored into an electronically readable format. Offsite backup is encouraged, with the recommendation that copies be maintained within Canada. If electronic records required to be maintained are lost, destroyed or damaged, the taxpayer must report the situation to the CRA and recreate the files within a reasonable period.

Outsourcing does not transfer the duty

A person who keeps records electronically is not relieved of record keeping, readability, retention or access responsibilities by contracting the function out — to a bookkeeper, an accountant, an internet service provider, an application service provider or a hosted platform. The taxpayer must also ensure the requirements continue to be met through third-party changes such as software conversions, upgrades, bankruptcy, or migration to or from a provider.

In practice that is an argument for exporting a full, readable copy of your accounting data on a schedule rather than trusting that a subscription will always be there. Whichever platform you land on — the comparison in QuickBooks versus Xero is a reasonable starting point — the export discipline is the same.

The bottom line

Going paperless is not just permitted; for anything created electronically it is required. What the CRA asks in return is that the digital system behaves like a records system: readable in a usable format, located or reproducible in Canada, imaged to a controlled standard before paper is destroyed, backed up in a way that has actually been tested, and complete enough to trace a summarised figure back to its source. Get those right and the retention clock takes care of itself — and a review or audit becomes a short job. This is guidance of long standing rather than a new rule, so confirm the current version of the CRA's electronic record keeping requirements before making an irreversible decision such as destroying originals.

This article is general information for Canadian business owners and is current as of July 2026. It is not tax, legal or accounting advice, and it does not create a client relationship. Tax rules change and your situation is unique — please speak with a CPA before acting on anything here.