
Time and Attendance Records: What to Keep and for How Long
Build a defensible retention plan for punches, time edits, and supporting records. Start with federal baselines, then account for state rules, access controls, and legal holds.
A timecard total may support a payroll export, but it may not explain how that total was created. For HR, payroll, and operations leaders, sound recordkeeping means preserving required time and pay information—and enough supporting context to answer questions about missing punches, changed hours, and work performed outside the schedule.
Start with federal baselines, not a universal deadline
For covered employers, the Fair Labor Standards Act generally requires retaining payroll records for at least three years. Records supporting wage calculations, such as timecards and work schedules, generally must be kept for two years. These are different record categories, not permission to delete everything connected to attendance after two years.
State and local requirements may demand longer retention or additional information. Other obligations can apply to public contracts, collective bargaining agreements, particular industries, or pending disputes. Check your state's rules and confirm with counsel before adopting a destruction schedule.
Document retention periods by record type, applicable jurisdiction, and the event that starts the clock. Do not assume every period begins when an employee leaves. A legal hold must override routine deletion for relevant records.
Define what belongs in the record
For covered nonexempt employees, federal records generally must include identifying information, the workweek's starting day and time, hours worked each day and each workweek, the pay basis, regular hourly rate, straight-time and overtime earnings, additions or deductions, total wages, and the payment date and covered pay period.
Not every field must live in the timekeeping system. Employee records, timekeeping, and the payroll processor can hold different parts, provided the employer can retrieve and connect them reliably.
Build a record inventory that distinguishes required data from supporting evidence:
- Employee and workweek information: Stable employee identifier, applicable workweek definition, and links to required employment and pay records.
- Time information: Daily and weekly hours, plus source punches or other records used to establish those hours.
- Wage-calculation support: Relevant schedules, rate tables, and records supporting additions or deductions.
- Adjustment context: Original entries, corrected entries, who made a change, when it occurred, and why.
- Policy context: The timekeeping instructions and rule versions that applied during the period.
An edit history is a useful control, even when a particular log format is not expressly required. Preserve factual explanations rather than comments about an employee's attitude or perceived reliability.
Keep schedules separate from actual work
A posted schedule describes intended work. It does not, by itself, establish what an employee actually worked.
For employees on fixed schedules, federal rules allow certain recordkeeping methods based on the normal schedule, with deviations recorded. That approach still requires accurate records when hours differ. If someone works through an unpaid meal period, starts early, or finishes a task after clocking out, the records must reflect compensable work as required by applicable law.
Keep the original time information distinguishable from adjustments used to calculate payable time. If your process applies rounding or meal deductions, retain enough information to explain the result and review the practice with counsel. A system setting does not establish that the practice is lawful.
Also distinguish salaried from exempt. Paying a salary does not eliminate hours-worked recordkeeping requirements for nonexempt employees. Exempt employees have different federal requirements, and other laws or employer policies may call for additional records.
Make retention an operating procedure
A retention policy is incomplete unless someone owns its execution. Use this checklist to turn a written rule into a repeatable process:
- Map every storage location. Include the timekeeping platform, payroll processor, shared drives, manager spreadsheets, paper corrections, and archived systems.
- Assign a record owner. Identify who maintains each category and who handles retrieval requests when that person is unavailable.
- Create a retention matrix. Record the minimum period, legal or business basis, retention trigger, approved storage location, and disposal method.
- Document the correction process. Require a reason for changes and preserve the underlying record where appropriate. Give employees a clear way to report inaccuracies.
- Test retrieval. Select a past workweek and retrieve daily hours, weekly totals, relevant changes, and linked payroll records. Check that exported files remain readable.
- Control deletion. Require an authorized review for expired records and a documented check for legal holds before disposal.
Repeat the retrieval test after system migrations or vendor changes. Confirm what remains accessible after a contract ends, including historical exports and the information needed to interpret them. Vendor storage is not a substitute for employer oversight.
Protect access without losing usable evidence
Time and attendance records contain personal information. Limit access by job responsibility and avoid placing medical details or sensitive leave documentation in broadly visible timecard notes. Store those materials separately where required, with appropriate confidentiality controls.
Preserve useful metadata when archiving: employee identifiers, date ranges, workweek definitions, time zones where relevant, and field descriptions. An unexplained spreadsheet of numbers is harder to use than a documented export.
When a complaint, investigation, or reasonably anticipated litigation arises, promptly involve counsel to determine what must be preserved. Relevant material may extend beyond approved timecards to schedules, messages about work, and correction requests. Pause applicable deletion processes rather than relying on individual managers to save files.
How HarmonyWFM helps
Time and attendance recordkeeping depends on consistent information that can be connected and retrieved. HarmonyWFM's employee records help associate time information with the correct worker, while configurable time rules support a consistent approach to reviewing recorded time. Reporting helps teams examine historical hours and prepare records for internal review.
HarmonyWFM reviews time and exports it to a payroll processor; it does not process payroll or calculate net pay. Include both systems in your retention inventory so time records remain connected to wage records. Explore the HarmonyWFM platform and confirm your retention, export, and retrieval needs during evaluation. Your organization remains responsible for retention decisions, legal holds, and applicable requirements.
See attendance patterns in context
HarmonyWFM connects time records, attendance points and schedule information to the same employee record, helping managers spot patterns and follow consistent policies.