Export Record Keeping Requirements for U.S. Exporters

You shipped the goods. Customs cleared them. The buyer received everything. So the paperwork is done, right?

Not even close. Under U.S. export regulations, your obligation to keep records lasts years after the shipment leaves the country. The Export Administration Regulations (EAR), Foreign Trade Regulations (FTR), International Traffic in Arms Regulations (ITAR), and Office of Foreign Assets Control (OFAC) rules all require exporters to retain documents — and the penalties for failing to produce them on request are severe.

This guide explains what records you must keep, how long each regulation requires you to keep them, and what happens when you cannot produce them during an audit.

How Long Must U.S. Exporters Keep Export Records?

The standard retention period across most U.S. export regulations is five years. But the specific start date and scope differ by regulation, and one agency recently doubled its requirement to 10 years.

Under the EAR (15 CFR §762.6), all export records must be retained for five years from the latest of the following: the date of export, the date of any known reexport or diversion, or the date the transaction otherwise terminates. According to the Bureau of Industry and Security (BIS), this five-year clock does not necessarily start on the date you ship — it starts on whichever triggering event comes last.

The FTR (15 CFR §30.10) requires all parties to an export transaction — including the U.S. Principal Party in Interest (USPPI), Foreign Principal Party in Interest (FPPI), authorized agents, and carriers — to retain documents for five years from the date of export. This is broader than the EAR in one important way: it applies to all parties, not just the exporter.

The ITAR (22 CFR §122.5) similarly requires five-year retention for defense trade transactions.

And then there is OFAC. On March 21, 2025, OFAC published a final rule extending its recordkeeping requirement from five years to 10 years for transactions subject to U.S. economic sanctions. This change, codified at 31 CFR §501.601, aligns with the April 2024 legislation that doubled the statute of limitations for sanctions violations under IEEPA and TWEA from five to 10 years. The rule took effect on March 21, 2025.

What Records Does the EAR Require You to Retain?

The EAR's record retention list is extensive. Under 15 CFR §762.2, exporters must keep export control documents (license applications, AES filings, dock receipts), memoranda and notes, correspondence (including emails), contracts, invitations to bid, books of account, and financial records related to export transactions.

The regulation lists over 50 specific references to other sections of the EAR that contain additional recordkeeping provisions. In practical terms, this means nearly every document that touches an export transaction — from the initial purchase order to the final proof of delivery — falls under the retention requirement.

According to the American Association of Exporters and Importers (AAEI), a best practice is to ensure that each export transaction can "tell its own story." That means all associated documentation from purchase order to proof of payment should be retained as a complete package.

What Records Does the FTR Require?

The FTR's recordkeeping scope focuses on Electronic Export Information (EEI) and supporting trade documents. Under 15 CFR §30.10, all parties must retain shipping documents, invoices, orders, packing lists, and correspondence related to export shipments. These records must be available for examination by the Census Bureau, CBP, ICE, BIS, and other participating agencies at any time within the five-year retention period.

One detail that catches many exporters off guard: the FTR's retention obligation applies to all parties in the transaction. That includes freight forwarders, carriers, and authorized agents — not just the exporter. If you are a forwarder handling someone else's shipment, you still must keep the records.

What Changed with OFAC's 10-Year Rule?

The most significant recent change in export recordkeeping came from OFAC. On September 13, 2024, OFAC published an interim final rule (89 FR 74832) proposing to extend its recordkeeping requirement from five to 10 years. The final rule was published on March 21, 2025, adopting the interim rule without changes.

This extension applies to any person engaging in transactions subject to OFAC's sanctions regulations. Records must now be available for examination for at least 10 years after the date of the transaction. For blocked property, records must be kept for the entire duration the property remains blocked, plus 10 years after it is unblocked.

According to the law firm Greenberg Traurig, this extended requirement applies only to sanctions compliance and does not change the five-year retention periods under the EAR or ITAR. However, companies that deal with sanctioned countries, entities, or transactions now face a significantly longer compliance window.

The American Bankers Association noted that this is the first time OFAC's recordkeeping requirement deviates from and exceeds existing five-year standards across other regulatory frameworks — creating a new layer of complexity for compliance teams.

What Are the Penalties for Not Keeping Records?

Failing to retain or produce export records is not treated as a minor paperwork issue. Each regulation carries its own penalty structure.

For EAR violations, BIS can impose administrative penalties of up to $374,474 per violation or twice the value of the transaction, whichever is greater. This amount, current as of January 15, 2025, is adjusted annually for inflation. Criminal penalties can reach up to $1,000,000 per violation and up to 20 years of imprisonment.

For FTR violations, civil penalties can reach up to $10,000 per violation for failure to file, late filing, or filing false information. Criminal penalties for knowing violations can include fines up to $10,000 or imprisonment up to five years, or both.

For ITAR violations, civil penalties reached $1,271,078 per violation as of 2025, with criminal penalties of up to $1,000,000 per violation and up to 10 years imprisonment.

And here is a critical detail from 15 CFR §762.6(b): once BIS or any other government agency makes a formal or informal request for a record, that record cannot be destroyed — even if the five-year retention period has already expired. Destroying a record after a government request is itself a violation.

What Happens During an Export Compliance Audit?

When BIS conducts an export compliance audit, the Office of Export Enforcement (OEE) may request documents with limited advance notice. According to enforcement guidelines referenced by compliance professionals, records should be retrievable within 48 hours for transactions within the past two years, and within five business days for older transactions within the five-year window.

This means your records need to be not just retained, but organized and accessible. Having five years of export documents in a storage unit 300 miles away does not satisfy the requirement if you cannot produce them within the expected timeframe.

The AAEI recommends that exporters take ownership of their own record management rather than relying solely on freight forwarders. Business relationships change, forwarders switch systems, and documents can be lost in transitions. If the government asks for a record, the obligation falls on you — not your service provider.

How Should Exporters Organize Their Records?

A practical record retention system for U.S. exporters should account for the following:

Retain by transaction — group all documents for each shipment together so any single transaction can be reconstructed from start to finish.
Track the clock per regulation — the EAR's five-year period starts from the latest triggering event (export, reexport, or transaction termination), not necessarily the ship date. OFAC's 10-year period starts from the transaction date.
Include internal communications — the EAR requires retention of memoranda, notes, and correspondence. Emails discussing classification decisions, license determinations, or end-use checks are all covered.
Digital copies are acceptable — under 15 CFR §762.5, reproductions are allowed as long as they are complete, accurate, legible, and durable. But if the original does not meet legibility standards, the original must also be kept.
Never destroy after a government inquiry — if any agency has requested a record, it must be preserved regardless of age.

Quick Reference: Retention Periods by Regulation

EAR (15 CFR §762.6) — 5 years from export, reexport, or transaction termination (whichever is latest)
FTR (15 CFR §30.10) — 5 years from date of export (applies to all transaction parties)
ITAR (22 CFR §122.5) — 5 years from transaction completion
OFAC (31 CFR §501.601) — 10 years from transaction date (effective March 21, 2025)

Export compliance does not end when your container reaches the port. The records you keep — and how long you keep them — are part of the obligation. The cost of not being able to produce a three-year-old invoice during an audit is far higher than the cost of storing it. Build the system now, before someone asks for the file.