Skip to main content
Jay Sudha

Safe Storage of Financial Documents: What to Keep and Who Can Find It

In a family business, papers outlive the person who filed them. What to keep as originals, for how long, locker vs safe vs cloud, and a family access sheet.

By Jay Sudha, Finance Educator··Updated September 29, 2026·14 min read
Safe Storage of Financial Documents: What to Keep and Who Can Find It

I write this site from the office of a rice mill that started out as my father's business and that I now run. In a family business, papers outlive the person who filed them: deeds, loan papers, registration documents, insurance bonds. Keeping them safe is half the job. The other half is making sure the next person can find them.

Financial documents serve two distinct purposes: they protect you during your lifetime in disputes, tax filings, and claims; and they protect your family after you're gone by providing evidence of assets, policies, and accounts. A good storage system needs to address both. This guide covers which documents need physical originals, how long to keep each, where to keep them, the digital layer, the family access sheet, and what to do when an original is lost or damaged.

The Document Storage Decision Matrix

Before storing any document, three questions determine how to handle it:

Tax docs: 7 years. Property: forever
  1. Is this an original document with legal significance? (Property deeds, insurance bonds, court orders, wills)
  2. Can it be regenerated digitally if lost? (Bank statements, ITR acknowledgments: yes; property sale deed: no)
  3. How long does it need to be retained? (Tax documents: 7 years; property documents: permanently)
Document Type Physical Original Digital Copy Retention Period
Property sale deed / title ✅ Must keep ✅ Also keep Permanently
Insurance policy bond ✅ Must keep ✅ Also keep Duration + 3 years
Will / power of attorney ✅ Must keep ✅ Encrypted Permanently
Bank statements ❌ Not required ✅ Keep 7 years
ITR acknowledgments ❌ Not required ✅ Keep 7 years
Form 16 ❌ Not required ✅ Keep 7 years
Investment statements ❌ Not required ✅ Keep Until sold + 3 years
Mutual fund CAS ❌ Not required ✅ Keep Current + 3 years
Vehicle RC book ✅ Keep original DigiLocker As long as owned
PAN card ✅ Keep DigiLocker Permanently
Aadhaar card ✅ Keep DigiLocker Permanently
Driving licence ✅ Keep DigiLocker Until expiry + renewal
Loan agreements Keep if active ✅ Keep Duration + 3 years
Loan NOC (closed loan) ✅ Keep original ✅ Keep Permanently

A will and a power of attorney sit in the "keep permanently" row for a reason: they only work if they can be produced. How to write each is covered in how to write a will in India and the financial power of attorney guide.

Figure 1How long to keep the main financial documentsLegal originals are kept on paper as well as digitally; statements that can be downloaded again need only a digital copy.
  • PermanentlyProperty sale deed / titlePhysical original, plus a digital copy
  • Duration + 3 yearsInsurance policy bondPhysical original, plus a digital copy
  • 7 yearsITR acknowledgmentsA digital copy is enough
  • Until sold + 3 yearsInvestment statementsA digital copy is enough

Source: “The Document Storage Decision Matrix”, above

Physical Storage: Where to Keep What

Bank locker (highest security, for irreplaceable originals):

  • Property documents: sale deed, title, allotment letter, occupancy certificate
  • Original will and any codicils
  • High-value jewellery purchase receipts and valuation certificates
  • Original share certificates (if any physical ones exist)
  • Foreign travel documents and passport copies

Home fireproof safe or lockbox:

  • Insurance policy bonds (term, health, life, vehicle)
  • Vehicle RC book
  • Passport (active)
  • Birth certificates and marriage certificate
  • Loan NOCs for all closed loans
  • Emergency cash (small amount)

Home filing cabinet or organised folder (accessible for regular use):

  • Bank statements for current and past 1-2 years
  • Active loan statements and EMI schedules
  • Recent ITR printouts
  • Investment account statements for current financial year

Digital Storage: The Two-Layer System

Layer 1: DigiLocker (government-backed, legally equivalent to originals). DigiLocker (digilocker.gov.in) connects directly to government databases and provides digitally signed copies of official documents. Available documents include Aadhaar (via UIDAI), PAN (via Income Tax Department), driving licence and vehicle RC book (via transport departments), class 10 and 12 certificates (via boards), and ITR acknowledgments (via IT Department). These are legally valid for most institutional and government purposes. Even so, I don't rely on DigiLocker alone: my own papers are also kept as physical copies.

Layer 2: Encrypted personal cloud storage. For all documents not available in DigiLocker (bank statements, investment account statements, Form 16s, insurance policies, loan documents), use encrypted personal cloud storage with two-factor authentication enabled. Google Drive with a strong password and 2FA, or iCloud on Apple devices, are practical options. The full digital setup, from folders to statement auto-delivery, is in going paperless with your finances.

Folder structure suggestion:

/Finance/
  /Identity/
  /Banking/ (by FY: FY2024-25/, FY2023-24/)
  /Investments/ (by platform)
  /Insurance/ (by type: life, health, vehicle)
  /Taxes/ (by AY: AY2025-26/)
  /Property/
  /Loans/ (active and closed)

File naming convention: YYYY-MM_DocumentType_Institution.pdf Examples: 2025-04_Form16_TataConsultancy.pdf, 2025-01_PolicyBond_MaxLife.pdf

The Family Access Document

This is the most important document many families don't have. Create a single page or encrypted note that lists:

  • All bank accounts: bank name, account type, account number, branch
  • All investment accounts: platform name, folio number or account ID, customer support contact
  • All insurance policies: company name, policy number, type of cover, nominee name, insurer phone
  • EPF account: UAN, linked employer, EPFO regional office
  • NPS account: PRAN number, point of presence
  • Outstanding loans: lender name, loan account number, approximate outstanding, EMI amount
  • Location of all physical documents: which documents are in the bank locker, home safe, filing cabinet
  • Digital storage: where documents are stored online and how to access them

Do not include passwords directly in this document unless it is stored in an encrypted password manager. Instead, note the password manager name and its access method.

Update this document every April. Inform your spouse and one other trusted family member of its location: not its contents, just where to find it when needed. A fuller version of the same idea is the emergency information document.

In a family business the access document does more work, because the papers are spread across people and years: property the business uses, its loan and limit papers, registrations, and the personal papers of each family member. When responsibility passes from one generation to the next, the most useful single document is often not any deed. It is the list of what exists and where its papers are kept.

Annual Document Audit

Once a year, spend 30 minutes:

  • Check all physical document locations (still there, not deteriorated?)
  • Update the digital folder with new statements and delete duplicates
  • Verify the family access document is current
  • Securely shred or delete expired documents past their retention period
  • Confirm all expected documents arrived digitally (bank statements, ITR, Form 16)

Downloading and Filing Key Annual Documents: Platform by Platform

Every April, these documents should be downloaded, named, and filed:

ITR Acknowledgment (ITR-V): Log into incometax.gov.in → e-File → Income Tax Returns → View Filed Returns → Select the assessment year → Download the ITR-V (acknowledgment PDF). Name it: YYYY_ITR-V_AY[year]-[year+1].pdf. Store in /Taxes/AY[year]/.

Form 26AS and AIS: On the same portal, go to e-File → Income Tax Returns → View AIS/TIS. Download the AIS (Annual Information Statement); it shows all income, TDS, capital gains, and financial transactions reported to the tax department. Also download Form 26AS separately for a traditional view. Store both under /Taxes/AY[year]/.

Consolidated Account Statement (CAS): Visit mfcentral.com, log in with PAN, and request a CAS for the full financial year (April to March). This single PDF shows all mutual fund transactions and holdings across all AMCs. Store as YYYY-03_CAS-MFCentral.pdf under /Investments/Mutual-Funds/. You can also request this from camsonline.com and kfintech.com for AMC-specific statements.

EPF Annual Statement: Log into member.epfindia.gov.in and download the passbook or annual statement for the financial year. Store as YYYY_EPF-Annual-Statement.pdf under /Investments/EPF/.

NPS Statement: Log into npscra.nsdl.co.in and request a Transaction Statement for the financial year. Download as PDF. Store under /Investments/NPS/.

CDSL Demat Statement: Log into mycas.in (for CDSL demat accounts) and request a Holding Statement and Transaction Statement for the year. Store under /Investments/Equity-DEMAT/. NSDL accounts use eservices.nsdl.com for the same.

Filing these seven documents annually takes about 45 minutes. Having them consistently filed means that when you need to prepare for an ITR audit, a bank loan application, or a nominee claim, everything is in one organised location.

The Duplicate Check: What Often Gets Missed

During the annual document audit, check specifically for these common omissions:

Old closed-loan NOCs: Every loan you've ever closed should have a NOC (No Objection Certificate) from the lender confirming the account is settled. If you closed a car loan five years ago but never collected the NOC, collect it now. Contact the lender's customer care; most lenders can issue a duplicate NOC for closed accounts. Without this, a sale, mortgage, or credit check years later can flag an unresolved historical entry.

Physical insurance bonds for legacy LIC policies: Older LIC policies (especially endowment, money-back, or whole-life policies taken before 2010) have physical policy bonds that may have been filed away and forgotten. Locate these and either link them to eIA (IRDAI's e-Insurance Account) for digital tracking, or confirm their physical location in your home safe.

Old property documents from rented properties: If you or your parents have old rent agreements or property tax receipts from properties that were sold years ago, confirm whether they are past their retention period. Property tax receipts more than 5 years after the property was sold are generally not needed. Clearing these from physical files reduces clutter without risk.

Shares in physical certificate form: An increasingly rare but still present issue for older families: physical share certificates from pre-demat era companies. If any family member holds physical share certificates from companies that have since been listed, these need to be dematerialised by opening a demat account and submitting the physical certificates through a DP (Depository Participant). Unclaimed physical shares can ultimately be transferred to IEPF (Investor Education and Protection Fund) by companies, making recovery more complicated.

A Loan Ends With a Document, Not an EMI

I think of every loan as two documents: the sanction at the start and the NOC at the end. Keeping each loan in its own file, the way a term loan and a cash credit are meant to be kept apart, is what makes the second one easy to find.

I'd check the closed-loan folder first

A loan is not over when the last EMI leaves your account. It is over when the lender's NOC is in your file, any pledged security or hypothecation has been released on paper, and your credit report shows the account closed. Families lose track of the second document far more often than the first, usually because nobody asks for it the week the loan ends. If I were auditing any family's papers, the closed-loan folder is where I would look first.

When Physical Originals Get Damaged: Recovery Procedures

If a physical original is damaged by flood, fire or termites, here is how to recover the most critical categories:

Property documents: A damaged sale deed can be replaced with a certified copy from the Sub-Registrar's office where the original registration occurred. You'll need to apply for a certified copy with supporting identity documents and pay a fee. The certified copy is legally valid for most purposes. However, for a bank loan application, some banks require the original, so check with the lender before assuming a certified copy will suffice.

PAN card: Apply for a reprint at NSDL (tin.tin.nsdl.com) or UTI (utiitsl.com). The reprint is issued in physical card form. DigiLocker also holds your e-PAN, which is legally equivalent for most purposes.

Driving licence and vehicle RC: Apply for duplicates at your regional transport office (RTO). Both documents are also available in DigiLocker (via the Sarathi and Vahan portals respectively), which serves as a valid digital original for most purposes including traffic checks.

Insurance policy bond: Contact the insurer's customer care. Most insurers issue duplicate policy bonds on request, sometimes with a small fee and an indemnity bond declaration. If the policy is linked to eIA, the digital copy already provides equivalent access.

Original share certificates (pre-demat): Requires a court indemnity bond and application to the company's registrar and transfer agent. The process is lengthy but recoverable.

The general principle: almost any damaged or lost document can be reconstructed with time and effort. Digital backups of originals reduce the effort required from weeks to hours.

Making Documents Accessible to Family Without Compromising Security

One of the hardest design problems in financial document storage is this: documents need to be secure enough that a stranger can't access them, but accessible enough that your family can locate them in an emergency, even if you're incapacitated.

The solution is a two-layer approach:

Layer 1: The index, not the documents. Create a physical one-page document, the Family Access Sheet, that lists every account and its location, without embedding the account credentials themselves. This document can sit in a sealed envelope in your home safe with "Open if needed for emergency" written on it. It tells your family what exists and where to look, without itself being a security risk if found.

Layer 2: Access instructions. In a separate location your spouse knows about (a shared encrypted note in a password manager, or a sealed letter with a trusted family member or CA), keep the specific access information: which bank, login approach, where the DigiLocker password is.

Separating the index from the credentials means the physical document can be less secure (in a home safe your family can open) while the actual access credentials remain properly secured.

What the Family Access Sheet should include:

  • Every bank account: bank, branch, account type, account number (last 4 digits), approximate balance, and whether there's an active home loan linked
  • Every investment: platform name, folio number or account ID, what kind of investment it is, approximate value
  • Insurance: insurer, policy number, type, sum assured, who the nominee is, insurer's claim helpline number
  • EPF: UAN number, which EPFO regional office, which employers' PF accounts are linked
  • NPS: PRAN number, Point of Presence name and contact
  • Property: property address, whether there's a home loan, where the original sale deed is stored
  • Physical document locations: "property documents in SBI locker, Branch X", "insurance bonds in home safe, third shelf"
  • CA contact: name, phone number, email: the person who can help navigate ITR, estate matters, or disputes

Update this sheet every April. Inform your spouse of its physical location (not the full contents, just where to find it when needed).

The Nomination Blind Spot: Investment Accounts Beyond Insurance

Most people update nominations on insurance policies but overlook investment accounts. Outdated or missing nominations on investment accounts create significant probate complications for families.

Mutual fund nominations: Nominations on mutual funds should be set at the AMC/platform level, not just one platform. Log into each platform (Zerodha Coin, Groww, Kuvera) and confirm nomination is set. For investments held directly with AMCs, log into each AMC portal and confirm nominations. SEBI mandates nominations for all new mutual fund accounts and existing investors must submit nomination or opt-out declarations.

Demat account nominations: Your demat account at CDSL or NSDL should have an updated nominee. This covers all shares and ETFs held in the account. Log into your broker (Zerodha, Groww, ICICI Direct) under "Profile → Nomination" to verify and update.

FD with no nominee = legal heir certificate

Bank account nominations: Confirm the nomination on your primary savings account, FDs, and recurring deposits. Most banks show nominee information in the account profile section of net banking. An FD without a nominee requires a legal heir certificate and a potentially lengthy claim process; adding a nominee takes five minutes.

EPF nomination: The EPFO requires a nomination under Form 2 for both the EPF and EPS (Employee Pension Scheme) portions. Log into member.epfindia.gov.in under "Profile → Nomination" to update. If you're married, your spouse should be the primary nominee. Without a valid EPFO nomination, the claim has to go through a legal process that can take months.

A nomination is not a substitute for a will, but it dramatically simplifies the claim process for the most common financial accounts. Complete your nominations across all accounts in one session as part of your next annual financial review. Safe storage, in the end, is judged on one day only: the day someone else has to find what you kept.

Frequently Asked Questions

Sources and references

Rules, rates, and thresholds in India change over time. Always confirm the current position with the official source above before acting on it.