Est.
Audit RiskLong read

Plan Document Retention Requirements for PHSP Compliance

Keep plan documents and claim records for six years to prove your PHSP qualifies.

· 8 min read
Cover illustration for “Plan Document Retention Requirements for PHSP Compliance”
Audit Risk · October 17, 2026 · 8 min read · 1,806 words

PHSP document retention is about proving that a real plan existed before claims arose and that each reimbursement followed its terms. Keeping receipts alone is not enough. A compliant record set needs both plan documents and claim evidence, held for the right periods and available when CRA asks for them.

Why a PHSP's tax advantages depend entirely on proof that a real plan existed

The tax treatment depends on the arrangement qualifying as a PHSP under section 248(1) of the Income Tax Act. A qualifying plan offers two benefits, which are employer deductibility and tax-free treatment for the employee. But the arrangement must be “in the nature of insurance”, with a real agreement to cover future, uncertain medical expenses. That obligation must be in place before a claim arises, before the cost is known.

Without evidence of that prior obligation, reimbursement looks like an ad hoc payment. CRA can disqualify the arrangement retroactively, removing the corporation’s deduction and treating the employee’s reimbursement as a taxable benefit. For a shareholder-employee, that can mean double taxation.

The foundational documents that establish a plan existed before any claim was submitted

The written plan document is the starting point. It must identify the employer, eligible employees or employee classes, dependants, annual limits, and claim rules. Those terms define who is covered and what the employer has agreed to pay. They must be in place before the first claim is submitted, so the document shows a commitment made before expenses were known.

For incorporated businesses, employment agreements should also state the corporation’s obligation to reimburse qualifying expenses up to a predetermined maximum, establishing employment as the basis for the benefit. A board resolution outlining the PHSP’s details supports that governance record, but it cannot carry the whole case. The resolution needs the plan document and employment agreements behind it. Together, these records establish the terms of the benefit and the relationship under which it is provided.

That distinction matters most for shareholder-employees because CRA presumes that shareholders get benefits because they own the business. The employment agreement is a primary means of rebutting that presumption, although paperwork cannot by itself fix a plan that fails the insurance test. CRA’s 2022 technical interpretation, Document 2022-0928901C6, indicated that a self-insured HSA, or cost-plus plan, for a sole shareholder/employee likely fails that test because the corporation assumes no genuine risk.

The foundational record also includes the annual calculation supporting the “all or substantially all” test. CRA treats that test as requiring a qualifying majority of covered expenses to be eligible medical or hospital expenses. The calculation should be documented annually. Although it draws on expenses, it supports the plan’s qualification as a whole and belongs in the governance record.

The claim-level records that prove each reimbursement was legitimate

For every approved claim, the business must retain the original healthcare provider receipt or invoice and any prescription or professional certification required for that expense category. The file also needs a claim decision record showing that the expense was reviewed and approved under the plan terms. Funding and reimbursement records then connect that approval to the money paid. This creates a traceable chain from the expense to the decision to the reimbursement.

For example, a dental claim file would contain the dental receipt, the plan’s approval notation, and the EFT payment confirmation, with any other required supporting documents. A summarized accounting entry cannot replace that evidence. CRA’s books and records guidance requires source documents to be retained and electronic entries to be traceable to them. If an administrator handles claims, the business should keep its own copies of claim decisions and reimbursement records. Outsourcing the work does not transfer the retention obligation.

How long each category of record must be kept, and what extends the clock

The standard retention period is six years from the end of the last tax year to which a record relates. That rule covers claim-level records, including receipts, invoices, claim decisions, funding records, and reimbursement records. For a corporation with a December 31 fiscal year-end, records for the 2025 tax year must be retained until at least the end of 2031. The clock therefore does not simply start on the date printed on a receipt. It runs from the end of the relevant tax year.

Governance records follow a much longer schedule. CRA’s books and records guidance requires meeting minutes and governing documents to be retained for the life of the organization, with a two-year tail after dissolution. The written plan document, board resolutions, and employment agreements on which the PHSP rests should therefore be kept in the permanent corporate record. A plan document drafted at incorporation is not a six-year file. The annual calculation supporting the “all or substantially all” test also belongs with the plan’s governance evidence.

Even the standard six-year period can be extended. If a loss carryforward applies to a tax year, the related records must be kept until six years after the year the loss is fully applied. An active CRA audit suspends the normal destruction clock for related documents until the audit is fully resolved. An objection or appeal likewise keeps the records on hold until the matter is settled. CRA can also issue a written notice requiring longer retention, and that notice overrides the normal schedule.

Suspected fraud creates a further limit on any destruction timetable. No limitation period applies in those circumstances, so CRA can reassess indefinitely. The six-year rule is a baseline for determining when disposal is permitted.

What happens when records are missing or destroyed too early

Missing records can undermine both an individual expense and the plan itself. If the plan document is absent or insufficient, CRA may conclude that no qualifying PHSP existed. The resulting treatment can include disallowed deductions and all reimbursements being reclassified as taxable employee benefits. A valid medical receipt does not answer the separate question of whether the employer paid it under a qualifying plan.

Consider a sole shareholder-employee whose corporation reimbursed expenses but never wrote the plan document. The receipts may show that the expenses were incurred, while leaving the prior obligation unproven. If CRA treats the payments as shareholder benefits, they are taxable as income to the shareholder but not deductible by the corporation. The missing foundation can therefore matter more than the completeness of the receipts.

Early destruction creates a separate compliance issue under the Income Tax Act. Destroying records before the applicable period ends without CRA authorization can result in penalties and leave the business to prove what the missing evidence would have shown. Reconstruction is not a substitute for retaining the originals. Once an audit has opened, rebuilding that proof is difficult and may be unsuccessful, even if the business believes the underlying payments were proper.

The only authorized path to destroying records before the retention period ends

A business that wants to destroy records early must get written permission from CRA first. The mechanism is Form T137, Request for Destruction of Records. Submitting the form begins the request for authorization. The rule is straightforward, which is to obtain permission first and destroy only after it is granted.

CRA may take weeks to months to review the request and may look at the records before it decides. Its books and records guidance identifies destruction without the Minister of National Revenue’s written permission as a compliance violation. Governance records are generally not candidates for early destruction because of their indefinite retention requirement. Form T137 is therefore most relevant to operational claim-level records.

Electronic storage rules that apply to digital PHSP records

Digital records are acceptable, but scanning paper is not the whole requirement. CRA’s books and records guidance requires electronic records to remain electronically readable throughout the retention period. In practice, they must be accessible and processable on CRA equipment if requested. A file that still exists but can no longer be read does not meet that requirement. Scanned images are acceptable when proper imaging practices are followed and documented.

The records must also be protected against unauthorized alteration, backed up regularly, and retrievable within a reasonable timeframe. These conditions apply to both the underlying evidence and the accounting summary. A ledger entry showing a reimbursement does not preserve the receipt or invoice that supports it. The source document itself must remain readable. Digital retention therefore has to preserve both the information and the ability to examine it.

A business that uses foreign-based cloud services must still meet the Canadian-storage requirement. Records kept outside Canada do not count as being kept in Canada merely because someone can access them electronically from inside Canada. A digital claim portal can support compliance, but its convenience does not remove the storage-location requirement. Its records still need to meet the rules for Canadian storage, readability, access, and protection against alteration.

Building a retention system that keeps a PHSP audit-ready at all times

Keep the plan document, employment agreements, and board resolutions in a corporate file that is kept permanently. Keep claim-level records by tax year and apply the six-year rule subject to any extension. Keeping these files apart ensures that the documents that establish the plan stay in place when old receipts are thrown out. It also makes the two layers of evidence easier to retrieve together.

At the start of each plan year, confirm that the plan document is current. If employee classes, limits, or eligibility rules are changing, amend the document before the new plan year begins and before claims arise under those terms. Label and date documents when they are created. A record dated at the time is more credible than a timeline reconstructed after CRA asks for it.

Maintain an annual file containing the “all or substantially all” calculation, the approved claim log, the corresponding receipts and source documents, and the reimbursement records. Keep the calculation as governance evidence even when it also sits in that annual file. An administrator’s annual report can sum up what happened during the year. But confirm that the underlying receipts and prescriptions are retained separately and remain accessible. The summary helps organize the evidence without replacing it.

A third-party administrator can make this process more orderly by logging submissions, approvals, and reimbursements systematically. A digital platform that records claims, tracks approvals, and creates EFT records can build the audit trail for each claim without extra filing by hand. The business still needs to keep its own copies of claim decisions and reimbursement records.

Finally, set a calendar reminder each year to review records before deleting them. Purge only files that have cleared the applicable retention period, after confirming that no audit, objection, appeal, or CRA extension notice requires them to stay. Check for any other extension before allowing records to be destroyed. With those controls built in from the start, retention stops being a separate cleanup burden. It becomes simply how a well-run PHSP operates.

Sources

  1. Books and records - Canada.ca
  2. Private Health Services Plan (PHSP) Canada: CRA Rules and Eligibility
  3. Medical expenses, including payments from a private health services plan (PHSP) - Canada.ca
  4. Keeping Records - Canada.ca
  5. Where to keep your records, for how long and how to request the permission to destroy them early - Canada.ca
Filed underAudit Risk

More in Audit Risk