Document Retention Rules for Quality Certificates: What to Keep and for How Long

Quick Answer

Retention policy is the most commonly underdefined aspect of quality document management. Organizations implement good receiving inspection and certificate verification processes — then have no documented rule for how long those records must be kept, and no enforcement mechanism to prevent accidental deletion.

The consequence is discovered years later, when a customer requests historical certification for equipment still in service, or when a regulator asks for records from a production run that occurred a decade ago.

This guide consolidates retention requirements across the major standards and frameworks relevant to metals and fabrication quality certificates.

---

Why Retention Policy Must Be Explicit and Documented

The absence of a documented retention policy creates two types of risk:

Under-retention risk: Records are deleted or lost before the required period expires. Under audit or during a warranty claim, you cannot produce records that should have been preserved. This is a quality system non-conformance and may have legal and financial consequences.

Over-retention risk: Records are kept indefinitely, with no disposal process. This creates storage costs, data management complexity, and in some regulated environments (privacy regulations, GDPR), retaining personal data beyond the required period is itself non-compliant.

A documented retention policy, implemented in your records management system, resolves both risks by defining the required period by record type and enforcing consistent archival and disposal decisions.

---

Retention Requirements by Standard and Framework

ASME Boiler and Pressure Vessel Code (ASME BPVC)

ASME does not specify a single universal retention period. Requirements appear within specific sections:

ASME Section VIII (Pressure Vessels): The Manufacturer's Data Report (U-1 form) and associated design and quality records must be retained by the manufacturer for at least 5 years after the vessel manufacture date per the Code itself. However, the Authorized Inspection Agency may retain records for longer, and the installing or operating jurisdiction may impose additional requirements. In many jurisdictions and customer specifications, 25 years is the practical minimum for pressure vessel records.

ASME Section IX (Welding Qualifications): Welding Procedure Specifications (WPS), Procedure Qualification Records (PQR), and Welder Performance Qualifications (WPQ) must be retained for the life of the qualified procedure — which is indefinite as long as the procedure remains in active use. Expired qualifications should be retained for a minimum period after expiry to demonstrate historical capability.

Material Test Reports referenced in ASME work: MTCs for ASME-code materials are typically retained as part of the Manufacturer's Quality Data Package. The 25-year guideline from jurisdictional requirements and owner-operator practices is widely applied.

ISO 9001:2015

ISO 9001 does not mandate a specific retention period. §7.5.3 requires the organization to retain documented information for a period defined by the organization, taking into account:

• Applicable statutory and regulatory requirements
• Customer contractual requirements
• The nature of the records and their use context

Your quality management procedure must document these defined periods. Auditors will ask to see the documented retention policy and then sample records to verify compliance.

Practical baseline for ISO 9001 fabrication shops:

FDA / 21 CFR Regulations

21 CFR Part 211 (cGMP for Drug Products): Batch production and control records must be retained for at least 1 year after the expiration date of the batch (or 1 year after FDA approval, for batches without expiration dating). For equipment used in pharmaceutical manufacturing, equipment qualification records — which include material traceability — are typically retained for the lifetime of the equipment plus a post-decommissioning period.

21 CFR Part 820 (Quality System Regulation for Medical Devices): Device History Records (DHRs) must be retained for the expected lifetime of the device or 2 years from the device release date, whichever is longer. Material certification records incorporated into the DHR carry this retention requirement.

21 CFR Part 11: Does not specify retention periods independently — follows the requirements of the predicate rule (the underlying regulation that requires the record).

EU Pressure Equipment Directive (PED 2014/68/EU)

The PED requires that the technical documentation, including material traceability records, for pressure equipment be retained for at least 10 years after the last unit of the equipment was manufactured. For safety accessories and pressure accessories, the period is also 10 years. Some Member States apply more stringent national requirements.

API Standards (Q1, Q2)

API Q1 and API Q2 quality management specifications require records to be retained for a minimum of 5 years unless a customer-specified or regulatory requirement extends this period. For wellhead and critical subsea equipment, customer specifications routinely extend retention to 20–25 years.

EN 10204 (Material Test Certificates in European Supply Chains)

EN 10204 defines inspection document types (2.1, 2.2, 3.1, 3.2) but does not specify retention periods. Retention for documents issued under EN 10204 follows the requirements of the end-use standard and customer specification. For pressure-retaining applications using 3.1 or 3.2 documents, 25-year retention is common practice.

---

Defining Your Retention Policy: A Practical Framework

Step 1: Categorize your record types by application

Group records by the standards and requirements that govern them:

• Pressure-retaining materials and components
• Structural applications
• Pharmaceutical and medical device equipment
• General commercial fabrication
• Nuclear (if applicable)

Step 2: Identify the most stringent applicable requirement for each category

For a given record type, multiple requirements may apply (customer, regulatory, standard). The governing retention period is the longest of the applicable requirements.

Step 3: Document the periods in a retention schedule

Create a retention schedule table in your quality management procedure, listing:

• Record type
• Applicable standard or requirement
• Retention period
• Storage medium (digital, physical, off-site archive)
• Disposal method after retention period expires

Step 4: Implement controls to enforce the schedule

If records are stored digitally, configure your records system to flag records approaching their disposal date for review rather than auto-deleting. Auto-deletion without review creates risk of premature disposal for records with extended or indefinite requirements.

Retain records for extended periods in formats that will remain accessible. PDF/A is the preferred archival format for long-term digital document retention — it embeds fonts and resources to remain self-contained.

---

---

Related Guides

• Quality Certificate Management: Complete Guide
• ISO 9001 Quality Records: Audit Readiness Guide
• 21 CFR Part 11 for Material Certificates: What You Need