Records you don't actually hold

You need the invoice for something bought two years ago, and you know exactly where it is: the vendor’s account page. Except the account was tied to an email address you no longer use, or the service closed, or the history only goes back twelve months.

A large share of most people’s records are held by other parties and reachable only by permission. That arrangement works right up until it doesn’t, and the failure is silent — nothing tells you the document has become unreachable.

What you’re actually relying on

Every record that lives in someone else’s system depends on a chain of things staying true.

The account still exists and you can get into it. Which requires the email address, the password, and increasingly a second factor tied to a phone number or a device. Each is a separate point of failure and none of them are about the vendor at all.

The vendor still exists. Businesses close, get acquired, migrate platforms. Migrations routinely do not carry historical billing data across.

The vendor still keeps that far back. Order histories are pruned. Twelve or twenty-four months is common, which is very likely shorter than whatever retention period applies to you.

The relationship is still live. Employer systems, expense platforms, client portals: access ends when the relationship does, usually immediately and usually without warning. This is the one that catches people out most sharply, because the records were genuinely theirs and the access wasn’t.

The document is still a document. Some vendors show a formatted page rather than a downloadable file. A page is not an artefact you can keep.

Any one of those breaking removes the record, and you find out at the moment you need it.

The categories at risk

Vendor order histories. The largest single category. Everything bought online where the receipt was never saved out — see when the receipt is already digital.

Subscription billing histories. Doubly exposed: the documents are only there, and cancelling the subscription is exactly when you lose access. Covered in recurring charges leave the thinnest trail.

Expense and claim platforms. Where the underlying receipts were uploaded and the paper binned. The platform belongs to an employer or client — the expense claim as a records problem.

Email accounts you don’t own. A work address holding personal-side records, or any address on a service you don’t pay for.

Bank and card history. Usually the most durable of these, and still subject to a fixed lookback window and to account closure. A closed account’s history is much harder to obtain than an open one’s.

App-only receipts. Bought through an app, receipt visible only in the app, on a device.

Anything that arrived as a link. “View your receipt” is a pointer, and pointers expire.

The practice

Download, don’t bookmark. The whole of the fix. If a document exists behind an account, get a copy into your own archive. A file you hold is subject to your retention decisions; a page you can reach is subject to someone else’s.

Do it on a schedule, per vendor, not per purchase. Chasing every order individually is unsustainable. Once or twice a year, visit the six or eight accounts that produce most of your records and download whatever period is new. Twenty minutes, and it converts the largest fragile category into a solid one.

Do it immediately at any ending. Leaving a job, closing a subscription, ending a client relationship, changing bank, abandoning an email address. Every one of these is a deadline, and every one is knowable in advance. The download happens before the ending, not after.

Keep a list of where records live. Which vendors hold what, which account, which email address. Short, plain text, in the archive. It’s the thing that makes the annual sweep take twenty minutes instead of an afternoon, and it’s the only way to notice a source you’ve stopped being able to reach.

Prefer files to formatted pages. Where a vendor offers a download, take it. Where it doesn’t, produce a document yourself and note that you did.

Watch the access mechanism, not just the account. Phone number changes and lost second factors lock people out of accounts that are perfectly alive. This isn’t a records problem exactly, but it destroys records, which is close enough.

Keep or bin

KEEP OR BIN — records in other hands

  · Invoice downloaded into your own
    archive
                    → KEEP. Yours now. Subject to your
                      retention, not theirs.

  · A written list of which vendors hold
    which records
                    → KEEP. Makes the annual sweep
                      cheap and the gaps visible.

  · "View your receipt" link in an email
                    → NOT A RECORD. A pointer to
                      something you don't hold.

  · A bookmark to an order history page
                    → NOT AN ARCHIVE. Depends on an
                      account, a login and a company.

  · Receipts held only in an employer's or
    client's platform
                    → GET COPIES NOW. Access ends with
                      the relationship, usually
                      without notice.

  · Records only visible inside an app on
    one phone
                    → GET COPIES NOW. One device, one
                      account, no export.

  · Whether a copy you downloaded is
    acceptable where the vendor issued the
    original
                    → ASK LOCALLY. Format and
                      originals rules vary by
                      jurisdiction.

The asymmetry worth noticing

Vendors keep records for their own reasons and to their own schedule, and their schedule is set by what is useful to them — not by what any obligation of yours requires. There is no relationship between the two, and no reason to expect one.

Which means the common assumption, “it’ll be in my account if I need it”, is a bet on someone else’s retention policy matching your retention need. Sometimes it does. It gets less likely the further back you go, and the period where you’re most likely to be asked for a record is deep in the range where order histories have already been pruned.

The cost of not making that bet is one twenty-minute session a year. That is a good trade by almost any measure, and it is the highest-value single habit available for anyone whose spending is mostly online.

What this doesn’t settle

Whether a downloaded copy is acceptable where the vendor holds the original. Whether you are required to hold records yourself rather than being able to point at someone else’s system. How long you need any of it. Whether a vendor can be compelled to reproduce a document later.

Those vary by jurisdiction and record type and belong to your tax authority or adviser — and how long to keep things covers building a scheme around numbers you don’t have. What holds in every jurisdiction: a document you can reach only by logging in is a document whose lifetime is not yours to decide.