An AI tool can sort, read and file a week of paper mail before lunch. Whether CRA accepts those scanned receipts in place of the paper is a separate question.
A receipt sitting in your AI mailroom’s folder and a record the Canada Revenue Agency will accept look identical on screen. Only one of them lets you shred the paper. CRA accepts scanned receipts in place of originals when the scanning follows a documented imaging program, and when the files are kept somewhere CRA counts as Canada. Most small offices that set up an AI mailroom check neither.
So build the mailroom. For a small team that still sorts mail by hand, it saves real hours every week. Just keep the paper until a two-week test shows your scans would hold up, and until you know which country the files live in.
Does CRA accept scanned receipts instead of paper?
Yes, with conditions. CRA accepts scanned receipts as permanent records when the imaging follows the Canadian General Standards Board standard it points to. If your business cannot meet that standard, CRA says you keep the originals. A scan made casually on a phone or an office copier does not clear that bar by itself.
CRA’s starting rule is simple: keep the paper. The exception is a national scanning standard, CAN/CGSB 72.34, and CRA says it applies to a small office with an off-the-shelf scanner. Those offices are expected to meet the same national standard.
That is the part an AI mailroom changes. Before, scanning was a chore someone did at year end, if at all. Now a tool can open, read, rename and file every envelope the day it arrives. The volume goes up, and so does the number of papers someone will be tempted to throw out.
What does CRA want from a scanning program?
CRA’s Information Circular IC05-1R1 on electronic record keeping lists seven conditions for an acceptable imaging program. Most are about people and process: someone in authority signs off, the steps are written down, a log is kept, and quality gets checked. Only some of the seven are things software does for you.
Here is how we would map those seven conditions onto a small office’s mailroom. The owner column is our suggestion for a team without a records department, not CRA’s wording.
In short, an AI tool can cover the index, most of the log and the legibility check. The sign-off, the written procedure and the quality review need a person. A mailroom with great software and no paper trail around it is the most common gap we would expect to find.
Can my scans live on a server outside Canada?
Only if you also keep a copy in Canada or CRA agrees in writing. CRA’s guidance says records kept outside Canada and accessed electronically from Canada are not considered records kept in Canada. Keep a complete, readable copy at your place of business in Canada, or ask your tax services office for permission to keep the records elsewhere.
The plain wording is on CRA’s page about where to keep records and for how long. Many AI document tools store files in the vendor’s cloud. Which country that cloud sits in is something to confirm in the settings or the contract before the first envelope goes through. That is a buying question, so put it next to the other vendor checks in the privacy commissioner’s AI vendor checklist.
Privacy adds a second reason to care. Mail carries personal information: employee letters, customer cheques, medical notes at a clinic. The privacy commissioner’s guidelines on processing personal data across borders say PIPEDA allows transfers for processing, but your business stays accountable, the contract is the main protection, and customers should be told their information may be processed in another country.
Who is responsible if the scanning vendor gets it wrong?
You are. CRA says you are responsible for protecting your records even if a third party holds them, and IC05-1R1 says the business answers for imaging done by an outside party. A vendor’s promise of compliant scanning helps you choose a vendor. It does not change who CRA calls.
CRA’s page on your record keeping responsibilities also asks for proper backup copies, preferably at a site in Canada other than your business location. For a five-person office, that can be as simple as a scheduled export to a second Canadian location. Write down where it goes.
The same logic applies to every AI system that touches money. We made a similar point about payment fraud controls for Canadian businesses: the tool does the work, and a named person owns the check.
A two-week test before anything gets shredded
Run the AI mailroom for two weeks with the paper kept in a labelled box. Then have one person pull a sample and check it. If every item passes, finish the written pieces and start disposing of paper under a logged procedure. If anything fails, keep the paper and fix the step that broke.
Here is the test as we would run it at a six-person Regina accounting office, where the office manager opens the mail every morning. It is a hypothetical, and the pass mark is ours, not CRA’s.
- Owner. Name one person, usually the office lead or bookkeeper. Not the vendor.
- Baseline. On day one, count how long it takes today to find a three-month-old receipt in the paper files. Write the number down.
- Run. Let the AI tool scan, read and file all incoming mail for ten business days. Every paper item goes into a box marked with the week.
- Sample. On Friday, November 13, 2026, pull 40 items from the box at random.
- Check each one. Can you find its scan through the index in under a minute? Are the totals, dates and small print readable at normal zoom? Does the log show who scanned it and when?
- Location. Confirm in writing, from the vendor’s settings or contract, which country stores the files, and where your backup goes.
- Pass mark. 40 out of 40 found, readable and logged, with a copy you control in Canada. Anything less keeps the paper in the box.
If it passes, the remaining work is a page of procedure and an owner’s signature, and that takes an afternoon. The test is the hard part. If it fails, you have found the problem before an auditor did, and the paper is still in the box.
How long do we keep the paper and the scans?
Generally six years from the end of the last tax year the records relate to, under CRA’s rules. Some records stay longer, including those tied to long-term property and the share register, which CRA says you keep indefinitely. Destroying records early needs CRA’s written permission.
That six-year clock is a good reason to think about vendor lock-in now. A mailroom tool you cancel in year three still has to hand you every scan, log and index in a format you can open. Ask how exports work before you sign, the same way you would weigh whether to hire, outsource or automate any back-office task.
For more on picking tools that fit a small team, see our rechecked list of AI tools for Canadian small businesses and the wider AI for business guide.
FAQ
Does CRA accept scanned receipts?
Yes, if the scanning follows the national imaging standard CRA points to, with a written sign-off, a log, an index, legible images and quality checks. If your business cannot meet that standard, CRA says you keep the original paper.
Can I throw away paper receipts after scanning them?
Only after the scans meet CRA’s imaging conditions. Then the images become the permanent records and the paper can go. CRA suggests getting legal advice first if you have any doubt.
Can my business keep tax records in a US cloud?
Only with a readable copy kept in Canada or CRA’s written permission. CRA says records kept outside Canada and accessed electronically from Canada are not records kept in Canada. You can ask your tax services office for that permission in writing.
How long does a Canadian business keep receipts?
Generally six years from the end of the last tax year they relate to. Some records, such as those on long-term property, are kept indefinitely, and destroying records early requires CRA’s written permission.
Facts checked against CRA and Office of the Privacy Commissioner pages on October 30, 2026. We have not tested any specific AI mailroom product.
