How Long to Keep Controlled Substance Records (Veterinary, 2026)

A veterinary practice must keep its controlled substance records for at least two years, at the registered practice location, and available for DEA inspection. That federal minimum comes from 21 CFR 1304.04 — but several states require a longer period, and “two years” alone is not a safe answer for most practices.

This guide covers the full retention picture: the federal two-year floor, the state rules that override it, exactly which records the requirement covers, where records must physically be kept, how to organize them for an inspection, and what is allowed for digital retention.

The federal two-year minimum

Under 21 CFR 1304.04, every DEA registrant — veterinary practices included — must keep its required controlled-substance records and inventories available for at least two years for inspection and copying by the DEA.

A few points that matter in practice:

It is a minimum, not a target. Two years is the federal floor. Nothing prevents keeping records longer, and several reasons below make longer retention the wiser default.
The two years runs from the date of the record or inventory — so a completed log’s two-year clock starts when that log is finished, and a biennial inventory’s clock starts on the inventory date.
“Available” means usable. A record that exists but cannot be located or read during an inspection does not meet the standard. Retention and retrievability are both required.
The obligation belongs to the registrant — the practice or person whose name is on the DEA registration.

If federal law were the only rule, two years would be the answer. It usually is not.

State requirements that go longer

State law layers on top of the federal rule, and a state can require a longer retention period than the DEA — it can never require less. For a veterinary practice, the binding retention period is the longer of the federal minimum and the applicable state requirement.

State requirements vary widely:

Some states track the federal two years.
Many require three, five, or more years for controlled-substance records, veterinary medical records, or both — and the period can differ for different record types.
The rule may sit with the state veterinary board, the state pharmacy board, or a state controlled-substances act — sometimes more than one applies.
The retention period for the patient medical record (which often documents controlled-substance administration) may differ from the period for the dedicated controlled-substance log.

Because of this variation, the only reliable retention period is the one you confirm with your own state veterinary board (and state pharmacy board where relevant). Do not assume two years. A practical and common approach: identify the longest period that any applicable rule imposes on any of your record types, and apply that single period to all controlled-substance records. One conservative retention rule is far easier to follow correctly than several overlapping ones.

Which records this covers

“Controlled substance records” is broader than the daily log. The retention requirement covers the full set of records a practice must maintain, including:

Controlled substance logs — the opened-container running logs and any unopened-stock records.
The initial inventory and every biennial inventory.
Receiving records — invoices and packing slips for controlled-substance purchases.
DEA Form 222s and CSOS order records for Schedule II purchases.
Dispensing and prescription records for controlled substances dispensed to clients.
Disposal and destruction records — documentation of how expired or unwanted controlled substances were destroyed, returned, or transferred.
DEA Form 106 theft/loss reports and related documentation.
DEA Form 41 records, where on-site destruction or DEA-assisted disposal was used.
The list of authorized personnel and controlled-substance training records.

One distinction to keep straight: Schedule II records must be kept physically separate from all other records under 21 CFR 1304.04; Schedule III–V records may be kept separately or in a readily retrievable form. Separation is a how-to-keep rule; retention is a how-long-to-keep rule — both apply at once.

Where records must be kept

Retention is not only about time — it is also about place. Under 21 CFR 1304.04, controlled-substance records must generally be kept at the registered location — the address on the practice’s DEA registration — and be available there for inspection.

What that means in practice:

Each registered location keeps its own records. A practice with more than one location, each separately registered, keeps each location’s controlled-substance records at that location.
Records are not stored off-site by default. Boxing up old controlled-substance logs and moving them to a storage unit or an owner’s home conflicts with the at-the-registered-location rule. There is a limited DEA process for keeping certain financial and shipping documents centrally, with prior notification to the DEA — but that is a specific exception, not a general license to off-site your logs.
They must be retrievable during an inspection. An investigator arrives and expects the records produced then and there.

Off-site or centralized storage of controlled-substance records that goes beyond the narrow allowed exception is itself a potential finding. The default and safe practice: keep them on-site, at the registered address.

Organizing records for an inspection

Meeting the retention period is necessary but not sufficient — the records also have to be usable when an investigator asks. Records that exist but cannot be quickly produced create the same impression as records that were not kept.

Practical organization:

Separate Schedule II. Keep Schedule II records physically apart, per 21 CFR 1304.04 — and that separation also makes them faster to produce.
Keep it chronological and labeled. Date-order completed logs and inventories, and label boxes or binders by record type and date range.
Do not discard early. When you finish a log or take a new inventory, the old record stays on file until its full retention period (federal or state, whichever is longer) has run.
Keep receiving and disposal records with the logs. An inspector traces a drug from invoice, through the log, to disposal — that chain is easiest to follow when the pieces are filed together.
Track retention dates. Note when each record becomes eligible for destruction, so you neither discard early nor keep an indefinite, unmanaged pile.

A practice that can hand an investigator a clean, ordered, complete set of records makes the entire inspection shorter and calmer. See our DEA inspection checklist for veterinary practices for how records fit into the broader inspection.

Digital retention

Controlled-substance records may be kept electronically, and electronic records satisfy the retention requirement on the same terms as paper — provided they remain complete, accurate, retrievable, and available for inspection for the full retention period.

What to get right with digital retention:

Retrievability for the whole period. The records must be producible for the entire federal-or-state retention window — which means surviving software changes, format migrations, and hardware turnover. A record locked inside obsolete software is not “available.”
Tamper evidence. A digital record should have a locked audit trail or version history. A freely editable file with no audit trail is weak evidence and invites questions about whether it was altered.
At the registered location. The at-the-registered-location rule still applies to digital records — be able to produce them there during an inspection.
Backups. A single un-backed-up digital copy is a retention failure waiting to happen. Back up controlled-substance records and confirm the backups are themselves retrievable.

Whether paper or digital, the test is the same: for at least the full retention period, can the practice produce a complete, accurate, trustworthy record at the registered location when the DEA asks. If the answer is yes, the retention requirement is met.

Download a free controlled substance log template {#lead-magnet}

Good retention starts with a clean record worth keeping. Our free Veterinary Controlled Substance Log Template gives you a clear opened-container log with an automatic running balance, the required fields built in, and an instructions sheet — a record that is easy to retain and easy to produce for an inspection. Enter your email and we’ll send it over, free.

Get the free Controlled Substance Log Template →

Frequently asked questions

How long do I have to keep controlled substance records? At least two years under federal law (21 CFR 1304.04). Several states require longer — three, five, or more years — so the binding period is the longer of the federal minimum and your state’s requirement. Confirm with your state veterinary board.

Where do I have to store controlled substance records? At the registered location — the address on your DEA registration — available for inspection. They should not be moved off-site, apart from a narrow DEA-permitted exception for certain financial and shipping documents.

Does the two-year rule apply to digital records too? Yes. Electronic records satisfy the requirement on the same terms as paper, as long as they stay complete, accurate, tamper-evident, retrievable, and available at the registered location for the full retention period.

Which records does the retention requirement cover? Controlled substance logs, the initial and biennial inventories, receiving invoices, DEA Form 222 and CSOS records, dispensing records, disposal and destruction records, DEA Form 106 reports, and the authorized-personnel list.

Can I throw out a controlled substance log once the container is empty? No. A completed log must be retained for the full retention period — at least two years federally, longer where the state requires — starting from the date the log was completed.

Retention is one link in the chain

Keeping records for the right length of time, in the right place, is one requirement among the connected set a DEA inspection examines — alongside how those records are created, how drugs are stored, and how losses are reported. Keep your veterinary controlled substance log current and your biennial inventory on file, work through the DEA inspection checklist, and run the free DEA Self-Audit Checklist to see where you stand.

When you’re ready to put it all on a solid footing, the Vet Compliance HQ DEA Controlled Substance Compliance System gives you the logs, inventory forms, SOPs, and retention guidance to do it.

Vet Compliance HQ provides educational compliance resources for veterinary practices. This article is not legal advice. DEA and state requirements change and vary by state — verify current requirements with the DEA and your state veterinary board.