Corporate legal services Iraq businesses use should create a file that proves who the company is, who owns it, who can sign, and which decisions, contracts, and filings are effective. Good retention is not a folder full of PDFs. It is one register connecting the approved version to the original, owner, effective date, authority, evidence, and next review.
Quick answer: Inventory formation, ownership, director, resolution, contract, license, finance, and filing records. Classify each document, identify the effective version and original, restrict access, and record why it is retained. Have qualified Iraqi counsel confirm each period and obligation before destruction.
Disclaimer: This guide is for general information only and is not legal, tax, or accounting advice. Retention, filing, original-document, and certification requirements vary by entity, sector, transaction, and current law. Verify them with the Companies Registrar, the relevant authority, and qualified counsel before relying on or destroying a record.
Why is corporate records retention an operating control?
The value of a record appears when a bank asks for signing authority, an auditor requests approved accounts, an investor traces ownership, a supplier needs the current contract, or an authority asks for evidence of a prior filing. If the evidence is spread across email, staff devices, and chat messages, a simple request becomes an expensive reconstruction.
Possession alone is not enough. The company needs to know whether a file is a draft or signed copy, whether a later amendment replaces it, whether an original exists, whether it was filed, whether receipt was confirmed, and who may access it. A correct document without context can still cause staff to use expired authority or a superseded contract.
Hanooot is an Iraqi operating partner founded in Baghdad in 2022. We connect legal records with accounting, banking, contracts, people, and daily operations because every department needs the same version of the truth.
Which record categories belong in the master register?
Start with a broad map, then tailor it to the entity and sector. Iraq’s Companies Registration Department describes its role in registering and monitoring national and foreign companies, documenting company and founder information and decisions, and reviewing several account and transaction matters. Its laws and regulations library also warns users to remain aware of later amendments.
| Category | Example records | Control question |
|---|---|---|
| Company identity | Certificate, formation contract, bylaws, name, address | Which version is effective? |
| Ownership and capital | Shareholder or partner register, transfers, increases | Does it match the decision and filing? |
| Management and authority | Director appointments, signing powers, bank mandate | Who can bind the company today? |
| Governance | Minutes, resolutions, attachments, action register | Was implementation closed? |
| Contracts | Signed copy, amendment, renewal, notice | Which term and version apply? |
| Licenses and filings | Application, receipt, reference, approval, renewal | What evidence and deadline remain? |
| Finance and tax | Accounts, returns, support, auditor correspondence | Which period and owner apply? |
| Employment and people | Contracts, policies, related approvals | Who is permitted to access them? |
This is an operating map, not a final legal checklist. A company may need additional records for its sector, customs, banking, data, or intellectual property.
How do you build a retention matrix instead of random folders?
Create one row for every record type, not merely every existing file. The matrix should contain category, document name, owner, source of requirement, start date, relationship-ending event, approved retention period, original location, electronic copy, confidentiality, and final action such as destruction or permanent archive.
Use five steps:
- Inventory the files actually held by legal, finance, HR, and operations.
- Link each category to a reason: law, authority, contract, audit, or operational need.
- Ask counsel to confirm the period, the event that starts it, and any destruction hold.
- Assign an owner, reviewer, and approved repository.
- Record each retention or destruction decision and its evidence instead of silently deleting files.
Do not copy a period from a foreign company or internet template and assume it applies in Iraq. The approved period may differ between an original and an operational copy, or between an ordinary record and one connected to an active dispute.
How should the company control effective versions and originals?
Use a stable filename containing document type, entity, date, and status. For example: Company_Contract_Supplier_2026-10-24_Signed_v1. Names such as final-new-last2 do not prove approval or sequence.
Track four things separately:
- Effective version: the document under which the company currently operates.
- Original: the physical or original electronic document and its location.
- Certified or translated copy: the scope, issuer, and date of certification.
- Filing evidence: reference, receipt, acknowledgment, and outcome.
Make the electronic repository searchable, but do not assume a scan removes the need for an original or certification. Keep a separate backup and test recovery. Multiple copies provide little resilience if they all depend on the same account or cannot be restored.
Who should access, change, and review company records?
Divide permissions by role. A director may read governance records, finance may need accounts and financially relevant contracts, and HR should work with personnel records. Do not grant universal access merely because it feels convenient.
| Activity | Suggested owner | Reviewer | Operating frequency |
|---|---|---|---|
| Add a signed document | Transaction owner | Legal or company secretariat | Within 1 business day |
| Record an official submission | Filing officer | Register owner | On receipt day |
| Review upcoming deadlines | Category owner | Compliance manager | Weekly |
| Reconcile signing authority | Legal + finance | Authorized director | Monthly and on change |
| Test backup recovery | IT | Register owner | Every 3 months |
| Review retention matrix | Legal + departments | Management | Annually and on change |
These frequencies are operational suggestions, not legal retention periods. Adjust them for company size, risk, authority requirements, and technology, and verify before making a legal or financial decision.
Keep an audit trail showing who uploaded, replaced, downloaded, or approved destruction. For sensitive records, use multifactor authentication, encryption, and controls that prevent public sharing.
How do you connect a decision, contract, filing, and action?
A strong register does not preserve documents as islands. It links an approval resolution to the signed contract, the contract to an invoice or accounting entry, the authority change to the bank mandate, the filing to the acknowledgment, and the renewal to its next due date.
Use one transaction identifier across the chain. A branch-opening decision, for example, may connect meeting approval, the authority form, fee receipt, registration decision, lease, branch accounts, and system update. If one exists without the others, the register should show an open gap.
The company resolutions guide explains approval evidence, while the company signing authority guide aligns the authorized person with banks and contracts. Hanooot’s corporate legal services in Iraq can help organize that chain around the entity’s current position.
Worked example: what does manual record search cost?
Assume a company receives 12 document requests per month from banks, auditors, suppliers, or management. Searching scattered storage takes 45 minutes per request; a controlled register reduces the average to 10 minutes.
- Old search time: 12 × 45 = 540 minutes, or 9 hours.
- Organized search time: 12 × 10 = 120 minutes, or 2 hours.
- Time saved: 540 − 120 = 420 minutes, or 7 hours per month.
- At an illustrative internal value of $25 per hour: 7 × $25 = $175 per month.
- Annual value: $175 × 12 = $2,100 in search time alone.
The example excludes the impact of a delayed bank, contract, or audit and is not a client result. It shows why a basic register can create value before a dispute ever arises.
When should destruction stop or retention extend?
Create a legal-hold process. When a dispute, investigation, audit, authority request, insurance claim, investment, or sale is expected, pause destruction for relevant categories until counsel releases the hold. The notice should reach legal, IT, finance, HR, and record owners.
Do not destroy a document merely because an internal period ended when an active reason for retention remains. Conversely, do not keep everything forever without classification. Uncontrolled accumulation makes search harder, expands unnecessary access, and increases data risk. The decision should be consistent, reviewed, and documented.
When destruction is approved, record the category, period, basis, approver, date, and method. The log should not reproduce unnecessary confidential content, but it should prove that the process followed an authorized decision.
Which quality checks should the business run?
Take a monthly sample and ask: Does the file open? Is it signed? Is the legal name correct? Is the newest amendment linked? Is filing evidence attached? Is the original where the register says? Is the next renewal recorded? Can an authorized person restore it from backup?
Run a broader annual review covering entities, branches, ownership, directors, licenses, material contracts, financial statements, and user accounts. Compare the register with what departments actually hold. Risk often lives in a shadow folder outside the approved repository.
Do not depend on one employee’s memory. Document naming, intake, review, retrieval, hold, and destruction procedures, and train a backup for every critical role.
Frequently asked questions
Which core company records should an Iraqi business retain?
Start with formation and amendment documents, ownership, directors, signing authority, company decisions, contracts, licenses, official filings, accounts, and submission receipts. The exact list and period depend on the entity, sector, and current law.
Is an electronic copy enough for a company document?
An electronic copy supports search and backup, but does not automatically replace an original or certified copy when an authority or contract requires one. Record the original’s location, certification status, and access rights.
Who should own the corporate records register?
The register needs one named owner, often legal or the company secretariat, with finance, HR, and operations owners for their categories. Do not make responsibility shared but unnamed; assign an owner, reviewer, and closure date for every gap.
When should a records retention matrix be reviewed?
Review it annually and whenever law, entity type, ownership, directors, licensing, or technology changes. Also review it before an audit, financing, investment, sale, dispute, or new-market entry.
Build a file that proves the company’s position
Effective retention means the company can find the current version, prove origin and authority, show filing evidence, and connect approval to action. Start with the master register, assign ownership and access, test recovery, and never destroy a record before reviewing the requirement and any legal hold.
If your business needs to organize its legal file, retention matrix, and filing evidence, contact Hanooot. We can connect the records with legal, finance, and operations while qualified Iraqi counsel confirms current requirements and periods.