Before a processor migration: a retention timeline for merchant settlement records

Short answer

Before a processor migration, list each settlement record class with four facts: where it lives, how far back it goes, who administers it and the documented date access ends. A migration moves future payments, not the past. In the Illustrative plan below, transaction API access and portal settlement reports go first, then the reconciliation tool and approver mailboxes, while ledger journals survive. Keeping any of it is a decision for the records owner and counsel, not the advisor.

Visual briefFull-size diagram
A horizontal timeline from day 0 to day 365 with six record rows; API transactions, settlement files, payout IDs on bank lines, the reconciliation tool and approver emails each end at a cutoff and become lost unless preserved, while ledger journals stay reachable.
Illustrative. Day numbers are an invented migration plan; real dates come from the processor contract and the company's own cutover plan.

This timeline is part of the merchant settlement reconciliation guide. It is written for payments integration advisors watching a business change processors, and it treats retention as a sequence of dated events rather than a list of files.

What the migration path actually carries

Processor migrations are built to keep customers billing. Stripe, for example, documents that on request it prepares an encrypted file of customer card details, email addresses and metadata and sends card data only to a PCI DSS Level 1 compliant processor. That protects subscriptions. It says nothing about daily settlement files, payout reports, dispute records or the transaction log, and in practice those stay behind with the old processor.

So the question for a business is not "will our data move?" but "which history stays reachable after the old contract ends, and for how long?" The answer sits in the old provider agreement and the company's own cutover plan.

The timeline, from notice to year one (Illustrative)

The plan below is invented for a fictional 340-person subscription merchant leaving one processor. Day numbers count from the signed termination notice. Real dates must come from the contract or the cutover plan; nothing here is a typical provider's schedule.

DayEventRecord class affectedWhat is lost if nothing is decided
0Termination notice signedNone yetNothing; this is the moment to inventory
30New processor goes live for new salesTransaction log keeps growing on both sidesNothing yet, but two sources now exist
60Old API keys revokedTransaction log with merchant referencesBulk access to refund and chargeback detail
90Old portal login closed at contract endDaily settlement files, payout reportsDownloadable daily settlement history for older years
120Bank feed remapped to the new providerPayout records on bank linesThe payout ID stored beside each bank deposit
180Reconciliation tool subscription endsPeriod worksheets, with sign-offThe variance record and its open and close dates
365Departed approvers' mailboxes purged under policyAdjustment approvals sent by emailWho approved each adjustment, and why
OngoingERP retained under the finance retention scheduleLedger journalsUsually nothing, unless the chart of accounts is restructured

Read the table from the bottom up and the pattern is clear: the record that survives longest, the ledger, explains the least on its own. The records that explain an exception, the settlement file, the period worksheet and the approval, are the ones with the shortest lives.

What disappears first, and why it matters

Transaction-level references. The company's own reference on a refund is what ties a ledger journal to the provider's record of it. Once API access ends, those references may survive only inside whatever reports were downloaded.

Deposit-to-sales links. When treasury remaps the bank feed to the new provider, the identifier that tied each incoming deposit to a group of sales can stop appearing on bank lines, and where the link was added by the feed mapping rather than stored on the statement itself, older lines can lose it too. If nobody captured it elsewhere, the period worksheet is the only place the link exists, and losing the period worksheet loses the explanation.

Approvals in email. Adjustment approvals often live in inboxes. Mailbox retention policies for departed staff can remove them on a schedule nobody in finance tracks.

Tax retention is a floor, not the plan

Finance teams often anchor on tax rules. The IRS sets a default of 3 years for supporting records, 7 years where a bad debt deduction or worthless securities loss is claimed, and at least 4 years for employment tax records, and notes that insurers or creditors may require longer. Those periods govern what a company must keep for tax purposes. They do not keep a provider portal open, and they say nothing about whether period worksheets were saved with their sign-off. A business can be fully compliant on tax retention and still unable to explain a single historic variance.

Who approves keeping each record

Record classAdministered byApproves retention or export
Transaction log and API dataPayments engineeringCFO, with counsel on processor terms
Daily settlement filesPayments operationsCFO, with counsel on provider terms
Payout records and bank feedTreasuryController or CFO
Reconciliation period worksheetsControllerController, under finance policy
Adjustment approvals in emailIT, under mailbox policyGeneral counsel and CFO
Ledger journalsERP ownerCovered by existing finance retention schedule

Record a deadline only when it is documented: a termination date, a notice period, a cutover milestone. Do not recommend downloading or keeping anything the company has not authorized. If the company carries merchant cash advances, funders' agreements may restrict asset transfers; see merchant cash advance UCC lien restrictions. The data controller versus data processor comparison helps when someone asks whose records the provider holds.

Qualification and what stays unknown

An introduced company needs 50+ full-time employees at peak (contractors excluded), a documented operating history, rights to license and an authorized contact. Companies in the U.S., Canada and the EU qualify, as do companies in the UK, Australia, New Zealand, India, Singapore, South Africa, Latin America, the UAE and Saudi Arabia when at least 90% of the data is in English. Partners sign the Channel Partner Agreement before submitting introductions and stay at metadata level throughout.

Until SourceX reviews the opportunity, nobody knows which preserved records the company has rights to license, how processor terms apply, how much preparation they need or whether buyers want them. The decision tree on who can license these records finds the signer, the referral brief template has a field for the access deadline, and reconciliation exceptions as training data explains why the history matters. Retail merchants are also covered on the e-commerce page.

Next step

Refer a company. Earn up to $100,000. Default reward: 25% of Actual Supplier Payout, capped at $100,000 cumulatively per referred company. Eligibility and payment conditions apply, and a signed Schedule A or addendum can differ. A lead, meeting or signature alone does not trigger payment.

If a business's timeline shows years of settlement history that will become unreachable on a documented date, register as a partner, check the company against who qualifies and read the program terms before you raise it with the CFO.

  1. Step 1Share your linkSend your personal link to a company you know.
  2. Step 2Company appliesThe company applies itself at /apply.
  3. Step 3Company signs and is paidThe company signs, delivers its data and is paid by SourceX under its agreement.
  4. Step 4You get your rewardYour 25% of the actual supplier payout. A reward becomes payable after SourceX has paid the referred company under its signed agreement and the payout conditions in the program terms are met, including finance approval and your tax and payment details.

Common questions

Does the card data export cover settlement history?

Not by its description. Stripe documents the migration export as card details, email addresses and metadata sent to a PCI DSS Level 1 compliant processor. Batch files, payout reports and dispute records are a separate question for the old processor agreement.

Should the advisor tell the company to download everything before the portal closes?

No. The advisor can point out that access ends on a documented date. Whether to keep, export or let records lapse is for the records owner and counsel, and some records may be ones the company should not keep.

Is tax retention the same as keeping reconciliation history?

No. Tax rules set a minimum for supporting records, often three years at the IRS. A company may keep ledgers far longer while portal reports and tool workpapers vanish much sooner.

Sources

  1. docs.stripe.com/get-started/data-migrations/pan-export
  2. irs.gov/businesses/small-businesses-self-employed/ho…
  3. refer.sourcex.si/terms

Free resources

Know a company with valuable proprietary data?

Become a referral partner, get your link and introduce the company’s CEO (in an owner-run company, usually the owner). Referral partners can join from most countries. We can't work with partners in countries or regions under U.S. sanctions or on U.S. restricted-party lists. The companies you introduce should be based in the U.S., Canada and the EU, or in the UK, Australia, New Zealand, India, Singapore, South Africa, Latin America, the UAE and Saudi Arabia with at least 90% of their data in English.

Refer a company →

I own a business

Explore licensing your company's data directly to SourceX for AI training and evaluation. Start a short assessment; no uploads needed.

Start an assessment