Your firm must establish internal policies regarding document retention policy.
Define document retention policy, describe the need for the policy, and include a set of procedures. Provide the context to which it specifically the policy apply and does not apply to.