I am updating our food safety system and have found we state we will maintain records for 2 or 3 years (depending on which SOP you are reading!). I want to be consistent. I am in a low risk facility in NY and am not aware of any regulatory requirement, so can we just choose how long? My understanding is "it's our program" ...so we can choose a reasonable amount of time? In another area we have written that any paperwork involved in any legal matter will be maintained as needed. Thoughts?