How Long Do You Have to Keep Dental Sterilization Records?

The CDC's guidance is deliberately open-ended. It tells dental offices to "maintain your sterilization monitoring records (mechanical, chemical, and biological) long enough to comply with state and local regulations." In other words, the CDC defines what to keep and why, but hands the how long question to your state dental board.

That means the correct retention period depends entirely on where you practice. Some boards specify an exact number of years. Many boards say nothing specific about retention at all — in those states, a widely followed best practice is to keep records for at least three years, which lines up with OSHA's three-year rule for training records and gives you coverage across a typical board inspection cycle. This is a general best practice, not a legal minimum, so verify with your state board.

One more thing to check that most guides miss: your state's statute of limitations for dental malpractice. If a patient later alleges an infection, your load logs and spore-test results are your evidence that instruments were properly processed. Keeping records at least as long as that limitations window — often longer than the board's minimum — is simply good risk management. When in doubt, verify with your state board.

Here are actual retention periods pulled directly from state dental board rules. Use them as a reference point, then confirm your own state's current requirement.

• California — 12 months. Title 16, California Code of Regulations §1005(b)(17) requires that proper functioning of the sterilization cycle be verified at least weekly with a biological indicator (spore test), and that "test results shall be documented and maintained for 12 months."
• Ohio — at least 2 years. Ohio Administrative Code 4715-20-02 requires that documentation of testing and repairs be maintained for at least two years, kept in the dental facility, and made immediately available on request by an authorized agent of the state dental board.
• Oregon — ~3 years. OAR 818-012-0040 requires biological monitoring results to be retained for the current calendar year plus the two preceding calendar years.
• Kansas — 3 years. Kansas Administrative Regulations §71-1-18 requires that a log of spore testing be kept for three years for each sterilization unit.
• Washington — 5 years. WAC 246-817-655 requires spore-test documentation to be maintained for a period of five years; the same five-year retention applies to dental unit waterline (water quality) testing records under WAC 246-817-660.

The spread — 12 months in California to five years in Washington — is exactly why you can't rely on a single rule of thumb. State rules also change, so treat these as examples and confirm the current text. For a state-by-state breakdown of monitoring frequency and retention, see our requirements pages.

Two federal frameworks shape dental sterilization recordkeeping, even though neither sets a universal retention number for spore logs.

CDC dental infection prevention guidelines (2003, with the 2016 Summary of Infection Prevention Practices in Dental Settings restating the core expectations) recommend monitoring every sterilizer with a combination of mechanical, chemical, and biological indicators. A spore test should be used at least weekly, run against a matching control (a biological indicator and control from the same lot number). The CDC's stated reason for keeping records is practical: accurate logs confirm cycle parameters were met, establish accountability, and — critically — let you identify which loads to recall if a spore test comes back positive.

OSHA's Bloodborne Pathogens standard (29 CFR 1910.1030) governs the employee-safety side and does set specific retention periods for related records: employee medical/exposure records must be kept for the duration of employment plus 30 years (per 29 CFR 1910.1020), and training records for three years from the date on which the training occurred. Separately, under OSHA's recordkeeping rule, the sharps injury log is retained for five years following the end of the calendar year it covers (per 29 CFR 1904.33). While these aren't your sterilization load logs, they're part of the same compliance binder an OSHA inspector may ask to see — so the retention clock is running on multiple records at once.

"Sterilization records" is broader than just spore tests. A complete, audit-ready file generally includes:

• Load logs (mechanical monitoring): date, sterilizer used, load contents, and the cycle's time, temperature, and pressure readings for every load.
• Chemical indicator results: internal and external indicator outcomes confirming each package was exposed to sterilizing conditions.
• Biological indicator (spore test) results: your at-least-weekly test and its matching control, with the date, the person who ran it, and the result. This is the record boards most often ask for by name.
• Sterilizer maintenance and repair records: many states (Ohio's rule is explicit) require you to retain documentation of repairs alongside test results.
• Dental unit waterline testing records: increasingly required and, in states like Washington, held to the same retention period as spore tests.
• Recall documentation: when a spore test fails, keep a record of which loads were quarantined, recalled, rewrapped, and reprocessed.

You can start building this file for free with our State Log tool, which formats entries to match your state's monitoring requirements.

State boards generally care about three things, not the medium: the records must be complete, legible, and available when an inspector asks. Some boards spell this out — Ohio's rule, for example, requires that testing documentation be "made immediately available upon request" by an authorized agent of the state dental board.

Paper binders are still legal, and no board requires digital-only records. But paper has real weaknesses: thermal printer tape from sterilizers fades within months to a couple of years, ink smears, pages go missing, and a single water leak or fire can erase years of proof.

Digital records are widely accepted by boards as long as they're backed up and reliably retrievable. The key compliance question an inspector implicitly asks is: can you show me an unbroken, tamper-evident history right now? A digital system answers that instantly; a half-full binder with faded tape does not. Whichever medium you choose, the retention clock (your state's 1–5+ years) applies equally — and if you're unsure what format your board expects, verify with your state board.

A binder is a snapshot; a continuous digital log is a living record — and that difference matters most on the day of an inspection or a failed spore test.

• No gaps. Timestamped entries make it obvious you tested on schedule. Missing or incomplete entries are a common audit finding, and a paper log makes them easy to overlook until it's too late.
• Instant recalls. When a spore test fails, you need to know exactly which instruments went into which loads since the last passing test. A searchable digital log ties loads to dates (and, with QR-tagged loads, to specific instrument packs) in seconds — a manual binder search can take much longer.
• One-click audit packets. Instead of photocopying a binder, you export a clean, complete record for the exact date range an inspector requests.
• Automatic reminders. Weekly spore-test prompts mean fewer missed cycles — preventing the gaps in the first place.
• Disaster-proof retention. Off-site backups survive the fire, flood, or lost binder that would otherwise wipe out years of required records.
• Tamper-evident integrity. Entries can't be quietly backdated, which is exactly the assurance a board wants to see.

This is the problem ClaveLog was built to solve: QR-based load logging, spore-test tracking from any lab, the CDC failure/recall protocol built in, and a one-click Inspector Packet — all retained continuously so your records outlast whatever your state requires. Look up your state's exact rule on our requirements pages, then start logging free with the State Log tool.