- Four components carry a back office: filing, deadlines, incoming mail, access rights.
- A fixed folder and naming convention saves more time than any additional tool.
- Official mail needs a permanent delivery address and a defined handling path.
- Deadlines belong in a calendar with an owner and lead time, not in someone's memory.
- Retention periods follow the company's jurisdiction, not where you happen to live.
- Emergency access for a second person is operational safety, not loss of control.
- A back office is a process that software supports but never replaces.
What a back office system has to deliver
It must answer four questions within minutes at any time: where a given contract sits, which deadline is next, which official mail is still open, and who could take over if you were unavailable. A system that cannot answer those four creates avoidable work at every audit, bank application and provider change. The tools are secondary. Structure and discipline are what matter.
A document repository with a fixed structure
What works is filing by entity, then by category such as formation, contracts, banking, tax, accounting and official correspondence, and within each category by year. File names should carry date, subject and entity so documents remain findable outside their folder. Formation documents, register extracts and tax numbers also belong in a compact dossier, because they get requested repeatedly for account and contract applications.
Deadlines and recurring obligations
Every entity needs its own deadline calendar: annual filings, tax returns, licence renewals, register confirmations and insurance expiry. Each entry needs an owner, a lead date and a note on which documents are required. Deadlines that exist only in someone's memory or a provider's inbox are the single most common cause of avoidable penalties.
Incoming mail and delivery address
Authorities, banks and registries still send paper, sometimes with short response windows. You need a permanent delivery address with scanning, plus the registered agent or company secretary address for corporate mail. What matters is a defined path: mail gets scanned, categorised, filed and, where a deadline arises, entered into the calendar immediately.
Invoices, contracts and document flow
Outgoing invoices should come from a system with sequential numbering and clean exports for accounting. Incoming invoices and receipts should be captured as they arrive, because searching inboxes later is reliably incomplete. Contracts need an overview listing term, notice period and counterparty contact, otherwise subscriptions and services renew unnoticed.
Access rights and emergency access
Credentials belong in a password manager with separate vaults for company and private use, with documented roles instead of shared master accounts. For emergencies you need defined access for a second person or a documented procedure, otherwise illness or a lost device stops operations entirely. Write that arrangement down and test it periodically.
Retention, data protection and backup
Retention periods follow the law of the company's jurisdiction and run to several years in most countries, including for electronic records. A backup outside the primary system is mandatory, as is clarity about where client personal data sits and who can access it. A repository that exists only inside one cloud account is a concentration risk.
Common mistakes and how to avoid them
The usual pattern is an organically grown archive with no convention, deadlines held in one person's head, official mail sent to changing addresses and shared credentials nobody tracks. Setting this up costs a few days once and a few hours per month afterwards. Reconstructing order retroactively costs a multiple of that and usually happens under pressure, when a bank or authority asks for documents.
Next steps
Start with a list of all entities, accounts, contracts and recurring obligations, and build the filing structure around it. Then transfer every known deadline with an owner into a calendar and define the path for incoming mail. Only once that base exists is it worth thinking about further automation.