DOT-regulated employers must keep their drug and alcohol program records in a secure location with controlled access, for set periods, and make them available to FMCSA within two business days of a request (49 CFR 382.401).

Records to keep include:

• Test results, CCFs, alcohol testing forms, and documents from the MRO.
• Refusals, SAP evaluations, and follow-up testing records.
• Random selection records and post-accident and reasonable suspicion decisions.
• The company policy, drivers' signed receipts, and supervisor training records.
• Agreements with service agents, and Clearinghouse query records.

Med-Stop keeps the tests, results, and documents it handles for your company in the app, but your company remains responsible for keeping every required record. See What records must I keep for DOT-regulated employees?.