A member works for an investment firm with no applicable laws on record retention. The firm's policy mandates retaining records for five years, while a local investment association suggests eight years, and some clients prefer ten years. According to the CFA Standards, how long should records be retained?