Letting Agent Audit Trail UK 2026

What “audit trail” means for a letting agency

Professional bodies and serious brands often need to show what you knew, when you acted, and where the proof lives, especially after a missed certificate or a Redress complaint. This guide is not legal advice; line it up with your own professional indemnity and client money protection policies.

Pair the process points with compliance software for agents and our letting agent product overview.

Five things worth keeping in one place

If these live in five different inboxes, you do not have an audit trail. You have folklore.

Handovers and leavers

When a negotiator leaves, their Sent folder often walks out with them. Shared drives without structure turn into “final_FINAL_v3” chaos. Property-centric storage, one coherent place per let or per property in software, survives people changes far better.

Redress and civil penalties

Redress cases often hinge on whether the agency took reasonable steps, not on whether the landlord signed a clause that tries to shift blame. Councils can penalise landlords for EICR breaches; agencies still face reputational and contractual heat when clients thought you were managing renewals. See landlord fines guide for scale.

Software as part of the trail

LetCompliance timestamps every upload, notice and message into a tribunal-grade audit trail per property and client, stores encrypted files, and sends reminders before expiry, so an agency can prove the chain of custody on any redress complaint, plus per-property scores, landlord statements and the full lettings funnel across the whole book on the flat Agency plan. For letting agents · start trial.

Further reading: Gas Safety rules · EICR requirements · branch checklist

What a redress scheme actually asks for

When a complaint reaches a redress scheme, the case is decided on documents, not on how reasonable everyone sounds. The scheme will typically ask the agency to produce a chronology: what the landlord instructed, what the tenant reported, when the agency acted, and what evidence exists for each step.

Agencies lose these not because they behaved badly but because the story lives in three places. Part of it is in an inbox, part in a WhatsApp thread with a contractor, and part in somebody's memory. Reconstructing it under a deadline is expensive, and gaps read as failures.

A usable audit trail is simply the same events recorded once, in order, against the property and the tenancy, with the document attached at the point it was created.

A worked example

A tenant complains to the redress scheme that a leak was reported in November and ignored for two months, and that the agency was rude about it.

Agency A searches the shared inbox. It finds a report on 14 November, a forwarded email to a contractor, and nothing else. There is no record of an attendance, no invoice, and the tenant's follow-up on 2 December appears to have gone unanswered because the negotiator handling it left in January. The scheme finds maladministration and awards compensation.

Agency B opens the tenancy record. Report logged 14 November, contractor instructed the same day, access arranged for 16 November, tenant did not attend, second appointment offered 19 November, attended, parts ordered, completed 22 November with a photograph and a £180 invoice, tenant notified. The complaint is resolved in one reply.

Same leak, same two agencies, and the only difference is where the record lived.

Client money is part of the trail too

For an agency the audit trail is not only compliance documents. Where you hold client money you also need to evidence that it was handled correctly: rent received, deductions taken, landlord payments made, and the reconciliation that ties it together.

That means, in practice, a per-landlord statement showing what came in and what went out, a reconciliation against the client account, and Client Money Protection scheme membership that is current and displayed. When a landlord queries a payment eighteen months later, the statement is the answer; when an auditor or a redress scheme asks, the reconciliation is.

Keeping this in the same system as the tenancy record is what turns "we think we paid that" into a document.

What to keep, and for how long

A sensible retention position for an agency:

Deleting on schedule matters as much as keeping. See our landlord GDPR guide for the data-protection side.

Where the chronology comes from: every instruction, report, work order, notice and payment is dated against the tenancy, with the document attached at the point it was created. When a complaint lands, you are retrieving a record rather than reconstructing one. See how an agency workspace is put together.

Your complaints procedure is itself a duty

Agencies think of redress as something that happens to them. It is also something you are required to operate, and the operating part is checkable.

You must have a written complaints procedure, tell clients and tenants how to use it, and work a complaint through your own process before the scheme will look at it. In practice that means acknowledging the complaint, investigating it, and issuing a final response: commonly within eight weeks — after which the complainant may escalate to your redress scheme.

Two failures recur, and both are procedural rather than substantive.

No final response was ever issued. The complaint was handled informally, by phone, by whoever was available, and nothing closed it. The scheme then has a complainant who cannot show they were answered, and an agency that cannot show it answered.

The procedure exists but nobody follows it. It is on the website, and the branch handled the complaint by email without logging it. From the scheme's perspective those two situations look identical.

Note also what happens after a decision. Where a scheme makes an award and the agency does not comply, the consequence is expulsion, and since membership is mandatory, an expelled agency cannot lawfully trade. That is the real reason to treat awards as final rather than as an opening position.

The five-minute test

If you want to know whether your audit trail is real, pick a tenancy that ended eighteen months ago and try to answer these from records alone, without ringing anyone:

An agency with a real trail answers all six in a few minutes from one record. An agency without one answers them from three inboxes, a WhatsApp thread and somebody's recollection, and that person has often left.

The point is not tidiness. Every one of those six is a question a redress scheme, a client, a court or an auditor may actually ask, and each is decided on what you can produce rather than on what happened.