Letting Agent Audit Trail UK 2026

What “audit trail” means for a letting agency

When a certificate is missed or a tenant complains to your redress scheme, the first thing anyone asks an agency for is a chronology: what you knew, when you acted, and where the proof is. This guide covers what to keep, how to keep it and for how long. It's not legal advice, so line it up with your own professional indemnity and client money protection policies.

Pair the process points with compliance software for agents and the letting agent product overview.

Five things worth keeping in one place

1. 1Current CP12 and EICR PDFs with engineer details visible
2. 2Proof of tenant copies where the rules expect a delivery record
3. 3A reminder log (who was told what, and when)
4. 4Deposit scheme reference plus evidence Prescribed Information went out on time
5. 5Right to Rent check record and follow-up diary for time-limited leave

If these live in five different inboxes, you do not have an audit trail. You have folklore.

Handovers and leavers

When a negotiator leaves, their Sent folder often walks out with them. Shared drives without structure turn into “final_FINAL_v3” chaos. Storage organised by property, with one place per let, survives staff changes far better.

Redress and civil penalties

Redress cases often hinge on whether the agency took reasonable steps, not on whether the landlord signed a clause that tries to shift blame. Councils can penalise landlords for EICR breaches; agencies still face reputational and contractual heat when clients thought you were managing renewals. See landlord fines guide for scale.

Software as part of the trail

In LetCompliance every upload, notice and message is dated against the property and the client, documents are stored against the address, and reminders go out at 90, 30, 14, 7 and 1 days before a certificate expires. When a redress complaint arrives, the chronology is already in order. The same agency workspace carries the compliance score per property, landlord statements and the lettings side (adverts, applications, viewings) on the flat Agency plan. For letting agents · start trial.

Further reading: Gas Safety rules · EICR requirements · branch checklist

What a redress scheme actually asks for

When a complaint reaches a redress scheme, the case is decided on documents, not on how reasonable everyone sounds. The scheme will typically ask the agency to produce a chronology: what the landlord instructed, what the tenant reported, when the agency acted, and what evidence exists for each step.

Agencies lose these not because they behaved badly but because the story lives in three places. Part of it is in an inbox, part in a WhatsApp thread with a contractor, and part in somebody's memory. Reconstructing it under a deadline is expensive, and gaps read as failures.

A usable audit trail is simply the same events recorded once, in order, against the property and the tenancy, with the document attached at the point it was created.

A worked example

A tenant complains to the redress scheme that a leak was reported in November and ignored for two months, and that the agency was rude about it.

Agency A searches the shared inbox. It finds a report on 14 November, a forwarded email to a contractor, and nothing else. There is no record of an attendance, no invoice, and the tenant's follow-up on 2 December appears to have gone unanswered because the negotiator handling it left in January. The scheme finds maladministration and awards compensation.

Agency B opens the tenancy record. Report logged 14 November, contractor instructed the same day, access arranged for 16 November, tenant did not attend, second appointment offered 19 November, attended, parts ordered, completed 22 November with a photograph and a £180 invoice, tenant notified. The complaint is resolved in one reply.

Same leak, same two agencies, and the only difference is where the record lived.

Client money is part of the trail too

For an agency the audit trail is not only compliance documents. Where you hold client money you also need to evidence that it was handled correctly: rent received, deductions taken, landlord payments made, and the reconciliation that ties it together.

That means, in practice, a per-landlord statement showing what came in and what went out, a reconciliation against the client account, and Client Money Protection scheme membership that is current and displayed. When a landlord queries a payment eighteen months later, the statement is the answer; when an auditor or a redress scheme asks, the reconciliation is.

Keeping this in the same system as the tenancy record is what turns "we think we paid that" into a document.

What to keep, and for how long

A sensible retention position for an agency:

• Compliance certificates (CP12, EICR, EPC) and proof they were served, for the tenancy plus six years.
• Tenancy documents and inventories, tenancy plus six years, aligned with the contract limitation period.
• Right to Rent evidence, the tenancy plus one year, then delete. Holding immigration documents longer than needed is a data-protection breach.
• Client accounting records and reconciliations per your CMP scheme's requirements.
• Complaint correspondence, at least six years, because that is what a redress scheme will ask for.

Deleting on schedule matters as much as keeping. See the landlord GDPR guide for the data-protection side.

Where the chronology comes from: every instruction, report, work order, notice and payment is dated against the tenancy, with the document attached at the point it was created. When a complaint lands, you are retrieving a record rather than reconstructing one. See how an agency workspace is put together.

Your complaints procedure is itself a duty

Agencies think of redress as something that happens to them. It is also something you are required to operate, and the operating part is checkable.

You must have a written complaints procedure, tell clients and tenants how to use it, and work a complaint through your own process before the scheme will look at it. In practice that means acknowledging the complaint, investigating it, and issuing a final response, commonly within eight weeks. After that the complainant may escalate to your redress scheme.

Two failures recur, and both are procedural rather than substantive.

No final response was ever issued. The complaint was handled informally, by phone, by whoever was available, and nothing closed it. The scheme then has a complainant who cannot show they were answered, and an agency that cannot show it answered.

The procedure exists but nobody follows it. It is on the website, and the branch handled the complaint by email without logging it. From the scheme's perspective those two situations look identical.

Note also what happens after a decision. Where a scheme makes an award and the agency does not comply, it can be expelled, and because membership is mandatory, an expelled agency cannot lawfully carry on letting work. That is the real reason to treat awards as final rather than as an opening position.

The five-minute test

If you want to know whether your audit trail is real, pick a tenancy that ended eighteen months ago and try to answer these from records alone, without ringing anyone:

1. 1What did the landlord instruct, and when?
2. 2Which certificates were valid at the start of the tenancy, and can you show the tenant received them?
3. 3What did the tenant report during the tenancy, when, and what did you do about each item?
4. 4What money came in and went out, and does it reconcile?
5. 5Who signed what, and when?
6. 6If a complaint had been made, what would your final response have looked like?

An agency with a real trail answers all six in a few minutes from one record. An agency without one answers them from three inboxes, a WhatsApp thread and somebody's recollection, and that person has often left.

The point is not tidiness. Every one of those six is a question a redress scheme, a client, a court or an auditor may actually ask, and each is decided on what you can produce rather than on what happened.