How we look after your documents
Your lease, your bond claim, your inspection photos. Uploading them to a website is a leap of faith. Here is the plain-English version of what actually happens to them once you do.
TenantTrail exists because renters are often the smaller party in a dispute. The last thing we want is for our own product to become another power imbalance. So we made choices that put the tenant in control: encrypted transport, per-user storage, hashed passwords and a delete button that actually deletes. If a nervous friend of yours ever asks “is it safe to upload my lease?”, this page is our answer.
Encrypted in transit
Every request between your browser and TenantTrail goes over HTTPS with TLS. Nothing you upload travels the public internet in cleartext, including on public Wi-Fi.
Namespaced private storage
Your files live in a private per-user path in our managed object storage. There are no public URLs. Every download is authenticated against your account before any byte leaves the server.
Passwords are hashed, not stored
We store bcrypt hashes with a modern cost factor. Even we cannot read your password. A password reset always issues a fresh token, we never mail you your old password because we do not have it.
Delete means delete
When you delete a document, we immediately overwrite the file in storage with a tombstone so the original content is no longer recoverable, then mark the record as deleted in our database. It is a one-way action, we cannot restore a file you have deleted.
Backups are encrypted at rest
Full system backups are encrypted with an AES key that is held separately from the database. If a backup file leaked, it would still be unreadable without the key.
We do not sell your data
We do not sell, rent or trade your personal information or your documents to third parties, ever. Read our Privacy Policy for the full picture.
Evidence that holds up.
Renters lose disputes for two reasons: they cannot find the evidence when they need it, or the agent claims what they have is fabricated. TenantTrail was built to shut down both.
SHA-256 fingerprint on every upload
The moment a document reaches us, we compute a SHA-256 hash and store it alongside the file. Change one byte anywhere in the document and the hash no longer matches. It gives you a mathematical way to prove the file has not been altered since you uploaded it.
Original photo metadata preserved
Photos you upload keep their original EXIF data intact: the time, date, camera and (if your device recorded it) location. An agent claiming your inspection photo was taken later, or somewhere else, has to argue against the phone that actually took it.
Server-timestamped chronology
Every timeline entry carries a UTC server timestamp set by us, not by your device. When you lock your chronology ahead of a hearing it becomes read-only. New events can still be added but existing ones cannot be silently edited to change the story.
Verbatim email capture
Each case gets its own private reply address. When you correspond with your agent through it, TenantTrail keeps the full message and headers verbatim, so "I never received that email" becomes very hard for the other side to argue.
None of this replaces the tribunal's own evidence rules. VCAT, QCAT, NCAT and their equivalents each apply their own standards and each decision-maker has discretion. But it means the evidence you bring is dated, verified and harder to dismiss.
What we cannot promise
No system is 100% secure. No SaaS product on the internet can honestly claim otherwise and we will not pretend to. Attackers evolve, humans make mistakes, third-party dependencies have their own weaknesses.
Please do not upload anything you would be unwilling to store in a modern cloud service. If your matter involves highly sensitive material (a suppression order, a family violence intervention order, classified information), speak to a solicitor first. If you ever suspect your account has been accessed by someone else, contact us straight away via the support page.
The full legal disclaimer, privacy policy and terms of use spell out the details in formal language.
Ready when you are.
Start a free case, upload the documents you already have and let TenantTrail keep them organised, timestamped and dispute-ready. No credit card, no upgrade prompts until you actually need one.
Create a free account