Split referencing into two stages. Before the viewing, collect only what you need to run a viewing list — never bank statements, payslips or a PPS number. After the viewing, run the same affordability check on every shortlisted applicant, against the actual rent, using a threshold you wrote down before you advertised. Use a bank-verified check rather than forwarded documents: it can't be edited, it shows whether income recurs, and it takes the applicant one connection. Then treat the output as guidance for a human decision — never an automated one, and delete what you no longer need. TenantSync's Tenant Screening runs this end to end: a tokenised applicant link, a 180-day read-only analysis, and a derived report with the raw bank data purged and consent revoked. Available from the Standard plan and above.
Ask an Irish letting agent what referencing looks like in practice right now and you'll hear a version of the same thing: 180 inquiries on a two-bed, forty of them serious, a viewing slot on Saturday, and an offer that has to go out on Monday. Somewhere in that compression, "referencing" becomes a WhatsApp photo of a payslip and a gut call.
That's understandable and it's also the exact point where two different kinds of expensive go wrong. A tenant who can't sustain the rent costs you arrears, a difficult conversation, and — under the 2026 rules — a tenancy that is considerably harder to end than it used to be. And a screening process that varies by applicant, or that hoovers up financial data from people you'll never let to, is a process you cannot defend if anybody asks you to.
This is a guide, not legal advice
Equality and data-protection obligations are fact-specific. This article explains the general position for private residential lettings in Ireland and how a structured screening process supports it. Confirm your obligations with the Data Protection Commission and the Irish Human Rights and Equality Commission, and take advice before responding to a complaint.
Why screening broke: the market did the breaking
Referencing used to be a leisurely process because there was time for it. There isn't now. The Daft.ie Q1 2026 rental report recorded fewer than 1,800 homes available to rent nationwide on 1 February 2026 — a 22% fall on the same date a year earlier, and the lowest availability for that point in the year since the series began in 2006. Availability in Dublin was down by over a third.
Two consequences follow directly. First, the applicant pool per property is enormous, so any screening step that takes more than a few minutes per applicant simply doesn't get done. Second — and this is the part that gets underrated — rents rose 4.4% in a single quarter, the biggest quarterly increase Daft.ie has recorded since 2002. Affordability at the new rent is not the same question it was at the old one, and an applicant who comfortably afforded a similar property two years ago may not afford yours.
Speed and rigour are usually a trade-off. The only way out of it is to stop doing rigour by hand.
The three rules of a process you can defend
A screening process that holds up has three properties. None of them is about being strict — they're about being the same every time.
1. Consistency
Apply the same criteria, in the same order, to every shortlisted applicant. This is the single most protective thing you can do, and it costs nothing. An inconsistent process is the one that gets characterised as discriminatory, because the only visible explanation for treating two applicants differently is the difference between the two applicants.
Practically: write the criteria down before you advertise. What rent-to-income threshold? What references? What documents? A standard that exists on paper before the applicants exist is a standard, not a rationalisation.
2. Lawfulness — the ten grounds
The Equal Status Acts 2000–2018 prohibit discrimination in the provision of accommodation on nine grounds: gender, civil status, family status, age, disability, sexual orientation, race, religion and membership of the Traveller community. A tenth ground — housing assistance — was inserted for accommodation by the Equality (Miscellaneous Provisions) Act 2015, and it covers HAP, Rent Supplement and other social welfare payments. As the Irish Human Rights and Equality Commission sets out, that protection applies across the whole lifecycle of a letting — advertising, offering a tenancy, treatment during the tenancy and ending it.
"No HAP" is not a screening criterion
Refusing an applicant because they are in receipt of HAP or Rent Supplement — in an advertisement, on a phone call, or quietly at the shortlist — is discrimination on the housing assistance ground. If your affordability threshold is a genuine, consistently applied policy, apply it to the applicant's actual position; HAP is part of how the rent gets paid, not a reason to exclude. Our guide to Open Banking rent reconciliation covers how a HAP payment and a top-up reconcile to one tenancy balance.
3. Proportionality — ask for less, later
The Data Protection Commission's guidance on requesting personal data from prospective tenants is unusually practical, and most agencies are on the wrong side of at least one point in it:
| What the guidance says | What it means for your process |
|---|---|
| It warns against expecting extensive personal and financial information before an applicant has even viewed the property. | Financial verification belongs after the viewing, on the shortlist — not on the inquiry form. |
| Requests should be confined to those who will be entering the letting agreement. | Don't collect from forty people to let to one. |
| It is reasonable to request supporting documentation confirming capacity to pay rent. | Affordability verification itself is legitimate. The question is scope and timing. |
| For bank statements, removing the narrative and providing running balances was considered sufficient. | You need the financial signal, not a line-by-line record of someone's life. |
| PPS numbers should not be sought in the initial phase — only when the lease is being agreed. | Move identity documents to the offer stage. |
| Data should not be collected or stored for undefined future purposes. | Have a retention answer before you collect, and delete the unsuccessful applicants' data. |
That fourth row is the interesting one, because it describes the design principle behind a modern affordability check almost exactly: the person deciding needs the derived figure, not the transactions underneath it.
Screen every shortlisted applicant the same way, in minutes
A tokenised link to the applicant, one read-only bank connection, and a derived affordability report — no payslips, no PDFs, no raw transactions stored. See it running against your own pipeline.
Screening is available from the Standard plan · The free trial covers RTB, rent automation, leases & maintenance
The two-stage process
Everything above resolves into one structural decision: separate pre-qualification from verification. They ask different questions, of different numbers of people, at different points, and mixing them is what makes screening both slow and risky.
| Stage 1 — Pre-qualification | Stage 2 — Verification | |
|---|---|---|
| When | At inquiry, before the viewing | After the viewing, on the shortlist |
| Who | Everyone who inquires | Only applicants you'd genuinely let to |
| What you collect | Name, contact details, current address, employment status and employer, desired move-in date, notes | Bank-verified income and affordability against the actual rent |
| What you don't | No bank statements, no payslips, no PPS number, no financial detail | No raw transaction history retained |
| Purpose | Build a sensible viewing list | Decide the letting |
In TenantSync those two stages are two different features, deliberately. Daft.ie and MyHome.ie inquiries arrive as leads and can be sent a pre-qualification application form that captures exactly the Stage 1 fields above — and nothing financial. The affordability check is a separate action, raised against a named applicant with the target monthly rent, and it requires the agent to confirm that the applicant has viewed the property or arranged a viewing before the link can be sent.
The attestation is a feature, not friction
Raising a check in TenantSync requires ticking a box: "I confirm this applicant has viewed the property (or arranged a viewing) and expressed genuine interest." The confirmation and its timestamp are stored on the check. That takes two seconds and it produces something valuable — a dated record that your process ran verification at the proportionate point, applied to shortlisted applicants only. If anybody ever asks how you screened, that record is the answer.
What a bank-verified affordability check actually shows
The applicant opens a one-off tokenised link — no TenantSync account, no login, no app to install — picks their bank, and completes a single read-only PSD2 Open Banking connection. The link is valid for 14 days. Read-only means account information access only: the connection can see transactions and can never move money.
TenantSync then analyses a 180-day window and produces a report of derived figures:
| Figure | What it tells you |
|---|---|
| Detected recurring net monthly income | The strongest recurring income stream — not one month's inflow. Reported alongside the number of salary-like credits found in it. |
| Average monthly inflow | Total money in per month, which will exceed salary where there are transfers, refunds or a second income. |
| Income stability | Stable (a recurring salary with consistent amounts), Variable (present but irregular in timing or amount), or Unknown. |
| Existing housing outflow | Recurring rent or mortgage already going out each month — the commitment your rent would be replacing, or competing with. |
| Rent-to-income ratio & band | The target rent as a share of detected net income, banded Strong (<30%), OK (30–40%), Stretched (40–50%), High risk (>50%) or Unknown. |
| Confidence & data-quality notes | High, medium or low, with plain-English caveats such as "only 1 month of data available" — a thin dataset returns low confidence rather than a confident wrong number. |
| Risk flags & score | Gambling activity, returned or unpaid items, overdraft reliance, and an informational existing-housing flag — each rated low, medium or high, aggregating into a score out of 100. |
| Coverage | Months, accounts and transactions analysed, so you can see how much the report is actually based on. |
The bands are worth pausing on, because they are a policy choice presented as a default. There is no statutory rent-to-income ratio in Ireland. The 30/40/50 thresholds are a widely used convention, and the value of having them in the tool is not that they're authoritative — it's that everybody gets measured against the same line. That's rule one, enforced by software rather than by discipline.
Why this beats a forwarded payslip
Three reasons, in order of importance. A PDF is editable, and in a market with 180 applicants per property, document fraud is not hypothetical. A payslip is one month, and one month tells you nothing about whether income recurs. And it's faster for the applicant — one bank connection instead of chasing HR for a stamped letter, which in a Saturday-viewing-Monday-offer cycle is the difference between a check that happens and one that doesn't.
The fraud layer nobody talks about
There's a failure mode specific to link-based verification, and it's obvious once you've seen it: the applicant forwards the link to somebody with better finances. TenantSync carries three advisory signals for exactly that.
- Identity assurance. The bank account-holder name is compared against the applicant name the agent entered: match, partial (a maiden or middle name, initials, or one owner of a joint account), mismatch — possible proxy verification — or unverified where the bank returned no holder name.
- Session & device. Derived from the access events across the applicant's journey: clean, review (for example, the link was opened and the bank connected on different devices), or suspicious where the same device or IP has completed checks for other applicants.
- Account reuse. Derived from salted hashes of the connected account and holder: suspicious where the same bank account has been connected for other applicants — a possible mule or proxy account — or review where the same account holder appears on another applicant's check.
Each of these adds a flag with a severity, and each is explicitly advisory. A mismatch is not proof of fraud — it's frequently a married name, or a joint account in a partner's name. The point of surfacing it is that you get to ask the question, which is precisely what you cannot do when a payslip arrives by email and looks fine.
Privacy by design: what's kept and what isn't
This is where a screening tool either earns the applicant's trust or quietly creates a liability for you. The design principle in TenantSync is that the report is the product and the raw data is a means to it:
- No raw transactions are stored. Transactions are pulled transiently, the figures are computed in memory, and only the derived report is persisted.
- The invite token is never stored in the clear — only a SHA-256 hash. The opaque token exists once, in the applicant's email.
- Bank access and refresh tokens are encrypted at rest and purged once the report is produced, with the provider consent revoked at the bank. The applicant's connection does not outlive its purpose.
- A daily retention sweep expires invite links that were never used and revokes any consent still lingering after a check has reached a terminal state — a backstop to the purge that already runs inline.
- Erase on demand. From the report screen an agent can delete an applicant's report and revoke consent immediately — the practical answer to an erasure request, and the right habit for unsuccessful applicants once a letting is decided.
- Checks are scoped to the agency and branch that raised them; an individual landlord's checks stay private to them.
The applicant-facing version of all this is simple: connect once, read-only, and the raw data is gone when the report is ready. That's a much easier ask than "email me three months of statements."
Get the tenant referencing checklist & affordability standard
Book a demo and we'll walk your team through the two-stage process on your own pipeline — the pre-qualification form, the affordability band you should set, and how the check reaches the applicant.
Where human judgement goes — and has to stay
A band, a set of flags and a score out of 100 look decisive. They aren't, and treating them as decisive is both a bad letting decision and a data-protection problem, since a decision made solely by automated means with significant effects for a person carries specific obligations. TenantSync produces guidance; a person decides. Nothing in the product approves or rejects an applicant.
The reason isn't only legal. It's that the data cannot see:
- A job that starts next month. Six months of history describes the past, and the applicant may be moving because something changed.
- A joint application. One account is one applicant's income. Two people taking a tenancy is two incomes and one rent.
- A guarantor, which is a normal and reasonable answer to a stretched ratio — especially for students and first-time renters.
- An account that isn't the main one. Low confidence and a thin transaction count usually mean the applicant connected the wrong account, not that they have no income.
- Context behind a flag. A returned direct debit during a bank switch is not the same event as three returned items in a quarter.
The workable rule: let the report generate the question, not the answer. If something looks off, ask the applicant before you act on it. That single habit converts most false negatives back into good tenancies — and it's also, not coincidentally, the fairest way to run the process.
Running it in TenantSync
The whole flow lives in one place, on the web platform:
- Raise the check. Applicant name and email, the target monthly rent, optionally the property and lease it relates to, and the viewing attestation.
- The invite goes out. The applicant gets a tokenised email link with a stated expiry. The check moves to Link sent.
- The applicant connects. They pick their bank and complete one read-only connection on a mobile-friendly page — no login, no app. The check moves to Connected.
- The report is computed and the raw data purged. The check moves to Report ready.
- You read it on screen — band, ratio, income, stability, flags, integrity signals, coverage and confidence — or download the PDF for the landlord client.
- You decide, record it, and erase what you no longer need. Unused links expire on their own; you can revoke a check at any point.
Checks are listed with their lifecycle status so a negotiator can see at a glance which applicants have connected and which haven't chased. And because the chosen applicant is already in the system, the next step — a tenancy agreement on an RTB-compliant template, e-signed — is the same record continuing rather than a re-keying exercise.
Which plan includes screening
Tenant screening is a paid capability from the Standard plan and above, including Custom and Enterprise — each check carries a real Open Banking cost, so it is not included on Starter or during the free trial, which show an upgrade path in-app instead. Everything else — RTB compliance tracking, Open Banking rent reconciliation, digital leases, maintenance and reporting — is on the free 14-day trial, no card required. See pricing, or book a demo if screening is why you're here.
The referencing checklist
Before you advertise
- Write your affordability threshold down. One number, applied to everyone.
- Decide your reference set — photo ID, previous landlord reference, employment confirmation, affordability check — and the order you'll run it in.
- Check your advertisement for anything that reads as a protected-ground exclusion. "No HAP" and its euphemisms are unlawful.
- Decide your retention answer before you collect anything: what you keep, for how long, and when unsuccessful applicants' data is deleted.
At inquiry — Stage 1
- Collect the viewing-list minimum only: name, contact, current address, employment status and employer, move-in date.
- Ask for nothing financial. No statements, no payslips, no PPS number.
- Reply to everyone consistently, and keep the record of who was invited to view.
After the viewing — Stage 2
- Shortlist first, then verify — only applicants you would genuinely let to.
- Run the same check on all of them, against the actual rent for the property.
- Read the band with the confidence rating. Low confidence is a prompt to ask, not a reason to reject.
- Check the integrity signals. A name mismatch or a shared device is a question to put to the applicant.
- Ask before you act on any flag — new job, joint income, guarantor, wrong account connected.
- Record the decision against your written criteria.
- Erase the rest. Once the letting is decided, unsuccessful applicants' verification data has no purpose.
General guidance only. Confirm your obligations with the DPC and IHREC.
Frequently asked questions
What is tenant referencing, and is it legal in Ireland?
It's the process of verifying a prospective tenant's identity, employment, rental history and ability to pay before offering a tenancy — and it's entirely lawful. The Data Protection Commission has said it's reasonable for a landlord or agent to request supporting documentation confirming a prospective tenant's capacity to pay rent. What isn't lawful is discriminating on a protected ground, or collecting more personal data than the decision requires. The test is proportionality: ask for what you need, from the people you're genuinely considering, at the point you need it. General guidance, not legal advice.
What can I not ask a prospective tenant for?
You can't make letting decisions on the Equal Status Acts grounds — gender, civil status, family status, age, disability, sexual orientation, race, religion, membership of the Traveller community — or on the housing assistance ground added for accommodation by the Equality (Miscellaneous Provisions) Act 2015, which covers HAP, Rent Supplement and other social welfare payments. On data protection, the DPC advises against expecting extensive personal and financial information before an applicant has viewed the property, recommends confining requests to those actually entering the letting agreement, says PPS numbers shouldn't be sought in the initial phase but only when the lease is being agreed, and notes that for bank statements, removing the narrative and giving running balances was considered sufficient.
What's a good rent-to-income ratio in Ireland?
There's no statutory ratio, so the number you use is a policy decision — the important part is applying the same one to everyone. A widely used convention treats rent under 30% of net monthly income as comfortable, 30–40% as manageable, 40–50% as stretched and over 50% as high risk. TenantSync bands on exactly those thresholds: Strong under 30%, OK 30–40%, Stretched 40–50%, High risk above 50%, and Unknown where income couldn't be determined confidently. Write your threshold down before you advertise, so the standard exists before the applicants do.
Is a bank-verified check better than a payslip?
Usually, for three reasons. A PDF payslip or statement is editable, and document fraud is real in a market this tight. A payslip shows one month, while a bank-derived view shows whether income actually recurs. And it's faster — one connection instead of chasing HR. TenantSync analyses a 180-day window through a read-only PSD2 connection and reports detected recurring net monthly income, average monthly inflow, income stability, existing housing outflow and the salary-credit count, with a confidence rating and data-quality notes instead of a confident-but-wrong figure when data is thin.
How does TenantSync's tenant screening work?
The agent raises a check against a named applicant with the target monthly rent, confirming the applicant has viewed the property or arranged a viewing. The applicant gets a one-off tokenised link — no login, no account — picks their bank and completes a single read-only connection, valid for 14 days. TenantSync pulls 180 days of transactions transiently, computes the report in memory and stores only derived figures: recurring net monthly income, average monthly inflow, existing housing outflow, salary-credit count, income stability, rent-to-income ratio, band, confidence, coverage and any flags. Raw transactions are never persisted, and the bank consent is revoked and purged once the report is ready. Available on screen and as a PDF.
What risk flags does a report show?
Four financial and three integrity signals. Financial: gambling activity (with total and transaction count), returned or unpaid items, overdraft reliance, and an informational flag where the applicant already has a monthly housing outflow. Integrity: an identity check comparing the bank account-holder name to the applicant entered (match, partial, mismatch, unverified), a session and device read that spots one device or IP completing checks for several applicants, and an account-reuse read that spots the same bank account across applicants. Each flag has a severity of low, medium or high, aggregating into a score out of 100. All advisory — guidance for a human decision, never an automated one or a credit score.
Can screening be an automated decision under GDPR?
It shouldn't be, and TenantSync is built so it isn't: the product produces a band, flags and a score, and a person decides. Nothing in it approves or rejects an applicant. That matters legally — a decision made solely by automated means with legal or similarly significant effects carries specific obligations — and practically, because the data can't see a job starting next month, a guarantor, or a second income on a joint application. Read the report, then ask about anything odd before acting on it.
What data is kept after a check, and for how long?
Only the derived report — aggregated figures, flags and metadata. Raw transactions are pulled transiently for the analysis and never persisted. The public link token is stored only as a SHA-256 hash, never in the clear. The applicant's bank access and refresh tokens are encrypted at rest and purged once the report is produced, with the provider consent revoked at the bank. A daily retention sweep expires unused invite links and revokes consents that have outlived their purpose. An agent can also erase an applicant's report and revoke consent immediately from the report screen.
Which plan includes tenant screening?
Screening is a paid capability from the Standard plan and above, including Custom and Enterprise. It's not included on Starter or during the free trial — those accounts see an upgrade path in-app — because each check carries a real Open Banking cost. The rest of the platform, including RTB compliance, Open Banking rent reconciliation, digital leases and maintenance, is on the free 14-day trial with no card required. If screening is why you're evaluating TenantSync, book a demo and we'll show the flow end to end.
Do I still need references if affordability is strong?
Yes. Affordability answers one question well — can this applicant pay this rent. It says nothing about how a previous tenancy ended, or how someone will treat the property. A complete reference set still means photo ID, a previous landlord reference where one exists, and employment confirmation. What the affordability check replaces is the awkward, error-prone part: chasing and trusting forwarded financial documents.
Sources
- Requesting Personal Data from Prospective Tenants, Data Protection Commission
- Housing Assistance Payment (HAP) and Housing, Irish Human Rights and Equality Commission
- Equality (Miscellaneous Provisions) Act 2015, Irish Statute Book — the housing assistance ground
- Irish Rental Report Q1 2026, Daft.ie (Prof. Ronan Lyons) — availability on 1 February 2026 and the quarterly rent change
- Equal Status, Workplace Relations Commission — where an equal status complaint is heard
Market figures are the most recent published at the time of writing.