Beechwood Lettings is a pseudonym, as is Sarah — both stand in for a real ~120-property Hampshire independent and the real Lettings Manager who walked us through it. The audit findings below are real. The outcomes labelled "projected" are projections from the rollout that begins next week.
Tuesday, 8:47am
Sarah's coffee is going cold next to a 17-tab Excel file called Compliance Tracker - MASTER v3 (DO NOT EDIT - SARAH ONLY).xlsx. It's the Tuesday of a typical week and a landlord has just emailed asking for the current Gas Safety certificate for 14 Beechwood Crescent. She knows the certificate exists because she remembers booking the engineer in February. What she doesn't know is which of three engineers attended, which of two email accounts the PDF was sent to, or whether the renewal — due last week — was actually completed.
She types "14 Beechwood" into Outlook. Eight results. She adds "gas" alongside it. Two results, neither from this calendar year. She switches tabs to the spreadsheet, scrolls down to row 84, finds the address, and sees an amber cell with the word chase and no date next to it.
That cell is the entirety of what Beechwood Lettings — a ~120-property Hampshire independent that has rented out homes across the Test Valley for nineteen years — currently knows about Gas Safety compliance for that property.
Nine days from now, the Renters' Rights Act 2026 deadline lands.
The portfolio
Beechwood is lettings-led and runs lean. Sarah is the Lettings Manager and the single person responsible for compliance across every property they manage. The agency uses Reapit for the property and tenancy basics, but it doesn't track compliance certificates the way Sarah needs them tracked — so over the years she's built her own system, in Excel, with colour-coded cells and a discipline of personal habit that's kept the agency clean for nearly two decades.
That system has just stopped scaling.
The audit
Rapid Reports spent half a day going through the portfolio with Sarah. Every property, every certificate, every email folder, every paper folder, every diary entry. Six findings emerged, and they're worth being specific about.
One central spreadsheet, two stale copies. The master lives in OneDrive. A second copy, two weeks out of date, is sitting in Sarah's email Sent folder where she shared it with a director in April. A third lives on the office desktop machine, modified by whoever last sat there. The question "what does the spreadsheet say about X" has three potentially different answers.
Certificates scattered across email inboxes. Gas Safety PDFs from three different engineers. EICRs from two different electricians. EPCs from whichever assessor was cheapest that year. None centralised. Finding the certificate for a given address is a five-minute archaeology dig through email.
Specific gaps, surfaced by the audit:
- Three Gas Safety certificates already expired. The oldest by four months. None of the three properties had the cell colour-changed in the spreadsheet, because Sarah's diary reminder for that engineer's renewal cycle was set on a phone she replaced in January.
- Seven EICRs within sixty days of expiry, none flagged anywhere. EICRs run on a five-year cycle and Sarah's system has a "this month" view, not a "next two months" view.
- Roughly fifteen properties with no recorded EPC expiry at all. Blank cells. The certificates exist somewhere, but the expiry date was never typed in.
- Two part-furnished properties with no PAT certificate on file. Possibly compliant, possibly not — there's no way to tell from the current records.
No central Right-to-Rent service log. RRA paperwork lives in a paper folder in the office filing cabinet. Service dates are written on the original document. There is no way to produce, in under an afternoon, a record of what was served to whom, when, and by what means — which is exactly what the Act now requires agencies to prove on demand.
No reminder system. Renewals are tracked by Sarah's diary entries and her visual memory of the spreadsheet.
The cost of the gaps
These are projections, not paid invoices. But the regulatory exposure is real, and worth being specific about.
The three expired Gas Safety certificates are the most acute risk. Under the Gas Safety (Installation and Use) Regulations 1998, non-compliance carries an unlimited fine and, in serious cases, prosecution. In practice, penalties reported across 2024 and 2025 for landlords and agents have clustered between £6,000 and £10,000 per breach, with a long tail of higher fines where harm occurred. Across three properties, that's a realistic exposure window of roughly £18,000–£30,000 — before any civil claims from tenants.
The fifteen properties without recorded EPC expiry data are a separate exposure. Under the Minimum Energy Efficiency Standards, letting a property below an E rating attracts up to £5,000 per dwelling. The penalty applies whether the certificate is missing or the property is genuinely below the threshold; agents can't claim ignorance. Maximum theoretical exposure on those fifteen: £75,000. Realistic exposure depends on how many of them are actually below E once retested — but the point is that Beechwood didn't know which were and which weren't.
And then there's Sarah's time. Across the audit, the conservative estimate of compliance admin came to roughly three hours a week. Across the year, that's 156 hours of Sarah doing work that should be doing itself.
What we're rolling out
This is where the forward-tense begins. The rollout starts next week.
The spreadsheet retires. A CSV import pulls all 120 properties into ComplianceStack in one operation, then the spreadsheet is locked. From that point on, the system is the source of truth.
Each property gets a single page with six certificate slots: Gas Safety, EICR, EPC, PAT, Legionella Risk Assessment, Deposit Protection. The PDFs upload once and live there permanently. The blank EPC slots that the audit surfaced become visible "missing" cards on each property's page — invisible problems become explicit ones.
The Right-to-Rent log moves out of the filing cabinet. Every service event from this point forward is logged in the system with delivery method, recipient, and timestamp, and is non-amendable once written. CSV export produces a court-ready record in seconds, not days.
The renewals run themselves. Scheduled emails fire at 90, 60, 30, and 7 days before each certificate expires. Sarah's diary entries can be retired alongside the spreadsheet.
The Tuesday morning after
Same Tuesday, six weeks from now. A landlord emails asking for the current Gas Safety certificate for 14 Beechwood Crescent. Sarah opens ComplianceStack, types the address into the property search, opens the property page, clicks the Gas Safety card, and forwards the PDF. The whole exchange takes ninety seconds. The cell that said chase is now a card that reads Renewed: 12 May 2026 — Expires: 11 May 2027 — Engineer: J. Watkins.
Projected reclaim across Sarah's year: roughly 120 hours back. Projected reduction in audit-prep time from a typical Trading Standards or Property Redress Scheme inspection: from two or three days of disruption down to a same-day CSV export. Projected fine exposure on the certificates surfaced by the audit: closed, by virtue of being surfaced.
A note on the team
ComplianceStack today is single-login-per-agency. So the change for Beechwood isn't that the whole team gets shared visibility — that's on the v2 roadmap. The change is that the knowledge stops living in Sarah's head and starts living in a system. If she's off on a Tuesday, the reminder emails still fire. If she leaves the agency tomorrow, the new Lettings Manager isn't inheriting a spreadsheet, three engineers' email threads, and a phone full of diary entries. They're inheriting a working system with everything in it.
That's a quieter benefit than the headline numbers, and Sarah was the one who flagged it first.
Beechwood Lettings and Sarah are pseudonyms for a real Hampshire letting agent and their Lettings Manager. Specific certificate counts, portfolio size, and tooling have been preserved in this account; identifying details have been changed. ComplianceStack is the multi-tenant SaaS Rapid Reports has built for UK letting agents preparing for the Renters' Rights Act 2026 deadline. The fine-exposure figures cite real regulatory ceilings and recent enforcement patterns; the rollout outcomes are projections from the engagement that begins next week, and will be updated to actuals once the agency has been on the system for a full reminder cycle.
