FCRA compliance
Living checklist — placeholder ahead of pilot.
TenantID assembles tenant reports for landlords and is subject to the Fair Credit Reporting Act. This page tracks the controls we are building to meet that obligation. Items marked Planned are not yet live.
Tenant onboarding
- Standalone FCRA disclosure screen before Plaid LinkPlanned
- Disclosure names TenantID as the assembling entityPlanned
- Disclosure states purpose and tenant rightsPlanned
- "I acknowledge" confirmation logged with timestampPlanned
Landlord onboarding
- Permissible purpose certification at signupPlanned
- Per-verification certification on each new verification viewPlanned
- Certification logged with timestamp, landlord ID, verification IDPlanned
Adverse action flow
- "Deny" action on landlord dashboardPlanned
- Automated adverse action email via ResendPlanned
- Email includes TenantID name/address/phone, dispute right, free-report rightPlanned
- Denial event logged with timestamp, landlord ID, verification IDPlanned
Dispute mechanism
- Dispute submission form on tenant dashboardPlanned
- Disputes routed to internal ops emailPlanned
- Auto-confirm receipt with 30-day resolution SLAPlanned
- Internal doc: dispute investigation + resolution processPlanned
Report access
- Tenant can view their own assembled report at any timePlanned
- Tenant can request deletion (logged + actioned within SLA)Planned
- Data retention policy in internal ops docPlanned
Data & logging
- All FCRA-triggering events written to audit log tablePlanned
- Audit log: event type, timestamp, user ID, verification ID — append-onlyPlanned
Questions or disputes: compliance@tenantid.example.