Terms of service

These terms are the agreement between you and SJSC Group Ltd (company number 13099071, registered at 84 Cathedral Road, Cardiff, CF11 9LN), who operate comply2let. By creating an account you accept them.

1. What comply2let is — and what it is not

comply2let is a record-keeping and reminder tool. It keeps your compliance documents in one place, works out which ones Welsh law requires for each property, reads the dates off them and warns you before they run out.

It is not legal advice, and it is not a guarantee that a property is compliant. Housing law changes, properties differ, and a document can be filed and still be wrong. You remain solely responsible for meeting your legal obligations as a landlord, including under the Renting Homes (Wales) Act 2016 and the Rent Smart Wales licensing scheme.

The automated document check is advisory only. It is produced by an AI model, it can be mistaken — particularly on handwritten or poorly scanned documents — and it never blocks you from saving anything. A green status in comply2let means our records show a document on file and in date. It does not mean a court, a local authority or Rent Smart Wales would agree. Check anything that matters.

2. Your account

• You must be 18 or over and acting in the course of a business.
• Keep your password to yourself. You are responsible for what happens under your account.
• Tell us promptly at privacy@comply2let.com if you think someone else has got into it.
• One account per landlord or business. Do not share logins.

3. Your responsibilities

You agree that:

• the property and tenancy details you enter are accurate — the whole checklist is derived from them;
• you have the right to upload the documents you upload, including where they contain information about your contract-holders or guarantors;
• you have told those people that their data is held, as your own privacy obligations require. Our privacy policy is written so you can point them at it;
• you will not upload anything unlawful, malicious, or unrelated to managing your properties.

4. Fees

comply2let is currently provided free of charge. If we introduce charging, we will give you at least 30 days' notice by email, and you will be able to export your data and close your account before anything becomes payable.

5. Availability

We work to keep the service up but we do not promise it will be uninterrupted or error-free, and we may take it down for maintenance. comply2let is a convenience, not your only copy — keep your original certificates.

6. Liability

Nothing in these terms limits our liability for death or personal injury caused by our negligence, for fraud, or for anything else that cannot legally be limited.

Subject to that, we are not liable for:

• fines, penalties, rent repayment orders or enforcement action arising from your compliance obligations;
• losses caused by an inaccurate automated document check, or by a reminder that did not arrive;
• loss of profit, business, goodwill or anticipated savings;
• data you lost because you kept no copy elsewhere.

Our total liability to you in any twelve-month period is limited to the greater of the fees you paid us in that period and £100.

7. Ending the agreement

You can close your account at any time by emailing us. We will delete your account and its contents within 30 days.

We may suspend or close an account that breaches these terms. Unless the breach makes it inappropriate, we will give you notice and a chance to retrieve your data first.

8. General

We may update these terms; if a change materially affects you we will email you before it takes effect. These terms are governed by the law of England and Wales, and the courts of England and Wales have exclusive jurisdiction.

Schedule 1 — Data processing agreement

This schedule applies where comply2let processes personal data about your contract-holders, guarantors or other third parties on your behalf. It forms the contract required by Article 28 of the UK GDPR. In it, you are the controller and we are the processor.

For your own account data — your email address and your portfolio records — we are the controller, and our privacy policy governs instead.

1. Scope of the processing

comply2let is not designed to hold special category data. Please do not upload documents containing health, biometric or similar sensitive information.

2. Our obligations

We will:

• process the data only on your documented instructions — using the service is your instruction — unless the law requires otherwise, in which case we will tell you first unless prohibited from doing so;
• ensure anyone who can access the data is bound by a duty of confidentiality;
• apply appropriate technical and organisational security measures, including private document storage, row-level database isolation, encryption in transit and hashed passwords;
• not engage a new sub-processor without giving you notice and a chance to object. Our current sub-processors are listed in the privacy policy, and each is bound by terms no less protective than these;
• help you respond to requests from data subjects exercising their rights;
• help you meet your obligations on security, breach notification and impact assessments, taking into account what we know;
• notify you without undue delay, and in any event within 48 hours, if we become aware of a personal data breach affecting your data;
• delete your data within 30 days of your account closing, unless we are required by law to keep it;
• make available the information you reasonably need to demonstrate compliance with Article 28, and allow audits — on reasonable notice, no more than once a year unless a breach or a regulator prompts it.

3. International transfers

Data is stored in the United Kingdom. Documents are transmitted to Anthropic in the United States for the automated check, under transfer terms incorporating the UK International Data Transfer Addendum. By uploading documents you instruct us to make that transfer.

4. Your obligations

You confirm you have a lawful basis for the data you upload, that you have given the people concerned the information their rights require, and that your instructions to us will not put us in breach of data protection law.