How can a landlord share documents with tenants securely?

What is wrong with email attachments

Email is convenient, and it is also a copy machine. An attachment lands in the sender's sent folder, the recipient's inbox, any device that syncs it and often a backup. Years later, a search for "lease" still finds it. If either mailbox is hacked, every attachment in it is exposed at once.

The risk is not only hackers. A lease holds a tenant's full name, the unit, the rent, often a phone number and an emergency contact. An application holds far more: a birth date, an employer, bank details and a copy of an ID. Each time one of those files is attached to an email, another copy exists that you cannot recall or delete. Over a few years, a busy owner can have hundreds of tenant files scattered across inboxes without knowing it.

Two common mistakes make it worse. The first is sending one document to many tenants with the addresses visible or, worse, with other tenants' details inside. The second is replying to the wrong address, such as a former tenant's, because the email app auto-filled it.

Safer ways to share a document

• A tenant portal with a sign-in, where each tenant sees only their own lease, ledger and notices.
• A secure link that expires and, ideally, needs a code sent to the tenant's phone or email.
• An e-signature service that delivers and stores the signed copy, with a record of who signed and when.
• A shared folder with access given to one person by name, never "anyone with the link."

Avoid texting photos of documents and avoid public links that anyone who finds them can open. The FTC's guidance for businesses says to keep sensitive information only as long as you have a reason and to control who can reach it.

A simple routine for each document

1. Decide who needs the document. A lease goes to everyone on the lease. A notice about one tenant's late rent goes to that tenant.
2. Remove anything the reader does not need, such as another tenant's name or a full account number.
3. Send it through the portal, secure link or signing service.
4. Ask tenants never to email IDs, bank details or card numbers, and give them the secure place to use instead.
5. Record what was sent, to whom and when, and keep the record with the tenant's file.
6. Set a time to delete the shared copy once it is no longer needed.

Notices have extra rules

Some notices, such as a late-rent notice, a lease violation or a notice to enter, may need to be delivered in a way your state or the lease recognizes, and that can be posting, mail or hand delivery rather than email alone. Check your lease and your state's law before relying on email or a portal for a notice that starts a legal clock. Keep proof of delivery either way.

DoorKeeping gives each tenant a sign-in for their own lease and payments, and it keeps a record of what went out. The approval step means the owner confirms any notice involving money or legal steps before it is sent. It does not give legal advice, and you should check your state's rules on notice delivery.

Sources

1. FTC, Protecting Personal Information: A Guide for Business, read Oct 30, 2026
2. FTC, Cybersecurity for Small Business, read Oct 30, 2026
3. HUD, Landlord and tenant rights by state, read Oct 30, 2026

Questions

Is it okay to email a lease to a tenant?

It is common, but a portal or an expiring secure link is safer because the document does not sit in inboxes indefinitely. Never send IDs or bank details by email.

Can I email a legal notice instead of mailing it?

Only if your lease and your state allow it. Many notices have specific delivery rules, so check your state's law and keep proof of delivery.

Should tenants see each other's documents?

No. Share each tenant's file only with that tenant, and for a shared lease only with the people on the lease.