Document the handover.
Lock the record.

Frequently asked.

• What does "tamper-evident" actually mean?

  The report’s contents are hashed at the moment you seal it. The hash is anchored in a public registry. If a photo file is replaced, a voice transcript edited, a name changed, or any other detail altered after seal, a freshly recomputed hash no longer matches the anchored one — and verification fails on the public page. We don’t claim “tamper-proof” because the underlying file is still a PDF you control. We claim that any modification becomes detectable.

• Will this hold up in court?

  That depends on jurisdiction, the case, and the judge. What we can say: a Tenant Trace report is a structured, time-stamped, geo-tagged record with a publicly verifiable seal. That’s stronger than camera-roll photos and stronger than a text-message agreement. We don’t promise admissibility — that’s not ours to promise.

• What does the other party have to do?

  Open the link, sign in with their Apple ID, and either co-sign or decline with a reason. No app install required for the recipient. Their Apple-verified email is recorded against the trace. Either outcome is shown on the PDF.

• Do you see my photos?

  No. Photos, voice notes, and PDFs stay on your device and in your private iCloud container. The registry only stores the digital fingerprint, the trace ID, region, role, and timestamps. Names, addresses, and media never leave the device unless you choose to share the PDF.

• What happens to my reports if I delete the app?

  Reports are stored locally and (if iCloud is enabled) in your iCloud Drive container. Deleting the app removes the local copy; iCloud retains the container until you delete it from iCloud settings. Registry anchors stay — they only contain a fingerprint and trace ID, no personal information.

• What if my landlord refuses to co-sign?

  You can mark the request as unsigned, add a sender note explaining the situation, or rely on the unsigned report. The PDF is honest about what happened: requested, declined with reason, expired without response, or marked unsigned by sender. All four are visible states.

• Why is verification on a different domain?

  verify.tenanttrace.app is purpose-built for a single job: comparing a printed seal against the anchored record. Splitting it from the marketing site means QR scanners reach a focused, infrastructure-feeling page — not a sales surface.

• Why not a subscription?

  A move-in or move-out is a moment, not a recurring service. We charge once. You keep what you paid for.

• Anyone with the QR can verify against the public registry — what does that prove?

  It proves the report’s fingerprint matches what was anchored at seal time, that the trace is registered, and that the sealed timestamp is real. It does not prove the contents of the report are factually true — only that no one has modified them after sealing.

• What does APP ATTEST do?

  App Attest is an Apple framework that lets the registry verify a request came from a real, unmodified copy of the Tenant Trace app on a real Apple device. It helps block forged registrations.

• Can someone damage the property before recording it?

  Tenant Trace cannot prove what happened before a report was captured. It locks the condition documented at capture time, with photos, timestamps, GPS, and a public verification seal. For the strongest record, capture at key handover and invite the other party to co-sign or decline. A signed move-in record next to a signed move-out record is what makes a deposit dispute easy to settle — anything captured days later carries less weight, even if the seal itself is real.

• Can landlords use Tenant Trace?

  Yes. Most of what makes Tenant Trace useful for tenants — sealed photos, GPS, timestamps, room-by-room capture, comparison reports — is just as useful for landlords. The strongest landlord case is documenting a property after possession returns: keys, meter readings, every room from the doorway, damage close-ups, and anything left behind, all sealed before cleanup or repairs begin. Same room order as the original check-in inventory makes deposit adjudication, small claims, and insurance discussions much faster. Co-sign works in either direction — landlord-to-tenant or tenant-to-landlord.