Pandora Case study
Tenant privacy · Canada

Rental applications over-share. ZK + AI can fix it.

To rent a home in Canada, applicants routinely hand strangers their SIN, pay stubs, bank statements and a full credit report — the exact bundle that fuels the country's most-reported fraud. Newcomers, who arrive with no Canadian credit file, get locked out entirely. The right question is not "how do we collect more?" but "how do we verify without collecting at all?"

Over-collection PIPEDA exposure Newcomer credit gap
The problem

Renting means over-sharing — to a stranger.

A Canadian rental application is one of the most invasive data grabs an ordinary person voluntarily walks into. To be considered for a unit, applicants routinely disclose government ID, a Social Insurance Number, pay stubs, bank statements, and a full credit report — often before they've even seen the home. In documented Canadian rental scams, victims sent exactly this bundle — photo identification, pay stubs, credit scores and a credit report — to a "landlord" for a unit that did not exist.8

Canada's own privacy regulators say most of this is unnecessary. The Office of the Privacy Commissioner is explicit that a credit check needs only a name, address, and date of birth, and that landlords "should not collect more information than they need."1 Alberta's Information and Privacy Commissioner goes further: a SIN "has no connection to determine suitability of a tenant" and is "not essential for conducting credit checks."4 The data being demanded is largely data that isn't required.

The consequences aren't hypothetical. Identity fraud is now the single most-frequently-reported fraud in Canada, and rental applications are a prime collection point for the precise information — SIN, ID, banking — that makes it possible. Handing that to a stranger, stored who-knows-how, is the risk hiding inside every application.

The market

The harm is measured, and the excluded are many.

Three numbers define the stakes: the fraud that over-collection feeds, the newcomers shut out for lack of a Canadian credit file, and how many arrive each year.

#17
Identity fraud — Canada's most-reported fraud
9,683 reports with a 100% victimization rate in 2024, inside $643.7M in total reported fraud losses — and only 5–10% of fraud is ever reported.
~2×5
Newcomer credit invisibility vs. Canadian-born
Immigrants in Canada under 2 years are credit-invisible at 14.8% vs 7.5% for the Canadian-born, with mortgage access of just 12.3% vs 54.6%.
483,39512
New permanent residents in 2024
Roughly half a million people a year enter Canadian rental markets typically without a Canadian credit file — before temporary residents are counted.

Over-disclosure also fuels discrimination: a paired-testing audit of 1,300+ tests found newcomers in Toronto face up to 11× as much rental-housing discrimination as non-newcomers.6 The more an applicant must reveal up front, the wider the surface for bias.

The landscape

The rules already point to data minimization.

Regulators, the law, and the cryptography all converge on the same principle — verify the claim, don't collect the file. What's missing is a product that actually does it.

The regulators

OPC & provincial commissioners

The federal OPC and provincial commissioners (BC, Alberta, Québec) publish landlord-tenant guidance urging data minimization, that private organizations "not request SIN numbers," and that applicant data not be "retained indefinitely."2

The consensus is settled — collect less, keep it briefly, verify only what's needed.

The law

PIPEDA & provincial privacy acts

Renting residential accommodation is a "commercial activity" under PIPEDA, so every landlord collecting SIN and bank data is a data controller with consent and purpose-limitation duties; BC, Alberta and Québec apply substantially similar laws.3

The exposure sits with whoever holds the data — and today that's a stranger with a spreadsheet.

The excluded

Credit-invisible newcomers

A foreign credit history doesn't carry over to Canada, so newcomers arrive with a "thin file" and can't pass a standard credit check10 — even when they're demonstrably able to pay. Lack of Canadian credit is then used to justify demands like months of rent in advance.

The screening system fails the very people the housing market needs.

The technology

Zero-knowledge selective disclosure

Zero-knowledge proofs let a person prove an eligibility predicate — "income ≥ 3× rent," "no prior evictions" — without revealing the underlying pay stub, SIN, or credit file.11 Verification requires only the cryptographic evidence, not the documents.

The capability exists. It just hasn't reached the rental application yet.

The gap

Everyone wants less data collected. The application still demands all of it.

Regulators say minimize, the law imposes liability, and the cryptography to verify-without-disclosing is proven. Yet the default rental application still asks for everything — because nothing on the market closes the loop between "prove you qualify" and "don't hand over your identity."

  • Screening equals collection. To assess a tenant, landlords gather raw documents — creating a honeypot of SIN, ID and banking data every time, held with no standard for security or deletion.
  • Newcomers have no path. A binary "Canadian credit file or nothing" check excludes hundreds of thousands of able payers a year, with no privacy-preserving alternative to prove reliability.
  • Both sides still lose. Applicants over-share and landlords still can't reliably tell a real pay stub from a fabricated one — a two-sided failure that better data collection alone won't solve.
How we approach it

An AI leasing agent that verifies without disclosure.

Propty · a Pandora product

Prove you qualify — keep your identity.

Propty is agentic rental infrastructure for Ontario: an AI leasing agent that runs a tenancy end to end — screening an applicant, matching a room, drafting the RTA-compliant lease, and standing behind the rent. The privacy shift is in how it screens. Instead of demanding raw documents, the agent is built to accept eligibility proofs: an applicant proves the predicate a landlord actually needs — sufficient income, clean rental history — without surrendering the pay stub, SIN, or full credit report behind it.

That directly answers the gap. It aligns with what regulators already ask for — minimize collection, verify only what's needed — and it opens a path for credit-invisible newcomers, who can prove reliability from documents they already hold rather than being rejected for lacking a Canadian file. Because the sensitive file never has to change hands, there's no honeypot to breach. And by reporting on-time rent to Equifax and TransUnion, the agent lets a newcomer build the Canadian credit history the old system demanded up front.

  • Verify, don't collect — prove eligibility predicates without exposing the underlying data.
  • Built for newcomers — screening that works with no Canadian credit file.
  • PIPEDA-aligned — data minimization and consent-based reporting by design.
  • Builds credit — on-time rent reported to Equifax and TransUnion.
The zero-knowledge eligibility layer is an architecture we're actively researching and building toward — privacy-preserving screening applied to the rental application.
Explore Propty
Sources
  1. Privacy in the landlord and tenant relationship. Office of the Privacy Commissioner of Canada. A credit check needs only name, address and date of birth; "landlords should not collect more information than they need for the stated purpose"; a SIN is confidential and need not be provided on request. https://www.priv.gc.ca/en/privacy-topics/landlords-and-tenants/privacy-in-the-landlord-and-tenant-relationship/
  2. 10 privacy tips for the rental housing sector. Office of the Privacy Commissioner of Canada. Recommends organizations "not request SIN numbers," mark any such request as optional, avoid informal (e.g. social-media) background checks, and not retain information indefinitely. https://www.priv.gc.ca/en/privacy-topics/landlords-and-tenants/02_05_d_66_tips/
  3. Landlords and tenants (PIPEDA application). Office of the Privacy Commissioner of Canada. Leasing residential accommodation is a "commercial activity" under PIPEDA; BC, Alberta and Québec have substantially similar provincial laws (PIPA; Law 25) with their own landlord-tenant guidance. https://www.priv.gc.ca/en/privacy-topics/landlords-and-tenants/
  4. Guidance for Landlords and Tenants (PIPA). Office of the Information and Privacy Commissioner of Alberta, Dec 2023. A SIN "has no connection to determine suitability of a tenant" and "is not essential for conducting credit checks"; landlords must obtain consent before ordering a credit report. https://oipc.ab.ca/resource/guidance-for-landlords-and-tenants/
  5. Immigrant credit visibility: Access to credit over time in Canada. Statistics Canada (Survey of Financial Security), 2023 (36-28-0001). Immigrants in Canada under 2 years were credit-invisible at 14.8% vs 7.5% for Canadian-born; mortgage access 12.3% vs 54.6%; invisibility falls to 6.1% by 2–4 years. https://www150.statcan.gc.ca/n1/pub/36-28-0001/2023009/article/00001-eng.htm
  6. Sorry, it's rented (2022 audit). Canadian Centre for Housing Rights. Based on 1,300+ paired tests in Toronto: newcomers face up to 11× as much rental-housing discrimination as non-newcomers; disclosure of caregiving/accent status sharply increased discriminatory treatment. https://housingrightscanada.com/reports/sorry-its-rented-2022/
  7. 2024 Annual Statistical Report. Canadian Anti-Fraud Centre (RCMP / Competition Bureau / OPP). 2024: 108,878 fraud reports and $643.7M reported losses; identity fraud was the most-reported type (9,683 reports, 100% victimization rate); CAFC estimates only 5–10% of fraud is reported. https://antifraudcentre-centreantifraude.ca/index-eng.htm
  8. Rental scam leaves dozens out of pocket (Kitchener, Ont.). CBC News, Sept 2024. Victims sent "photo identification, pay stubs, credit scores and a credit report" and paid a deposit for a unit that did not exist — illustrating the sensitive-data bundle applicants routinely surrender to strangers. https://www.cbc.ca/news/canada/kitchener-waterloo/rental-scam-kitchener-1.7327746
  9. Global Consumer Credit File — financial inclusion for newcomers. Equifax Canada, Oct 2024. Newcomers "often have a thin credit file" because a credit file from the country of origin "may not carry over to Canada"; a thin file is generally two or fewer credit lines. https://www.equifax.ca/about-equifax/newsroom/
  10. Privacy-preserving compliance via zero-knowledge selective disclosure. arXiv (academic preprint). Client-side zk-SNARKs "decouple attribute verification from identity revelation," letting a user prove eligibility predicates (e.g. a threshold) "without revealing underlying identity documents" — verification uses only the cryptographic evidence. https://arxiv.org/abs/2602.18539
  11. Canada 2024 permanent-resident admissions. Immigration, Refugees and Citizenship Canada (IRCC). Canada admitted 483,395 new permanent residents in 2024 (up from 471,820 in 2023); targets reduced to 395,000 (2025) and 380,000 (2026). Temporary residents add substantially more credit-invisible arrivals. https://www.canada.ca/en/immigration-refugees-citizenship/news/notices/supplementary-immigration-levels-2025-2027.html

Screen tenants without the honeypot.

See how the Propty agent verifies eligibility, houses newcomers with no Canadian credit file, and builds their credit — protecting both sides of the lease.