Short-Term Rental Documents: The Complete Guide for Hosts in 2026

If you manage even a single short-term rental, you already know that the most expensive moments of your year rarely happen at check-in. They happen three weeks later, when a guest disputes a 350 EUR cleaning charge on Airbnb's Resolution Center, when Booking.com asks you to prove that the scratch on the parquet was not there when the guest arrived, or when the local police call because somebody never registered the guests. The only thing that protects you in each of these moments is paperwork: short-term rental documents, exchanged, signed and archived with every guest.

This guide walks through every short-term rental document a professional host or property manager should collect, sign, store and share with platforms or authorities. It covers the EU legal anchors (Regulation 2024/1028, eIDAS, GDPR), the platform rules from Airbnb and Booking.com, a comparative for guest registration across six countries, and the habits experienced hosts have learned the hard way. The principles apply regardless of the booking channel.

The 2026 framework: EU Regulation, eIDAS, GDPR for short-term rental documents

The single biggest change for short-term rental documents and European hosts in 2026 is that the EU Short-Term Rental Regulation 2024/1028 is now fully applicable in every member state. Every short-term rental unit offered through an online platform in the EU must have a registration number issued by a national or regional authority, and platforms must display that number on every listing and share data with member states on request.

Three things change in practice. First, your listing must show a valid registration number on Airbnb, Booking.com, VRBO, Expedia, Plum Guide and direct-booking websites alike. Without a code, the platform can suspend the listing and the host risks a sanction at home. Second, the data you collect at check-in is now part of an EU-wide chain: platforms send transaction-level data to national authorities, and the host is still responsible for guest registration with local police or tourism authorities where required, and for fiscal compliance under a national tax regime that varies by jurisdiction. Third, the regulation reinforces the "trust but verify" principle: hosts and platforms are expected to verify the identity of the booking party at least once during the rental relationship.

Two other EU instruments shape the short-term rental documents you handle every day. The eIDAS Regulation (EU 910/2014) defines three signature levels: SES, AES, QES. Every short-term rental contract needs at least an SES to be admissible as evidence in EU civil proceedings. The GDPR (Regulation EU 2016/679) tells you how to collect, store and eventually delete guest data, including ID copies and photos.

A short-term rental in 2026 is no longer just a hospitality contract. It is a regulated activity with three documentary obligations: a registration number on the listing, an identity check on the booking party, and a retention policy for guest data.

Pre-arrival: short-term rental documents to collect before check-in

A surprising number of disputes can be prevented by preparing short-term rental documents three days before arrival, not at the moment the guest knocks on the door. By the time the traveler is on your doorstep at 11pm with a suitcase, your leverage to ask for documents is essentially zero.

The minimum file you should have closed before arrival, regardless of the booking channel: booking confirmation (platform receipt or direct-booking email saved as PDF, all versions in chronological order if the booking changes); identity verification of the lead guest (a copy of a government-issued ID, even when the platform claims to have verified the guest, because in any future dispute knowing who the lead guest actually is matters more than the platform handle); names and ID details for all adult guests where local rules require it; signed rental contract, even for two-night stays (section 4 explains why); signed house rules, separate from the contract; privacy notice and any required consents under GDPR; pre-authorization for the security deposit; and self check-in instructions, only after the documents above are signed. The biggest mistake hosts make is sending the door code as soon as the booking is confirmed. Documents first, code second.

More than half of the documents in this table are produced before the guest ever touches a key. That is the point. TrueScreen lets you bundle the pre-arrival stack into a single signing flow, so the guest experience is one link, one signature, one confirmation, regardless of the booking channel.

Property entry and guest identification

Self check-in is the default for a large share of European short-term rentals. It is convenient and platforms favor listings that confirm a frictionless arrival. There is a tension, though, between fully automated entry and the regulatory expectation that the host knows who is sleeping in the unit.

Several national administrative cases over the past two years have reinforced the same point: regardless of the entry method, the host must be reasonably sure that the people in the apartment match the booking. Most legal commentators converge on the same answer: in-person verification at first arrival is the safest default, and where that is not feasible, a robust remote-identification flow is the next best thing.

A robust remote ID flow looks like this: the guest takes a photo of their ID and a selfie through a guided web flow (not a free-form email attachment); a basic document-vs-selfie comparison happens on the host side; the captured data is timestamped and stored as a signed file, not a chat thread; the lead guest signs a declaration confirming the names of the other adult occupants.

If you operate a smart-lock self check-in, never reuse the same access code across guests: a disposable code per stay is safer and easier to reconcile if there is ever a question about who entered and when. Export the smart-lock log monthly and keep it with the stay file. If a guest refuses to provide ID at the door, that is a legitimate, contractually grounded reason to cancel: document the refusal in the platform's chat and contact host support before any payment-related action.

The rental contract: the core short-term rental document

Many hosts assume that the platform booking is itself the rental contract, the most important of all short-term rental documents. Only partially. The platform's Terms of Service govern the relationship between you and the platform; the rental relationship between you and the guest is a separate civil contract, governed by the national civil law on lease and tenant liability of the country where the property is located. Without a written contract, you fall back on whatever the local default rule says, which is rarely favorable to the host.

A short-term rental contract does not need to be a fifteen-page document. The minimum useful content: identification of the parties, identification of the property, stay dates and check-in/check-out times, total price, deposit and payment method, allowed use, maximum number of occupants, cancellation rules, house rules reference, liability allocation, privacy notice reference, governing law and competent court, and a signature with a verifiable date.

Under eIDAS, a Simple Electronic Signature (SES) is enough to make this contract admissible in a civil court across the EU. Higher levels (AES, QES) are not legally required, but they raise the evidentiary weight. SES is what most hosts will use: fast, EU-recognized, well suited to the asymmetry between a host and a one-time guest.

A common confusion: some hosts believe that QES is the only "real" signature. That is wrong. The QES level is required for specific acts (notarial deeds, certain administrative acts) and not for short-term rental contracts. TrueScreen integrates Document Signing at SES and AES levels and relies on third-party qualified providers when QES is genuinely needed. Any vendor that claims to be a Qualified Trust Service Provider for a short-term rental contract is overselling.

You can sign in three ways: in person on paper, in person on a tablet (SES), or online before arrival through a signing link (SES, scales the best). Option three is what scales: one template, one flow, one archive, every guest, every channel.

The rental contract is your single most important document for civil disputes. It is also one of the easiest to standardize.

Short-term rental documents around the deposit: house rules, credit card declaration, security deposit

Three side documents matter almost as much as the contract.

House rules. Two pages is plenty. Cover quiet hours, smoking, pets, parties, additional guests, garbage handling, parking, key replacement fees, late check-out fees, plus a clear statement that platform house rules apply in addition. The more specific you are, the fewer disputes you will have. Vague rules ("respect the neighbors") are unenforceable. Specific rules ("no music with external speakers between 10pm and 8am") give you something to point at when a complaint arrives.

Credit card declaration. If you take a security deposit through a payment terminal, the guest signs a short authorization that explains the maximum amount and the events that trigger a charge: damage, missing items, additional cleaning, smoking penalty, key replacement. This is separate from the platform's deposit hold, when one exists, and gives you a fallback when the platform's protection does not cover what you need.

Security deposit terms. Make the amount, the trigger conditions and the release timeline explicit. The standard EU best practice is to release the deposit within seven business days of check-out, unless you raise a damage claim, in which case the release pauses until the claim is closed. Document every step: photos, repair quotes or invoices, communication with the guest, decision to retain. If you ever go to a small-claims court, this is the file the judge will look at.

GDPR privacy and consent for short-term rental documents

Privacy is the area where most hosts are still under-prepared. Operating a small business does not exempt you from GDPR. If you process personal data of EU guests through your short-term rental documents, you are a data controller, full stop.

The minimum privacy stack: a plain-language privacy notice, available before the guest signs anything else (the European Data Protection Board, EDPB, has published guidance directly usable for the hospitality sector); a clear lawful basis for each processing activity (contract necessity for the rental itself, legal obligation for guest registration and fiscal records, explicit consent for optional processing like newsletters or marketing photos); consent records as a signed file with a verifiable date (a checkbox on a form, without timestamp and without a stable copy of what the user agreed to, is weaker than people assume); a working channel for data subject rights (an email like privacy@yourbrand.com is enough for a small operation, as long as you actually answer); a written retention policy that respects national tax retention (typically 5 to 10 years for fiscal documents) and the GDPR storage-limitation principle for everything else; and a clear position on cross-border transfers if your archive lives outside the EU.

The biggest GDPR mistake hosts make is treating property condition photos as if they were not personal data. They often are, because they show the guest's belongings, and sometimes the guest themselves. Treat them as personal data, store them with access controls, delete them on schedule.

Property condition photos: the visual layer of short-term rental documents

This is where short-term rental documents start being a money-saver, not just a compliance tool. Most damage disputes are decided on the strength of the check-in photos. With a clean, dated, comprehensive set, you win. Without it, you lose. Very little middle ground.

A useful set covers four layers. The property as a whole: a wide shot of every room, same angle and same height every time. High-value items: television, sound system, appliances, decorative pieces, one wide shot and one close-up each. Statistically disputed areas: floors near windows and doors, parquet edges, kitchen countertops, bathroom fixtures, sofa upholstery, mattress condition (surfaces where damage is invisible at a glance and obvious at the next professional cleaning). Counts and serial numbers: pillows, keys, remote controls, plus serial numbers for items that are commonly stolen.

What matters most: photos need to carry a verifiable date. A photo on your phone, with metadata anyone can edit, has limited evidentiary value. A photo captured through a tool that produces a tamper-evident, immutable file with a trusted timestamp is admissible as evidence with legal value in any EU civil proceeding, and is the format that AirCover and Booking's damage policies treat as serious. TrueScreen handles this through its Web Portal: a guided capture flow per room, output sealed at the moment of capture, sharable via a verifiable link with the platform's resolution team or with an insurer.

A practical rule we have seen work across hundreds of properties: capture the check-in set no more than 60 minutes before arrival, and the check-out set no more than 60 minutes after departure. The narrower the window, the harder it is for either side to argue that the damage happened outside the rental period.

The inventory list deserves a parallel treatment. The guest co-signs it at check-in, the same list is reviewed at check-out, missing or damaged items are flagged. One file, two snapshots, one signature on each end.

Photo evidence is decided in the first 60 minutes after check-out. Without a tamper-evident set with a verifiable date, every claim becomes a "your word against theirs" conversation.

Short-term rental documents generated during the stay

Between check-in and check-out, the file of short-term rental documents keeps growing. Most of these are short, but they all matter.

Maintenance and repair tickets. When the guest reports a broken appliance, a leak, or a smart-lock issue, keep a written record of report, response and resolution. The platform chat is acceptable as long as you export it; relying on it as the only archive is fragile.

Communications log. Every relevant exchange should end up in writing. If a phone call happens, send a follow-up message that summarizes what was agreed.

Issue reports from the guest. When a guest sends a complaint mid-stay, the way you handle the first response sets the tone for any future dispute. Acknowledge in writing, propose a remedy in writing, document the outcome in writing. AirCover's Travel Issue process explicitly looks at how the host responded in the first 24 hours.

Cleaning and turnover records. Each turnover should leave a brief record: date, time, who cleaned, any issues found. This matters when a guest complains about cleanliness and is also a layer of defense against false damage claims.

Smart-lock and access logs. Where you use smart locks, the access-log export for the stay belongs in the file. Same for in-property cameras, where they are legally allowed (almost always only outdoor and only with prior disclosure to the guest).

A general principle: written beats spoken, dated beats undated, sealed beats editable.

Check-out: closing the short-term rental documents file

Check-out is the second moment where you generate short-term rental documents at scale. Mirror the check-in routine.

Final condition photos, same rooms and same angles, captured within 60 minutes of departure. Inventory verification: walk through the list, mark missing or damaged items, sign and date. Handover report: a short document that summarizes the state of the property, any damage observed, items missing, and the deposit decision. The guest does not need to sign it, but you should send a copy through the platform chat so there is a record of the host's position. Deposit release note: when the deposit is released, document the date and the amount; when it is retained in part or full, attach the evidence (photos, repair quotes, invoices). Departure declaration, especially useful for direct bookings: a short statement signed at check-out or remotely within 24 hours, confirming the date and time of departure and the state in which the property was left. Useful in fiscal audits and in disputes about extended stays.

A short post-stay survey is also worth running, separate from the deposit release: linking the two creates a perceived conflict of interest that some platforms penalize.

Complaints, disputes and liability: short-term rental documents in both directions

Disputes arrive from both directions. Sometimes the guest complains first; sometimes you, as the host, are the one filing a damage claim. Short-term rental documents work in both directions, and best when set up as a two-way archive from day one.

When the guest opens a complaint

AirCover for Hosts is Airbnb's host protection: up to 3 million USD in damage protection and up to 1 million USD in liability protection, plus identity verification and a 24-hour safety line. To trigger the damage protection, the host files the claim through Airbnb's Resolution Center within 14 days of check-out, attaches evidence, and responds within the deadlines. Booking.com runs its own programs and a Damage Policy for partners that opt in, with similar mechanics and a Misrepresentation Policy that protects hosts when a listing is misrepresented in a guest review. Airbnb's Travel Issue policy gives the guest 72 hours after check-in to report a problem; if reported within that window and the host cannot resolve, Airbnb can offer a refund and pass the cost back to the host.

When you, as the host, file a damage claim

The procedure is the same on every platform: capture additional photos and videos of the damage within 60 minutes of check-out (verifiable date); get a repair quote or invoice from a third party (self-quoted damage is treated with skepticism); open the dispute through the platform's official channel within the deadline; attach the entire stay file (contract, house rules, check-in photos, check-out photos, inventory list, communications); respond to the platform's questions within the deadlines. If the dispute escalates beyond the platform, that same file is what you send to the small-claims court or to your insurer.

Liability

Beyond damage, hosts face civil liability for property defects. If a guest is injured because of a defect (loose railing, faulty appliance, slippery shower without a mat where one is expected), the host can be held liable under the national civil law on premises liability of the country where the property is located. The defense is documentation: maintenance logs, recent inspections, certifications for appliances, and clear warnings where a hazard cannot be removed.

Disputes are decided on completeness, not on intensity. The host who shows up with a sealed twelve-document file wins more often than the one who writes the longest message.

Local authority compliance: short-term rental documents across six countries

Guest registration with local authorities is the area where Regulation 2024/1028 sets the frame but the implementation is still very local. The principle is clear: every short-term rental needs a registration code, and every guest stay should be reportable on request. The mechanics differ by country.

The comparative below covers six markets that account for the bulk of European short-term rental volume. Treat it as an operational map, not as legal advice; the rules update frequently.

A few cross-cutting notes. The EU Regulation is a unifying frame, not a substitute for national rules: you still need the national or regional registration code, and you still register guests through the national channel. The local tourist tax is a separate obligation in most countries; the national tax authority will treat the absence of tourist-tax records as a strong signal of non-compliance even when the rental income itself is declared. In federal countries (Germany, Spain) the meaningful rules are at regional or city level: Berlin, Barcelona, Mallorca and several Italian historic centers add further restrictions. For non-EU operators in the EU market the same logic applies: a UK host listing on Airbnb in Italy must comply with Italian rules for that property. The platform's compliance does not absorb the host's compliance.

The takeaway: build a one-page compliance memo per country, keep it updated, and attach a copy to each property's stay folder.

Storage, archiving and integrity of short-term rental documents

By the end of a busy season, a single property generates hundreds of short-term rental documents. Multiply by the number of units you manage, and the question of where this archive lives becomes a real one.

Three principles. Centralized: one place per property, accessible to the people who actually need it (cleaning supervisor, property manager, accountant). Email folders are not an archive. Searchable: you should be able to find any document in under 30 seconds by guest name, date, property, or document type. A naming convention like `propertycode_year_stay-id_documenttype.pdf` works well. Immutable for the documents that matter: contracts, photos and signed inventories should be stored in a tamper-evident format, not as editable files. Platforms and courts care about whether a document could have been altered after the fact, and a non-modifiable file with a verifiable date answers that question without further discussion.

Retention horizons depend on the document type. Signed contracts and signed inventories: the duration of the limitation period for the rental contract under local civil law, plus a buffer for tax audits, which lands between 5 and 10 years in most EU jurisdictions. Photos and condition documentation: 12 to 24 months after check-out, unless a dispute is open. Fiscal documents: per the national tax regime, typically 7 to 10 years. Personal data (ID copies, guest registration data): the minimum retention required by local law, then deletion. GDPR's "storage limitation" principle is the binding rule.

A pattern that works across professional property managers: weekly or monthly exports from the working tools (smart-lock logs, communication threads, accounting software) into the same per-property folder, plus an annual audit to confirm that retention rules have been respected and documents past their horizon have been deleted.

Operational best practices for short-term rental documents

A few habits separate hosts who treat short-term rental documents as a chore from those who treat them as an asset.

Standardize the templates once a year. Rental contract, house rules, privacy notice, inventory list: review them just before high season, and update for any changes in EU regulation, platform policies and local rules. Consult a local lawyer for the changes that touch civil law.

Run one signing flow, not five. A guest who has to sign three documents through three different links by three different vendors will sign one and ignore two. A single bundled flow produces a much higher completion rate.

Send the signing link three days before arrival, not the day of. Three days gives you time to nudge a guest who has not signed.

Keep the keys, the access codes and the signed file in the same conditional flow. The guest cannot get the access code until the file is signed. This single rule reduces the rate of unsigned contracts close to zero.

Walk the property with a phone every Monday morning, even outside guest stays. A weekly photo set with a verifiable date is an early-warning system for slow damage and a defense against false claims about pre-existing conditions.

Treat the cleaning team as part of the document chain. A cleaning supervisor who also captures the check-in and check-out photos is a force multiplier.

Keep a "lessons learned" log for every dispute. Every closed dispute teaches you something: a missing photo, an unclear house rule, a slow first response. Capture it in a one-paragraph note and read the log at the start of every season.

Pick tools that are web-based and platform-agnostic for your short-term rental documents. A short-term rental operation that runs on a single phone app is fragile. The more your operation looks like a portable browser-based workflow, the more resilient it becomes when a platform changes its rules.

How TrueScreen helps collect and sign short-term rental documents online

Mark manages six vacation properties in Barcelona. Three are on Airbnb, two on Booking.com, one accepts direct bookings through a small agency website. Last summer he had two damage disputes, one missed guest registration, and a privacy complaint from a guest who could not figure out what had been done with their ID copy. None of these incidents alone was a disaster; together, they ate one work-week and a four-figure amount in unrecovered costs.

This year, his short-term rental documents workflow looks different. Three days before each arrival, his property management software triggers a single TrueScreen link. The link opens a guided web flow: the guest reviews the rental contract, the house rules, the privacy notice and the deposit declaration, uploads a copy of their ID, and signs the bundle with a Simple Electronic Signature under eIDAS. The whole flow takes two to four minutes on a phone, and works regardless of the booking channel. Mark receives a sealed file; only at that point does the property management software unlock the smart-lock code.

On the day of arrival, the cleaning team finishes the turnover one hour before check-in. The supervisor opens the TrueScreen Web Portal in a browser and walks through the photo capture flow, same rooms and same angles every time. The output is a non-modifiable file with a verifiable date that lands in the same stay folder as the signed contract.

Five days into a recent stay, a guest disputed a 350 EUR cleaning charge that Mark had applied as a smoking penalty. The guest opened a Resolution Center case on Airbnb. Mark replied with a single TrueLink that pointed to the stay folder: the signed house rules listing the 350 EUR smoking fee, the check-in photos showing no smoke residue, the check-out photos showing the residue, the cleaning team's report. Airbnb's reviewer verified the documents and closed the dispute in Mark's favor in 48 hours. Two years ago the same dispute would have taken a week and a 50/50 outcome.

What TrueScreen does, plainly: a Data Authenticity Platform that gives short-term rental documents tamper-evident integrity, with a web-based service for host-guest document collection, signing and archiving (no install on the guest side); Document Signing under eIDAS at SES and AES levels, with third-party qualified providers when QES is genuinely needed (TrueScreen itself is not a Qualified Trust Service Provider, and that is the honest description); tamper-evident files with a verifiable date, sharable through TrueLink without giving up the original; EU data centers under a clear GDPR retention model. It works regardless of the booking channel.

What it does not do: replace the cleaning supervisor's eyes, the local lawyer's contract review, or the property manager's judgement.