For employers

Lone worker safety for
estate and letting agents

One member of staff, an empty property, and a person they have never met. The most exposed routine task in the industry, and the least often planned for.

Lone Worker Safety for Estate and Letting Agents: Viewings, Empty Houses and Strangers

The risk in estate agency is concentrated in the accompanied viewing: a lone member of staff meets an unknown person inside an empty building, often out of hours, at an address the office is not actively monitoring. The controls that work are registering the applicant before the appointment rather than at the door, a published diary so someone always knows where staff are and when they are due back, a timed check-in that escalates automatically if a viewing overruns, a discreet SOS that does not have to be explained to the person standing next to you, and a culture where walking away from a viewing is explicitly supported. Vygard provides the check-in, escalation and SOS layer; the registration and diary discipline are procedural and have to come first.

Why the viewing is the problem

Most industries with a lone-working risk know they have one. Estate agency often does not, because the work does not look dangerous: it is an appointment, in a house, during the day, as part of a normal sales process. Nobody describes it as entering a confined space or working at height.

But look at what an accompanied viewing actually consists of. A single member of staff, frequently young and frequently junior, goes to an address where nobody else is present. They meet a person they have never met and whose identity they have usually taken on trust from an email or a phone call. They then walk that person through an empty building, including upstairs rooms, lofts, garages and cellars, with no colleague present and often no neighbours in. Evening viewings are standard, which means some of this happens in the dark.

There is no other routine task in the sector that combines all of those. And the sector knows, from its own history, how badly it can go — which is precisely why this is the part of the job worth building a system around.

Where the risk sits, specifically

Four points, and they are predictable enough to plan for.

The unverified applicant. The single biggest control in estate agency is knowing who you are meeting before you meet them. An applicant registered only as a first name and a mobile number is an unknown person with whom you have arranged to be alone in an empty building. This is the gap most incidents walk through.

The empty property itself. No other occupants, often no working lights, unfamiliar layout, and rooms with a single exit. The member of staff frequently leads the way, which puts them in front of the stranger and inside the room — the wrong way round.

The out-of-hours appointment. Evening and weekend viewings are the ones the office is least able to monitor, because the office is closed. A viewing at six on a Friday with nobody on duty afterwards is a lone worker with no backstop at all.

The journey and the handover. Driving alone between properties, parking somewhere unfamiliar, carrying keys for multiple addresses. The keys are worth saying out loud: a member of staff carrying access to a dozen empty properties is carrying something genuinely valuable to the wrong person.

Register the applicant before the appointment

This is the control that does the most and costs the least, and it is procedural rather than technical. No accompanied viewing is arranged with an applicant who has not been registered with a verifiable name, address and contact number, confirmed by something other than their own say-so.

It is also, usefully, something the industry already does for other reasons. Anti-money-laundering obligations mean agencies are checking identity at later stages anyway, and letting agencies take referencing as routine. Moving a basic identity step to the point of booking rather than the point of offer costs almost nothing and changes the exposure entirely.

Where an applicant will not provide it, that is itself information. A viewing is a service, not an entitlement, and declining one is a legitimate business decision.

The diary has to be a live record, not a wall planner

The second control is that somebody always knows where every member of staff is and when they are expected back. In a lot of agencies this exists as a whiteboard or a shared calendar that is accurate in the morning and fiction by four in the afternoon, because viewings move.

What is needed is thinner than people assume: the address, the time, the applicant, and the time the member of staff is due to be clear. The value is entirely in the last item, because it is what turns silence into a signal. Without an expected-back time, nobody can tell the difference between a viewing that is running long and a viewing that has gone wrong, and in practice the benefit of the doubt runs until the end of the day.

What the technology actually needs to do

Three things, and they map onto the three ways a viewing goes wrong.

A timed check-in for the appointment. The member of staff starts a task for the viewing with an expected duration. If they do not close it in time, the alarm escalates automatically with their location — to a duty manager, a named colleague, or a monitoring arrangement out of hours. This is the control that covers the case where the member of staff cannot raise an alarm themselves, which is the case that matters most. Nobody has to remember to check on anybody.

A discreet SOS. The requirement here is the same one that applies in retail: the alarm cannot be something you have to explain to the person standing next to you. An action on a phone or a watch that summons help without announcing it is the difference between help arriving and the situation escalating. A visible panic button in an empty house is worse than none.

Automatic fall and no-movement detection, for the case where the person is unable to act at all. With a cancellable countdown, so a phone dropped on a tiled hallway floor does not generate a false alarm and train everyone to ignore the next one.

Alongside those, location attached to every alert matters more in this sector than in most. The member of staff may be at the fourth address of the afternoon and a duty manager may not know which. An alert that carries a precise location, including a three-word reference for somewhere hard to describe, removes the worst five minutes of any response.

The part that is culture rather than system

Every agency we have worked with that got this right did one thing that no software provides: it made walking away explicitly acceptable.

A junior negotiator will not abandon a viewing with a potential buyer if they believe it will be held against them, and they will talk themselves out of a bad feeling rather than act on it. That is the mechanism by which good controls get bypassed. It has to be said, in writing and then repeatedly in person, that ending a viewing early because someone felt uncomfortable is a correct decision that will be supported, with no explanation required and no consequence for the pipeline.

Two practical habits are worth training alongside it. Let the applicant enter rooms first rather than leading them in, and stay nearest the door. And do the viewing in an order that keeps you between the applicant and the exit rather than ending up in a loft or a cellar ahead of them.

Out of hours is where systems fail

A control that only works while the office is open is not a control for this sector, because a large share of viewings happen when it is shut. An escalation chain that routes to an office phone at seven in the evening is a chain that ends.

So the question to settle is simply who receives an escalation at eight on a Saturday, and what they do. It may be a rota of managers, a single on-call number, or a monitored arrangement. What it cannot be is unassigned, because an unassigned escalation is the same as no system at all. Test it before you rely on it: trigger an overdue check-in on a Saturday evening and find out what actually happens.

What to do this month

Write down the identity details you require before booking an accompanied viewing, and make it a rule rather than a preference. Add an expected-back time to every viewing in the diary. Decide who receives an overdue alert in the evening and at weekends, and tell them. Put check-ins and a discreet SOS in the hands of anyone who attends viewings alone. Then say clearly, in a team meeting, that leaving a viewing is always the right call if someone feels wrong about it.

None of that is expensive and none of it slows the business down. The viewing is the most exposed hour in the week for the people who work for you, and it is entirely manageable once somebody decides to manage it.

Frequently asked questions

Are estate agents legally required to protect staff at viewings?
An employer's general duty under health and safety law extends to lone working, which includes accompanied viewings — the obligation is to assess the risk and put reasonable controls in place. There is no separate statute naming estate agency, which is part of why the sector often overlooks it. A risk assessment covering viewings, out-of-hours appointments and lone travel between properties is the baseline, and it should name the controls you actually operate rather than describing an aspiration.
What is the single most effective control for viewing safety?
Registering and verifying the applicant before the appointment is booked, rather than meeting an unknown person at the door. It costs almost nothing, it fits alongside identity checks agencies already carry out for other reasons, and it removes the condition that makes a viewing genuinely exposed — being alone in an empty building with someone whose identity nobody has established.
How does a timed check-in work for a viewing?
The member of staff starts a task for the appointment with an expected duration and location. If they do not close it in time, the alarm escalates automatically with their location to whoever is on duty. The point is that it protects the person who cannot raise an alarm themselves — nobody has to notice that somebody is late, and the member of staff does not have to open an app during an incident.
What should happen to an alert raised outside office hours?
It has to reach a named person who is genuinely contactable and knows what to do, whether that is a rota of managers, a single on-call number or a monitored arrangement. A large share of viewings happen when the office is closed, so an escalation chain that routes to an office phone is no chain at all. Test it on a weekend evening before you depend on it.
Should staff be told they can abandon a viewing?
Yes, explicitly and in writing, and then repeatedly in person. A junior member of staff who believes that leaving a viewing will count against them will override their own judgement, which is how good procedures get bypassed. Ending a viewing because someone felt uncomfortable should require no explanation and carry no consequence.

Related articles

Last updated 2026-10-31

Ready to see it on your data?

Self-serve the live demo or book a 30-minute call with our team.