In an estate agency, AI pays off in four tasks: replying instantly to enquiries from property portals and passing them to an agent, drafting property listings from your data, filing the documents for each deal and preparing follow-ups. Always with an agent reviewing. What you publish must be truthful and carry the energy rating label, and you need permission to email people other properties.
Where AI helps in an agency
An agency handles a lot of text that arrives in a mess: portal enquiries, notes from a valuation visit, the owner's documents, messages from buyers. AI reads that text, puts it in order and prepares drafts. The agent decides.
| Task | What AI does | What the agent does | If it fails |
|---|---|---|---|
| Portal enquiries | Replies instantly, asks the basics and suggests viewing times | Takes over the contact as soon as they can | A made-up detail, if it is not limited to the listing |
| Winning instructions | Turns your notes into a draft listing and a document checklist | Reviews it and requests the documents | A detail copied wrongly |
| Property listings | Writes the description from the data you give it | Checks every detail before publishing | Misleading advertising |
| Documents | Files each document under its deal and flags what is missing | Reviews what the system does not recognise | A document in the wrong folder |
| Follow-ups | Reminds you who to call and drafts the message | Sends it or approves sending | A message to someone who did not agree to it |
1. Replying fast to portal enquiries, with handover to an agent
When an enquiry comes in from a portal, the system can read it and reply within minutes, outside office hours too. A good first reply does three things:
- Confirms the property they are asking about, with its reference.
- Asks the basics: whether they want to buy or rent, whether they need a mortgage, when they could view it.
- Offers two or three viewing slots taken from the agent's real diary.
Then it hands the contact to a person. And it does so straight away if an offer comes up, a question about the price or negotiation, a legal question or a complaint.
The AI should only answer with what is in the listing. If it is not there, it replies that an agent will confirm. Spain's Housing Law gives anyone interested in buying or renting the right to ask, before signing and before handing over any money, for information such as the usable and built floor area, the energy performance certificate, the occupancy status or any charges on the property, on a durable medium (Law 12/2023 on the right to housing, art. 31). That information comes from your documents, never from what the model thinks it remembers. Language models can generate incorrect text, and the techniques to prevent it do not remove it entirely (Anthropic).
Say that it is an automated assistant. Since 2 August 2026, the EU AI Act requires that anyone interacting with an AI system knows it, unless it is obvious (Regulation (EU) 2024/1689, art. 50.1; dates in the Commission's timeline). The obligation falls on the provider of the system, but the regulation calls a provider anyone who has a system developed and puts it into service under their own name or trademark (art. 3.3).
If you reply on WhatsApp, its business policy requires that the person has given you their number and permission to receive your messages. If you automate replies, you must also offer clear, direct ways to reach a person (WhatsApp Business Messaging Policy).
2. Winning instructions: from your notes to the listing and the document checklist
After the visit to the owner, dictate or type your notes: square metres, bedrooms, condition, orientation, extras, what they told you about the building. AI turns them into two things:
- A draft listing, with the fields in your software filled in and the missing ones flagged.
- The list of documents to request from the owner. Article 31 of Law 12/2023 is a useful guide, because it is what the buyer or tenant can ask you for: the habitability certificate (cédula de habitabilidad), proof of the usable and built floor area, the age of the building and any refurbishments, the energy performance certificate, accessibility conditions, occupancy status, the Land Registry identification with any charges, and the participation share in the building.
If the property is for long-term residential letting in an area declared a stressed residential market (zona de mercado residencial tensionado), this must be stated, and you add to the list the rent from the last main-residence lease in force in the past five years and the value that applies under the official rent reference index. Both must be disclosed before signing and, in any case, in the contract itself (art. 31.3).
What is best not to automate when winning instructions is mass contact. If you write in bulk by email, or by any equivalent electronic means, to private sellers advertising their flat to offer them your services, Article 21 of the LSSI (Spain's law on information society services and e-commerce) bans sending commercial communications the recipient has not requested or expressly authorised (Law 34/2002, art. 21).
3. Property listings: AI writes, the agent reviews
From the listing data and your notes, AI writes a clear description, and in other languages too if you need them (English, Dutch or German for buyers on the Costa Blanca, for example). The agent checks every detail against the documents before publishing. This is not a formality: the law requires the information given by those selling or letting housing, advertising included, to be complete, objective, truthful, clear, understandable and accessible, and it bans advertising with insufficient, deficient or misleading information (Law 12/2023, art. 30). The same law treats as deficient any information that leaves out essential details or presents them in a way that may mislead.
Always check these four things:
- The energy rating label. It must appear in every offer, promotion and advert for sale or rent, and must state whether it refers to the project certificate, the completed building certificate or the existing building certificate (Royal Decree 390/2021, art. 15.2).
- Floor areas. The description must not round them or mix up usable and built area.
- Adjectives. "Bright", "refurbished" or "a stone's throw from the sea" have to be true. If the model adds them on its own, take them out.
- Images edited with AI. The EU regulation uses the term "deep fake" for image, audio or video content generated or manipulated by AI that resembles real people, objects, places or events and could falsely appear to be authentic (art. 3.60). Whoever publishes it must disclose that it is artificial (art. 50.4). A virtually furnished flat may fit that definition. Label it "recreated image" and always keep the real photos.
Also check each portal's publishing terms before you automate anything on them.
4. The documents for each deal, where they belong
Every deal gathers documents that arrive by email, by WhatsApp or as scanned paper: the listing agreement with the owner (nota de encargo), the Land Registry extract (nota simple), the energy certificate, the property viewing form, the offer. AI can read each file, recognise what it is and suggest which deal and which folder it belongs in. With the checklist from the instruction stage in front of it, it can also tell you what is missing.
This is what we built the CRM for: each deal in a single record, with its documents organised by folder, the contacts, the reminders and the history. If you have years of scanned deeds and contracts, Archive searches them by their content with OCR on your own computer, without uploading them to the cloud.
Documents with sensitive data, such as a prospective tenant's payslips or tax returns, should not go through a general-purpose AI tool. The AEPD (Spain's data protection authority), in its own internal rules, prefers to handle personal or confidential information in systems the organisation controls (AEPD, January 2026). Keep them in private storage, with access only for those who need it.
5. Follow-ups that neither annoy nor break the rules
Not all follow-ups are the same, and the law treats them differently.
| Follow-up | Example | What you need |
|---|---|---|
| About what the person asked for | "Would you like to confirm Thursday's viewing of the flat on Calle Mayor?" | It fits within their own request (GDPR, art. 6.1.b) |
| Offering other properties by email | "We have a similar flat in the same area" | That they requested or expressly authorised it (LSSI, art. 21.1) |
| Offering similar services to a client you already have a contract with | A client who has already hired you to find a property | The exception in art. 21.2 may apply if what you offer is similar to what they contracted, with a simple, free way to opt out in every message |
| WhatsApp messages | Any | The permission WhatsApp requires, and honouring any request to stop (WhatsApp policy) |
AI can prepare the reminder for the agent ("call Laura today, she viewed the penthouse a week ago") and the draft message. For sending, the prudent approach is for the agent to approve every message or, at the very least, every template. Ask for permission to send other properties with a separate, unticked box: pre-ticked boxes do not constitute consent (GDPR, recital 32).
What is best not to automate
- Price, offers and negotiation. Those are conversations for an agent.
- Deciding which tenant is creditworthy. Assessing the creditworthiness of individuals is among the high-risk uses in Annex III of the AI Act, with obligations from 2 December 2027 (Annex III; Regulation (EU) 2026/1744). And the GDPR recognises the right not to be subject to decisions based solely on automated processing with legal or similarly significant effects (art. 22).
- Answering about charges, legal status or occupancy without the document in front of you.
- Publishing listings without review. The duty to give truthful information also falls on estate agents (Law 12/2023, art. 30.2).
- An AI agent that reads your inbox and answers everything on its own. The AEPD uses this very example for its "rule of 2": if an agent receives emails with no safeguards, has access to sensitive information and acts automatically, that is a setup that should not be allowed. An email can carry hidden instructions that the model obeys when it reads it (AEPD, agentic AI, February 2026). INCIBE (Spain's national cybersecurity institute) adds that an AI should never communicate with customers on its own about a sensitive matter (INCIBE).
Data protection: the basics for an agency
- A legal basis for replying. Answering someone who asks about a property fits under pre-contractual steps taken at that person's request (GDPR, art. 6.1.b). Using their data for anything else needs another basis.
- Inform people when you collect their data. Who you are, what you use the data for and how to exercise their rights (art. 13). If you use an assistant, say so there too.
- Only the data you need. Data must be adequate, relevant and limited to what is necessary (art. 5.1.c). Send the model the enquiry, not the client's history.
- A contract with the AI provider. It processes data on your behalf, so it is your data processor and you need a contract (art. 28).
- A business account. The AEPD's Lab reminds you that a free account is not the same as a business account with guarantees (AEPD, August 2026). On their business plans, OpenAI, Anthropic, Microsoft and Google say they do not train their models on your data by default.
- Train the team. Since 2 February 2025, anyone using AI in their business must take measures for their staff's AI literacy (Regulation (EU) 2024/1689, art. 4). The 2026 reform turned this into measures to support that training, with no set level required of each person (Regulation (EU) 2026/1744).
How to get started
- Pick one workflow. A good first one is replying to portal enquiries, with handover to an agent.
- Measure for a week. How many enquiries come in, at what time and how long you take to reply. The savings calculation with your own numbers is in how to automate business processes with AI.
- Write down the rules. What the system answers, what always goes to an agent and how it introduces itself.
- Run it in draft mode for two weeks. The system drafts and the agent sends. Note every error.
- Decide with data. If it gets things right, let it send only the first reply on its own, always with the handover to an agent clearly visible.
If you would rather we built it, we are based in Alicante and work with agencies across Spain: we design and build automations and AI agents connected to the tools you already use, with a free 2 to 5 day assessment and a fixed price. A first AI product (MVP) falls in our published range of €4,000 to €12,000 ex VAT, a typical automation is up and running in 2 to 4 weeks, and the data is hosted in the EU. You will find more examples under automation for estate agents and AI solutions.
Sources
- Law 12/2023 of 24 May on the right to housing (in Spanish), arts. 30 and 31.
- Royal Decree 390/2021, basic procedure for certifying the energy performance of buildings (in Spanish), art. 15.
- Law 34/2002 on information society services and e-commerce (LSSI, in Spanish), art. 21.
- Regulation (EU) 2016/679 (GDPR), recital 32 and arts. 5, 6, 13, 22 and 28.
- AEPD, Basic summary of obligations and recommendations for managing generative AI at the AEPD, January 2026 (in Spanish).
- Regulation (EU) 2024/1689, the Artificial Intelligence Act, arts. 3, 4 and 50.
- Regulation (EU) 2026/1744 (digital omnibus on AI).
- European Commission, AI Act application timeline.
- European Commission, AI Act Service Desk, Annex III.
- AEPD, Agentic artificial intelligence from a data protection perspective, v1.2, February 2026 (in Spanish).
- AEPD Lab, "Prompts, personal data and confidentiality", 25 August 2026 (in Spanish).
- INCIBE, "The human factor in cybersecurity for SMEs and the self-employed", 3 September 2026 (in Spanish).
- WhatsApp Business Messaging Policy.
- Anthropic, "Reduce hallucinations".
- Anthropic Privacy Center, is my data used for model training?.
- OpenAI, "Data controls in the OpenAI platform".
- Microsoft Learn, "Data, Privacy, and Security for Microsoft Copilot".
- Google Workspace, Generative AI Privacy Hub.