The Software That Catches Illegal Airbnbs: Inside the AI Tools Cities Are Using to Enforce STR Laws

Manatee County, Florida had a problem. Nearly 10,000 short-term rental listings were active in the county, but the tax collector’s office had no reliable way to know which ones were paying the required tourist development tax. Staff were drowning in spreadsheets. Complaints came in faster than investigators could respond. The math was ugly: thousands of properties, a handful of code enforcement officers, and a growing revenue gap that funded beach renourishment and tourism marketing.

So the county contracted with Harmari, an STR compliance platform that uses AI-powered image recognition and web scraping to identify every active listing in a jurisdiction. Within months, Harmari had identified more than 350 unregistered taxpayers. The county recovered over $250,000 in unpaid tourist tax. Compliance among tracked listings reached 97%.

Three numbers. One software contract. That is the new math of STR enforcement in 2026.

The Industry You Did Not Know Existed

A cottage industry of compliance technology companies has quietly grown alongside the explosion of short-term rental regulations across America. These are not the platforms hosts use to list properties. They are the platforms cities use to find hosts who are not following the rules.

The biggest name in the space is Granicus, which acquired the compliance startup Host Compliance in 2019. At the time of acquisition, Host Compliance served about 300 North American cities and counties. By 2024, according to the company’s own benchmark report, that number had grown to more than 500 cities, counties, tourist boards, and associations. Client cities include Denver, Nashville, Austin, Las Vegas, Charleston, San Antonio, and Orlando.

Granicus is not alone. Harmari, now owned by Avenu Insights and Analytics, crawls more than 80 STR listing websites and uses patent-pending AI to match property images across platforms. Deckard Technologies, which markets its product as Rentalscape, monitors over 15 million listings from more than 10,000 rental websites and claims more than 400 jurisdictions as clients worldwide. LODGINGRevs, founded in 2011 by a former Colorado municipal finance director, specializes in resort communities and counts Hawaii County and Killington, Vermont among its clients. GovOS and Azora round out the field with registration portals and hotline services.

This is a competitive market. These companies are actively pitching small towns and big cities alike, and the pitch is straightforward: our software will find the listings you are missing and pay for itself many times over.

How the Software Actually Works

The core technology behind STR enforcement platforms follows a consistent pattern, regardless of the vendor.

First, the platform scrapes listing data. Automated crawlers scan Airbnb, Vrbo, Booking.com, and dozens of smaller listing sites on a recurring basis (daily or multiple times per week). They capture listing URLs, photos, descriptions, host names, pricing, and availability calendars. Granicus claims to scrape more than 70 websites. Harmari says it hits 80. Avenu Insights monitors over 100, four times per week.

Second, the software identifies the physical property behind each listing. Most platforms do not show exact addresses until after booking. Compliance tools use geocoding, image analysis, property record matching, and sometimes satellite imagery to connect a listing to a specific parcel. Harmari’s patent-pending system classifies images by scene type, then matches them across platforms to link multiple listings to the same property.

Third, identified properties get cross-referenced against the city’s permit, license, and tax registration databases. Any listing without an active permit gets flagged.

Fourth, enforcement letters go out. Granicus allows city staff to send violation notices “at the click of a button,” under the city’s own letterhead, with time-stamped screenshots attached as court-defensible evidence.

Several vendors also operate 24/7 complaint hotlines staffed by trained operators who handle noise, parking, and safety complaints from neighbors in real time. When a call comes in at 2 a.m. about a party next door, the hotline team contacts the property manager directly. Harmari claims this approach saves up to 50% of police resources.

What the Numbers Show in Cities That Use This Technology

The results vary dramatically depending on how aggressively a city enforces its own rules. The technology is only as useful as the political will behind it.

Nashville is the headline case for revenue recovery. After implementing Granicus Host Compliance, the city’s finance department collected $2.8 million more in STR tax revenue in its first year. Granicus markets this as “at least ten times the annual cost of the software,” which implies Nashville pays somewhere in the low six figures annually for the service.

Denver takes compliance seriously enough to pursue criminal charges. The city uses third-party monitoring software to scan more than 25 online booking platforms for listings without valid license numbers. Annual license audits cross-reference primary residence documentation. An estimated 90% of Denver listings are now properly licensed. Hosts who falsely claim primary residence face felony fraud charges under Colorado law, carrying potential prison sentences of up to six years and fines up to $500,000.

Summit County, Utah tells a more typical story. After contracting with Azora, a compliance software vendor, the county’s code enforcement officer contacted approximately 800 unlicensed unit owners over three months. About 350 properties either applied for business licenses or stopped renting. Roughly 450 still needed formal enforcement action. Progress, but not a clean sweep.

New Orleans took a different path entirely. Rather than relying primarily on third-party software, the city passed an ordinance requiring Airbnb and Vrbo themselves to verify that listings hold valid permits before allowing bookings. In August 2025, more than 1,000 unlicensed listings were removed from Airbnb in a single enforcement sweep. Listings in the Garden District dropped by roughly 40%. Data from early 2025 showed that only about 1,350 of the city’s 7,000+ active listings held valid licenses.

StaySTRA’s recent analysis of which cities actually enforce their STR laws found that enforcement intensity varies wildly even among cities with identical rules on the books. Technology closes the detection gap, but only when paired with political commitment to follow through on the violations it uncovers.

What It Costs Cities (and Who Pays)

Public records from several municipalities reveal what cities pay for this software.

Small communities pay on the lower end. Great Barrington, Massachusetts was quoted roughly $10,000 per year. Missoula, Montana paid $12,000 annually for its Granicus subscription. Cottonwood Heights, Utah’s estimated annual license came in around $22,600, with a discount after the state purchased an address-verification module.

Larger cities pay considerably more. Nashville’s implied cost (based on Granicus’s own “ten times ROI” marketing) puts the annual contract somewhere in the low six figures. The exact number is not publicly disclosed.

Every vendor pitches the same value proposition: the software pays for itself through recovered tax revenue, permit fees, and fine income. Granicus claims a 5x to 20x return on investment. Nashville’s $2.8 million in additional tax revenue suggests the ROI argument holds in cities that actually use the data.

The Limits of Enforcement Technology

These tools are powerful, but they are not perfect. Experienced operators know the vulnerabilities.

Address obfuscation is the most common evasion tactic. Hosts who remove identifying landmarks from listing photos, use vague location descriptions, and decline to show exterior shots make it harder for image-matching algorithms to pin a listing to a specific property. Some hosts rotate between platforms, taking a listing down on Airbnb and relisting on a smaller site that compliance software may not monitor as aggressively.

Direct booking websites are a growing blind spot. A host who builds their own booking site and markets through social media or repeat guests bypasses platform-based scraping entirely. The compliance software cannot find what is not listed on a searchable marketplace.

False positives create friction too. Homeowners who rent for 30+ days sometimes get flagged. Properties with recently issued permits that have not yet been updated in the city’s database generate unnecessary enforcement letters.

Portland’s experience is a cautionary tale. The city’s ombudsman reviewed more than 400 STR enforcement actions over two years and found that Portland’s first-offense fine of $27,513 was at least 27 times higher than any comparable city. Several operators faced fines exceeding $100,000. Some sold their properties. The city eventually dismissed roughly $365,000 in fines after the ombudsman’s March 2026 report. The technology identified violations efficiently. The policy behind it caused real harm.

What SB 346 Changes for 2026

California’s Senate Bill 346, the Short-Term Rental Facilitator Act, took effect January 1, 2026. It gives every city in California the legal authority to compel Airbnb, Vrbo, and other platforms to hand over property addresses, assessor parcel numbers, listing URLs, and host identity information on demand. Platforms that refuse face fines of up to $10,000 per day.

This changes the enforcement equation. Before SB 346, compliance software vendors did the detective work of matching listings to properties because platforms would not share that data voluntarily. Now, in California, cities can get the data directly from the source. That does not make compliance software irrelevant (cities still need systems to manage permits and track violations), but it shifts the landscape. The matching algorithms that vendors spent years developing become less critical when Airbnb is legally required to tell you exactly which property is behind a listing.

Other states are watching. The broader regulatory trend in 2026 points toward more transparency mandates, not fewer. As more states follow California’s lead, the value proposition of compliance software may shift from “we find what platforms hide” to “we help you manage the data platforms are now required to share.”

What This Means If You Are a Host

If you operate a short-term rental in a city that requires permits or licenses, the question is not whether your city will eventually find out. It is when. The detection window for unlicensed operators is shrinking every year as more cities adopt automated monitoring.

The practical implications are straightforward. Get licensed if your city requires it. Display your permit number on every listing. Pay the required taxes. These are not suggestions in markets that use compliance software. The AI does not care about your excuse. It cares about whether your listing can be matched to a valid permit number in the city’s database.

If you are an investor evaluating a new market, the enforcement technology landscape is now part of your due diligence. A city with a Granicus or Harmari contract and a dedicated enforcement budget is a different operating environment than a city with an ordinance and no resources to back it up. Enforcement actually benefits compliant hosts: when unlicensed operators get removed, legal operators face less competition. StaySTRA’s STR market analyzer can help you evaluate the regulatory landscape alongside the revenue data before you commit capital.

We do our best to keep our reporting accurate and up to date, but situations evolve and we are only human. Always verify current details directly with local officials and sources before making decisions.

Evaluate Your Market Before You Invest

Understanding whether a city enforces its STR rules (and how aggressively) is critical intelligence for any investor. StaySTRA’s STR market analyzer gives you the revenue data, occupancy trends, and regulatory context you need to evaluate any market before you commit. Run the numbers before the compliance software runs them for you.