A shopping mall and a bank have more in common than either likes to admit. Both collect steady cash flow from a portfolio of counterparties. Both quietly hope no single counterparty is holding up the whole structure. And both, historically, have found out the hard way — after the tenant vacates or the depositor pulls their float — exactly how concentrated they'd become.
A REIT is, functionally, a bank that collects rent instead of interest. It takes in steady payments from a portfolio of counterparties, reports a healthy headline number, and hopes the underlying mix never gets tested. The headline number for a REIT is occupancy. And occupancy is a dangerously comfortable metric, because a building can be 95% occupied and still be one tenant away from a rental income collapse — if that one tenant happens to hold a third of the lettable space.
The Business Challenge
Boards look at occupancy rate, weighted average lease expiry, and gross rental income, and reasonably conclude the portfolio is healthy. None of those three numbers, on their own, answer the question that actually matters in a downturn: who blinks if this one tenant leaves? A mall can be full and still fragile, the same way a bank's book can look diversified on paper while a handful of depositors quietly fund half its balance sheet.
We've built this exact check before — for banks, not malls. The concentration engine behind our banking work (visible on our homepage as portfolio_concentration_check --top=20) ranks depositors by exposure, flags when too much of the book sits with too few counterparties, and turns that into a board-ready alert. Nothing about that logic is bank-specific. Point the same engine at a rent roll instead of a deposit ledger, and it answers the identical question for a REIT.
What Concentration Risk Analysis Actually Does
Picture the property's income statement as a see-saw held up by ten tenants. If two of those tenants are twice the size of the other eight combined, the see-saw doesn't wobble when a small tenant steps off. It collapses when one of the big two does. Concentration analysis is just the discipline of finding out, in advance, which tenants are the big two — before the see-saw tells you the hard way.
Mechanically, it's a ranking exercise: sort tenants by their share of gross rental income, take a running cumulative total, and flag the point where a small number of tenants account for a disproportionate share of revenue. Banks use a rule of thumb for depositor concentration; REITs need the same discipline applied to two dimensions at once — income concentration and lease-expiry concentration, because a portfolio can be well-diversified by tenant and still fragile if half those leases happen to expire in the same eighteen-month window.
The Data a REIT Already Has
None of this requires new instrumentation. A REIT's property management system already holds the rent roll: tenant name, gross lettable area, monthly rental income, sector classification, lease start and expiry date, and payment or arrears history. That's bronze data — raw, scattered across buildings and possibly across property managers who name things differently. Silver is standardising it into one clean rent roll across the whole portfolio. Gold is where it becomes a board input: tenant-level exposure ranked and scored, lease-expiry buckets flagged, arrears trends layered on top of both.
A Worked Example
The version of this we've shipped ranks the top 20 counterparties in a book, builds an exposure heatmap, and raises an alert wherever concentration crosses a set threshold — three alerts, on the run shown on our homepage, each one turned into a line in a board deck rather than a number buried in an appendix. For a REIT, the inputs change — tenants instead of depositors, gross rental income instead of deposit balances, lease expiry instead of account tenure — but the output a board actually needs is the same: not "are we diversified," but "which specific counterparties, if they left tomorrow, would we need a plan for."
How to Start, If You're a REIT Reading This
You don't need a data science team to begin — you need your rent roll in one place and two rankings run against it: tenants by share of gross rental income, and tenants by share of lettable area, because the two rarely agree and the gap between them is informative on its own. Set a threshold — most banks work off "no single counterparty above X% of the book," and there's no reason a REIT board shouldn't adopt the same discipline for its ten largest tenants. Then layer in lease-expiry clustering, because a well-diversified income statement can still walk itself into a renewal cliff eighteen months out.
Every rent roll has a story to tell about which tenants are quietly holding the building up. Most boards are still reading the occupancy rate instead.