Give every tenant a private, password-protected portal. They sign in to see only their own bills — never anyone else's.
Each tenant's data is walled off. Even with a guessed link, no one can open a bill that is not theirs.