← Field notes

If You Cannot Walk Away From a Supplier, You Do Not Own Your Website

Jon DelcaroJuly 22, 20264 min read

Five things decide whether your website is yours: the domain, the DNS, the code, the content, and the history. Most small businesses hold two of them.

Ask one question about your website. If your current supplier disappeared tomorrow, can you take everything and continue somewhere else?

For most small businesses the honest answer is no. Not because anyone acted badly, but because nobody ever checked.

Five things decide it.

1. The domain

The domain is the name. Everything else attaches to it, including your email.

Four things must be true:

  • The domain is registered in your business name
  • The account is one you can log in to yourself
  • Your email address is on the account
  • Two-factor authentication is turned on

Test it now. Log in to your registrar without asking anyone for the password. If you cannot, you do not control your own name, and every other item on this list is moot.

2. The DNS

DNS is the settings that decide where your name points: which server serves the website, and which service delivers the email.

This is the quietest failure point in the whole list. A supplier who controls your DNS controls where your customers land and where your mail goes. I have seen a website move take down a business's email for a day because the mail records lived somewhere nobody thought to check.

Get a copy of your current DNS records. Keep it somewhere outside the supplier's system.

3. The code

Your website is a set of files. You must be able to receive them.

Ask your developer for the repository, or for a copy of the site files. A reasonable developer says yes without hesitation. If the answer is that the site cannot be exported because it only runs on their platform, that is not a technical limitation. It is the business model.

This is the main hidden cost of website builders. On Wix, Squarespace, or a similar platform, the design and the code are not portable. You are renting the whole thing, and the rent never ends.

I know this one from the inside. This blog used to live on Wix. Getting the posts out meant calling the platform's own API and rebuilding the content from its internal format. The writing was mine. The way it was stored was not.

4. The content and the database

Your pages, images, posts, products, bookings, and customer records are your business records.

You must be able to export them in a format that opens somewhere else. Do it at least once. An export you have never tested is not a backup. It is a belief.

For any site with a database, ask two questions. Where does the data live, and can I get a copy of it today?

5. The history

This is the one that gets forgotten, and it is the most expensive to recreate.

Your analytics history, your Google Search Console record, and your search rankings are years of accumulated evidence about how people find you. A careless rebuild resets all of it. You then cannot tell whether the new site is better or worse than the old one.

We moved the Minds of Madness podcast to a new site and a new web address. We carried the existing analytics across instead of starting fresh. That single decision is the only reason we can prove traffic held steady through the move.

Search history is also portable, if the redirects are done properly. Every old address must point at its new home. Skip that step and years of ranking disappears in a week.

Why this matters more now

Platforms change their terms. Payment processors ban whole categories of business. Software governance ends up in court. Prices rise on renewal, and the switching cost is exactly what you failed to check when you signed up.

None of that is a reason for alarm. It is a reason to hold the five things above, so that any single supplier is replaceable rather than load-bearing.

The point is not to distrust your suppliers. I am a supplier. The point is that a business must be able to change its mind.

The audit, in fifteen minutes

  • Log in to your registrar yourself. Confirm the business name, the email, two-factor authentication, auto-renew, and transfer lock.
  • Save a copy of your DNS records.
  • Ask your developer for the site files or repository access, and store them.
  • Export your content and your customer data, and open the export to check it is real.
  • Confirm your analytics and Search Console properties are owned by your business account, with your developer added as a user, not the other way around.

That last detail catches more businesses than any other. If your analytics is owned by an agency account with you added as a guest, the history is theirs.

I hand over all five with every site I build. The domain stays in your name. The code, the database, and the back end are yours to run.

If you want me to check where you stand, send me your web address. jon@delcaromedia.com

Want this done properly on your site?

Ready to take your business to the next level with a custom digital solution?

Request a free consultation