All posts
Web design & development

Website Design Deliverables Checklist: What You Should Own at Handover

A website handover checklist for founders: the domains, CMS seats, Figma files, analytics properties and passwords you must own before an agency project closes.

By Mehdi Hassan7 min read

The short answer

A website handover checklist lists everything you should own when a website project ends: the domain and DNS, hosting and CMS accounts, the code repository, Figma design files, analytics and tag manager properties, form and email integrations, brand assets, and documentation. Each item should sit in an account your company controls, with admin access for at least two people.

Key takeaways

  • Ownership means the account is in your company's name, not shared logins to the agency's account.
  • Domains and DNS come first: losing them can take the whole site and your email offline.
  • Ask for Figma source files and the code repository, not just exported images and a live URL.
  • Analytics and tag manager need you as admin, or your historical data leaves with the agency.
  • Put every credential in a shared password vault with two admins. Never accept passwords by email.

Part of Website Design and Development for Startups: The Complete Guide

Most founders discover handover problems months after launch, when the agency has moved on and someone needs to renew a domain, edit a form or check last year's traffic. By then the account is in a former freelancer's name and the recovery email goes nowhere. This checklist covers what you should own and how to verify it before the final invoice. It's part of our guide to website design and development for startups.

What is a website handover checklist?

A website handover checklist is the list of accounts, files and documents a client should receive and verify at the end of a website project. Its purpose is simple: after handover, you can run, change or move the site without the people who built it.

Handover covers three kinds of things. Accounts are the services the site runs on, like domain registrar, hosting, CMS and analytics. Files are what was created, like design source, code and brand assets. Knowledge is how it all fits together: documentation, training and a list of where everything lives. Missing any of the three leaves you dependent on the agency, whether they intended that or not.

Which website deliverables should you own at handover?

You should own every account the site depends on and every source file that was created for it. The table below lists the items, who should own them and how to check.

Item

Who should own it

How to verify

Domain registrar

Your company account

Log in yourself and see the domain listed

DNS

Your company account

You can view and edit the records

Hosting

Your company account, billed to you

You receive the invoice

CMS

Your company as owner, with seats for your team

You can invite and remove users

Code repository

Your company's organization

You can see the full commit history

Figma files

Your company's team or project

You can open, duplicate and edit them

Analytics and tag manager

Your company as admin

You can add users and see all data

Forms, email and CRM links

Your company accounts

A test submission reaches your inbox or CRM

The rule is consistent: the agency gets access to your accounts during the project and loses it afterwards. Not the other way round. Our website ownership checklist goes deeper on domain, hosting and code ownership specifically.

How do you run a website project handover step by step?

Run the handover as a short, scheduled session before the final payment, with a written list the agency signs off. Then verify every item yourself afterwards.

  1. Agree the list at kickoff

    Put the handover list in the scope so it isn't a surprise at the end. Most good agencies already have one; compare it to the table above.

  2. Transfer accounts, don't share them

    Ownership moves to your company's accounts. Shared logins to the agency's account don't count.

  3. Move credentials into a vault

    Every password goes into a shared password manager your company controls, with at least two admins.

  4. Receive the source files

    Figma files moved into your team, code in your repository, and brand assets in a shared drive. For logos, use our list of logo files every designer should hand over.

  5. Get the documentation

    A short guide to how the site is built, how to edit each content type, and where integrations connect.

  6. Hold the training session

    Record a walkthrough of the CMS so new hires can watch it later.

  7. Verify every item yourself

    Log in to each account, run a test form submission, open the Figma file and check the analytics data. Then pay the final invoice.

What should you get from a web designer besides the live site?

Besides the live site, you should get the design source files, a component library, brand assets and the decisions behind them. Without these, the next designer starts from screenshots.

  • Figma files with pages, components and styles organized and named, not just a flat export.
  • A component library showing every block used on the site, so new pages reuse it.
  • Brand assets: logo files in every format, colors, fonts with licenses, icons and illustrations. Our brand identity checklist lists what a branding project should include.
  • Copy source: the final copy doc, so edits start from the approved words.
  • Font and image licenses in your company's name, especially for paid fonts and stock photos.

If the brand was created alongside the site, ask how it was applied to the web, which we cover in translating a brand identity into web design.

What happens to tracking and analytics at handover?

Tracking and analytics should already be in your company's accounts, with the agency as a removable user. If the agency created them in its own account, your historical data is at risk when they leave.

Ask for a written tracking plan too: which events are tracked, what they're named, and where they're sent. Without one, the next person to touch the site may break conversion tracking without realizing it. Our website tracking plan template gives a format you can adopt. Confirm that consent settings are working before handover, because misconfigured consent can quietly drop conversion data.

Hypothetical example: what a missed handover costs later

For example, suppose a startup's first site was built by a freelancer who registered the domain in their own registrar account. Two years later, the startup wants a redesign. The freelancer is unreachable, the domain is set to auto-renew on an expired card, and the analytics property is in their personal account.

The new project now starts with a recovery effort: proving ownership to the registrar, recreating analytics with no history, and rebuilding the design from screenshots. None of it is difficult if handled at the original handover. All of it is slow and stressful when handled two years later.

What should happen after the handover?

After the handover, assign an internal owner for the site and set a simple maintenance routine. The handover gives you control; someone still has to use it.

Remove the agency's access from any account they no longer need, update the recovery email and phone on the domain registrar, and calendar the domain renewal date. Then follow a routine like our website maintenance checklist. When it's time for a bigger change, a clean handover makes the next project start faster, as our website redesign checklist shows. If you're still choosing an agency, ask to see their handover document upfront, and if they quote a fixed-price project, check that it comes with a written scope you can hold them to.

Frequently asked questions

Who should own the website domain, the agency or the client?
The client, always. The domain should be registered in your company's own registrar account, with your billing details and a recovery email you control. An agency can manage DNS with delegated access during the project. If an agency insists on holding your domain, treat that as a warning sign and ask for it to be transferred before work begins.
Do I own the code and design files after paying an agency?
Usually, but check the contract. Most agency agreements transfer ownership of the deliverables once the final invoice is paid, sometimes excluding the agency's reusable tools or third-party licenses. Make sure the contract says you own the designs and code, and that you receive the actual source files, not just the right to use the live site.
What if my previous agency won't hand over access?
Start with the domain, because it controls everything else. Contact the registrar with proof of business ownership and request a transfer. Recreate analytics in your own account if needed, accepting the loss of history. For the CMS and hosting, check whether the accounts were billed to you, which strengthens your claim. Get legal advice if the contract is disputed.
How should passwords be shared at handover?
Through a shared password manager controlled by your company, never by email, chat or a spreadsheet. Ideally, the agency never knew your passwords at all: they were invited as users to your accounts and are simply removed at the end. Change any password that was shared during the project once the handover is complete.
Should handover include training for my team?
Yes. A short, recorded walkthrough of the CMS covering how to edit pages, publish posts, update images and change forms saves many support requests. Ask for it in the scope. Record it, because the person who attends the training is rarely the only person who will ever edit the site.

· CEO & Design Director

Copywriter, designer and developer, and founder of Designify Studio. Over five years, 60+ projects across 14+ industries, for startups that have raised $300M+.

Want this done for you? Website, $8,000.

A multi-page marketing site, designed by us, developed in Next.js and animated. $8,000, one-time, up to 6 pages. Book a free 30-minute call to see if it fits.

Schedule Call