Website Ownership Checklist for Indian Businesses (Before You Pay Your Developer)
Domain, hosting, Git, copyright, and AMC clauses—complete 2026 checklist before you sign or pay a web developer in India. Avoid vendor lock-in.
DigitalXBrand Team
Web Development
Priya's coaching institute in Bengaluru paid ₹1.2 lakh for a 'complete website package' in early 2025. The site looked professional. Leads came in. Then she wanted to switch agencies for SEO—and discovered the domain was registered under the developer's personal Gmail, hosting sat on his Hostinger account, and there was no Git repository. The developer quoted ₹45,000 to 'transfer ownership.' Priya had already paid for the website. She thought she owned it.
If you are searching for a website ownership checklist India before hiring a developer, you are asking the right question at the right time. This 2026 guide is a practical pre-purchase playbook: what you must control before signing, what to verify at each payment milestone, platform-specific ownership for WordPress vs Next.js vs Shopify, AMC contract clauses that prevent lock-in, and red flags that predict a painful handoff later.
⚠ Paying does not mean owning
Under India's Copyright Act, the developer who writes your code owns it by default unless a valid written assignment transfers rights to you. A generic invoice line saying 'all rights belong to client' is often not enough. Ownership of digital assets and legal ownership of IP are separate problems—solve both before the final payment.
The cheapest website is the one you can leave anytime without begging for your own domain.
- Pre-signing ownership checklist (domain, hosting, code, analytics, data)
- Milestone payment map—what access you should have at 30%, 60%, and 100%
- WordPress vs Next.js vs Shopify: what 'portable' looks like on each stack
- AMC contract clauses that protect ownership on renewal
- 12 red flags agencies use to create dependency
- 15 FAQs for Google and AI search
Hiring a developer soon?
DigitalXBrand builds on your domain, your hosting, and your Git repo from day one—with a written handoff and transparent AMC. No lock-in.
Why Website Ownership Matters Before You Pay
Indian SMBs often evaluate developers on design quality and price. Ownership rarely appears in the first WhatsApp conversation. That works until you need to change vendors, renew hosting in your name, recover from a developer who disappeared, or sell the business and transfer digital assets.
The companies that avoid ₹50,000–₹2,00,000 recovery bills treat the website as a business asset from contract stage—not as a service subscription disguised as a one-time build. If your developer already left and you are in crisis mode, start with our guide on who maintains website after developer leaves India instead of this checklist.
📈 Prevention vs rescue
Spending two hours on ownership checks before signing saves two to eight weeks of access recovery later. The checklist below is designed to complete in one sitting with your developer on a video call.
Website Ownership Checklist India (Before You Sign)
Run this checklist before you transfer the first rupee. Ask your developer to screen-share each item live. Anything they cannot demonstrate today is a risk you accept in writing—or a reason to choose another vendor.
Domain and DNS
- Domain will be registered in your company name (or your personal name if sole proprietor)—not the agency's
- You receive registrar login credentials (GoDaddy, Namecheap, BigRock, Cloudflare, etc.)
- You can see WHOIS registrant details matching your business before launch
- DNS records are documented; you know which nameservers point where
- Auto-renewal is enabled on your card, not the developer's
- Transfer lock can be removed when you request an auth/EPP code
Hosting and deployment
- Hosting account is created in your name with your billing email
- You have admin access to hosting panel (cPanel, Plesk, Vercel, AWS, etc.)
- FTP/SFTP or deployment credentials are shared and tested
- For Next.js: you own the Vercel/Netlify team or cloud account—not a sub-account under the agency
- Staging environment URL exists separate from production
- Deployment process is documented in plain language (not only 'we handle it')
Source code and CMS
- Git repository exists on GitHub, GitLab, or Bitbucket under your organization
- You are added as owner or admin on the repo—not only as a read-only collaborator
- CMS admin login (WordPress, Sanity, Payload, etc.) is under your email
- Environment variables (.env) are listed without exposing secret values in email
- Latest database export process is documented (WordPress, custom apps)
- Third-party plugin, theme, and font licenses are named—and paid accounts are yours
Analytics, search, and marketing accounts
- Google Analytics 4 property is under your Google account with admin access
- Google Search Console verified on your account—not developer's personal Gmail
- Google Business Profile (if applicable) owned by your business email
- Meta Pixel / ad accounts (if used) registered to your Business Manager
- Form submissions route to your email/CRM—not only the developer's inbox
- reCAPTCHA or spam protection keys are in your Google Cloud project
Legal, IP, and commercial
- Written contract or proposal with itemised scope and exclusions
- Copyright assignment clause compliant with Section 19 of the Copyright Act, 1957
- GST invoice with valid GSTIN from a registered vendor (if applicable)
- Milestone payment schedule tied to deliverables—not 100% upfront
- Post-launch support scope defined (30-day bug fix vs ongoing AMC)
- Exit clause: what happens to assets if either party terminates
💡 The 60-second WHOIS test
Before signing, ask: 'Will you register the domain in my name?' Then at launch, run a WHOIS lookup on who.is or your registrar. If the registrant organization is the agency or developer, stop and fix it before final payment.
Copyright and IP: What Indian Law Actually Requires
Section 17 of the Copyright Act, 1957 makes the creator the first owner of copyright. Paying a freelancer or agency does not automatically transfer that ownership to you. Section 19 requires a written, signed assignment that identifies the work, specifies rights transferred, duration, territory, and consideration.
A vague 'all IP belongs to client' line in a WhatsApp quote may not satisfy Section 19 formal requirements. For projects above ₹50,000, have a lawyer review the assignment clause—or use a standalone website IP assignment deed alongside your development agreement. This is not legal advice; consult a qualified professional for your situation.
- Pre-incorporation work: founders must assign IP to the company after incorporation
- Stock images and fonts: you need licenses in your name, not the agency's account
- Open-source code: confirm licenses (MIT, Apache) allow commercial use; avoid surprise GPL obligations
- Custom plugins or themes: specify whether they are assigned to you or licensed back to the agency
| Asset | Minimum you need | Red flag |
|---|---|---|
| Domain | Registrant = your business; you hold login | Domain in agency name; 'we manage it for you' |
| Hosting | Account owner = you; full panel access | Hosted on agency server; no separate login |
| Source code | Git repo under your org; admin role | ZIP file on request only; no version history |
| Analytics | GA4 + GSC admin on your Google account | Reports screenshots only; no account access |
| Lead data | Forms → your email/CRM; export anytime | Submissions visible only in agency dashboard |
| Copyright | Signed Section 19 assignment | Verbal promise; invoice footnote only |
Milestone Payments: Tie Money to Access
Never pay 100% before you control the assets. Indian agencies commonly use 30–40% advance, 30–40% at design approval, and balance on launch. The mistake is releasing the final tranche before domain, hosting, repo, and analytics are in your name. Use this map to hold back payment until each ownership checkpoint is verified.
| Milestone | Typical % | You should have before paying |
|---|---|---|
| Contract signed | 0% | Written scope, IP clause, GST quote, ownership commitments in writing |
| Kickoff / advance | 30–40% | Domain registered in your name; hosting account created under you; Git repo with your org as owner |
| Design approval | 20–30% | Figma/files shared; staging URL live; CMS structure visible |
| Development complete | 20–30% | Full repo access tested; staging matches scope; forms route to your inbox |
| Launch / final | 10–20% | Production live; GA4 + GSC on your accounts; handover doc signed; backups delivered |
🎯 Hold back 10–15% for 14 days
Smart contracts retain a small final payment for two weeks post-launch—enough time to catch broken forms, SSL issues, and missing analytics before the relationship closes. Agencies confident in their work will agree.
What the Handover Document Must Include
At final payment, you should receive a single handover document—not a verbal 'you're all set.' Request this in your contract so there is no ambiguity on launch day.
- Account map: every platform, login URL, and which email owns admin access
- Repository URL, default branch, and deployment instructions
- Environment variable list (keys named; values shared via secure channel)
- Plugin, theme, and integration inventory with renewal dates
- DNS record table (A, CNAME, MX, TXT for email and verification)
- Backup location and restore procedure tested once on staging
- Emergency contact and AMC or support channel for post-launch issues
- Signed confirmation that IP assignment is complete per contract
🔥 GST and invoices
Web development services attract 18% GST in India (SAC 998311). Verify the vendor's GSTIN on gst.gov.in before paying. A proper tax invoice protects your input tax credit and proves you paid a registered business—not a personal UPI transfer with no paper trail.
Platform-Specific Ownership: WordPress vs Next.js vs Shopify
Ownership looks different on each stack. Use this section to ask the right technical questions for your platform—so you are not locked into a proprietary builder or a Vercel account you cannot access.
WordPress
- You need: wp-admin on your email, hosting/cPanel access, database export via phpMyAdmin or plugin
- Confirm: premium themes and plugins licensed to your account—not the agency's Envato login
- Avoid: agency-hosted 'WordPress as a service' with no FTP and no database access
- Portable when: standard WordPress on mainstream hosting; child theme or custom theme files in repo
- Risky when: heavy page-builder lock-in (some layouts do not export cleanly)
Next.js / React
- You need: Git repo ownership, Vercel/Netlify/AWS account under your org, env vars documented
- Confirm: headless CMS (Sanity, Payload, Contentful) project is in your workspace if content is managed there
- Avoid: code living only on developer's laptop or personal Vercel hobby account
- Portable when: open repo, standard Next.js App Router, documented deploy pipeline
- Risky when: no repo, custom undocumented build scripts, secrets only on developer's machine
💡 Next.js teams should read this
Our Next.js 15 App Router guide covers production patterns that make handoff easier—typed routes, environment config, and deployment hygiene from day one.
Production-ready Next.js setups reduce takeover friction.
Shopify and e-commerce
- You need: Shopify store owner role on your email; staff accounts documented
- Confirm: payment gateway (Razorpay, PayU) merchant account is yours—not developer's test mode forever
- Avoid: custom checkout apps billed to agency with no transfer path
- Portable when: standard Shopify theme; apps listed with billing ownership clear
- Risky when: heavy custom app stack with code only in agency repo
Website builders (Wix, Squarespace, Framer)
Builders trade portability for speed. You typically own the account—but migrating off the platform later means rebuild, not export. If long-term SEO and vendor flexibility matter, confirm you accept that trade-off before choosing a builder-based package from an Indian agency reselling these tools.
| Stack | Ownership ease | Migration difficulty | Best for |
|---|---|---|---|
| WordPress on your hosting | High | Low–medium | SMB sites, blogs, frequent content edits |
| Next.js on your Vercel/cloud | High | Low (with repo) | Performance, SEO, SaaS marketing sites |
| Shopify | Medium–high | Medium | D2C stores, catalog + payments |
| Agency proprietary CMS | Low | High | Avoid unless exit terms are explicit |
| Wix / Squarespace reseller | Medium | High | Fast launch, limited growth plans |
AMC Contract Clauses That Protect Ownership
Many Indian businesses sign an Annual Maintenance Contract at launch without reading it. A weak AMC renews dependency: the agency keeps hosting on their server, refuses repo access unless you stay on retainer, or raises renewal fees sharply in year two. Ownership clauses belong in both the development agreement and the AMC.
- Client retains ownership of domain, hosting accounts, source code, and content at all times
- Agency access is administrative only—revocable on 30 days' notice
- On termination: full credential handover within 10 business days at no extra fee
- No penalty for migrating to another vendor; export of database and files included
- Renewal price cap or 30-day written notice for increases above 15% year-on-year
- Scope appendix: number of updates/month, response times, and explicit exclusions
- GST-compliant invoicing with SAC code for maintenance (998314)
⚠ Watch 'free hosting included'
Packages that bundle 'free hosting for one year' often mean the site lives on the agency's account. Year-two renewal can exceed the original build cost—and you still do not own the hosting login. Register hosting in your name from day one.
For detailed AMC pricing ranges and what maintenance should include by platform, see our Website Maintenance Cost in India guide—it complements this ownership checklist with INR benchmarks for 2026.
Year-Two Renewals: Where Lock-In Appears
The first year feels smooth. The second year is when businesses discover surprise renewal bills, domain held hostage, or 'transfer fees' that were never in the original quote. Before signing year one, ask for a written year-two line item: domain renewal, hosting renewal, SSL, plugin licenses, and AMC—each in INR.
- Domain (.com): typically ₹800–₹1,500/year
- Shared hosting: ₹1,500–₹5,000/year; VPS/cloud higher
- Vercel Pro (Next.js): ~₹1,600/month base plus usage on busy sites
- Plugin/theme licenses: ₹5,000–₹15,000/year on some WordPress stacks
- AMC: ₹18,000–₹1,20,000/year depending on scope—not open-ended 'we'll tell you later'
12 Red Flags Before You Hire a Web Developer in India
One red flag might be negotiable. Three or more together usually predict a painful handoff. Walk away or fix terms in writing before paying.
- Quotes a fixed price in minutes without asking about scope, stack, or content
- Refuses to register domain in your name—'we handle domains for all clients'
- Offers 'free hosting forever' with no plan to transfer account ownership
- Cannot show live portfolio URLs—only PDF mockups or Behance images
- No written contract; 'we'll sort details after launch'
- Insists on 80–100% payment before staging is live
- Won't add you to GitHub or says 'code is our proprietary framework'
- Google Analytics and Search Console set up only on their personal Gmail
- Price far below every other quote without explaining exclusions (hosting, GST, content, SEO)
- Promises 'lifetime free support' with no SLA, ticket system, or scope limits
- Resists milestone payments or ownership clauses in the agreement
- GSTIN cannot be verified—or asks for payment only via personal UPI
🛡 Already seeing these after launch?
If the developer already left and you lack access, switch to recovery mode. Document every access request in email, secure backups if possible, and read our developer handoff guide for the 48-hour emergency plan.
Recovery steps when the developer is already gone.
10 Questions to Ask Before You Pay
- Whose name will the domain registrant show on WHOIS?
- Which email will own hosting, Git, and CMS admin accounts?
- Will I get a Git repository URL under my organization before the advance payment clears?
- What exactly is excluded from this quote (hosting, domain, content, SEO, GST)?
- What is the milestone schedule and what do I receive at each stage?
- Who owns the copyright—show me the assignment clause in writing?
- What happens to all assets if I terminate the contract or don't renew AMC?
- Will GA4 and Search Console be on my Google account?
- Do you use staging before every production deploy?
- Can you introduce me to one client who switched away from you—how did handoff go?
🚀 Green flags
Agencies worth hiring welcome ownership questions. They send itemised quotes, register your domain on kickoff, add you to the repo on day one, and document handoff without charging a 'transfer fee.'
Ownership for SaaS and Digital Products
SaaS companies face an extra layer: marketing site ownership vs product app ownership. Your marketing site (Next.js on Vercel) and your product (separate repo, auth, database) should each have documented owners, separate Git orgs, and distinct hosting accounts.
- Marketing site repo: your org; product repo: your org—never agency personal GitHub
- Stripe/Razorpay merchant account in company name, not developer test account
- Customer data in your cloud (AWS/GCP) with DPAs for subprocessors
- Analytics: separate GA4 properties for marketing vs in-app if needed
- Domain: marketing on primary domain; app on app.yourdomain.com with DNS you control
For MVP and product build costs alongside marketing site ownership, see our MVP web app development cost guide and SaaS marketing website pricing breakdown.
What Transparent Agencies Do Differently
| Practice | Lock-in vendor | Ownership-first agency |
|---|---|---|
| Domain | Registers in agency name | Walks you through registrar signup day 1 |
| Kickoff | 100% advance requested | 30–40% after domain + repo in your name |
| Handover | Charged as 'transfer fee' | Included in final milestone |
| AMC exit | Vague or penal | Written export + credential handover in 10 days |
| Analytics | Screenshot reports only | Admin access on your Google account |
| Source code | ZIP on request | Git repo you own from week 1 |
🎯 Compare before you sign
Use our agency selection guide alongside this checklist when evaluating quotes from two or more developers.
Full red flags, green flags, and 15 vetting questions.
Your Action Plan Before You Sign
- Print or save the pre-signing checklist and review it on a call with your developer
- Create your domain registrar account before kickoff—do not let the agency 'handle it'
- Add ownership and milestone terms to the contract before any advance payment
- Verify WHOIS and repo access at the first milestone—not at launch
- Request a handover document template now so launch day is not negotiable
- Sign AMC only after ownership clauses are clear; compare year-two renewal in writing
Frequently Asked Questions
15 answers to the most searched questions about website ownership checklist India—formatted for featured snippets and AI search.
Who owns a website after paying a developer in India?+
What is a website ownership checklist India?+
Should the domain be in my name or the developer's name?+
What if my developer registered the domain in their name?+
How much should I pay upfront for a website in India?+
Do I need a copyright assignment for my website in India?+
What should be in a website handover document?+
Is free hosting from my developer a good deal?+
WordPress vs Next.js—which is easier to own?+
What AMC clauses protect website ownership?+
Can I verify a web developer's GSTIN before hiring?+
Who should own Google Analytics and Search Console?+
What are signs of website vendor lock-in in India?+
How do I check domain ownership before paying final invoice?+
What should I do this week before hiring a web agency?+
Conclusion: Own It Before You Pay for It
The best time to secure website ownership is before the first invoice—not after the developer stops replying. Domain, hosting, code, analytics, and copyright assignment are business assets. Treat them like you would a shop lease or company bank account: in your name, documented, and transferable without permission from the vendor.
Agencies that build for the long term will not fear your checklist. They will register your domain on day one, invite you to the repository, and hand over credentials at launch without a transfer fee. If yours pushes back on basic ownership, that tells you everything about year two.
🎯 Related reading
If the developer already left, read our emergency handoff guide. For ongoing costs, see maintenance pricing. For Next.js builds, review production best practices before you sign the stack.
Continue with these guides from DigitalXBrand.
Want a build with no lock-in from day one?
DigitalXBrand develops on your domain, your repo, and your hosting—with documented handoff and transparent AMC. Bengaluru-based team, GST invoicing, Next.js and WordPress.
Tags