Every few months someone calls me about a site they can’t get into. A vendor built it, hosted it, and registered the domain, and now the vendor is gone, or slow, or charging for every change. The site works. It just isn’t theirs.
Nobody did anything wrong. The RFP asked about design, page counts, timeline, and price. It never asked who would own what. One organization I spoke with this year had only a single homepage mockup to show for its previous vendor’s work.
So here is the paragraph. Put it in the RFP, and later in the contract.
- The domain is registered in our name, in our own registrar account. The vendor gets access to it.
- Hosting is in our account, and so is every third-party service the site depends on, such as the form handler, the email sender, and the analytics. We pay those bills directly. The vendor is a collaborator on the account.
- The source code lives in a repository we own. The vendor commits to it.
- The site is built on a standard, documented stack, named in the proposal, that a software engineer on our staff or one we hire could maintain.
- On final payment, everything produced for the project becomes our property. The vendor keeps its own pre-existing tools and nothing else.
- At handover we receive the passwords in our own password manager and a written description of how the site is put together.
Six lines. A good vendor agrees to all of them without blinking, because it’s how they already work. My own agreements say this. A vendor who pushes back on the domain or the hosting account is telling you something about the next five years.
You’ll own this website for a decade or more. Put these six lines in the RFP before the first proposal arrives.