The Owner's Audit: Do You Actually Own Your Online Presence?
You've paid for a website, a domain, maybe an app. But paying for something and owning it turn out to be different things. Here's the whole picture in one place, and a short audit you can run this week to find out exactly where you stand.
Listening · The Owner's Audit: Do You Actually Own Your Online Presence?
Every post I've written for business owners has circled the same quiet question from a different side. Who actually controls this? Your domain, your code, your hosting, your data. Each one is something you can own outright or something you're only renting without knowing it, and the difference tends to stay invisible right up until the day it isn't.
This is the piece that puts them all in one place. Not to worry you, but to hand you the whole map at once, so you can see your online presence the way the person who built it does, and know for certain which parts are actually in your hands.
If you want to see what it looks like when none of this is in place, I've told that story: a founder six months into a build, locked out of their own code, at the mercy of the one person who held all the keys. Think of this audit as the opposite of that story, the short list that keeps you out of it.
The four things worth owning
Everything your business runs on online comes down to a small handful of assets. Here's the whole set, plainly, with what each one is and why it's yours to hold. Each links to the full story if you want to go deeper on it.
Your domain. The name your business lives at, and the email that runs on it. You rent it, and the lease needs to be in your name. If it lapses in someone else's account, your site and your email can go dark together. (See You Don't Own Your Domain and What DNS Actually Is.)
Your code. The instructions your site is built from, which should live in a repository in an account you control, not only on one person's laptop. It's the difference between a handoff and a salvage job the day you change developers. (See Where Does Your Code Actually Live?.)
Your hosting. The always-on computer your site sits on, paid for through an account that should be reachable by you. (See What Are You Paying For When You Pay for Hosting?.)
Your data. The customer list, the orders, the records your business created just by running. The one truly irreplaceable piece, which needs to be backed up, and the backups actually tested. (See Your Database Is the Part You'd Actually Miss.)
The pattern under all of it
Notice what every one of these has in common. The asset itself is rarely the problem. The problem is always the same shape. It lives in an account that isn't yours, set up by someone who's no longer around, quietly working away until the day you need to reach it and can't.
Underneath all four sits the same single thing: a login. Ownership, in practice, isn't a certificate or a feeling. It's being able to get in without asking anyone's permission.
Whose job this was, and why you check anyway
It's fair to feel none of this should land on you, and you're right. A good developer sets every one of these up in your name from the start and hands you the keys without being asked. It genuinely is their job.
If you're still choosing who to hire, here's how to hire a web developer who does that without being asked.
But the day one of these matters, the person who set it up is usually long gone, and you're the one whose email is down or whose data is lost. The blame may be theirs. The consequence is always yours. So you check, not because it's fair, but because you're the one who lives with the answer. That single idea, that checking protects you no matter whose fault it was, is worth a post of its own, and it's coming.
The audit: run this in ten minutes
Here's the whole thing as something you can actually do this week. For each item, one question: could I log in right now, today, without asking anyone?
Your domain registrar. Your DNS. Your hosting account. Wherever your data and its backups live. And the email address all of these send their warnings to, which has to be one you actually control and read, because a renewal notice sent to a dead inbox may as well not exist.
Five logins. If you have all of them, you own your online presence, and you can move it, fix it, or change who manages it whenever you choose. That's real freedom, and plenty of owners don't have it without ever having decided to give it up. If you're missing even one, you haven't done anything wrong. You've just found the exact thing to sort out before the day you need it, and there's no better day to find out than one where nothing is on fire.
None of this is about distrust, and none of it is about doing the work yourself. It's about holding the keys to the thing your business runs on. Pay whoever you like to build it, run it, and look after it. Outsource the work. Just keep the keys.