Most firms discover the ownership problem on the worst possible day. The relationship with the marketing vendor has soured, someone finally sends the termination email, and then the questions start. Who can move the domain. Who holds the hosting login. Where does the historical analytics data live. What happens to the tracking number printed on 4,000 brochures. Nine times out of ten the answer is sitting in a contract nobody read closely, signed by a partner who assumed that paying for something meant owning it.
Paying for it does not mean owning it. In digital marketing, ownership follows the account, not the invoice. Whoever’s email address sits on the registrar account controls the domain. Whoever created the analytics property can delete it. Whoever holds the primary owner role on the Business Profile can remove everyone else. A firm can spend six figures over four years and end up with nothing transferable except a list of URLs that no longer resolve.
This is not an argument against working with an agency. It is an argument for reading six lines in an agreement and holding six accounts in your own name. Here is exactly which ones, what the risky clauses look like in the wild, and how to unwind a bad arrangement without blowing up a working relationship.
The Six Assets Where Custody Actually Matters
Not everything needs to sit in the firm’s own accounts. Nobody needs the vendor’s project management tool or their keyword research subscription. Six things are different, because losing any one of them costs money, time, or both, and two of them are close to unrecoverable.
The Domain Name
This is the one that ends careers. The domain is the firm’s identity, and if it is registered under the vendor’s account with the vendor’s contact email, the firm owns nothing. Registrar transfers require the authorization code and the losing registrar’s cooperation. A disputed transfer can take weeks. A vendor who has gone quiet or gone out of business can take months, and the domain will hit its expiration date somewhere in the middle of that.
The firm should hold the registrar account directly, in the firm’s own name, with a firm-controlled email as the administrative contact, auto-renew enabled, registrar lock on, and the renewal card belonging to the firm. If the agency needs to change DNS records, give them delegated access inside your account rather than moving the account. Most registrars support this. If you are still choosing a name, the custody question should be settled before the first registration, which is part of why choosing a domain and brand name for a new law firm deserves more than an afternoon.
Hosting and the Actual Site Files
Hosting is more recoverable than a domain but still painful. The real question is not who pays the hosting bill, it is whether the firm can obtain a complete, working export of the site. For a standard WordPress build that means database plus files, delivered as something a new host can restore, not a folder of screenshots.
Ask for a full backup once a quarter and store it somewhere the firm controls. It costs nothing and it converts a hostage situation into an inconvenience. If the site is built on a vendor’s closed platform, an export may not exist in any restorable form at all, which is the single largest hidden cost in the law firm website platform decision.
Analytics and Search Console
Analytics properties cannot be merged and history cannot be reconstructed. If the vendor created the GA4 property inside their own account and the relationship ends, the firm often starts a brand new property with zero history. Every year-over-year comparison, every seasonal baseline, every piece of evidence about what worked is gone.
The fix is administrative and takes ten minutes. The firm’s Google account should hold the Administrator role on the GA4 property and Owner on the Google Tag Manager container, with the agency added as a user. Same for Search Console, where the firm should be the verified owner through a DNS verification the firm controls, not through a file the vendor uploaded to a server the vendor also controls. Verification through a Tag Manager container the vendor owns is the same trap wearing a different hat.
Call Tracking Numbers
Call tracking is genuinely useful and genuinely dangerous. Numbers provisioned inside a vendor’s platform account belong to that vendor’s account. When the relationship ends, the number can be released, and every place that number appeared, directory listings, printed material, vehicle wraps, sponsorship signage, the Business Profile, becomes a dead end or, worse, gets recycled to somebody else.
Two protections. First, keep the firm’s real main line as the primary published number everywhere it is expensive to change, and use tracking numbers for campaign measurement rather than as the firm’s public identity. Second, make number portability an explicit contract term. Telephone numbers are portable by regulation, but the release has to be requested by the account holder, and a vendor with no obligation to cooperate can simply not respond.
The Google Business Profile
The Business Profile is the single largest local ranking asset most firms have, and the ownership model is a role hierarchy rather than a file. There is one primary owner. That should be a firm email address, permanently. Agencies should be added as managers, a role that can post, edit, and respond to reviews but cannot remove the owner.
Firms discover this backwards constantly. The agency created the profile during onboarding, so the agency is the primary owner, and the firm is a manager on its own listing. Recovering primary ownership without cooperation means filing a request and waiting, typically several days, sometimes with an outcome you do not like. Transferring primary ownership takes about ninety seconds when everyone is friendly, so do it while everyone is friendly.
The Content
Practice area pages, blog articles, photography, video, and the schema markup embedded in them are copyrightable works. Under United States copyright law, work created by an independent contractor belongs to the contractor by default unless the agreement assigns it. Agency contracts frequently grant the client a license to use the content rather than ownership of it, which is a meaningfully different thing. A license can be revocable. A license can be limited to the current website. A license can end when the contract ends.
What a firm wants is a written assignment of all right, title, and interest in deliverables upon payment. Not a license. Not a perpetual license. An assignment. If the vendor pushes back on assignment, ask directly what they intend to do with the content afterward, because there is rarely a good answer for a client-specific practice area page about a state statute.
The Clauses That Quietly Move Ownership
These are not written in bad faith most of the time. They are boilerplate carried forward from template agreements. That does not make them less binding.
- Grant of license language. “Agency grants Client a non-exclusive license to use the deliverables” means the firm does not own the content. Look for the word assign.
- Proprietary platform and proprietary tools carve-outs. Reasonable in principle, since a vendor’s internal systems are theirs. The problem is when the definition is broad enough to swallow the website itself, the tracking configuration, or the schema.
- Work product retained by agency. Sometimes phrased as keyword research, strategy documents, and technical audits remaining agency property. That is negotiable and usually worth negotiating, because those documents are how the next vendor gets up to speed.
- Accounts established by agency remain agency property. The clause that covers analytics, call tracking, and occasionally the domain. This is the one to strike outright.
- Termination triggers removal. Language allowing the vendor to disable the site, remove content, or take back tracking numbers on termination or on any late payment. A payment dispute should never be able to take a firm’s website offline.
- Data retention and deletion silence. Most agreements say nothing about what happens to call recordings, form submissions, and CRM data at the end. Those records can contain prospective client information, which raises confidentiality duties that sit on the lawyer, not the vendor.
- Automatic renewal with a short notice window. Not ownership, but it is what keeps a firm inside a bad arrangement for another twelve months. Thirty days notice against an annual term is common. Calendar it the day you sign.
That last category is worth pausing on. A law firm’s confidentiality and file-return duties do not disappear because a marketing vendor is holding the data. The ABA Model Rules require a lawyer to surrender papers and property to which the client is entitled upon termination of a representation, and the profession’s guidance on client files and technology providers is worth reading before you sign anything that puts intake records in a third party’s system. The relevant text sits in ABA Model Rule 1.16 on declining or terminating representation, and your state’s version may be stricter.
A Thirty Minute Custody Audit You Can Run Today
You do not need the contract to start. You need a laptop and half an hour. Work down this list and write the answer next to each item.
- Log in to the registrar with a firm account. If you cannot, you have found the highest priority item on your list.
- Check the domain expiration date, the registrant email, and whether auto-renew and registrar lock are on.
- Open GA4 and confirm a firm email holds Administrator, not Editor or Analyst.
- Open Search Console and check how the property is verified and who the verified owners are.
- Open Tag Manager and confirm the container’s Publish and Manage permissions include a firm account.
- Open the Business Profile and read the ownership panel. Note who is primary owner.
- List every phone number that appears in your marketing and identify which account provisioned each one.
- Ask your vendor for a full site backup and see how long it takes to arrive and what format it is in. The response time is the finding.
- Confirm the firm holds the hosting account or, at minimum, has credentials that survive the relationship.
- Check who receives form submissions and where those records are stored.
Anything you could not verify yourself is a dependency. Dependencies are fine when they are chosen. They are not fine when they are discovered.
Fixing It in the Middle of a Live Contract
Most firms doing this audit find two or three problems with a vendor they are broadly happy with. Do not open with a legal threat. Ownership cleanup is routine housekeeping and a professional vendor will treat it that way. The ones who resist have told you something important.
Sequence it like this. Start with the reversible administrative changes, because they are fast and they change your risk profile immediately. Add firm accounts as Administrator on GA4, Owner in Tag Manager, verified owner in Search Console, and primary owner on the Business Profile. None of this removes the vendor’s access, so there is no reason for anyone to feel displaced. Frame it as firm policy, because it should be.
Next, move the domain. If it sits in the vendor’s registrar account, request an account transfer or an authorization code and move it to a firm-held registrar. Budget two weeks. Do this in a quiet period, not while a campaign is launching, and confirm DNS records are copied before the transfer completes.
Third, take custody of a backup. Ask for a complete export, restore it somewhere to prove it works, and repeat quarterly. An untested backup is a hope.
Fourth, handle the contract itself. You usually cannot rewrite a signed agreement unilaterally, but you can negotiate an amendment, and renewal is natural leverage. Ask for three things. An assignment of deliverables upon payment. A transition clause that obligates the vendor to hand over accounts, exports, and tracking numbers within a stated number of days after termination. And removal of any language that permits taking the site or the numbers offline. Vendors sign these amendments more often than firms expect, because the alternative is losing the account.
If you are running this exercise while also evaluating a replacement, the custody questions belong in the very first call, not in diligence at the end. They are among the fastest ways to separate operators from packagers, which is a theme running through how to choose a law firm SEO agency.
The Honest Tradeoffs
Holding your own accounts is not free. Someone at the firm becomes responsible for credentials, for the renewal card that expires, for the two factor authentication device that walks out the door with a departing office manager. Vendor-held accounts exist partly because they genuinely reduce friction. Firms lose domains to their own neglect as often as to vendor conflicts.
So pair custody with a little administration. Use a firm-controlled shared mailbox rather than an individual’s address for account contacts. Put credentials in a password manager the firm owns. Set two factor authentication to a shared method rather than one person’s phone. Diarize the domain renewal annually and the custody audit semiannually. Fifteen minutes twice a year.
Also be realistic about what ownership buys you. Holding every account does not make a firm able to run its own technical SEO, and it does not make transitions painless. A vendor change still costs a quarter or so of momentum while the new team learns the property. What ownership does is put a ceiling on the damage. The difference between a rough transition and a catastrophic one is almost always whether the firm held the domain, the analytics history, and the profile.
Own the Accounts, Rent the Expertise
That is the whole principle. Expertise is worth paying for and worth changing when it stops working. Assets are not. A firm should be able to fire any vendor on a Friday and still have its domain, its site files, its four years of analytics history, its phone numbers, its Business Profile, and its content on Monday morning. If that is not true today, the fix is a few hours of administrative work and one conversation.
Rubiks builds every engagement so the firm holds the accounts from day one, and we run the custody audit above for firms before they sign anything with anyone, including us. Talk to Rubiks and we will tell you exactly which of your six assets you do not currently control.