There are companies that have wanted to change their website for two years and still haven’t. It isn’t lack of budget or lack of interest. It’s that every time they approach the subject, the same uncomfortable question appears: who has the access? And after that one, all the others follow.
The domain sits in an account the provider manages. So does the hosting. Corporate email depends on the same server. The site files were never formally handed over. And if you push too hard, the relationship turns tense exactly when you most need it to be collaborative. That isn’t bad luck. It’s the result of a very specific way of relating to digital suppliers that, in B2B, is more common than it should be.
This article explains why it happens, how to identify how locked in your site is, and what to do to get out without losing rankings, history or infrastructure.
The problem isn’t the provider: it’s the ownership structure nobody defined
When a company commissions a website, the conversation tends to revolve around design, timelines and price. What almost never gets discussed is who will be the legal and operational owner of each component of the digital asset being built.
The usual result is this: the provider registers the domain in their own name or in their registrar account. They install the site on a server they administer. They configure the email accounts from that same panel. And they hand the client limited access — if any — to the content manager or the site’s back end.
There isn’t necessarily bad intent behind this. In many cases the provider simplifies the process to make their own work more efficient. The problem is that this simplification creates a structural dependency that, over time, becomes a trap. When the company wants to migrate its website, update its platform or simply hire someone else for maintenance, it discovers it doesn’t have the technical control it thought it had.
A frequent case at PTW: companies arriving for a redesign where, on reviewing the situation, it emerges that the domain was registered six years ago by someone who no longer works at either the original provider or the client company. Recovering that domain without losing the accumulated SEO history can take weeks and require formal processes with the registrar. All of that before a single line of the new site has been written.
Why migrating a website without losing anything is more complex than it looks
The phrase “migrate the site” sounds technical and manageable. In practice it involves layers that interact with each other and which, moved without judgement, can cause concrete damage: a drop in organic rankings, lost email configuration, broken forms, badly executed redirects.
The real risks of a poorly planned migration are three:
Loss of domain authority and SEO rankings. If the domain changes, if URLs are restructured without correct 301 redirects, or if the new site takes time to be indexed, rankings built over years can fall within weeks. For a B2B company receiving organic enquiries, that has a direct cost in business opportunities.
Interruption of corporate email. In many small and mid-sized companies, corporate email depends on the same server hosting the website. Moving the site without coordinating DNS records can interrupt communications across the whole company for hours or days.
Loss of the site’s technical history. Analytics and Search Console configurations, tracking pixels, CRM or automation integrations: if they aren’t documented before the migration, they’re lost. And rebuilding them takes time no new project allows for.
The underlying problem isn’t that migration is impossible. It’s that migrating well requires a prior audit very few providers offer and very few clients ask for. It’s assumed the new provider “will handle it”, and the new provider assumes the client has everything in order.
How to tell how locked in your site is today
Before making any decision, it’s worth taking stock. You don’t need a technician to answer these questions — though you may need one to act on some of them.
Ownership and control checklist:
- Do you have access to your domain registrar’s panel?
- Is the domain registered in your company’s name, or an external person’s or company’s?
- Do you know who administers the hosting, and do you have your own credentials?
- Do you have full access to the site’s back end or CMS (not just the content editor)?
- Does a backup of the site files exist in your company’s hands?
- Are the Google Analytics and Search Console accounts tied to a corporate email of yours?
- Is the SSL certificate configured in your domain’s name with automatic renewal?
- Is there documentation of the active integrations (forms, automated emails, pixels)?
If you answered “no” or “I don’t know” to more than three of these, your site isn’t under your operational control. That doesn’t mean the current provider acted in bad faith — but it does mean any change is going to be harder than necessary.
How to get out without losing anything: the steps that work
Changing web provider without collateral damage requires sequence. Doing things in the wrong order — for instance cancelling the current hosting before configuring the new one — is the most common cause of avoidable outages.
Step 1: Recover the access before announcing the change. The hardest moment to ask for access is when the relationship with the provider has already turned tense. Ideally you request it in advance, in technical terms and without drama: “We need the access documented for internal audit purposes.” If the provider refuses, that itself is relevant information.
Step 2: Take a complete technical inventory of the current site. Before touching anything, document: existing URLs, DNS configuration, active integrations, CMS and plugin versions, linked analytics accounts. That inventory is the basis of the migration plan.
Step 3: Prepare the new environment before switching off the old one. The new site should be running in a staging environment and fully configured before the domain moves. The DNS change should be the last step, not the first.
Step 4: Run the 301 redirects from day one. Every URL that existed on the old site must have a redirect to its equivalent on the new one. If the information architecture changed — which is common in a redesign — this requires an explicit redirect map. Without it, the accumulated technical SEO is lost.
Step 5: Validate before declaring the migration finished. Verify that email works, that forms send, that Analytics records visits, that Search Console shows no indexing errors, that the SSL certificate is active. This takes a day of work, but it avoids weeks of problems.
How not to end up here next time
Provider lock-in isn’t avoided by choosing a better provider — it’s avoided by establishing clear conditions at the start of the relationship.
Three minimum standards any B2B company should require when commissioning web development:
The domain must be registered in the company’s name, with access to the admin panel. No exceptions. If the provider wants to manage it for operational convenience, they can have delegated technical access, but ownership belongs to the company.
Hosting, CMS and associated tool credentials must be handed over in a formal document at project close. Not “when you ask for them”, but as part of the handover process.
Analytics and tracking accounts must be created with the company’s corporate emails. Not with the provider’s personal accounts, nor with generic addresses nobody controls internally.
These aren’t complex technical requirements. They’re conditions of ownership over a digital asset the company is paying for. Requiring them isn’t distrust of the provider — it’s basic management judgement.
The next step if this is your situation
If reading this you recognised your situation — you don’t have the access, you don’t know exactly what the current provider holds, or you’ve spent months postponing a change that clearly needs making — the first concrete move is a diagnostic of your site’s real state.
The PTW team works with B2B companies arriving at exactly this point: they know something isn’t right but don’t have the full map of what. PTW’s digital diagnostic is designed for that moment: identifying what’s under control, what isn’t, and what requires correction before any investment decision.
It isn’t a sales proposal in disguise. It’s the step that makes sense when you want to act with judgement and not get trapped twice by the same problem.