HGHandoverGuard

Interactive audit

Business Account Ownership Audit

Map the accounts a vendor may control, score the handover risk, and export a packet that a new provider or internal owner can act on.

Handover readiness15

Critical ownership risk

Domain and DNS

Confirm who owns the domain, where DNS is managed, and who can recover access.

0 of 3 answered

Critical control

The business owns the domain registrar account

The domain should be in an account controlled by the business, not an agency or freelancer.

Evidence to collectRegistrar login, billing profile, WHOIS/contact settings, renewal receipt.
Critical control

DNS admin access is documented

DNS controls the website, email, verification records, and many SaaS integrations.

Evidence to collectCloudflare, Route 53, GoDaddy DNS, or similar admin access screenshot.
Control

Current DNS records are exported

A DNS export prevents downtime if records are changed or the vendor disappears.

Evidence to collectCSV, zone file, or screenshot set of A, CNAME, MX, TXT, SPF, DKIM, and DMARC records.

Handover packet

Export, print, or request help with the audit.

Use JSON for internal records, CSV for spreadsheets, the report view for PDF printing, and the vendor email to request missing evidence.

Your answers stay in this browser unless you download a packet or send an email.

Top requests

  1. The business owns the domain registrar accountPlease confirm the registrar, account owner, renewal date, and transfer lock status.
  2. DNS admin access is documentedPlease provide DNS provider name and grant admin access or transfer ownership.
  3. The business has owner-level CMS admin accessPlease grant owner/admin access to a business-controlled email address.
  4. Source code and deployment access are availablePlease provide repository access, deployment instructions, and environment variable names.
  5. Hosting account ownership is clearPlease confirm hosting provider, account owner, billing owner, and support process.
  6. A restore test has been completed recentlyPlease confirm the most recent restore test date and result.
  7. Google Analytics owner access is business-controlledPlease add a business-controlled email as Administrator on the GA4 account and property.
  8. Search Console verified owner access is availablePlease add a business-controlled email as verified owner in Google Search Console.