Audit
Business Account Ownership Audit
A practical walkthrough for finding who controls your domain, hosting, analytics, ads, and CMS.
A business account ownership audit maps every account used to run the website and marketing stack, then marks who owns it, who pays for it, who can recover it, and what evidence is missing.
Audit systems in dependency order
Start with the domain and DNS, then hosting, CMS, source code, analytics, advertising accounts, email, and backups. A missing domain or DNS login can block everything else.
Track recovery paths
For each account, record the recovery email, recovery phone, two-factor method, billing owner, and backup administrator. Hidden recovery settings often keep a vendor in control after visible users are removed.
Make the audit actionable
The output should not just be a list of tools. It should include missing evidence, vendor requests, risk level, and the next owner for each account.
Checklist
- List every account connected to the website or marketing stack.
- Record account URL, current owner, admin users, billing owner, and recovery contacts.
- Mark each account as confirmed, partial, unknown, missing, or not applicable.
- Flag critical accounts where the business does not control ownership.
- Assign a next owner for each system before removing vendor access.
- Export the audit as a handover packet for the new provider.
Use the tool