Domain ownership
The business should know the registrar, registrant details, renewal date, recovery email and who controls multi-factor authentication. A supplier may manage the domain, but the customer should retain documented authority and a recovery route.
DNS and email dependencies
DNS records can affect the website, email delivery, verification services and subdomains. Maintain an inventory before migration. Changing nameservers without understanding mail records can interrupt communication even when the new website itself works.
Hosting access
Document the hosting company, account owner, billing cycle, control-panel access, deployment method and backup process. Know whether databases, email, scheduled jobs or other sites share the same account.
Source and content rights
Confirm who owns the code, written content, photographs, fonts and licensed assets. Keep a maintainable copy of the current source and database where applicable. A screenshot or page export is not a complete website backup.
Analytics and search accounts
Google Search Console, analytics and advertising accounts should be created under business-controlled identities with appropriate supplier access—not permanently owned by an individual contractor.
Handover test
A practical handover should enable another competent professional to understand the stack, make a small change, deploy safely and restore from backup without relying on undocumented personal knowledge.