Handing maintenance to a new supplier

The week a site moves from one maintenance provider to another is the single riskiest week in its ongoing life, precisely because responsibility is ambiguous during the handover — the outgoing supplier reasonably assumes they are finished, the incoming supplier has not yet fully taken over, and an issue arising in that gap can go unnoticed by both sides simultaneously.

Why this specific transition is higher risk than ordinary maintenance

At every other point, exactly one party is responsible for the site. During a handover, that clarity briefly disappears unless it is deliberately managed, and an update failure, a missed backup, or a security incident occurring in that ambiguous window can be assumed by each party to be the other’s problem, with nobody actually acting on it until the gap is discovered later.

What actually needs to change hands in a website maintenance handover

Access to every account — CMS admin, hosting, domain registrar and DNS management, covered fully in who holds the keys to your website. The current state of the site — a full, verified backup taken at the point of transition, so the incoming supplier has a genuine, tested starting point rather than an assumption about what currently exists. A record of what has been done and what is outstanding — recent updates applied, any known issues not yet resolved, and the renewals list covered in renewals: domain, hosting, licences and certificates, so nothing already in motion is dropped simply because the person tracking it changed.

The specific handover sequence worth following

Confirm an explicit end date with the outgoing supplier and an explicit start date with the incoming one, and ensure the two overlap by at least a few days rather than assuming a clean, instantaneous cutover — a brief overlap costs little and closes the ambiguous gap almost entirely. Transfer or confirm access to every account before the outgoing supplier’s engagement formally ends, not after. And have the incoming supplier take and verify their own backup immediately upon starting, rather than relying on whatever the outgoing supplier’s own backups last captured, so there is a clear, confirmed baseline regardless of what happened before. Confirm at the same time who the business’s day-to-day support contact actually is once the new team is in place, since that answer is not always obvious in the first week.

What commonly goes wrong

Access to one account — commonly the domain registrar or the hosting account — is overlooked in the handover because it was never on anyone’s explicit list, and is discovered missing only when it is next needed, sometimes months later at a renewal date. An update or a security issue identified but not yet resolved by the outgoing supplier is never communicated to the incoming one, and is rediscovered from scratch. And a business, understandably wanting to end an unsatisfactory relationship quickly, rushes the handover and skips the overlap period, precisely the period that would have caught anything falling through the gap.

Why this is worth planning even when the change is amicable

An amicable change of supplier is not automatically a well-executed one — good intentions on both sides do not substitute for an explicit list of what has to move and a confirmed date each item actually moved. The risk here is procedural, not personal, and it applies regardless of how well the outgoing and incoming suppliers get along.

Why the incoming supplier should ask, not only the business

A genuinely thorough incoming supplier proactively asks for the full access and handover list themselves, rather than waiting for the business to volunteer it, because they are the party best placed to recognise if something important is missing before it becomes their problem later.

What to do if the outgoing supplier is uncooperative

Where an outgoing supplier delays or refuses to hand over access the business is entitled to, escalating in writing, referencing the original engagement terms, and if necessary treating it as the same kind of dispute covered for domains and hosting elsewhere in this section, is the appropriate response — a business’s own site and its underlying accounts belong to the business, not to whichever supplier last touched them.

A simple handover checklist worth keeping on file

A one-page document listing every account, who currently holds it, and the date it was last confirmed accessible, used at every supplier change rather than reconstructed from scratch each time, turns an occasionally stressful transition into a routine, well-documented one.

Why a rushed handover during a dispute is the riskiest version

Where a supplier relationship has ended acrimoniously, the temptation is to move everything as fast as possible to sever ties quickly — this is precisely when a methodical, itemised handover matters most, because urgency and poor documentation together are what actually cause something to be missed, not the underlying difficulty of the handover itself.

The value of a trial period with a new supplier before full commitment

Where practical, engaging a new supplier for a short, defined initial period before committing to a longer retainer lets both sides confirm the handover was genuinely complete and the working relationship suits, before either party is locked into a longer arrangement on the strength of good intentions alone.

A final thought on continuity

The business, not any individual supplier past or present, is the constant across every handover — treating the accumulated knowledge about the site as the business’s own asset, documented and available regardless of who currently holds the maintenance relationship, is what actually protects continuity through however many suppliers a site has over its lifetime.

Where to go from here

The full list of accounts and access that need to be accounted for is set out in who holds the keys to your website. And what a new supplier should be quoting to take over an existing site’s maintenance, rather than starting from an unclear baseline, is worth confirming as part of website design company.