Keep the domain under the business's control
Register the domain in an account owned by the business, enable two-factor authentication and record renewal details. A supplier can manage access without becoming the legal owner.
Separate hosting, DNS and professional email
Choose hosting for performance and support, DNS for reliable records, and email with SPF, DKIM and DMARC. Backups should be restorable and stored separately from the live site.
Frequently asked questions
Should the web designer own the domain?
No. The business should be the registrant and grant limited access to suppliers.
What protects business email from spoofing?
Correct SPF, DKIM and DMARC records plus strong account security reduce impersonation and delivery problems.