Our take: the best website is the one you can leave with

Why we measure a website by how easily its owner could take it to another partner, and what that standard forces us to do differently.

4 minread 953words last updated

The short answer

We judge a website by a simple test: could a competent stranger take it over in a week without talking to us? If the answer is yes, the site is an asset the business owns. If the answer is no, the site is a liability dressed as an asset, whatever it looks like, because the business depends on one supplier for its own front door. Holding ourselves to that standard forces decisions we would defend on their own merits: standard, widely known technologies rather than clever proprietary ones; a named holder for every account and a written route to move any of them; content structured and exportable rather than locked in layouts; setup written in files rather than clicked into dashboards; documentation a stranger could follow; a pipeline anyone can run; and nothing that lives only on our infrastructure or in our heads. It is good for the client, obviously. It is also good for us, because clients who could leave and do not are staying by choice, and a site handed over cleanly is a reference. If a partner cannot describe how you would leave, you have learned what kind of partner they are.

What the standard requires

AreaWhat being able to leave requiresWhat dependence looks like
CodeIn the client’s repository, on standard frameworksIn the supplier’s account, or on a framework only they use
AccountsDomain, hosting, email, analytics, services in the client’s nameSome or all in the supplier’s name
ContentStructured, exportable, independent of presentationOnly exists as pages in a proprietary system
SetupRedirects, headers, environments, DNS written in filesClicked into dashboards; remembered by a person
SecretsIn platform secret storage the client controlsHeld by the supplier
DocumentationCurrent, in the repository, written for a strangerNone, or out of date
PipelineStandard platform build; anyone can deployCustom tooling on the supplier’s machines
HostingThe client’s account on a public platformThe supplier’s server or reseller account
KnowledgeExplained monthly; an internal owner who understandsThe supplier is the only one who knows
ExitDescribed in writing, with a hand-over processNever discussed

What it changes in how we work

  1. Standard technologies chosen for how many people know them, not for how clever they are.
  2. A named holder for every account from day one, written down, with access granted per person and removable.
  3. Structured content so words and images are never trapped in a layout.
  4. Setup as files in the repository, with the few dashboard-only settings documented.
  5. Documentation written for a stranger, updated with every change.
  6. A written explanation of what changed and why, kept with the project, so an internal owner understands the site.
  7. A takeover test when the documentation changes materially, with someone who has never seen the project.
  8. An exit process written into the agreement, with what is handed over and when.

Why it is good for us too

A client who stays because leaving is hard is a client who resents the arrangement and leaves badly the moment they can. A client who could leave any month and stays is a client who values the work, and that is the relationship worth having. The standard also keeps our own work honest: a site built to be handed over is built cleanly, documented properly and explained regularly, which is how good work is done anyway. And every site handed over well to a successor is a business that speaks well of us afterwards.

What this means for you

Measure your website, and your partner, by how easily you could leave: code in your repository, accounts in your name, structured content, setup in files, documentation for a stranger, a standard pipeline, an exit described in writing. A site that passes is yours; one that fails belongs to whoever built it. Ask your partner to describe how you would leave, and treat the quality of the answer as the quality of the relationship.

Written by the CivSec S.M.A.R.T team

We build and run websites, software and AI systems for businesses. We write about what we see in that work, in plain language, and we update articles when things change.

Last checked . Spotted something outdated? Tell us.

Frequently asked questions

Why would a supplier design for being left?

Because the alternative is designing for dependence, and dependence is a poor foundation for a relationship. A site the client can take anywhere has to be built on standard technologies, in the client's accounts, with documented setup and structured content, which is also what makes it fast, secure and cheap to change. The client stays because the work is good, and the standard keeps us honest about that every month.

What does portable actually mean for a website?

The code is in a repository the client owns, on widely used frameworks and platforms that any competent developer knows. Every account has a named holder, written down, and any layer the supplier holds transfers to the client on request. Content is structured and exportable. The setup, redirects, headers, environments and DNS, is written in files. There is documentation a stranger could follow. There is nothing that runs only on our infrastructure or only in our heads.

How would we test this with our current partner?

Ask them to describe, in writing, how you would leave: what you would take, from where, what a new partner would need, how long it would take. A clear, short answer with a list of accounts and a pointer to documentation means you own your site. A vague answer, a mention of proprietary systems, or a change of subject means the site is theirs in every way that matters.