Most small businesses don’t think hard about who builds their website until something goes wrong: they want to switch vendors and can’t get the domain released, or they want a phone number changed and get quoted a fee for a two-minute edit. By then the leverage is already gone.
The good news is that every one of these problems is avoidable, and they all trace back to a small set of questions you can ask before you sign anything. Ask them up front, get the answers in writing, and you’ll never find out the hard way that your website was never really yours. If you’re also trying to figure out what a rebuild or a monthly plan should reasonably cost, our breakdown of website management costs in 2026 is a useful companion to this list. And if “website as a service” is a new phrase to you, that’s the model this whole checklist assumes: you’re hiring an ongoing service, not just buying a one-time build, and what website as a service actually means for a small business is worth reading first.
Here are the six questions.
The checklist
| Question | What it protects |
|---|---|
| 1. Is the domain in your company’s name? | Your ability to leave |
| 2. Do you control your own Analytics and Search Console? | Your ability to measure performance |
| 3. Do form leads come straight to you? | Your pipeline |
| 4. Does call and visitor tracking actually work, with consent handled? | Your marketing data and your compliance |
| 5. Do you get a real page per service and per area? | Your findability, on Google and on AI assistants |
| 6. Are edit turnaround and limits written into the agreement? | Your budget and your sanity |
Walk through each one before you sign, not after.
1. Is the domain registered in your company’s name?
Why it matters: The domain is the address of your business online, and whoever’s name is on the registration controls whether you can ever move it. This is the single most common way small businesses get stuck: a vendor builds the site, registers the domain under their own account “for convenience,” and years later that convenience becomes a hostage situation.
What a good answer sounds like: “Yes. It’s registered to your company, at a registrar where you have the login yourself, or can get it in minutes if you ask.”
The red flag: Any version of “we handle that for you” without a straight answer about whose name is on the registration, or a vendor who can’t produce your registrar login when you ask for it. If you have to negotiate to get your own domain, you already know how this ends.
How Surmado answers it: Yes, always. Your domain is registered in your company’s name from day one. If you ever leave Surmado, your domain leaves with you, because it was always yours. This is also the problem behind a lot of the vendor lock-in we’ve written about elsewhere, including what restaurants run into with Owner.com when they try to switch.
2. Do you control your own Google Analytics and Search Console?
Why it matters: Analytics and Search Console are the only independent record of how your site is actually performing: what people search to find you, how much traffic you get, what pages convert. If a vendor keeps these under their own account and only ever sends you a summary, you have no way to verify their numbers, and no way to take that history with you if you switch.
What a good answer sounds like: “Yes, you’ll have owner-level access under your own Google account, not just a report we generate for you.”
The red flag: A vendor whose reporting lives entirely inside their own dashboard, with no path to owner access on the actual Google properties. “We’ll send you a monthly PDF” is not the same as owning the data.
How Surmado answers it: Yes. You get access to your own Analytics and Search Console properties.
3. Do quote-form leads go directly to you?
Why it matters: A contact form or quote request is the whole point of most small business websites. If those submissions route through a vendor’s system before they reach you, you’re depending on someone else to forward them promptly, completely, and without filtering. That’s an unnecessary point of failure sitting between you and revenue.
What a good answer sounds like: “Every submission comes straight to your inbox or CRM, with no intermediary step and nothing held back.”
The red flag: Leads that land in a vendor-controlled portal you have to log into separately, or a vague answer about “how leads get routed” when you ask directly.
How Surmado answers it: Yes, leads are yours, and they go where you tell them to go. On Pro+, every form fill is also enriched and scored automatically, and you can export that data to any CRM you already use.
4. Does phone-call and visitor tracking actually work?
Why it matters: If you’re spending money on ads or referrals, you need to know which ones are actually producing calls and site visits, not just clicks. But tracking visitors also means handling cookie consent correctly by region, which is a real compliance requirement, not a nice-to-have. Ask specifically what’s tracked, and specifically what happens with consent.
What a good answer sounds like: A vendor who can tell you exactly what’s tracked, shows you the consent banner, and is precise about what’s included in your plan versus what costs extra. If phone answering is part of the conversation, they should be equally precise about whether that’s a base feature or a separate add-on.
The red flag: “We track everything” with no mention of consent at all, or a bundled-sounding pitch that quietly folds live call answering into a base plan without pricing it separately, only for it to show up as a surprise later.
How Surmado answers it: carefully, because this is where vendors tend to blur two different things together. Visitor and ad tracking, with a region-aware cookie consent banner, ships as part of Pro+. Live call answering, the Receptionist, is a separate custom add-on and is not included in Pro+. If a vendor tells you phone answering comes bundled into a standard plan, ask them to show you that in writing.
5. Do you get a separate page for each major service and service area?
Why it matters: A single page trying to cover every service and every town you serve can’t compete with a site that has a dedicated page for “roof repair” and another for “gutter installation,” each written for the town it targets. This isn’t just an SEO nicety anymore: AI assistants answering “who does X near me” pull from specific, well-structured pages, not a single generic homepage.
What a good answer sounds like: “You get a real page for each service and each area, not one landing page trying to do everything.”
The red flag: A single-page or “one landing page fits all” build, or a model where every additional page costs extra indefinitely with no ceiling in sight.
How Surmado answers it: Yes. Surmado builds complete multi-page sites, not landing pages, with dedicated pages by service and by area. Sites over 100 pages are available by request for businesses that need that scale.
6. Are edit turnaround and limits written into the agreement?
Why it matters: This is where most website relationships actually go bad. Not at signup, but six months later, when you ask for a small change and get an invoice you didn’t expect, or wait weeks for something that should take an hour. If the terms for edits aren’t written down before you sign, you’re negotiating them one request at a time, with no leverage.
What a good answer sounds like: A vendor who tells you plainly, in the agreement, what kinds of edits are included, how you request them, and what the terms are, rather than leaving it to be discovered later. Some vendors do this with a person on staff who handles requests manually; others are shifting that day-to-day maintenance work to an AI system instead, which is worth understanding if you’re evaluating that kind of setup: see what an AI webmaster actually does.
The red flag: Anything you only find out about on the invoice. Or the opposite overcorrection: a vendor promising unrealistically fast turnaround with no process behind it.
How Surmado answers it: Small edits and minor page updates are included for active customers, requested in plain English, and the terms are written down, not discovered later on a bill. That’s separate from an initial rebuild, which follows its own timeline: most rebuilds are ready within 24 hours, and every one goes through a human 42-point QA pass, checking links, forms, mobile layout, accessibility, metadata, security, and performance, before it’s shown to you for approval.
The bottom line
A business that can answer yes to all six of these owns its web presence. A business that can’t is renting it from a vendor who decides the terms.
None of these questions are complicated, and a vendor with a clean answer to all six shouldn’t hesitate to give it to you in writing. If one dodges even one of them, that’s the answer.
If you want to see how this actually looks, Surmado Sites rebuilds your site for free and you only pay after you see and approve the result: your domain, your analytics, your leads, real pages for every service and area, and edit terms that are written down from the start. There’s a 7-day money-back guarantee and no annual contract either way. Full plan details, including Pro and Pro+, are on the pricing page.
Ready to see your own answers to these six questions?
Get your free rebuild and preview it before you pay anything.