Skip to content

Free tools

Vendor Access & Ownership Check

Build a practical handoff checklist for the accounts, providers, recovery paths, and responsibilities a professional practice should control.

Browser-only checklist

Confirm who owns the critical accounts and handoffs

Answer from business records you already have. Do not enter passwords, API keys, medical information, customer data, financial-account details, or private credentials.

1.The business owns the domain registrar account and knows the primary administrator.
2.The business controls DNS administration or has a documented authorized provider.
3.Website hosting ownership, billing, and account recovery are documented.
4.The business has its own website administrator access, separate from a former vendor.
5.The business owns a Microsoft 365 or Google Workspace super-admin account.
6.Recovery email addresses and phone numbers belong to the business, not an individual vendor.
7.Online booking and form-vendor ownership, billing, and administrator access are documented.
8.Payment-link ownership and administrator access belong to the business.
9.The business maintains an inventory of approved services that send email from its domain.
10.Former staff and vendor access has been removed or formally reviewed.
11.Backup ownership and restore responsibility are documented with the responsible provider.
12.The business has current emergency contacts for its website, domain, email, workspace, and key vendors.

Answers stay in this browser tab and are not sent to CyberBit or attached to analytics.

Privacy, scope, and limitations

  • - No passwords, API keys, medical information, customer data, or financial-account details
  • - No risk score, compliance score, or breach conclusion
  • - No data submission; answers remain in the current browser tab
  • - No verification of private accounts or administrator access
  • - No replacement for provider records, contracts, or authorized configuration review

A Yes answer reflects the owner's current understanding, not independent verification. A No or Unsure answer is a handoff prompt, not evidence of compromise.