In most companies, domain names are registered to the personal email address of an employee hired years ago. The worst time to discover this is the day the renewal date passes — because on that day your corporate email goes quiet alongside your website.
Short answer: what is a domain inventory and why does it matter?
A domain inventory is a table listing every domain the company owns, together with its registrant, administrative email, registrar, expiry date and the service it supports. The reason it matters is simple: a domain belongs not to whoever pays the invoice but to whoever is named in the registration record. Companies without an inventory do not know which assets they genuinely own until something goes wrong.
Three classic ways companies lose a domain
1. Registered to a departed employee
The employee who built the company's first website registers the domain using their personal email. Years later they leave and the address falls out of use. Renewal reminders now reach nobody. When the domain expires, recovering it stops being a technical task and becomes a legal one.
2. Registered to an agency or supplier
The agency that built your site registers the domain under its own account for convenience. While the relationship is healthy the problem is invisible. When you part ways, the party with authority over the domain is not you — and the transfer depends on their cooperation.
3. The payment method quietly expires
Auto-renew is on and everyone relaxes. Then the stored card expires, the automatic payment fails, and the notification email lands in a spam folder. The domain lapses and nobody notices — until the site goes dark.
What these three share: none is a technical fault. All three stem from a lack of tracking, and all three are prevented by a simple inventory.
The inventory table: which columns you need
| Column | Why it is needed |
|---|---|
| Domain name | Include redirects and defensive registrations |
| Registrant (WHOIS) | Legal ownership is decided here — must be the company name |
| Administrative email | Critical: corporate and shared, never personal |
| Registrar | First point of contact for transfers and support |
| Expiry date | The basis of your renewal calendar |
| Auto-renew | On/off, plus the expiry date of the payment method |
| Service it supports | Website, email, or redirect only |
| Transfer lock | Is the setting that blocks unauthorised transfer enabled |
| Internal owner | Who tracks it must be written down |
Who should hold ownership and control?
- Registrant: The legal owner. The company's registered name belongs here. If an individual's name appears, the domain legally belongs to that individual.
- Administrative contact: Where critical notices are sent. It should be a corporate address reachable by more than one person, never tied to a single individual.
- Technical contact: Responsible for DNS and configuration. An agency or provider here is fine — it confers no ownership.
The practical rule: you can share technical control; never share ownership.
WHOIS privacy: protection or risk?
WHOIS privacy hides your personal details from public lookups, which is usually desirable. Two caveats apply. First, privacy only masks visibility — it does not change the ownership record; you remain the registrant behind it. Second, in a dispute you may need to prove ownership, so having accurate details registered in the company's name matters more than privacy does.
Annual audit checklist
- List every domain, including unused ones, old campaign names and defensive typo registrations.
- Verify the registrant on each record. Correct it if the company name is missing.
- Move the administrative email to a shared corporate address. No record should depend on one person.
- Put expiry dates in a calendar, with reminders 60 and 30 days ahead.
- Check the payment method's expiry date — the most common cause of failed auto-renewal.
- Keep transfer locks enabled, disabling only for a genuine transfer.
- Decide on unused domains: separate those kept for brand protection from those to release.
- Review DNS records. Stale entries can create security exposure.
- Assign a responsible person in writing, and name a deputy.
Netişlem expert view: the pattern we see most
Across the accounts we take over, one situation repeats: the company believes it owns its domain, yet the WHOIS record names someone who left years ago, alongside an email address that no longer exists. While the site works, this is an invisible problem. The moment it becomes visible is usually the worst possible one — the day the renewal lapses.
The second frequent case is not realising that corporate email depends on the same domain. When a domain lapses, it is not only the website that stops: order notifications, customer correspondence and password-reset emails stop too. The blast radius is far wider than expected.
Our advice is therefore always the same: set aside one hour a year to refresh the inventory. For digital assets, it is the lowest-cost, highest-return exercise available to you.
Frequently asked questions
Does whoever pays the invoice own the domain?
No. Ownership is determined by the registrant recorded in WHOIS. The invoice may be issued to another party; that creates no ownership. This is why the registrant field must carry the company's registered name.
Can I recover an expired domain?
There is usually a redemption period after expiry during which recovery is possible, though at additional cost and under time pressure. Once that passes, the domain is released and can be registered by anyone. Recovery then becomes a negotiation or a legal process.
Is it a problem if my agency holds it?
While the relationship continues you may notice nothing. But if the ownership record is not yours, any transfer depends on the other party's cooperation. The correct arrangement is ownership with the company and technical control delegated to the agency.
How many defensive domains should I register?
An unlimited list is unnecessary. Common practice is to secure the main brand across the most-used extensions plus frequent misspellings. The decision should be proportionate to your brand recognition and abuse risk.
What is the difference between a domain and a trademark?
A domain is a right of use; a trademark registration is a property right. In disputes, the trademark is usually decisive — registering a domain alone does not create trademark rights. Protection becomes meaningful when the two are arranged together.
Conclusion
A domain portfolio is an invisible risk until it is inventoried. A one-hour annual audit removes almost all of that risk by correcting three items: ownership, contact address and renewal calendar.
If you would like us to review your portfolio with you, get in touch. You can also explore our domain services, transfer process and trademark advisory.