Direct answer
Ownership is the ability to build, deploy, and change the portal after the studio leaves. If the vendor holds the schema, the theme, and the export, you rented a workflow — you did not buy a product.
Neither path is morally superior. Write the lock-in, the export, and the rewrite cost before you sign.
What handover must include
Git remote, environment list, identity provider, file bucket, and a paired deploy. Access-control tests that fail when a tenant ID is swapped. A warranty window in writing.
Edge-hosted custom portals (for example Cloudflare Workers) still need that handover. ‘It runs on the edge’ is not an ownership model.
A practical sequence
Decide ownership before UI.
- List data you must export on demand
- Read the vendor’s deletion and export terms
- Price a custom v1 against three years of seats
- Require source and account transfer in the proposal
- Refuse ranking or lead promises as part of either quote
People-first still applies
Google’s helpful-content bar is a useful editorial test for the public site around the portal: say what you built, who it is for, and what you will not claim. Do not mark up private portal screens as public Articles.
What to send if you want a senior review
Share whether you need to own the git remote. Related work at Kiwi: embedded product design and engineering team, and SaaS MVP design and development.
Frequently asked questions
Is source ownership the same as IP?
You want both: copyright in the proposal and the practical ability to deploy. IP without the repo is a letter. A repo without IP is a hostage.
Can we start rented and rewrite later?
Yes, if you keep an export path. Write the rewrite trigger: seats, missing permission model, or a vendor roadmap that blocks a job.
Does Kiwi lock clients into a portal runtime?
No. At the agreed handover you receive source, access, and runbooks. Timing is written in the proposal.
Sources
- OWASP — Enforce access controls
- Cloudflare Docs — Workers
- Google Search Central — Creating helpful, reliable, people-first content
Figures cited above are drawn from the linked publications and are the responsibility of their sources; we date and scope them rather than presenting them as universal guarantees.