Who Owns the Domains, Inboxes and Lead Data When You Leave a Lead Generation Agency?

Say you run a 40-person branding studio and an outbound agency has worked for you for eight months. You decide to change approach and ask for the sending domains. It turns out they were bought under the agency’s own registrar account, the inboxes sit in a workspace your team has never logged in to, and every reply lives in the agency’s sending tool. Nobody behaved badly. The paperwork simply never said who owned what.

The studio is invented. The rules below are real, taken from ICANN, Google, Microsoft, Yahoo, the UK ICO and the GDPR, linked where they are used and checked on 13 November 2026. None of this is legal advice.

I run Vergelead, an outbound agency in Sofia, Bulgaria. Ownership is one of the ten checks in our guide on how to choose a lead generation agency, and this post takes that single check apart.

What does an outbound setup actually consist of?

Eight assets: the sending domains, the inboxes and the workspace that holds them, the sending tool, the lead lists and their research, the copy, the reply history, the opt-out list and the LinkedIn profiles. Each belongs to whoever holds the account, so ask about every one separately.

Asset	What it is	Where it usually sits	What to ask for
Sending domains	Lookalike domains the cold email is sent from	A registrar account	Bought in your company’s name, under a registrar login you hold, set to renew automatically
Inboxes	The mailboxes that send and receive	Google Workspace or Microsoft 365	Your company as the paying customer, and a super admin seat of your own
Sending tool	The software that runs the sequences	The tool’s own workspace	A seat of your own, or a complete export of campaigns, leads, replies and unsubscribes
Lead lists	Who was contacted, with research fields and status	The agency’s database or spreadsheets	All lists and all fields, as CSV, by an agreed date
Copy and sequences	Every email and follow-up, including old versions	The sending tool and shared documents	Ownership assigned to you in writing
Reply history	Every answer, including the “ask me again in March” ones	The inboxes and the sending tool	A mailbox export plus the tool’s reply export
Opt-out list	Everyone who asked not to be emailed again	The sending tool	The complete list, with dates
LinkedIn profiles	The accounts that send invitations and messages	Your people, or profiles the agency runs	Outreach only from your own people’s profiles

Being able to use something is different from owning it. A rep can write from an inbox every day and still have no power to renew the domain behind it, change its password or pull its mail out. Paying the monthly invoice changes none of that.

Sending from accounts the agency owns is not wrong in itself, as long as the contract spells out the exit and its cost. It is also fair for an agency to hold on to its general methods, prompt libraries and templates. The line between your assets and its tools belongs in the contract, not in an argument later.

Why should cold email go out from separate lookalike domains?

To keep your main domain safe. When complaints damage a lookalike domain, you retire it. When they damage your main domain, proposals, invoices and project updates start going to spam.

The thresholds are public. Google’s sender guidelines require every sender to authenticate with SPF or DKIM and to keep the spam rate under 0.3%, and recommend under 0.10%. Senders of 5,000 or more messages a day to Gmail must also have SPF, DKIM, an aligned DMARC record and one-click unsubscribe on marketing mail. Yahoo sets similar rules for bulk senders, including acting on opt-outs within 2 days. Microsoft has required SPF, DKIM and DMARC from domains sending 5,000 or more a day to Outlook.com since 5 May 2025.

A lookalike is a close variant of your own name. For a studio at northlight.com it could be getnorthlight.com or northlight-studio.com (both invented). Prospects still know who is writing, and your real domain stays out of harm’s way.

That sending history is also why the lookalike domains are worth owning. You paid for it to be built.

What can go wrong when you leave an agency?

Most trouble comes from accounts held in the agency’s name and from waiting periods no one planned around.

• Domains held by the agency. Putting them under your company’s name counts as a change of registrant. Under current ICANN Transfer Policy, that triggers a 60-day block on moving to a new registrar, unless the opt-out is chosen before the change.
• Domains that are too new. For 60 days after a domain is registered, or after it last moved, its registrar is allowed to turn down a transfer. Leave in month two and the domains may not be able to move yet.
• No admin seat of your own. Google’s export tool needs a super admin with 2-Step Verification whose account is generally at least 30 days old. If your admin account is only created when you hand in notice, you wait until it is about 30 days old.
• Exports that expire. Google says an export runs for at least 48 hours, usually about 72, sometimes as long as 14 days, and the files disappear 60 days after it begins.
• Inboxes shut down too soon. People you emailed a month ago still answer, and their replies bounce if the mailbox is gone.
• Replies stuck in the sending tool. Campaign results, answers and unsubscribes stay in the agency’s workspace unless someone exports them.
• Lists stripped of their research. You may receive names and addresses but not the fields that record why each person was picked and what idea they were sent.
• A missing opt-out list. Your next campaign emails people who already asked you to stop. The UK ICO tells senders to keep a do-not-email list, and GDPR Article 21 gives people a right to object to direct marketing, which must be pointed out at first contact.
• LinkedIn on profiles you don’t control. The connections and conversations go wherever the profile goes.

One caveat on timing. On 7 June 2026 the ICANN Board approved recommendations from its review of the transfer rules, but no date has been set for them to apply, so everything here describes the policy in force today. Confirm with your registrar before you plan dates.

How long could moving the domains take?

A worked example, counting from the day you give notice.

Situation	Rule that applies	Earliest you can move to a registrar of your choice
Domains already in your name, registered more than 60 days ago	5 calendar days for the transfer code	About day 5
Domains in your name, registered 40 days before notice (invented)	Transfers can be refused for 60 days after registration	Day 20, because 60 minus 40 is 20
Domains in the agency’s name, switched to yours without the opt-out	60-day block after a change of registrant	About day 60
Domains in the agency’s name, switched to yours with the opt-out chosen first	No block; 5 calendar days for the code	About day 5

The mailbox export follows the same arithmetic. If your super admin account has existed since your first month, an export started on notice day is done by day 14 at the latest. If the account is only created on notice day, you wait until about day 30 to begin, then up to 14 more days, which makes day 44.

What does it cost to rebuild if the setup stays behind?

Licenses are a small cost. Lost sending time is the big one.

Back to the invented studio. It sends 1,080 emails each working day, and if each inbox sends 18 emails a day, a cautious limit, that needs 60 inboxes (1,080 divided by 18). Every inbox is one paid user.

Plan	Published price per user a month	Cost of 60 inboxes a month
Google Workspace Business Starter	€6.80	€408
Google Workspace Business Standard	€13.60	€816
Google Workspace Business Plus	€21.10	€1,266
Microsoft 365 Business Basic	$7.00 (from 1 July 2026)	$420

The Google prices are from the EU storefront, excluding tax. New domains also cost a registration fee, about $12 a year for a .com (Porkbun lists $11.81, checked 14 November 2026).

The larger cost is time. New inboxes can’t carry full volume on their first day: Instantly advises waiting at least two weeks before new accounts go into campaigns. Suppose half of the studio’s 1,080 daily sends are first emails to new people (invented). That is 540 people a working day, or 2,700 a week. If one person in 400 became a sales opportunity (also invented), every week without sending would cost about 6.75 opportunities (2,700 divided by 400). That is an example, not a forecast, and your own rate will be different.

What should you check before you sign, and again in month one?

The test is simple. Sign in to each account yourself and make a small change. Whatever you can’t change, you don’t control.

1. Registrar. The sending domains should appear in an account your company holds.
2. DNS. You should be able to add a TXT record yourself. SPF, DKIM and DMARC are stored as TXT records.
3. Workspace. You should hold a super admin seat with 2-Step Verification, and the invoices should be addressed to your company.
4. Sending tool. You should have your own seat, not only screenshots and summaries from the agency.
5. Lead lists. A trial export should include the research fields and reply status, not just names and addresses.
6. Opt-outs. You should be able to see the opt-out list and where it is kept.

Verbal reassurance on a sales call is worth little here. If a check fails, put the fix into the contract while both sides are still keen.

In what order should the handoff happen?

The handoff begins the week you sign, not the week you leave. Registrars and Google set most of the waiting periods, so doing things in the right order saves more time than rushing.

Timing	Step	The rule behind it
First month	Check each login yourself, take a super admin seat, try one export	Exports need a super admin account generally at least 30 days old
Notice day	Request the handoff package and the transfer codes	5 calendar days for a code under current ICANN policy
Before any change of registrant	Ask the registrar for the opt-out	Without it, a 60-day block on changing registrar
That week	Begin the mailbox export, using your own admin account	At least 48 hours, usually about 72, up to 14 days; files deleted after 60 days
Before the first new campaign	Import the opt-out list into the new tool	Keep a do-not-email list (ICO)
Until the replies dry up	Leave the old inboxes running	Late answers keep arriving

What the handoff package should contain:

• registrar and DNS logins for every sending domain
• admin rights and billing for the workspace
• the mailbox export
• sending tool exports covering campaigns, leads, replies and unsubscribes
• every lead list, with research fields and reply status
• the copy and sequences, every version, with what each one produced
• the opt-out list, with dates
• confirmation that no tool is still connected to your people’s LinkedIn profiles
• meeting history, which is simplest if your CRM and calendar were in your own accounts from the start

Have the copy assigned to you in writing, and get a straight answer on which data fields travel with you. If any data was bought from an outside provider, ask before you sign whether its license lets it move with you. If a hire will take over, in-house SDR vs lead generation agency covers how to budget for the overlap.

What do Vergelead clients keep?

You keep the sending domains, inboxes, sequences and lead lists built for you. That holds today, we say so on every sales call, and the IP clause in our contract covers it. When you leave, on request, we transfer the domains, inboxes, sequences and every lead list, as a CSV with reply status, within 14 days of the final invoice.

Vergelead runs idea-led outbound for software development companies and creative agencies: it researches each prospect, finds a gap your team could close, and pitches that one idea by cold email and LinkedIn, so qualified meetings land on your calendar.

How the eight assets work with us:

• Sending runs on Google Workspace inboxes set up in your company’s name.
• Every first email pitches a specific build or project idea drawn from that prospect’s own business, and a person approves every idea before it is sent.
• Replies are answered by a person on our team, who books the meeting onto your calendar.
• Every lead and meeting shows in a client portal that syncs live, so you see the record throughout, not only at the end.
• LinkedIn outreach runs from your own people’s profiles, so the connections remain theirs.

How pricing fits with all this is covered in retainer vs pay-per-meeting lead generation.

The bottom line

Ownership is cheapest to sort out at the start, when both sides want the deal. Put the domains under your company, hold your own admin seat on the workspace, and name the copy, the lead data and the opt-out list in the contract with a delivery date. Then switching agencies is a matter of removing logins, not rebuilding from scratch.

Book a call if you want to run your current setup through the six checks above with us.