1. The ownership map
Example with made-up dataAfter the ownership check: one call, the map within two working days.
You control 1 of the 9 things your app depends on. The app runs, but the agency still holds the Google Play account, the signing key and the code, so nobody at your company can publish a fix today.
| What | Who controls it today | Risk | The step to get it back |
|---|---|---|---|
| Google Play account | The agency's developer account | red | App transfer to your company's account; the agency starts it, we write the request. 1–2 weeks. |
| Apple account | Your company's, but only the former manager can sign in | amber | A second admin, and two-factor sign-in on a company phone. One hour. |
| Signing keys | Android upload key with the agency; Apple certificates expired | red | Reset the upload key through Google; new Apple certificates. 2–5 days. |
| Source code | The agency's repository; your latest copy is from 2022 | red | We ask for access; if it doesn't come, we recover the code from the published app. 1–3 weeks. |
| Server and hosting | Azure in your company's name, paid with the former manager's card | amber | Billing on the company card and a named admin. One day. |
| Domain names | The server's address is registered by the agency | red | Transfer the domain to your company's account. One week. |
| Data and backups | The database is yours; a restore has never been tested | amber | A test restore. One day. |
| Outside services | Notifications (Firebase) in the agency's Google account; payments in yours | amber | Move the Firebase project to your company. One day. |
| Contract | The code is yours once paid in full; the last invoice is paid | green | Keep the copies; we ask the agency for a written confirmation. |