The Exit File: A Due Diligence Checklist for UK Firms Bringing SEO In-House

Bringing SEO in-house can give UK businesses tighter control over budgets, priorities and speed of response. It can also expose how much operational knowledge sits with an external agency. The risk is rarely the loss of a single report; it is the quiet loss of access, history and momentum during the changeover.

Treat the handover as a due diligence exercise. The following 12-point file is designed for SMEs that are ending an agency arrangement or moving search work to an internal marketer. It is not a substitute for legal or contractual advice, but it provides a practical evidence pack to request before access is switched off.

1. Contract, notice and exit assistance

Review the notice period, final invoicing arrangements, confidentiality terms and any exit-assistance clause. Confirm in writing what the agency will provide during the transition and by when. A 30-day notice period may be enough for a small account; a larger site with migrations, local listings and multiple stakeholders may need longer. Identify who owns the work product and whether unpublished drafts or strategy documents transfer.

2. Domains, hosting, DNS and CMS access

Confirm that the business, not the agency, controls the domain registrar, DNS, hosting, SSL certificates and content management system. Check administrator accounts rather than relying on shared logins. Record renewal dates and billing owners. If the agency manages DNS, agree a controlled transfer window and keep a rollback plan.

3. Analytics and tag management ownership

Request administrator access to the analytics property and tag manager containers. Export historical reports, audience definitions and key event documentation before access changes. Note any custom dimensions, consent settings and integrations with CRM or advertising platforms. The internal team should be able to explain how an enquiry is recorded, not merely see a dashboard.

4. Search Console and Bing Webmaster Tools

Verify site ownership through DNS or another business-controlled method. Add the internal marketer as an owner or full user. Export performance data and note any properties, sitemaps, removals or security issues. Do the same for Bing Webmaster Tools if it is part of the reporting stack. Agency email addresses should not remain the only verified owners.

5. Google Business Profile and local assets

For service-area and multi-location firms, request ownership of the Google Business Profile and a list of manager accounts. Check location details, service areas, opening hours, review response history and any duplicate listings. Record citations, local landing pages and tracking numbers. Local visibility can deteriorate quickly if profile access is unclear.

6. Redirects, migrations and technical history

Ask for the redirect map, legacy URL list and notes on previous site migrations. Check where redirects are implemented: server configuration, CMS rules or a plugin. Review 404 logs, canonical rules, hreflang if relevant and any known crawl issues. A redirect spreadsheet without an owner is not a handover; it is a future outage.

7. Technical documentation and site architecture

Request sitemaps, robots.txt rules, schema markup notes, internal linking conventions and documentation of any JavaScript rendering dependencies. Ask for a short explanation of templates, faceted navigation and pagination. The aim is not a 100-page manual; it is enough documentation for a new person to avoid breaking what already works.

8. Content calendar and inventory

Obtain the content calendar, keyword map, briefs, drafts and approval records. Confirm image licences and authorship where relevant. Note which pages are seasonal, which are commercial priorities and which have been deliberately left alone. Unpublished work can be valuable, but only if ownership and transfer are clear.

9. Link and digital PR records

Ask for a record of earned links, outreach activity, partnerships and directory listings. Request any disavow file and notes on previous link removals. The internal team does not need to continue every campaign, but it should know which commitments exist and which assets attract links.

10. Reporting history and baselines

Collect monthly reports, dashboards, KPI definitions and annotations for algorithm updates, campaigns or site changes. Export raw data where possible. Compare Search Console clicks, analytics sessions and CRM enquiries to understand the previous reporting basis. A baseline without definitions is difficult to defend when performance is reviewed three months later.

11. Budgets, tools and supplier accounts

List SEO tools, data subscriptions, call-tracking services and any annual contracts. Establish whether billing transfers to the business or whether the subscription should be cancelled. Record API keys, licence seats and renewal dates. Procurement should know the true run-rate of in-house SEO, not only the agency fee that is being removed.

12. The first 90 days in-house

Use the first two weeks to complete access, exports and a baseline review. In weeks three and four, fix obvious tracking or crawl issues and establish a change log. In month two, agree a prioritised technical and content roadmap. In month three, set a reporting rhythm and review whether any specialist support is still needed. Avoid wholesale changes simply to mark a new regime.

A clean handover protects continuity

An exit file should be assembled before the final invoice, not after a password reset. The strongest handovers are unglamorous: named owners, verified access, exported data, documented decisions and a short list of priorities. For UK SMEs, bringing SEO in-house works best when the agency departure is treated as a controlled transfer rather than an abrupt separation.