{"id":102,"slug":"research-brief-owning-your-stack","title":"Research brief: Owning your stack — why agency-managed platforms cost more than they save (piece 4 of 15)","kind":"reference","scope":"business","status":"current","audiences":["kevin","claude-code","smb-owner","candid-team"],"topics":["agency-methodology","platform-lock-in","data-portability","domain-registration"],"reference_body":"**Status:** Research material — not a finished article. Compiled May 22, 2026.\n\n## TL;DR\n\n- \"Ownership\" in 2026 is a layered claim — domain, DNS, code, content, data, infrastructure, analytics, and customer relationships each live in different places, and most small businesses unknowingly cede control of three or four of those layers to their agency or platform.\n- The lock-in costs are not theoretical: roughly **9 of 10 web migrations fail to improve SEO** (single-source — flag), 50% organic traffic loss is common, and the average post-migration recovery is **523 days** (Search Engine Journal study of 892 domain migrations, Jan 2025). One UK retailer lost ~£3.8M in the first month of a botched migration.\n- The **WP Engine / Automattic dispute** (Sept 2024 → ongoing), **Shopify's forced sunset of checkout.liquid** (Aug 13, 2024 / Aug 28, 2025 / June 30, 2026), and **Squarespace's absorption of Google Domains** (Sept 7, 2023, $180M) are three live case studies that prove platform \"ownership\" is conditional.\n- The defensible position for a small business is not \"build everything custom\" but a small, boring, portable stack: own the registrar account under the business's own name as the Registrant, own the Git repo, use open content formats, keep an exportable database, and treat any platform that can't produce a clean export as a hostage situation in slow motion.\n\n## Decomposition\n\nStrongest atomic claims and case studies are filed as their own entries, linked below. The Ownership Checklist (the practical deliverable) lives at [[ownership-checklist-at-agency-separation]]. Recommendations are filed as rule entries.\n\n## Honest gaps and caveats\n\n- The \"9 of 10 migrations fail\" framing is single-sourced (Numen Technology blog citing unnamed analysis). Lead public-facing writing with the **523-day** stat instead — it's the SEJ 892-migration study and is the stronger evidence. See [[migration-9-of-10-fail-numen-single-source]] vs [[sej-892-migrations-523-day-recovery]].\n- Domain-hostage cases are pattern-documented but rarely litigated. Describe the pattern; don't overstate prevalence.\n- The WP Engine / Automattic case is in motion through 2026; specific procedural details cited should be flagged with \"as of [date].\"\n- Candid Creative's own stack (Cloudflare Tunnel, self-managed VM) has real Cloudflare-specific dependencies that should be acknowledged, not glossed.\n- Page builders are not uniformly bad anymore — Divi 5's block format and Elementor's Gutenberg interop suggest the category is fixing its lock-in problem. The strongest \"shortcode lock-in\" argument applies to legacy installs.\n- GDPR Art 20 portability is narrower than commonly assumed. It covers personal data, not website content / SEO rankings / plugin config.\n- The Doctorow framing is rhetorical, not empirical. Some platforms (Stripe, Cloudflare, Postgres, Linux) have not enshittified despite being enormous. Use as a *diagnostic*, not a *law*.\n\n## Editorial direction (for the public piece)\n\n1. Lead with a concrete recent event (Shopify checkout.liquid sunset or ACF takeover), not the framework. Doctorow framing arrives on page 2.\n2. Treat the Ownership Checklist as the deliverable. Most readers will scan, save the checklist, and act on it.\n3. Stage recommendations by audience (under-5-year sites, Wix/Squarespace owners, WordPress + page builders, new builds).\n4. Honest \"owned stack\" pricing for an SMB: $30–$80/month in infrastructure (Postgres + small VM + Cloudflare + registrar + Workspace) + a maintenance retainer that reflects real operational work. Don't undersell the retainer — that's where the operational-risk counter-argument lives.","rationale_body":"Why this brief exists: \"ownership\" is the most under-explained concept in SMB web work, and the 2024-2026 evidence base now justifies a firm Candid position. Three live case studies (WP Engine/Automattic, Shopify checkout.liquid, Squarespace + Google Domains) carry the argument without abstract theorizing. The Ownership Checklist is the deliverable that survives the article.","metadata":null,"links":{"outgoing":[{"slug":"doctorow-enshittification-pattern","title":"Doctorow: \"enshittification\" — the three-phase decay pattern of platforms (Word of the Year 2023 + 2024)","kind":"reference","scope":"business","link_type":"relates-to"},{"slug":"doctorow-right-of-exit-interoperability","title":"Doctorow's prescription: \"right of exit\" requires interoperability, not just open source","kind":"reference","scope":"business","link_type":"relates-to"},{"slug":"solid-project-berners-lee","title":"Solid project (Tim Berners-Lee) — data-pod architecture; ODI took stewardship Oct 2024","kind":"reference","scope":"business","link_type":"relates-to"},{"slug":"indieweb-posse-pattern","title":"IndieWeb POSSE: \"Publish on Own Site, Syndicate Elsewhere\" (Tantek Çelik, June 2012)","kind":"reference","scope":"business","link_type":"relates-to"},{"slug":"wp-engine-automattic-dispute-timeline-2024-2026","title":"WP Engine vs Automattic timeline (Sept 2024 → ongoing) — open-source has centralized choke points","kind":"reference","scope":"business","link_type":"relates-to"},{"slug":"acf-scf-forced-fork-october-2024","title":"ACF → SCF forced fork (Oct 12, 2024) — first unilateral plugin takeover in 21-year WordPress history","kind":"reference","scope":"business","link_type":"relates-to"},{"slug":"automattic-blackrock-markdown-67pct-2025","title":"BlackRock marks down Automattic shares 67.4% to $27.74 (June 30, 2025) — financial signal of dispute cost","kind":"reference","scope":"business","link_type":"relates-to"},{"slug":"webflow-export-limitations-cms-not-included","title":"Webflow code export: CMS / accounts / e-commerce / localized content NOT included; forms and search don't work","kind":"reference","scope":"business","link_type":"relates-to"},{"slug":"wix-no-export-by-design","title":"Wix officially: \"no export is possible\" — confirmed in writing as a structural property","kind":"reference","scope":"business","link_type":"relates-to"},{"slug":"squarespace-7-1-no-xml-export","title":"Squarespace 7.1: no XML export at all. 7.0 export omits images, products, custom CSS, video, audio, drafts, non-blog pages","kind":"reference","scope":"business","link_type":"relates-to"},{"slug":"shopify-checkout-liquid-sunset-2024-2026","title":"Shopify checkout.liquid sunset (Aug 2024 → Aug 2025 → June 30 2026) — unmigrated customizations will be DELETED","kind":"reference","scope":"business","link_type":"relates-to"},{"slug":"shopify-plus-merchant-count-2026","title":"Shopify Plus: ~47,130 distinct merchants on 70,696 domains (Store Leads 2026); ~31% of Shopify's MRR","kind":"reference","scope":"business","link_type":"relates-to"},{"slug":"shopify-custom-function-migration-cost","title":"Shopify checkout customization rebuild: $2k–$10k per shop, 4–8 weeks for complex Scripts","kind":"reference","scope":"business","link_type":"relates-to"},{"slug":"squarespace-acquired-google-domains-2023","title":"Squarespace acquired Google Domains for $180M (Sept 7, 2023) — ~10M SMB domains migrated automatically","kind":"reference","scope":"business","link_type":"relates-to"},{"slug":"icann-registrant-is-legal-owner","title":"ICANN: listed Registrant is the legal owner of a domain — admin/technical contact is NOT ownership","kind":"reference","scope":"business","link_type":"relates-to"},{"slug":"agency-domain-hostage-pattern-recurring","title":"Agency-as-Registrant \"domain hostage\" pattern — practitioner-documented but rarely litigated","kind":"reference","scope":"business","link_type":"relates-to"},{"slug":"divi-4-shortcode-lockin-et-pb","title":"Divi 4 stored content as proprietary [et_pb_*] shortcodes — orphan text on theme deactivation (Divi 5 fixes this)","kind":"reference","scope":"business","link_type":"relates-to"},{"slug":"elementor-no-deactivate-with-content-issue-5667","title":"Elementor: no built-in \"deactivate but retain content\" option — open feature request since 2018","kind":"reference","scope":"business","link_type":"relates-to"},{"slug":"acf-data-broken-in-xml-export","title":"ACF custom fields don't survive WordPress's native XML export — image IDs + serialized arrays break","kind":"reference","scope":"business","link_type":"relates-to"},{"slug":"google-workspace-no-cross-tenant-file-transfer","title":"Google Workspace: cannot transfer file ownership to external accounts; client separation requires IMAP+DNS migration","kind":"reference","scope":"business","link_type":"relates-to"},{"slug":"gdpr-article-20-portability-narrow","title":"GDPR Article 20: portability is narrow — only user-provided data, only under consent/contract, excludes derived data","kind":"reference","scope":"business","link_type":"relates-to"},{"slug":"eu-data-act-sept-2025-2027","title":"EU Data Act (Regulation 2023/2854): SaaS switching procedures effective Sept 2025; switching fees abolished by Sept 2027","kind":"reference","scope":"business","link_type":"relates-to"},{"slug":"quebec-law-25-data-portability-sept-2024","title":"Quebec Law 25: data portability effective Sept 22, 2024; penalties up to C$25M / 4% of worldwide turnover","kind":"reference","scope":"business","link_type":"relates-to"},{"slug":"bill-c-15-canada-pipeda-mobility-2025","title":"Canadian Bill C-15 (tabled Nov 4, 2025) — proposes data-mobility framework for federal PIPEDA","kind":"reference","scope":"business","link_type":"relates-to"},{"slug":"sej-892-migrations-523-day-recovery","title":"Search Engine Journal (Jan 2025): 523-day average recovery from domain migration (n=892); 17% never recover by 1,000 days","kind":"reference","scope":"business","link_type":"relates-to"},{"slug":"migration-9-of-10-fail-numen-single-source","title":"\"9 of 10 web migrations fail\" — single-sourced (Numen Technology); use 523-day SEJ stat instead","kind":"reference","scope":"business","link_type":"relates-to"},{"slug":"uk-retailer-3-8m-migration-loss","title":"UK retailer lost ~£3.8M in first month after botched migration — IT consultants rejected redirect mapping","kind":"reference","scope":"business","link_type":"relates-to"},{"slug":"coalition-tech-bigcommerce-28k-to-13.4k-keywords","title":"Coalition Tech \"Client ABC\" BigCommerce migration: 28,000 → 13,400 ranking keywords in 10 months","kind":"reference","scope":"business","link_type":"relates-to"},{"slug":"web-migrations-can-succeed-with-discipline","title":"Counter-example: well-planned migrations can produce 3-5× traffic gains (BrightEdge / Numen case studies)","kind":"reference","scope":"business","link_type":"relates-to"},{"slug":"ownership-checklist-at-agency-separation","title":"Ownership Checklist: what an SMB must be able to walk away with at agency separation","kind":"reference","scope":"business","link_type":"relates-to"},{"slug":"rule-list-business-as-domain-registrant","title":"RULE: Always list the business (not the agency) as the domain Registrant. Step 1 of every engagement.","kind":"rule","scope":"business","link_type":"relates-to"},{"slug":"rule-require-database-export-day-one","title":"RULE: Require a working database export on Day 1 of any engagement. Test it. Re-test quarterly.","kind":"rule","scope":"business","link_type":"relates-to"},{"slug":"rule-document-exit-transition-in-contract","title":"RULE: Standard agency contract includes a written exit-transition clause naming deliverables and timelines","kind":"rule","scope":"business","link_type":"relates-to"},{"slug":"rule-treat-no-export-as-hostage-situation","title":"RULE: A platform that cannot produce a clean export today is a hostage situation. Treat it as such.","kind":"rule","scope":"business","link_type":"relates-to"},{"slug":"research-brief-marketing-sites-that-do-something","title":"Research brief: What makes a marketing site do something (piece on brochure vs platform)","kind":"reference","scope":"business","link_type":"relates-to"},{"slug":"research-brief-kb-backed-website-methodology","title":"Research brief: The knowledge-base-backed website (piece 3 of 15)","kind":"reference","scope":"business","link_type":"relates-to"},{"slug":"managed-platforms-buy-security-team","title":"Counter-argument: a $200/mo managed platform buys you a larger security team than most agencies have","kind":"reference","scope":"business","link_type":"relates-to"}],"incoming":[{"slug":"research-brief-ia-multi-vertical-service-business","title":"Research brief: Information architecture for service businesses with multiple verticals (piece 6 of 15)","kind":"reference","scope":"business","link_type":"relates-to"},{"slug":"research-brief-built-to-last","title":"Research brief: Built to Last — why most SMB sites rebuild every 3-4 years (piece 5 of 15)","kind":"reference","scope":"business","link_type":"relates-to"},{"slug":"research-brief-case-against-page-builders","title":"Research brief: The Case Against Page Builders (piece 10 of 15)","kind":"reference","scope":"business","link_type":"relates-to"},{"slug":"research-brief-dataset-is-the-product","title":"Research brief: The Dataset is the Product — when a service business should own its data (piece 12 of 15)","kind":"reference","scope":"business","link_type":"relates-to"},{"slug":"foundation-roadmap-15-pieces-closure","title":"CANDID REFERENCE: how the 15-brief foundation roadmap connects — the throughline from strategic frame to editorial layer","kind":"reference","scope":"business","link_type":"depends-on"}]},"created_at":"2026-05-22T19:17:26.715Z","updated_at":"2026-05-22T19:17:26.715Z"}