Skip to content

Working with a client who has no technical contact

  • Home
  • Blog
  • Working with a client who has no technical contact
Working with a client who has no technical contact

Working with a client without a technical contact means you own the technical decisions, not just the code. You translate risk into plain language, get written sign-off from whoever holds the budget, and put every credential, licence and DNS record in the client's name so nothing depends on your memory.

Key Takeaways

  • Assume the client cannot review your work technically, so write down every decision in language a founder or office manager can act on.
  • Build the inventory before the interview: registrar, DNS zone, hosting panel, repository, database, certificate expiry and third-party accounts.
  • Every account, licence and domain belongs in the client's name with the client's billing details, even if you operate it.
  • Replace verbal approval with a written change note that states what changes, what could break, and how to roll back.
  • Incident triage means asking what the user saw, on which page, at what time — never asking a non-technical person to run commands.
  • Expect real translation overhead. It is cheaper than the rework that follows a misunderstood requirement.
  • The handover is the deliverable: runbook, credentials, renewal calendar and one named owner on the client side.
How a project runs when the client has no technical contactFour ordered stages, from discovery through a plain-language plan and build to handover with a runbook.Running a project with no technical contact1Discoverywhat breaks2Plain planrisk and order3Buildsign-offs4Handoverrunbook
The four stages of a delivery to a client with no technical contact, ending in a handover the client can actually operate.

What does a client without a technical contact actually look like?

A client without a technical contact is a business where nobody on staff reads code, owns a server login, or can tell a DNS record from a hosting panel. The founder, office manager or accountant approves the work. You become the only person who can judge whether a technical decision is sound.

In practice this covers a lot of ground. It is the trekking agency running a WordPress booking site. It is a small distributor with an internal stock system one developer built years ago and never documented. It is a Kathmandu clinic with a mobile app published under an account nobody remembers creating. None of these are unusual — most businesses buy technology the way they buy accounting, and the absence of an internal engineer is not a failure of the client. It is simply the starting condition.

What changes is who you talk to. You will explain a database migration to someone whose mental model of the website is "the thing the customers see". Your job is to keep the technical truth intact while making the decision legible to them. Our team works this way on most of the builds we take on, and it shapes how we scope.

Why does a missing technical contact become production risk?

Without an internal reviewer, every technical decision has a single point of failure: you. Nobody catches a weak migration plan, and nobody notices when a domain, SSL certificate or hosting renewal quietly lapses. Risk concentrates in the gaps between what the client assumes you handle and what the engagement actually covers.

The failure modes are predictable. A certificate expires on a Sunday and the site shows a browser warning. A domain registered to a former employee's email reaches renewal and nobody can approve the payment. A plugin update breaks the checkout and the client only tells you three days later, because sales "seemed a bit quiet". Each of these is cheap to prevent and expensive to discover.

The fix is not more technology. It is a written boundary: here is what we monitor, here is what renews when, here is who approves, and here is what happens if nobody does. That document is the difference between an incident and a crisis.

When do you genuinely need a technical contact on the client side?

You need a technical counterpart when the work touches regulated data, runs revenue around the clock, or spans several vendors who must agree on interfaces. For a brochure site, a WordPress rebuild or a modest internal tool, a decisive non-technical owner is usually faster than a committee pretending to review code.

Be honest about the threshold. If the system handles payments, personal health information, or a supply chain that stops when the software stops, someone on the client side should be able to read a monitoring alert and escalate it. That person does not need to write code. They need authority and a phone number.

Where there is no such person, the practical answer is to formalise you as the escalation path, with a response expectation written into the agreement rather than assumed.

How do you run discovery when nobody on the client side knows the stack?

Discovery starts with artefacts, not interviews: domain registrar, DNS zone, hosting panel, certificate expiry, repository, database and every third-party account. Pull a live inventory before you ask a single question, because the client genuinely does not know what they own, and guessing wastes everyone's time.

  1. Ask for the domain registrar login and record who the registrant contact is, not just who pays.
  2. Export the DNS zone and note every record you cannot explain — old mail servers and forgotten subdomains are common.
  3. Identify where the site or app is actually hosted, which is often not where the client thinks it is.
  4. List every third-party account in use: analytics, payment gateway, email service, SMS gateway, CDN.
  5. Check certificate expiry dates and any auto-renewal setting, then write them into a calendar you both can see.

Do this before you quote. Half the surprises on a takeover — an unmigrated mailbox, a payment gateway tied to a departed employee's account — surface in the first hour of an honest inventory.

How do you set up access and ownership so nothing depends on one person?

Put every account in the client's name with the client's billing details, then grant yourself delegated access. Create a shared password manager, enforce multi-factor authentication, and remove your own access from anything you do not need to operate. Ownership and operation are different things, and conflating them is how vendors become irreplaceable by accident.

We have been burned by the opposite arrangement more than once: a client who could not get into their own hosting account because the previous developer used a personal email. Untangling that costs days and goodwill. Our guide to client access and permissions covers the handover checklist we use, including what to do when the original owner has disappeared.

For repository access, GitHub's own documentation on managing repository access is worth reading before you invite anyone, because organisation ownership is a harder thing to move later than people expect.

Who signs off on what when there is no technical contactFive rows mapping each non-technical role on the client side to the decisions they can realistically approve.Who signs off on whatFounderApproves scope and budget, but cannot review the codeOps leadOwns hosting, email and DNS logins; signs off access changesAccountantConfirms invoices and licences; reads the contractsYouOwn the technical calls and write them down in plain languageNobodyAnything left unassigned here becomes your risk by default
Mapping each non-technical role on the client side to the decisions they can realistically approve, and flagging what falls through.

How do you get sign-off when the approver can't judge the work?

Replace verbal approval with a short written change note that states what changes, what could break, who is affected and how to roll back. Send it in the client's language, not yours, and ask for a reply that says yes. An email reply is a contract; a nod on a phone call is not.

Two habits matter here. First, never present a decision without a recommendation — "we can do A or B" invites paralysis, while "we recommend A because it keeps the existing URLs working" invites a decision. Second, whenever a command or migration is destructive, say so plainly and name the backup that must exist first. Something like terraform apply against production, a data migration, or a DNS cutover all deserve a sentence explaining the blast radius and the rollback path.

How do you debug a live incident when the client can't read an error message?

Incident triage with a non-technical reporter starts with observation, not diagnosis. Ask what they saw, on which page, at roughly what time, and whether it affected one person or everyone. A screenshot and a timestamp are worth more than any description they can give you.

From there you work from the outside in, using tools that never touch client data:

# what does DNS actually resolve to right now?
dig +short example.com

# what does the web server return, and with which headers?
curl -sSI https://example.com | head -n 20

# is the certificate still valid, and when does it expire?
openssl s_client -connect example.com:443 -servername example.com </dev/null 2>/dev/null | openssl x509 -noout -dates

These three checks rule out a surprising share of "the site is down" reports: a stale DNS record, a redirect loop, or an expired certificate. Only after that do you go into application logs. Never ask the client to run a command, and never run a destructive one — a cache flush, a database restore, a service restart — before you have told them what it changes and confirmed the backup is current.

What does this cost you in time and operational overhead?

Expect meaningfully more communication time than a project with an in-house engineer, and budget for it in the plan rather than absorbing it. You will write the same explanation twice, once in the ticket and once in plain language, and you will attend calls that exist purely to build confidence.

Set against that, the expensive alternative is rework. A misunderstood requirement discovered at launch costs far more than the meeting that would have caught it. The ongoing overhead is a renewal calendar, a monitoring alert path with a human at the end of it, and a short monthly written summary. That summary is not bureaucracy — it is how a client with no technical staff keeps a grip on what they are paying for, and it is usually the thing that keeps the relationship alive.

What mistakes do teams make with non-technical clients?

The most common mistake is answering the question that was asked instead of the one that matters. A client asks whether the site needs a redesign; the real problem is that the contact form has been silently failing for weeks. The second most common is letting credentials live in personal accounts, which turns a routine handover into an archaeology project.

  • Assuming silence means approval, then discovering at invoice time that it did not.
  • Sending a technical proposal the client cannot evaluate, then reading their hesitation as disinterest.
  • Running an update or migration on production without a named backup and a rollback step.
  • Leaving renewals on auto-pay tied to someone who has left the company.
  • Never writing anything down, so the client's only record of the system is their memory of your phone calls.

If you are inheriting a setup like this rather than building one, our notes on what a web development quote should actually itemise are a useful frame for pricing the cleanup honestly.

What does this look like on a real project?

A distributor asked us to rebuild an internal ordering system built years earlier by a developer who had since emigrated. There was no technical contact. The operations manager, who was excellent at logistics and had never seen a database, was our counterpart for the whole engagement.

We started with an inventory and found the app running on a VPS in the former developer's name, backed up to a personal cloud drive, with a domain renewing on his old work email. Before a line of new code, we moved the domain, the VPS billing and the backups into the client's accounts and rotated every credential. Then we rebuilt in stages, demoing every Friday for twenty minutes and sending a written summary the same afternoon. The rebuild took longer than a straight rewrite would have, because we deliberately avoided a cutover weekend the client could not support.

Eighteen months on, the operations manager handles plugin-style updates herself, calls us for schema changes, and has the runbook on her desk. That outcome is not accidental. It is what you get when you treat the missing technical contact as a design constraint rather than an inconvenience.

The first twelve weeks with a non-technical clientA four-milestone timeline from discovery and access inventory through a written plan and staged build to handover.The first twelve weeksA delivery rhythm that keeps a non-technical client in control of decisions1Week 1Discovery andaccess inventoryRisk list2Weeks 2-3Written plan inplain languageFixed scope3Weeks 4-10Build in shortreviewable stagesWeekly demo4Weeks 11-12Handover andrunbook sessionClient owns allEvery stage ends with a written summary the client can forward to anyone.
A twelve-week delivery timeline for a non-technical client, with the written artefact each stage produces.

How do the options compare?

There is no single right answer, and the honest comparison is about who carries the judgement. Hiring an in-house engineer gives you real review, but a small business rarely has enough technical work to keep one occupied. Retaining a contractor part-time works when the system is stable. Having your delivery partner hold the technical role works when the work is project-shaped.

OptionWho owns the technical callsReview qualityMain cost driverMain risk
Client hires in-houseAn employeeStrong, if they staySalary and retentionNot enough work to keep them
Part-time contractorA retained specialistGood on a stable systemRetainer scopeNobody on site day to day
Delivery partner holds itYou, in writingDepends on your disciplineCommunication overheadKnowledge leaving with you
Client self-manages after handoverThe client's named ownerBasic, with a runbookTraining time upfrontSlow response to real incidents

Most small businesses end up with a blend: a partner holding the architecture and a named non-technical owner holding the renewal calendar and the escalation phone. You can see how this plays out on our delivery work, and the common questions we get asked about running it.

In short: a client without a technical contact is not a harder project, it is a differently documented one. Build the inventory first, keep every account in their name, write decisions down in their language, and hand over something they can operate without you.

People also search for

These are the questions readers send us most often after working through this guide, each linked to the closest piece on our blog.

If you are taking over a system with no technical contact on the client side, or you are the client and nobody on your team can read the code, our team can help you inventory what exists, move ownership into your name and document it properly. Talk to us about your setup and we will tell you what is risky, what to fix first, and what it takes — or start with the services we offer.

Frequently asked questions

  • It means nobody on the client side owns servers, DNS or code. Decisions route through an owner, office manager or marketing lead who signs off but cannot check logs or edit a config. You become the technical memory as well as the builder, so plain-English reporting and written records matter more than ticket speed.

  • Ask about outcomes, not tools: what has to happen, who does it, what goes wrong today. Watch them use the current system and record the screen. Turn the recording into a written scope with screenshots and sample data, then read it back for sign-off. Nothing gets built from a verbal brief alone.

  • The client, always. Register the domain in their name with their email as registrant, and keep the registrar, DNS and hosting logins in their billing account even if we administer them. Access for us is delegated, not transferred. That way a change of supplier never becomes a domain-transfer negotiation.

  • Use a shared password vault rather than emailing secrets, with one named account per person and 2FA enforced. Give us a named account, not a shared admin login, so the audit trail shows who changed what. Store recovery codes with the client in a sealed record and rotate everything at handover.

  • We test on staging with the client's own data shapes, then verify in production: check the error log, run the failing user journey end to end, confirm monitoring is green and watch it for a full business cycle. The client's part is signing off that the business outcome is correct, not reading logs.

  • A one-page runbook: what each system does, who to call, how to raise a support request, where backups live and how to restore one. Then the deeper technical notes behind it. Keep it in a repository the client owns, not in our inbox, and revisit it after any major change.

  • Small silent things: an expiring card on the hosting account, an SSL certificate that lapses, a DNS record nobody remembers changing, a plugin left unpatched. None of them page anyone because there is no one to page. Uptime and certificate-expiry monitoring with alerts routed to us closes most of that gap.

  • Automate them: ACME renewal for certificates, scheduled backups with a documented restore path, and patching in a monthly window, on staging first. Automation only helps if someone reads the failure alerts, so route them to a monitored channel and test them. Check current vendor documentation for renewal intervals and retention.

  • Mostly response time and how much interpretation the client needs: written summaries, calls, coordinating third parties like their accountant or email provider. Proactive monitoring and maintenance reduce surprise incidents; reactive firefighting costs more per hour of downtime. Ask our team for a scoped estimate via /contact.

  • Options: a managed hosting plan that includes patching, backups and updates, leaving only application work to you; monitoring-only with alerts going to the client; or a part-time technical advisor arrangement. Choose based on who carries the risk when something breaks at 2am, and write that down.

0 comments

Be the first to share your thoughts.

Leave a comment

Chat on WhatsApp