Five client sites later, the chaos arrives: whose account is it, where are the passwords, who pays for what. Here is the agency structure that scales.

Rule 1: ownership clarity from day one Two working models — pick per client and write it down: - Client owns everything (domain + hosting in their name; you work inside as manager): best for long-term retainers where trust is the product - You own the stack (your hosting plan hosts their sites): best for maintenance-revenue models — but the DOMAIN must still be in the client's name. Domains are identity; hosting is infrastructure Never: client's domain in YOUR registrar account. That is the hostage scenario that ends agencies.

Rule 2: access hygiene - One strong account password; per-site admin logins for each client - Client gets the credentials they need (their WordPress admin), never the hosting root unless their model says so - Offboarding: password rotation documented — the exit checklist in writing prevents the awkward month

Rule 3: the backup discipline Kairalmas file versioning covers oops moments; your agency layer: monthly backup exports per client to a structured Drive folder (clientname/2026-10/). When a client's 'small change' breaks something, your restore is five minutes and your reputation intact.

Rule 4: the billing models that work in Pakistan - Hosting pass-through: client pays hosting cost + management fee monthly - Bundled care plans: hosting + updates + backups + small edits at a fixed monthly PKR — the recurring revenue that stabilizes agency cash flow - Project + handover: build, hand over cleanly with the exit checklist

Rule 5: the platform advantage A multi-website plan (Business and up) hosts several small clients on one bill with per-site folders and databases — consolidated PKR pricing that keeps your margins honest. Usage graphs per site show exactly when a client needs their own upgrade.