Who Owns App Code Agency Work? IP Guide
who owns app code agency work? Learn what app IP ownership really means before you hire a development shop.
Build My App Fast · Aug 31, 2026 · 11 min read
If you are asking “who owns app code agency work?” the practical answer is: whoever the contract says owns it, and if the contract is vague, the agency or individual developers may retain rights until there is a written assignment. Paying an invoice, getting a login, or seeing your app deployed does not automatically give you clean ownership. Before you hire anyone, you want the agreement and the handoff process to make ownership explicit: source code, accounts, design assets, database schema, deployment access, and the right to modify or resell the product.
This is not legal advice, and you should have a lawyer review important contracts. But founders do not need a law degree to spot the difference between “you can use the app” and “you own the product.” That difference matters when you raise money, switch developers, sell the company, or just want to keep shipping without asking permission.
Who owns app code agency work by default?

In software projects, ownership usually comes down to copyright, contract terms, and the specific assets being delivered.
Source code is typically protected by copyright. In the U.S., the U.S. Copyright Office explains that a “work made for hire” has specific requirements, and not every contractor-created work qualifies automatically. Their work made for hire circular is worth reading if you are signing a serious development agreement.
For founders, the key point is simple: do not assume “we paid for development” means “we own every line of code.” A safe contract should say what is assigned to you, when it is assigned, what is excluded, and what rights you have to modify, commercialize, and transfer the software.
There are three common outcomes:
- Full assignment to the client. The agency assigns the custom code and project deliverables to you, often after final payment.
- License to use the software. You can use the app, but the agency keeps ownership. This can limit future changes, resale, or migration.
- Mixed ownership. You own the custom business logic, while the agency keeps reusable internal tools, templates, or pre-existing libraries.
Mixed ownership is not automatically bad. Many production teams reuse starter kits, UI patterns, internal deployment scripts, and boilerplate. The problem is when the contract does not separate reusable agency materials from your product-specific code.
What “owning the code” should include
Founders often think code ownership means receiving a ZIP file. That is not enough. A modern app is a set of connected assets: repository, deployment pipeline, database, authentication, payment provider, email system, environment variables, and third-party integrations.
If your app is built on Next.js, React, Supabase, Stripe, Tailwind, Resend, and Vercel, ownership should include both the source repository and practical control of the services needed to run it.
| Asset | Why it matters | What to require |
|---|---|---|
| Git repository | The source of truth for your app | Admin access or transfer to your GitHub organization |
| Custom application code | Your product logic and UI | Written IP assignment or exclusive ownership terms |
| Database schema | Defines users, records, permissions, and core data | Migration files, schema access, and Supabase ownership |
| Deployment account | Controls production releases | Vercel project access or transfer |
| Domain and DNS | Controls where customers reach the app | Client-owned domain registrar and DNS access |
| Stripe account | Controls subscriptions, billing, and revenue | Client-owned Stripe account, not an agency account |
| Email provider | Sends transactional email | Resend account access and documented sender setup |
| Environment variables | Required for the app to run | Secure handoff, not hardcoded secrets |
| Design files | Needed for future UI work | Figma or equivalent file access if included in scope |
| Documentation | Lets another developer continue | Setup notes, architecture notes, and deployment steps |
A founder who has the code but not the deployment account can still be stuck. A founder who has the deployed app but not the repository is even more stuck. Real ownership means another competent developer can pick up the project and continue without reverse-engineering your own product.
Contract terms to check before you sign
The best time to solve IP ownership is before development starts. The second-best time is before final payment. The worst time is after the relationship breaks down and your app is already live.
Look for these terms in the agreement:
- Assignment of custom deliverables. The contract should say the custom code, designs, copy, database schema, and project-specific work product are assigned to you.
- Timing of assignment. Many agencies assign ownership after full payment. That is common, but it should be explicit.
- Pre-existing materials. If the agency uses its own starter code, templates, scripts, or internal components, the contract should grant you a broad license to use them inside your app.
- Right to modify. You should be able to edit, extend, host, fork, and maintain the app with another developer.
- Third-party dependencies. The agency should disclose important external services and open-source packages.
- Account ownership. Your production accounts should be owned by you or transferred to you, not permanently controlled by the agency.
- Final deliverables. The contract should define the repo, docs, credentials handoff, deployment setup, and database access.
This is one reason fixed-price development can be easier to manage than open-ended hourly work. Scope, timeline, payment, and handoff expectations are defined up front. If you are comparing pricing models, read our founder guide to fixed price vs hourly development.
A contract does not need to be 40 pages to be useful. It does need to answer the obvious questions clearly: what are you building, what do I get, when do I get it, and can I keep working on it without you?
The handoff process matters as much as the contract
A good IP clause can still fail in practice if the handoff is sloppy. You want a process that proves the app is not just demoable, but transferable.
For a production-ready web app, the handoff should include:
- GitHub repository access with commit history.
- A clear README for local setup.
- Environment variable names and where to configure them.
- Supabase project access, including auth, database, storage, and edge functions if used.
- Vercel project access, including production and preview deployments.
- Stripe test and live configuration details if payments are included.
- Resend or transactional email setup.
- Admin user creation instructions.
- Known limitations and recommended next steps.
- A short walkthrough call or recorded handoff, depending on project size.
At Build My App Fast, we build production-ready apps with full code ownership. Our usual stack is Next.js, React, Supabase, Stripe, Tailwind, Resend, and Vercel because it gives founders a clean path from repo to deployment. If you want a deeper definition of what “production-ready” should mean, see Production Ready App: Beyond Works on My Screen. For deployment specifics, we also wrote a founder-focused guide to deploying Next.js on Vercel.
The important detail is that handoff should happen inside accounts you control or accounts that can be transferred cleanly. If everything lives under the agency’s master account, you may be renting access to your own app.
Open source, templates, and AI-generated code

Owning your app does not mean owning every dependency inside it.
Modern apps rely on open-source packages. You do not own React, Next.js, Tailwind, or the thousands of packages that may appear in a dependency tree. You have permission to use them under their licenses. GitHub’s official docs on licensing a repository are a useful primer on why licenses matter.
This is normal. The issue is not that open source exists. The issue is whether the agency knows what it is shipping and avoids license choices that create avoidable business risk.
Ask these questions:
- Are you using a private starter kit or template?
- If yes, what rights do I have to keep using it?
- Are any dependencies restricted for commercial use?
- Is any generated code copied from a source we cannot legally use?
- Can another developer audit and maintain this repository?
AI coding tools add another layer. They can speed up implementation, but they can also produce code nobody fully understands, duplicate patterns from unknown sources, or skip security basics. If you inherit a codebase created with AI-heavy workflows, it is worth running a proper review. Our guide on auditing AI-generated code explains what to check before scaling.
The practical standard is not “zero open source” or “zero AI assistance.” That is unrealistic. The practical standard is traceability, maintainability, and a contract that gives you the right to keep operating the app.
Red flags when an agency talks about code ownership
Most ownership problems are visible before you sign. Listen for vague answers.
Be careful if an agency says:
- “You do not need the repository; we will manage everything.”
- “The app only runs on our platform.”
- “You can have the code if you pay an extra release fee.”
- “We own the framework, so you cannot move it.”
- “All client apps are deployed from one shared account.”
- “We will discuss IP after launch.”
- “The contract is standard, but we cannot explain what it means.”
Some of these models are legitimate for SaaS platforms or no-code tools, but they are not the same as owning a custom app. If you are hiring an agency specifically to build your product, the ownership model should be clear before the first sprint.
For a broader hiring screen, use our list of app agency red flags. Code ownership is one of the big ones because it affects every future decision: hiring, fundraising, security, migration, and sale of the business.
How we handle ownership at Build My App Fast
Our position is simple: founders should own the code for the custom app they pay us to build.
We are not a no-code platform, and we are not selling access to a proprietary black box. We are a fixed-price rapid app-development shop. Real engineers with pre-AI experience build production-ready apps on a modern stack, and the client sees working software before final payment.
Our tiers are:
- $1,000 “Proof of concept” — proof of concept, delivered in 2–4 days.
- $5,000 “Real app” — full app with logins and a database, delivered in 4–6 days.
- $10,000 “Launchable MVP” — advanced MVP with subscriptions, integrations, or AI features, delivered in 7–10 days.
Those numbers matter because unclear scope often creates unclear ownership. If the project is “we will build until the hours run out,” the final deliverables can become fuzzy. We prefer a defined build: agreed scope, fixed price, fixed timeline, working app, code handoff.
That does not mean every client gets every possible asset in the universe. Third-party services have their own accounts and terms. Open-source dependencies remain open source. Our internal know-how remains ours. But the custom product code and the practical ability to operate the app should belong to the founder.
Founder checklist before hiring an agency
Use this checklist before you sign and again before final payment.
- The agreement says who owns the custom app code.
- IP assignment timing is clear, especially if tied to final payment.
- Pre-existing agency code is identified or licensed for use in your app.
- You will receive GitHub repository access or transfer.
- Production accounts are yours or can be transferred.
- The database schema and migrations are included.
- Deployment instructions are documented.
- Environment variables are handed off securely.
- Third-party services are listed.
- Open-source or template restrictions are disclosed.
- You have the right to modify, extend, and hire another developer.
- Final payment is connected to a working app and completed handoff.
If an agency refuses most of these items, you are not buying a portable product. You are buying dependence.
FAQ
Does paying an agency mean I automatically own the code?
Not necessarily. Payment alone may not transfer copyright or full ownership. You want a written agreement that assigns the custom deliverables to you or clearly grants the rights you need to run, modify, and commercialize the app.
Is “work made for hire” enough for app development?
Sometimes, but do not rely on the phrase casually. Work made for hire rules are specific, and contractor software projects can be more complicated than founders expect. A clear IP assignment clause is usually easier to understand and enforce.
Can an agency keep its starter template?
Yes, an agency can keep ownership of reusable pre-existing materials. The important part is that you receive a sufficient license to use those materials inside your app forever, or at least for as long as your business needs them. Your custom business logic should be handled separately.
Should I own the Vercel, Supabase, and Stripe accounts too?
For a serious product, yes. The agency can help configure them, but your company should control the production accounts. Code ownership is incomplete if revenue, user data, or deployments are locked inside someone else’s account.
If you want a production-ready app with clear scope, fixed pricing, and full code ownership, apply to Build My App Fast.
