Short answer

In an outsourcing contract, IP ownership should be settled in writing before work starts: an NDA for confidentiality, an assignment clause transferring code and design to you after final payment, and a list of third-party and open-source parts you only license. Keep the repository, domain and hosting in your name from day 1. This is not legal advice.

IP, NDA and Code Ownership: 2026 guide by Kamboh Associates Digital, Lahore

Key Takeaways

  • Copyright in code and design generally starts with whoever creates it, so ownership must be transferred in writing.
  • An NDA protects confidential information; it does not by itself transfer ownership of the work.
  • An assignment clause transfers rights in the custom work, usually on final payment.
  • Themes, plugins, libraries and fonts are licensed, not owned; the contract should list them.
  • Control of the repository, domain and hosting matters as much as the words in the contract.

Why Does Outsourcing Contract IP Ownership Matter?

When you outsource a website or app, you are paying someone else to create code, designs and sometimes content. WIPO describes copyright as the rights creators have over their works, and it lists computer programs among the works commonly protected. In many countries, the creator holds those rights by default unless an agreement transfers them. Without clear terms, you may have paid for a website you cannot freely change, move or resell.

We are web developers, not lawyers. This guide explains the common clauses in plain English so you can discuss them with your lawyer. Laws differ by country, so take legal advice on the final wording.

Which Clauses Should Your Contract Include?

ClausePlain-English meaningExample wording idea
Confidentiality (NDA)The developer keeps your business information secret"Supplier will not disclose Client's confidential information to anyone"
Assignment of rightsOwnership of custom code and design passes to you"On final payment, Supplier assigns all rights in the Deliverables to Client"
Third-party componentsLicensed parts stay under their own licences"Third-party and open-source components are listed in Schedule B"
Supplier's pre-existing toolsThe developer may reuse its own general tools, licensed to you"Supplier grants Client a perpetual licence to use pre-existing tools in the Deliverables"
Moral rights and creditsNo credits or claims to the work unless agreed"Supplier will not add credits or links without Client's consent"
HandoverWhat you receive at the end"Supplier delivers source code, database, documentation and credentials"

The wording ideas show the intent only. Have a lawyer draft the actual clauses for your jurisdiction.

Is an NDA Enough?

No. A non-disclosure agreement stops the developer sharing your information, such as your business plans, customer data or unreleased designs. It does not usually transfer ownership of what they build. You need both: an NDA from the first conversation in which you share sensitive material, and an assignment or ownership clause in the main contract.

What About Open-Source and Third-Party Parts?

Almost every website uses parts the developer did not write: WordPress itself, themes, plugins, JavaScript libraries, fonts and icons. These are licensed, not owned. Some open-source licences require you to keep notices or share changes in certain cases; paid themes and plugins usually allow use on a set number of sites. Ask for a list of every significant component with its licence, and make sure paid licences are bought in your name.

Why Is Control as Important as the Contract?

A perfect clause helps little if the developer holds the keys. From day one, keep these in your own name and add the developer as a user:

  • the code repository, such as a GitHub or GitLab organisation you own
  • the domain name, registered with your details
  • hosting and server accounts, billed to you
  • admin logins, analytics, Search Console and app store accounts

Our guide on who owns your website covers each account in detail.

What If a Developer Refuses to Hand Over Code?

Prevention is far easier than cure. If you control the repository and hosting, the code is already yours to use. If not, ask in writing with reference to the contract and payments made, request the repository transfer or a full backup, and seek legal advice for serious disputes. Milestone payments tied to delivered code reduce how much is at stake at any point.

What Are Our Own Terms?

Our standard terms keep things simple: we sign an NDA before receiving confidential material, the domain and hosting are registered in the client's name, the client owns the custom code and design after final payment, third-party licences are bought in the client's name and listed at handover, and we add no credits without permission. Projects start from Rs 40,500 for websites and Rs 360,000 for web applications. See our contact page, our website contract checklist and the guide to hiring Pakistani developers.

Frequently Asked Questions

Who owns the code when I outsource website development?
It depends on the contract. Copyright generally starts with whoever creates the work, so unless an agreement transfers the rights, the developer may keep them. A clear assignment clause, usually effective on final payment, transfers ownership of the custom code and design to you. Take legal advice for your country.
Does an NDA give me ownership of the code?
Usually not. A non-disclosure agreement keeps your confidential information private, but it does not normally transfer ownership of the work. You need a separate assignment or ownership clause in the main development contract, as well as an NDA covering the information you share.
What is an IP assignment clause?
It is a contract clause by which the developer transfers their rights in the custom work, such as code, designs and content, to the client, often once the final payment is made. It should be clear about which deliverables are covered and which third-party or pre-existing parts are only licensed.
Can a developer reuse code from my project?
Developers often reuse their own general tools and techniques across projects, which is normal. Your contract should give you a licence to any such pre-existing tools used in your project, assign the custom work to you, and stop the developer reusing your confidential business logic or designs elsewhere.
How do open-source licences affect ownership of my website?
Open-source parts such as WordPress, libraries and plugins stay under their own licences; you use them, but you do not own them. Some licences require keeping notices or sharing changes in certain cases. Ask your developer for a list of components and licences at handover.
How can I protect my IP when outsourcing to another country?
Sign an NDA before sharing sensitive material, include an assignment clause in the main contract, list third-party components, and keep the code repository, domain, hosting and admin accounts in your own name from day one. Pay in milestones tied to delivered code, and take legal advice in your jurisdiction.

How We Researched This Guide

Copyright points follow WIPO's overview, checked 29 October 2026; account control follows ICANN and Google help pages. The clause table gives plain-English intent and wording ideas only and is not legal advice. Our own terms are approved business facts. Prices are our own published packages.

Sources

  1. WIPO — Copyright (rights of creators, includes computer programs)
  2. ICANN — Registrants' benefits and responsibilities
  3. WordPress.org — Roles and capabilities
  4. Google Search Console Help — Manage owners, users and permissions
  5. Google Analytics Help — Add, edit and delete users

Disclosure: Kamboh Associates sells the web development services discussed here. Other providers' prices are quoted from their own public pages on the dates shown and may have changed. We correct errors as soon as they are reported. First published ; last reviewed .

Keep Reading

Want clear ownership terms from day one?

Send us a short description of your project and we'll reply within one business day with a written scope, fixed price and timeline.