Services/Digital Assets & Security
Digital Assets & Security
Secure it. Business digital asset management — every asset that carries your brand, organised, findable, registered in your name, and protected.
What goes wrong without it
The signage company asks for the logo. What exists is a PNG from 2020. They redraw it by eye.
The business trades under one name and someone else holds the .com. Every customer who guesses the address lands on an advert.
Registered to a developer who left. The renewal notice goes to an email nobody can open.
Your Instagram has 40,000 followers and recovers to a number belonging to someone who resigned two years ago.
A 502 to every prospect who checks. For a technology firm, that is the first impression.
Bought on the agency's licence. When the relationship ends, so does your right to use it.
Three shoots, three photographers, no written usage rights. A liability waiting for a letter.
What's included
Digital asset management
- Full inventory: logo masters, guidelines, templates, photography and video, fonts, stock, documents — what exists, in what format, where, and whether it's editable
- One organised, named, versioned library with usage rights and licences attached to every item
- Licences purchased or transferred into your name
- Photography and video rights secured in writing, retroactively where possible
- The Asset Register — every asset, who controls it, when it expires, how to recover it
Ownership & recovery
- Domains in every extension — registrar, registrant, expiry, and every other registration of your name
- DNS, hosting, SSL, mail authentication
- Every social platform, including ones you don't use
- Google Business Profile at every location; Business Managers, ad accounts, pixels, analytics
- Everything moved to your legal entity and role-based contacts
- Domain transfers, platform account recovery, retrieval of files from previous suppliers
Security
- Registrar lock, DNSSEC, CAA records
- SPF, DKIM and DMARC to
p=reject, staged so nothing breaks - Two-factor enforcement, hardware keys where warranted, credential vaulting with a documented access policy
- Recovery paths built on addresses and numbers the company owns, not people
- Impersonation monitoring and takedowns; defensive registration
- Access review whenever someone joins or leaves
- Annual recovery drill — we actually test whether you could get each account back
How it runs
Audit
Public records first, then whatever you give us access to. You get the Asset Register whether or not you continue.
Recovery
A domain transfer from a cooperative former supplier takes days. A platform escalation with thin documentation can take a season. We tell you the odds before you commit.
Registration & hardening
Mostly waiting on transfer windows. Mail authentication is staged through monitoring — a rushed DMARC rollout silently drops invoices.
Maintenance
Renewals, expiries, access reviews, and the register itself kept current.
What you own at the end
Everything. The domain registered to you. Handles recovering to your addresses and phones. Source files in their original format, fonts licensed in your name, ad accounts in your Business Manager, photography with written usage rights.
Island Todo is listed as an administrator. Not an owner. You can remove us in an afternoon, and we'll hand over the register on the way out.
Questions
Do you need our passwords?
Not for the audit. For recovery and registration we take the narrowest access that does the job — a delegated admin role rather than a password wherever the platform supports it. Anything we do hold lives in a vault with a documented policy, and is listed in your register.
Can you actually recover a lost account?
Often, not always. Domains registered to a traceable person or company are usually recoverable. Social accounts depend on the platform and the documentation. We'll say honestly what the odds look like, and we don't charge for attempts we don't expect to win.
What if our current agency holds our domain?
We'll tell you plainly, with the record attached. What you do about it is your decision. Most agencies transfer without argument once asked properly.
Is this IT, or branding?
It's brand management. These are the assets the brand lives in. A brand you can't produce the files for, or whose domain you don't control, isn't yours — it's on loan. Where a problem properly belongs to an IT firm or a lawyer, we'll say so.
Branding creates the standard. Alignment enforces it. Assets & Security make sure you own what's being enforced. Marketing multiplies it.