{"id":2329,"date":"2026-08-26T05:37:23","date_gmt":"2026-08-26T05:37:23","guid":{"rendered":"https:\/\/getprojects.ai\/blog\/?p=2329"},"modified":"2026-08-26T05:37:23","modified_gmt":"2026-08-26T05:37:23","slug":"who-owns-the-code-when-you-outsource","status":"publish","type":"post","link":"https:\/\/getprojects.ai\/blog\/who-owns-the-code-when-you-outsource\/","title":{"rendered":"Who Owns the Code When You Outsource Software Development?"},"content":{"rendered":"<p><span style=\"font-weight: 400;\">Paying an invoice does not transfer a copyright. That single legal fact is behind most ownership disputes between businesses and their development partners\u00a0 and those disputes almost never surface during the build. They surface 12 to 24 months later, during a funding round, an acquisition, or a vendor switch, when a diligence lawyer asks for the chain of title and nobody can produce one.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The question of who owns the code when you outsource is a copyright question, not a commercial one. Under US law, and under similar principles in the UK, EU, and India, whoever writes the code is its author and first owner. Payment buys delivery. It does not buy the exclusive right to copy, modify, distribute, or sell. Only a signed written assignment does that\u00a0 and a striking share of outsourcing contracts, especially fixed-scope agreements under $75,000, either omit one or draft it so narrowly it covers less than half the codebase you shipped.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The Black Duck 2026 Open Source Security and Risk Analysis (OSSRA) report, based on 947 commercial codebases across 17 industries, found that <\/span><a href=\"https:\/\/www.blackduck.com\/resources\/analyst-reports\/open-source-security-risk-analysis.html\" target=\"_blank\" rel=\"noopener\"><b>68% of audited codebases contain open-source licence conflicts<\/b> <\/a><span style=\"font-weight: 400;\">\u00a0up from 56% the previous year, the largest single-year jump in the study&#8217;s 11-edition history. Open source now appears in 98% of codebases.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Read that figure alongside your assignment clause and the gap is obvious. A perfect transfer of everything your agency wrote still leaves you holding a licence problem in the code they merely imported. Ownership is layered; most contracts address only the top layer.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">This article is general commercial information for buyers of IT services. It is not legal advice, and jurisdictional rules differ. Have counsel qualified in your governing-law jurisdiction review any agreement before you sign it.<\/span><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-2330\" src=\"https:\/\/getprojects.ai\/blog\/wp-content\/uploads\/2026\/08\/01-open-source-licence-conflicts-2026.png\" alt=\"&quot;Licence conflicts when you outsource code&quot;\" width=\"1200\" height=\"675\" srcset=\"https:\/\/getprojects.ai\/blog\/wp-content\/uploads\/2026\/08\/01-open-source-licence-conflicts-2026.png 1200w, https:\/\/getprojects.ai\/blog\/wp-content\/uploads\/2026\/08\/01-open-source-licence-conflicts-2026-300x169.png 300w, https:\/\/getprojects.ai\/blog\/wp-content\/uploads\/2026\/08\/01-open-source-licence-conflicts-2026-1024x576.png 1024w, https:\/\/getprojects.ai\/blog\/wp-content\/uploads\/2026\/08\/01-open-source-licence-conflicts-2026-768x432.png 768w\" sizes=\"auto, (max-width: 1200px) 100vw, 1200px\" \/><\/p>\n<h2><b>What &#8220;Who Owns the Code When You Outsource&#8221; Actually Means<\/b><\/h2>\n<p><b>Who owns the code when you outsource<\/b><span style=\"font-weight: 400;\"> is a copyright question resolved by contract, not by payment. By default, the developer or agency that authors the code is its first legal owner. Ownership passes to the client only through an express written assignment that covers deliverables, pre-existing components, and third-party or open-source dependencies.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Each of those three parts fails independently. A contract can assign the deliverables perfectly and still leave you licensing your own architecture back from the agency that built it, a risk that does not exist in the same form when you weigh<\/span><a href=\"https:\/\/getprojects.ai\/blog\/in-house-vs-outsourced-software-development-which-is-better-in-2026\/\"> <b>in-house vs outsourced software development<\/b><\/a><b>,<\/b><span style=\"font-weight: 400;\"> because employee-authored work defaults to the employer.<\/span><\/p>\n<h2><b>Why Transfer of IP After Payment Is the Most Expensive Assumption in Outsourcing<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">The <\/span><b>transfer of ip after payment<\/b><span style=\"font-weight: 400;\"> is not automatic in any major jurisdiction. Under Section 101 of the US Copyright Act, a work qualifies as &#8220;made for hire&#8221; in only two situations: it was created by an employee within the scope of employment, or it was specially commissioned, falls within one of nine enumerated statutory categories, and both parties signed a written agreement saying so.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Software is not one of those nine categories. Neither is source code, an application, or a database. This is the detail that catches procurement teams: a contractor agreement can carry a beautifully drafted work-for-hire paragraph and still move nothing, because the statute does not reach that category of work.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The cost of discovering this late is measurable. Technical due diligence typically runs 3 to 6 weeks; a broken chain of title adds <\/span><b>4 to 10 weeks<\/b><span style=\"font-weight: 400;\"> while retroactive assignments are chased, plus $8,000 to $40,000 in outside counsel time for a mid-sized codebase\u00a0 which is why IP sits near the top of any serious<\/span><a href=\"https:\/\/getprojects.ai\/blog\/software-development-contract-checklist\/\"> <b>software development contract checklist<\/b><\/a><b>.<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Your leverage is also gone. Before you pay, an assignment clause costs one email. After launch, the agency knows what the signature is worth to you\u00a0 retroactive assignments in live deal situations get negotiated at 15% to 40% of original project value, and some agencies simply decline, because the reusable framework inside your product is their next five projects.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Three failure patterns account for most of these situations:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The contract has no IP clause at all, only payment terms, scope, and a confidentiality section<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The clause assigns &#8220;deliverables&#8221; without defining whether deliverables include source code, build scripts, infrastructure-as-code, and design files<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The clause assigns everything the agency wrote but is silent on the frameworks, libraries, and boilerplate they brought with them<\/span><\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-2331\" src=\"https:\/\/getprojects.ai\/blog\/wp-content\/uploads\/2026\/08\/02-ip-ownership-layers-outsourced-code.png\" alt=\"&quot;Five layers of outsourced code ownership&quot;\" width=\"1200\" height=\"675\" srcset=\"https:\/\/getprojects.ai\/blog\/wp-content\/uploads\/2026\/08\/02-ip-ownership-layers-outsourced-code.png 1200w, https:\/\/getprojects.ai\/blog\/wp-content\/uploads\/2026\/08\/02-ip-ownership-layers-outsourced-code-300x169.png 300w, https:\/\/getprojects.ai\/blog\/wp-content\/uploads\/2026\/08\/02-ip-ownership-layers-outsourced-code-1024x576.png 1024w, https:\/\/getprojects.ai\/blog\/wp-content\/uploads\/2026\/08\/02-ip-ownership-layers-outsourced-code-768x432.png 768w\" sizes=\"auto, (max-width: 1200px) 100vw, 1200px\" \/><\/p>\n<h2><b>IP Ownership in Outsourced Software: The Five Layers a Contract Must Cover<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">Treating <\/span><b>ip ownership outsourced software<\/b><span style=\"font-weight: 400;\"> as one yes\/no question is what produces incomplete contracts. A shipped application is a stack of legally distinct components with different owners, and a competent agreement\u00a0 like a competent process for<\/span><a href=\"https:\/\/getprojects.ai\/blog\/protect-ip-while-outsourcing-software-development\/\"> <b>protecting IP while outsourcing software development<\/b><\/a><span style=\"font-weight: 400;\">\u00a0 addresses each separately.<\/span><\/p>\n<h3><b>Layer 1: Newly Written Deliverable Code<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">This is the layer everyone remembers: application code, database schemas, API integrations, test suites, CI\/CD configuration, and documentation written specifically for your project.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">A properly drafted clause does two things: it states the work-for-hire position where it applies, then adds a present-tense assignment as a fallback for everything that does not qualify. The fallback is the part that actually works for software.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Relying on <\/span><b>work for hire software development<\/b><span style=\"font-weight: 400;\"> language alone is the single most common drafting error in IT outsourcing contracts, and it is entirely avoidable with one extra sentence\u00a0 the difference between a licence and<\/span><a href=\"https:\/\/getprojects.ai\/blog\/own-your-code-completely-when-outsourcing\/\"> <b>owning your code completely when outsourcing<\/b><\/a><b>.<\/b><\/p>\n<h3><b>Layer 2: Background IP and Pre-Existing Components<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">No agency builds from zero. A team that has delivered 40 marketplace projects has an internal authentication module, a payments wrapper, an admin scaffold, and a deployment pipeline. They will reuse them, and they should say that reuse is why your build took 11 weeks instead of 24.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The contract needs a named, listed schedule of that <\/span><b>pre-existing IP<\/b><span style=\"font-weight: 400;\">, plus a perpetual, irrevocable, worldwide, royalty-free, sublicensable licence for you to use, modify, and distribute it as part of your product. Without the sublicence right, you cannot legally resell your own product to customers, a constraint that quietly rewrites every projection in your<\/span><a href=\"https:\/\/getprojects.ai\/blog\/saas-development-cost\/\"> <b>SaaS development cost<\/b><\/a><span style=\"font-weight: 400;\"> model.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Insist on the schedule as an exhibit before signing. A vendor who refuses to enumerate their background IP is reserving the right to define it later, once their framework is load-bearing inside your product\u00a0 which is exactly when <\/span><b>who owns the code when you outsource<\/b><span style=\"font-weight: 400;\"> becomes an expensive conversation.<\/span><\/p>\n<h3><b>Layer 3: Developer Retains Rights\u00a0 Code You Paid For but Cannot Control<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Some agreements deliberately keep ownership with the vendor and grant the client a licence instead. That is legitimate for white-label platforms and productised services, but it should be a choice, not a surprise.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The practical test is not who holds the copyright\u00a0 it is what you can do without asking permission. A non-exclusive licence lets the agency build the same product for your competitor next quarter. A non-transferable one hands an acquirer a consent requirement, making your vendor a party to your exit.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">This is where <\/span><b>who owns the code when you outsource<\/b><span style=\"font-weight: 400;\"> stops being an abstract legal question and starts setting a ceiling on your valuation.<\/span><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-2332\" src=\"https:\/\/getprojects.ai\/blog\/wp-content\/uploads\/2026\/08\/03-cost-of-late-ip-discovery.png\" alt=\"&quot;Cost when you outsource code ownership&quot;\" width=\"1200\" height=\"675\" srcset=\"https:\/\/getprojects.ai\/blog\/wp-content\/uploads\/2026\/08\/03-cost-of-late-ip-discovery.png 1200w, https:\/\/getprojects.ai\/blog\/wp-content\/uploads\/2026\/08\/03-cost-of-late-ip-discovery-300x169.png 300w, https:\/\/getprojects.ai\/blog\/wp-content\/uploads\/2026\/08\/03-cost-of-late-ip-discovery-1024x576.png 1024w, https:\/\/getprojects.ai\/blog\/wp-content\/uploads\/2026\/08\/03-cost-of-late-ip-discovery-768x432.png 768w\" sizes=\"auto, (max-width: 1200px) 100vw, 1200px\" \/><\/p>\n<h3><b>Layer 4: Open-Source Components and Third-Party Licences<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Your agency cannot assign what it never owned. Every MIT, Apache 2.0, GPL, and AGPL component arrives with obligations attached, and those obligations survive any assignment clause you sign.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The material risk is copyleft. A GPL-licensed library linked into a distributed product can trigger an obligation to release your own source under GPL terms, and an AGPL component reaches even hosted SaaS delivery. Neither is theoretical at a 68% conflict rate across audited codebases.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Contractually you need three things: a warranty that no copyleft component entered distributed code without written approval; a delivered <\/span><b>software bill of materials (SBOM)<\/b><span style=\"font-weight: 400;\"> listing every direct and transitive dependency with its licence; and an indemnity for third-party IP claims capped at a number that means something relative to project value.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Commercial licences deserve the same treatment. Paid UI kits, mapping SDKs, and reporting engines are frequently registered to the agency&#8217;s account to ask who the licensee of record is, whether the seat transfers on completion, and whether renewal sits inside or outside the quoted<\/span><a href=\"https:\/\/getprojects.ai\/blog\/custom-software-development-cost\/\"> <b>custom software development cost<\/b><\/a><b>.<\/b><\/p>\n<h3><b>Layer 5: AI-Generated Code and the New Provenance Gap<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">AI coding assistants have added a layer that most 2022-era contract templates do not contemplate. The 2026 OSSRA data attributes part of the licence-conflict surge to code entering codebases outside standard package managers, pasted snippets, direct inclusions, and AI generation\u00a0 which manifest-scanning tools cannot see. It is the fastest-moving item in current<\/span><a href=\"https:\/\/getprojects.ai\/blog\/software-development-outsourcing-trends\/\"> <b>software development outsourcing trends<\/b><\/a><b>.<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Two clauses close the gap: a disclosure requirement naming which AI tools were used and where, and an unmodified IP warranty covering the deliverables regardless of how they were produced. Never accept an AI carve-out from that warranty. A vendor who will not stand behind the output is transferring provenance risk to you at no discount.<\/span><\/p>\n<h3><b>The Source Code Ownership Clause: Exact Language to Look For<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">A workable <\/span><b>source code ownership clause<\/b><span style=\"font-weight: 400;\"> contains four elements. Read your MSA against this list; if any element is missing, it is a redline, not a preference.<\/span><\/p>\n<ol>\n<li><b> Present-tense assignment with a work-for-hire fallback.<\/b><span style=\"font-weight: 400;\"> Look for wording in this shape:<\/span><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">&#8220;All Deliverables shall be considered works made for hire. To the extent any Deliverable does not qualify as a work made for hire under applicable law, Vendor hereby irrevocably assigns to Client all right, title, and interest worldwide in and to such Deliverable, including all copyrights, patent rights, trade secrets, and moral rights, effective upon creation.&#8221;<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The phrase carrying the weight is <\/span><span style=\"font-weight: 400;\">hereby irrevocably assigned<\/span><span style=\"font-weight: 400;\">. &#8220;Agrees to assign&#8221; or &#8220;shall assign&#8221; creates a future promise requiring a second signature you may never get.<\/span><\/p>\n<ol start=\"2\">\n<li><b> Vesting that does not depend on a dispute.<\/b><span style=\"font-weight: 400;\"> Payment-conditional assignment is fine in principle, but it must state that ownership vests automatically on payment with no further action required. Otherwise a disputed final invoice freezes your entire IP position.<\/span><\/li>\n<li><b> A defined deliverables list.<\/b><span style=\"font-weight: 400;\"> &#8220;Deliverables&#8221; should expressly include source code, object code, build and deployment scripts, infrastructure configuration, database schemas, design files, documentation, and work in progress\u00a0 including code written but not delivered. Mirror the wording used in your<\/span><a href=\"https:\/\/getprojects.ai\/blog\/statement-of-work-software-development\/\"> <b>statement of work for software development<\/b><\/a><span style=\"font-weight: 400;\"> so the two documents cannot be read against each other.<\/span><\/li>\n<li><b> Further assurances and repository control.<\/b><span style=\"font-weight: 400;\"> The vendor agrees to sign whatever perfects the transfer, and to hand over repository administrator rights, domain registrations, cloud accounts, API keys, and app-store credentials within a stated number of days.<\/span><\/li>\n<\/ol>\n<h3><b>How to Check if Your Outsourcing Contract Transfers IP: A 9-Step Review<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Work through this sequence before signature and again at closeout. It takes roughly 90 minutes, and it is the highest-return 90 minutes in the engagement.<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Locate the IP clause.<\/b><span style=\"font-weight: 400;\"> Confirm it sits in the MSA, not only in a SOW that later SOWs may supersede.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Check the verb.<\/b><span style=\"font-weight: 400;\"> &#8220;Hereby assigns&#8221; is self-executing; &#8220;will assign&#8221; is a promise. Redline the promise.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Read the deliverables definition.<\/b><span style=\"font-weight: 400;\"> If source code and repositories are not named explicitly, name them.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Find the background IP schedule.<\/b><span style=\"font-weight: 400;\"> No exhibit listing pre-existing components means no schedule exists.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Verify the background IP licence scope.<\/b><span style=\"font-weight: 400;\"> Perpetual, irrevocable, worldwide, royalty-free, sublicensable, transferable on change of control.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Confirm the SBOM obligation.<\/b><span style=\"font-weight: 400;\"> A dependency list with licences at each milestone, not only at final delivery.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Check the copyleft warranty.<\/b><span style=\"font-weight: 400;\"> No GPL or AGPL in distributed code without written approval.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Read the IP indemnity cap.<\/b><span style=\"font-weight: 400;\"> Fees-paid caps are standard; for a product-critical build, negotiate above contract value or uncapped for IP claims.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Confirm the handover schedule.<\/b><span style=\"font-weight: 400;\"> Admin rights, credentials, and further-assurance documents, with a deadline tied to a payment milestone.<\/span><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">Answering <\/span><b>who owns the code when you outsource<\/b><span style=\"font-weight: 400;\"> costs nothing before signature. Litigating it afterwards is a five-figure exercise with an uncertain outcome, which is why handover deserves the same rigour you apply to<\/span><a href=\"https:\/\/getprojects.ai\/blog\/milestone-payments-software-development\/\"> <b>milestone payments in software development<\/b><\/a><b>.<\/b><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-2333\" src=\"https:\/\/getprojects.ai\/blog\/wp-content\/uploads\/2026\/08\/04-nine-step-ip-clause-review.png\" alt=\"&quot;Nine-step review: who owns the code&quot;\" width=\"1200\" height=\"675\" srcset=\"https:\/\/getprojects.ai\/blog\/wp-content\/uploads\/2026\/08\/04-nine-step-ip-clause-review.png 1200w, https:\/\/getprojects.ai\/blog\/wp-content\/uploads\/2026\/08\/04-nine-step-ip-clause-review-300x169.png 300w, https:\/\/getprojects.ai\/blog\/wp-content\/uploads\/2026\/08\/04-nine-step-ip-clause-review-1024x576.png 1024w, https:\/\/getprojects.ai\/blog\/wp-content\/uploads\/2026\/08\/04-nine-step-ip-clause-review-768x432.png 768w\" sizes=\"auto, (max-width: 1200px) 100vw, 1200px\" \/><\/p>\n<h2><b>Case Studies: What This Looks Like in Practice<\/b><\/h2>\n<p><b>A logistics SaaS at Series A.<\/b><span style=\"font-weight: 400;\"> A 30-person startup outsourced its dispatch platform to an offshore agency across 14 months and roughly $210,000 in fees. The MSA assigned &#8220;all deliverables&#8221; but listed no background IP, and diligence found the agency&#8217;s proprietary routing engine at the centre of the product. Renegotiating a perpetual sublicensable licence cost $46,000 and delayed the round by seven weeks, a bill with a two-line schedule at kickoff would have been erased.<\/span><\/p>\n<p><b>An enterprise vendor switch.<\/b><span style=\"font-weight: 400;\"> A retail group moving its e-commerce integration layer to a new partner found the previous agency owned the AWS account, the private repository, and three commercial SDK licences. With a handover schedule but no further-assurance clause, the transition ran 5 weeks instead of 2, and re-licensing the SDKs added $12,400. The replacement contract ties credential handover to the final 20% payment milestone, and account ownership is now checked during<\/span><a href=\"https:\/\/getprojects.ai\/blog\/how-to-vet-mobile-app-development-company\/\"> <b>technical vetting of the development company<\/b><\/a> <span style=\"font-weight: 400;\">rather than at closeout.<\/span><\/p>\n<h2><b>Decision Framework: Four Ownership Models Compared<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">Full assignment is the right default for most product builds, but it is not the only defensible structure. Match the model to what you are actually buying.<\/span><\/p>\n<table>\n<tbody>\n<tr>\n<td><b>Ownership model<\/b><\/td>\n<td><b>What you get<\/b><\/td>\n<td><b>Main risk<\/b><\/td>\n<td><b>Best fit<\/b><\/td>\n<\/tr>\n<tr>\n<td><b>Full assignment + background IP licence<\/b><\/td>\n<td><span style=\"font-weight: 400;\">Copyright in all custom code; perpetual sublicensable licence to vendor frameworks<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Requires a complete background IP schedule to be meaningful<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Funded startups, product companies, anything with an exit path<\/span><\/td>\n<\/tr>\n<tr>\n<td><b>Full assignment, no reuse rights for vendor<\/b><\/td>\n<td><span style=\"font-weight: 400;\">Exclusive ownership; vendor cannot reuse anything built<\/span><\/td>\n<td><span style=\"font-weight: 400;\">20\u201335% higher cost; some agencies will decline<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Proprietary algorithms, regulated systems, competitive differentiators<\/span><\/td>\n<\/tr>\n<tr>\n<td><b>Perpetual exclusive licence to client<\/b><\/td>\n<td><span style=\"font-weight: 400;\">Unlimited use and modification; vendor retains copyright<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Weak position in M&amp;A diligence; assignability questions<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Internal tooling with no resale or exit plan<\/span><\/td>\n<\/tr>\n<tr>\n<td><b>Vendor-owned, client licensed<\/b><\/td>\n<td><span style=\"font-weight: 400;\">Fast, cheap delivery on a proven platform<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Vendor can serve competitors; you cannot fork or migrate freely<\/span><\/td>\n<td><span style=\"font-weight: 400;\">White-label products, short-lifecycle marketing builds<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><span style=\"font-weight: 400;\">In the middle two rows, negotiate <\/span><b>source code escrow<\/b><span style=\"font-weight: 400;\"> with a named agent, released on defined triggers such as insolvency, acquisition, or sustained support failure. Escrow does not settle <\/span><b>who owns the code when you outsource<\/b><span style=\"font-weight: 400;\">, but it removes the worst case: a vendor disappearing with the only working copy.<\/span><\/p>\n<h2><b>What Most Teams Get Wrong<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">The dominant mistake is not ignorance of IP clauses. It is sequencing. Teams treat <\/span><b>who owns the code when you outsource<\/b><span style=\"font-weight: 400;\"> as a legal formality to settle after the commercial terms are agreed\u00a0 which means they raise it once the vendor is selected, the timeline is committed, and the leverage has quietly moved to the other side of the table.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Ownership terms should be a vendor selection criterion, not a post-selection negotiation. Ask for the standard IP clause during shortlisting, alongside rates and portfolio. It costs one line in your<\/span><a href=\"https:\/\/getprojects.ai\/blog\/how-to-write-software-development-rfp\/\"> <b>software development RFP<\/b><\/a><span style=\"font-weight: 400;\"> and it filters out vendors whose business model depends on retaining your code.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The second pattern belongs to bidding marketplaces. When agencies compete on price under platform commission pressure of 10\u201320%, margin gets recovered somewhere\u00a0 often through reuse rights, because the boilerplate they keep is what makes a below-cost bid viable. That is arithmetic, not bad faith, and it is a structural difference worth understanding in<\/span><a href=\"https:\/\/getprojects.ai\/blog\/agency-marketplaces-vs-direct-matching-which-is-better-for-hiring-software-teams\/\"> <b>agency marketplaces vs direct matching<\/b><\/a><b>.<\/b><span style=\"font-weight: 400;\"> The cheapest bid and the weakest assignment clause tend to arrive in the same proposal.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The third is treating verification as separate from ownership. An agency with a registered entity, traceable domain, checkable client history, and named team members can be held to an indemnity. An unverified vendor operating through a personal account cannot, however strong the clause reads. <\/span><b>The enforceability of your contract is capped by the substance of your counterparty<\/b><span style=\"font-weight: 400;\">, which is why vendor vetting and IP protection are one exercise, not two.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Finally, scope drift affects the assignment itself. A clause signed against SOW #1 rarely covers the three change orders that follow to\u00a0 confirm at every SOW that the master IP terms flow through.<\/span><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-2334\" src=\"https:\/\/getprojects.ai\/blog\/wp-content\/uploads\/2026\/08\/05-code-ownership-models-comparison.png\" alt=\"&quot;Ownership models when you outsource code&quot;\" width=\"1200\" height=\"675\" srcset=\"https:\/\/getprojects.ai\/blog\/wp-content\/uploads\/2026\/08\/05-code-ownership-models-comparison.png 1200w, https:\/\/getprojects.ai\/blog\/wp-content\/uploads\/2026\/08\/05-code-ownership-models-comparison-300x169.png 300w, https:\/\/getprojects.ai\/blog\/wp-content\/uploads\/2026\/08\/05-code-ownership-models-comparison-1024x576.png 1024w, https:\/\/getprojects.ai\/blog\/wp-content\/uploads\/2026\/08\/05-code-ownership-models-comparison-768x432.png 768w\" sizes=\"auto, (max-width: 1200px) 100vw, 1200px\" \/><\/p>\n<h2><b>Before You Sign the Next SOW<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">This question gets settled cheaply or expensively, and the difference is entirely when you ask it. Put the assignment clause, the background IP schedule, and the SBOM obligation into your shortlisting criteria. The same 72-hour discipline described in<\/span><a href=\"https:\/\/getprojects.ai\/blog\/how-to-shortlist-an-it-agency-in-72-hours\/\"> <b>how to shortlist an IT agency<\/b><\/a> <span style=\"font-weight: 400;\">\u00a0and <\/span><b>who owns the code when you outsource<\/b><span style=\"font-weight: 400;\"> stops being a diligence discovery and becomes a procurement checkbox.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">If you are comparing development partners now, <\/span><a href=\"https:\/\/getprojects.ai\/\"><b>GetProjects <\/b><\/a><span style=\"font-weight: 400;\">connects businesses directly with verified IT companies with no bidding wars, no platform commission, and agency profiles vetted across website, domain, reviews, and team details before they go live. Post a project in under two minutes, ask every shortlisted agency for their standard IP clause, and compare the answers side by side.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The agencies that send it back the same day are usually the ones worth talking to.<\/span><\/p>\n<h2><b>FAQ<\/b><\/h2>\n<h3><b>Do I own the code if I paid for it?\u00a0<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Not automatically. Payment is consideration for services; it does not transfer copyright by itself in the US, UK, EU, or India. Ownership moves only through an express written assignment signed by the party that created the work. A contract with payment terms but no assignment clause likely leaves the developer as legal owner, whatever you paid.<\/span><\/p>\n<h3><b>Is a &#8220;work for hire&#8221; clause enough for software?\u00a0<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">On its own, no. US law limits work-for-hire treatment of commissioned works to nine statutory categories, and software is not among them. A work-for-hire paragraph without a present-tense assignment fallback can fail entirely. The reliable construction states the work-for-hire position and then adds &#8220;to the extent any Deliverable does not qualify, Vendor hereby irrevocably assigns\u2026&#8221;<\/span><\/p>\n<h3><b>Who owns the code an offshore development team writes?\u00a0<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Governing law and enforcement venues decide this more than geography does. Most jurisdictions default ownership to the author, so the analysis is unchanged: an express assignment, a named governing law, and a realistic enforcement route. Confirm the contracting entity is a registered company you could actually pursue.<\/span><\/p>\n<h3><b>Can a development agency reuse your code for another client?\u00a0<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">It depends on what the contract permits. With a full assignment and no reuse carve-out, they cannot reuse your custom code. With a licence-back or an unlisted background IP claim, they often can\u00a0 include competitors. If exclusivity matters, add an explicit non-reuse covenant and expect to pay 20\u201335% more.<\/span><\/p>\n<h3><b>What is a source code ownership clause?\u00a0<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">It is the provision transferring copyright and related rights in the code from vendor to client. A complete version includes a present-tense assignment, a deliverables list covering source code and repositories, a moral rights waiver where the jurisdiction recognises them, and a further-assurance obligation.<\/span><\/p>\n<h3><b>What happens to your IP if the agency shuts down?\u00a0<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">If the assignment was properly executed and effective upon creation, you already own the code\u00a0 but you can still lose access to repositories, credentials, and environments held in the vendor&#8217;s accounts. Escrow with a named agent, plus a contractual requirement to mirror the repository weekly to client-controlled infrastructure, are the practical protections. Raise both during vendor selection, not at closeout.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Paying an invoice does not transfer a copyright. That single legal fact is behind most ownership disputes between businesses and their development partners\u00a0 and those disputes almost never surface during the build. They surface 12 to 24 months later, during a funding round, an acquisition, or a vendor switch, when a diligence lawyer asks for [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":2336,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11],"tags":[],"class_list":["post-2329","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-get-projects"],"_links":{"self":[{"href":"https:\/\/getprojects.ai\/blog\/wp-json\/wp\/v2\/posts\/2329","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/getprojects.ai\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/getprojects.ai\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/getprojects.ai\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/getprojects.ai\/blog\/wp-json\/wp\/v2\/comments?post=2329"}],"version-history":[{"count":1,"href":"https:\/\/getprojects.ai\/blog\/wp-json\/wp\/v2\/posts\/2329\/revisions"}],"predecessor-version":[{"id":2335,"href":"https:\/\/getprojects.ai\/blog\/wp-json\/wp\/v2\/posts\/2329\/revisions\/2335"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/getprojects.ai\/blog\/wp-json\/wp\/v2\/media\/2336"}],"wp:attachment":[{"href":"https:\/\/getprojects.ai\/blog\/wp-json\/wp\/v2\/media?parent=2329"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/getprojects.ai\/blog\/wp-json\/wp\/v2\/categories?post=2329"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/getprojects.ai\/blog\/wp-json\/wp\/v2\/tags?post=2329"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}