Escrow releases the funds, the registrar pushes the name, and the buyer's team celebrates. In many companies that is the last time anyone thinks carefully about the domain until something goes wrong with it.
Valuable names are rarely lost to sophisticated attacks. They are lost to the ordinary: a renewal charged to a card that has expired, an account registered to someone who has since left, a reset email sent to an inbox nobody reads.
Four questions for the first week
- Whose account is it in? It should belong to the company, under a role address, not to the person who ran the deal.
- Who can move it? List every login with transfer rights, and remove anyone who does not need them.
- What happens at renewal? Renew for several years, and keep a backup payment method on file.
- Who is watching? Someone outside the account should be alerted to any change in contacts, nameservers or lock status.
A name worth six figures deserves the controls you would put on a bank account of the same size.
Locks are not custody
Registrar and registry locks are worth having, and the strongest registry locks need a manual, verified step before a name can move. But a lock only protects against a transfer. It does nothing about an expiry, and it can be undone by anyone who controls the account.
Custody is the combination: the right owner of record, the fewest people with access, renewal handled as a policy rather than a reminder, and monitoring that does not depend on the account it is monitoring.
Where Dotly.ai fits
Dotly.ai exists because most companies have nobody whose job this is. It holds the portfolio under governance rules, watches for changes and lookalike variants, and makes expiry a controlled event instead of a surprise. For a single acquired name, that is often the difference between owning it and merely having bought it.
