There is a moment in every new business when the work becomes real: a customer asks for an invoice with your business name on it, and you need a proper email address to send it from.
That moment is when technology decisions start piling up faster than you can think about them. Most of them are cheap to get right at the start and expensive to change later.
This is the order we would set things up in, and why it is in that order.
First: the two things that are hardest to change later
Everything else on this list can be adjusted in an afternoon. These two cannot, because other people have already learned them.
Your domain name
- Register it in the business’s own name, with a business email address as the contact — not in a former partner’s or a web designer’s personal account.
- Keep control of the login. Whoever builds your website should have access, not ownership.
- Turn on auto-renew. A lapsed domain means your email stops and someone else can register it.
- If the exact name is taken, a close variant is fine. Nobody loses business over a hyphen.
Your email
Send from your own domain from day one. A free mailbox is fine as a starting point, but the moment you are quoting or invoicing, a mismatched address costs you credibility — and it will follow every message you send.
Set it up so the mail is authentic, not just functional: SPF, DKIM and DMARC. Without those records your quotes land in spam and you never find out. We explain the mechanics in why business email lands in spam.
Second: decide who owns what
This is the least exciting item on the list and the one that causes the worst arguments later. Every account your business depends on should belong to the business, not to an individual:
| Account | Should belong to |
|---|---|
| Domain registrar | The business, with a business contact address |
| Email platform | An owner or admin mailbox, not a personal one |
| Cloud storage | The business, with an admin account you control |
| Accounting software | The business |
| Social media pages | A business role account, not a personal profile |
Use a shared owner mailbox you both can access — and keep the recovery phone number current. Most ‘we lost access forever’ stories are really a story about an old phone number.
Third: the security baseline you should not defer
These four things take an afternoon and prevent most of the incidents that hurt small businesses:
- Multi-factor authentication on email, banking and anything holding client data. Start with email — it is the account everything else resets through.
- A password manager for the business, with a shared vault for the few accounts you both need.
- One account per person. No shared logins — if you cannot tell who did something, you cannot fix it or prove who did not.
- A separate administrator account you use only for administrative tasks, not for daily email.
Fourth: backups, with a test
Backups are the difference between a bad day and a closed business, and the only version that counts is the one you have restored successfully.
- Decide what would be painful to lose and make sure all of it is covered.
- Keep one copy somewhere that is not your office and not connected to your day-to-day network.
- Back up the accounts themselves, not just the files — email, contacts, accounting.
- Do a test restore in your first 90 days and write down that you did it.
An untested backup is not a recovery plan. It is a hope with a receipt.
Fifth: devices and accounts, kept separate
Mixing personal and business on the same device is comfortable until the day it is not — a lost phone, a departing partner, a tax question you cannot answer.
- Buy business-grade devices with a proper warranty. Consumer laptops fail at the worst time and cannot be serviced quickly.
- Keep business files in the business cloud account, not on a desktop.
- Turn on device encryption and a screen lock.
- Write down what you have bought and when the warranty ends — that is the start of your asset register.
Sixth: the money side
Choose accounting or invoicing software early, and check two things before you commit: that it produces the records your tax authority expects, and that you can export your own data if you ever leave.
Being able to leave with your data matters more than any feature. Ask the vendor directly, before you sign.
Where new businesses overspend
- Paying for enterprise tools built for a fifty-person team.
- Buying licences for staff who will not use them yet.
- Subscriptions that renew quietly — keep one list and review it quarterly.
- A custom website before you have a single customer.
- Hardware bought for a scale you have not reached.
A 90-day order of operations
| When | What to do |
|---|---|
| Week 1 | Register the domain, set up email, turn on MFA |
| Week 2 | Password manager, owner accounts, separate admin account |
| Week 3 | Backups, and schedule a test restore |
| Week 4 | Accounting software, invoicing, export test |
| Days 30–60 | Your first device register and a simple monthly maintenance habit |
| Days 60–90 | Review what you are paying for; cancel what nobody uses |
When to bring in help
You do not need an IT provider on day one. You will benefit from one when the things above stop fitting into an evening, or when a client asks a question about your security that you cannot answer confidently.
For businesses at that stage, our IT support for MSMEs and 24/7 IT support cover exactly this ground, and phone and email systems handles the domain, mailbox and deliverability setup. If you would rather just ask what order to do things in, talk to a specialist — that conversation is free.