Was this helpful?

Onboard a new client in the first 30 days

For agencies and marketersFor business owners
On this page

This page shows how I take a new client from a signed agreement to a working engagement in 30 days: access to every account without handling a password, a kickoff call that ends in writing, a baseline recorded before anything changes, and something visible shipped by day 14. Agencies can copy it. Owners about to hire one can hold them to it.

The rule under everything: the client owns every account

Every account the business pays for or builds history in belongs to the business: analytics, Tag Manager, ad accounts, the Meta business portfolio, the Business Profile, the domain, hosting, the CRM, and email and SMS tools. The business is the owner and pays the bills. I work through my own access, granted by invite and removable at any time.

When an agency owns the accounts, a business that parts ways with it can lose control of its ad history, its analytics data, its reviews, and sometimes its own domain. Client ownership protects the agency too. If you never hold a password, you are never the suspect when something changes, and ending the engagement means removing a user.

Owner
The business. Holds the account, pays for it, and decides who gets in.
User or partner
You. A named seat or partner link with enough access to do the work, removable in one click.
Shared login
Never. Nobody can tell who did what, and removing one person means changing the password for everyone.

Before you begin

  • A written agreement covering scope, price, start date, and how either side ends it. At minimum, an email stating the terms and a reply confirming them. See discovery and proposals.
  • The first invoice paid, or payment terms agreed in writing. See billing.
  • One agency identity per platform, reused for every client: a Google account on your business email with two-step verification, a Google Ads manager account, and a Meta business portfolio.
  • A password manager that can share a single item, for the rare login that cannot be delegated.
  • A short intake form, a project folder for the client, and an empty access log.

The 30-day plan at a glance

The client sees a welcome email, one short form, a good call, and finished work inside two weeks. Behind that is a fixed schedule, and everything they hand over turns into something they get back.

WhenThe client providesWhat it becomes
Day 0: welcome emailNothing yetA clear picture of the month ahead
Days 0 to 3The intake form and the access grantsThe 30-day plan, and a baseline of where things stand
Days 3 to 7: kickoff callOne hourScope, a headline number, and 30-day outcomes in writing the same day
Day 7: status emailAnswers to anything still openWhat you have, what you found, and what you are still waiting on
Day 14: first deliverableLogo, real photos, and anything off-limits to sayVisible work that looks like their business
Day 21: progress noteA few DNS records, if tracking is in scopeMeasurement running on domains they own
Day 30: reviewA short callThe regular reporting rhythm and a written record of everything set up

Day 0: Send one welcome email

  1. Set up your side first

    The same day the agreement comes back, create the project and access log, and move the client from your pipeline to your client list so your records are true.

  2. Give them three things to do, in order

    The intake form (what they sell, how customers find them, every tool they use, who handles leads, their goals, and brand assets), an access guide listing only the accounts their scope needs, and a link to book the kickoff. Anything they get stuck on gets finished together on the call.

  3. Attach a roadmap with real dates

    The next 30 days, what you need from them, and what each item becomes. The dates are promises. If one will slip, the client hears it from you before it passes.

  4. Put the communication cadence in writing

    Tell them how and when they will hear from you, before they have a reason to wonder.

TouchWhat to promise
RepliesA window in hours or business days, not "promptly"
Weekly updateA short email on the same day each week: a few numbers, what you did, what is next
Monthly reportA fixed date, then a call that uses the report as the agenda
Quarterly reviewWhat worked, what did not, and the next 90 days
Longest silenceThe most days they will ever go without a personal message from you
Bad newsBy phone or personal email, before they notice it themselves

Only promise what you already have a routine to deliver. A promise with nothing behind it is a future apology. See the monthly report guide for the report itself.

Days 0 to 3: Get access without collecting passwords

Use delegated access by default: the client invites your agency identity inside their own account, you never see a password, and they can remove you in one click. For the rare system with no invite option, use a shared password manager item. Passwords never travel by email, text, chat, or screenshot. Request only what the scope uses; unused access is still risk you carry.

PlatformAccess to requestHow it is granted
Google Analytics 4Editor on the propertyThe client adds your Google account in property access management. Administrator is only needed to manage users.
Google Tag ManagerAccount user with Publish on the containerThe client adds your Google account in user management and sets the container permission.
Search ConsoleFull userThe client adds you under users and permissions and stays the owner.
Google AdsA manager account linkYou send a link request to the client's 10-digit customer ID and the client accepts it. Billing stays on the client's payment method.
MetaPartner access to the Page, Instagram account, ad account, and pixelIn business portfolio settings, the client adds your portfolio as a partner by its business ID, then picks which assets to share and at what permission level.
Google Business ProfileManagerThe client adds your Google account as a manager. The business stays the primary owner.
Domain and DNSA delegate invite, or no login at allMany registrars offer delegate or member access. If not, send the exact records for the client to add.
Hosting and websiteYour own named admin userA hosting user seat where offered, and a separate site admin, such as a new WordPress user with the Administrator role. Never the owner's login.
CRMA named seat with admin rightsThe client invites your agency email. Some CRMs bill per seat, so agree who pays.
Email and SMS toolsA named user seatThe client invites your agency email. The sending domain, the list, and the texting number's carrier registration stay in the business's name.

Keep an access log

Record every grant the day it lands: system, level, method, date, and a note. For a password manager item, record the item name, never the password. The log proves you never held credentials and becomes your revoke list when the engagement ends.

System                   Level          Method            Granted     Note
Google Business Profile  Manager        Invite            2026-09-15  Business is primary owner
Google Ads               Manager link   Link request      2026-09-15  Billing on client's card
Booking tool             Shared item    Password manager  2026-09-17  Item: "Booking tool (client)"

Days 3 to 7: Run the kickoff call

Beforehand, read the intake form, pick the three or four answers worth digging into, and check which grants have landed.

MinutesTopicYou leave with
0 to 5IntroductionsOne point of contact on each side
5 to 15ScopeWhat is in, what is out, and how revisions and new requests work
15 to 30Access walkthroughStuck invites finished on a shared screen, access log updated
30 to 45The first 30 daysDeliverables with dates, what you need from them, and the headline number
45 to 55CadenceUpdate days, reply times, and what counts as urgent
55 to 60Next stepsInvoice status confirmed, next meeting booked

Before the end of that business day, send a recap: access still pending, the 30-day deliverables and dates, the headline number, and the next check-in. Every call ends in writing, because memory is not a system.

As access lands: capture a baseline before changing anything

Before changing a single setting, record how everything stands. The baseline makes every improvement provable and protects you when someone later says a thing used to work.

  • The Business Profile is saved as it stands: info, review count and rating, photos, and last post date.
  • The homepage and key pages are saved as full-page screenshots.
  • The last 90 days of Analytics and Search Console are exported: traffic, sources, key events, clicks, and top queries.
  • Every tag is mapped: which container loads, which measurement ID it sends to, and which property owns that ID.
  • Every phone number and form on the site is listed, with where each form actually sends.
  • Ad campaigns, social profiles, and the CRM's pipeline and automations are recorded, where they exist.
  • Current lead volume and source mix are written down from whatever the client can show you.

Day 14: Ship the first quick win

The first visible deliverable is the most important date of the month. It is the client's proof that hiring you was right, so protect it above everything else.

  1. Pick it at kickoff

    Something the client can see working, not a plan: a Business Profile cleaned up with new posts live, a homepage fix, every lead landing in one inbox, or tracking confirmed end to end. Visible beats perfect.

  2. Check it against the access log

    The quick win cannot depend on an account that is still locked.

  3. Show the before and after

    Send a short note with the baseline screenshot beside the change. Work the client never sees is worth nothing to them.

Day 30: Review the month and write down what was set up

Review what got done, what the early data shows, and whether the plan still fits. Book the monthly check-in, move the client into your normal operating rhythm, and write the setup record where the client can reach it:

Access
The access log, current as of day 30.
IDs
Tag Manager container, Analytics property and measurement ID, Search Console property, Google Ads customer ID, and Meta portfolio and ad account IDs.
Configuration
Every form and where it sends, every integration and automation, and every DNS record added, each with a line on what it does.
Ownership
Which account owns each asset and who pays for each subscription.

An ID map that lives only inside the platforms is how data ends up in the wrong place. The same record is your checklist when the engagement ends; see offboarding and data handover.

Verify it works

  • The price and scope were in writing before delivery work started.
  • Every account is owned by the business, and your access is a named user or partner link.
  • No password was sent by email, text, or chat, and the access log shows how each grant was made.
  • The baseline was saved before the first change.
  • Something the client can see shipped by day 14.
  • The setup record matches what is actually configured.

Troubleshooting

What's next

Stuck on something this guide does not cover?

I run my own practice on exactly this system. If you do marketing for clients and have a specific question, send it to me.

Ask me a question

Last updated 2026-09-13 UTC. Written by Tucker Shively.