The verdict in three sentences
For a wealth management firm or family office in Toronto, the website contract matters as much as the design, because the site carries regulated marketing content, client portal links and personal data from prospects. Before signing, require written ownership of code, content and accounts, payments tied to milestones with clear acceptance criteria, and an exit clause that lets you leave with everything in 10 business days. Add a compliance review step for every page that describes performance, services or fees, and make sure privacy (PIPEDA) and Ontario accessibility (AODA) obligations are assigned to someone in writing.
Which clauses should a Toronto wealth firm insist on?
Most website contracts are written by the provider. Read them against this list. Figures are 2026 ballpark ranges from typical agency agreements, not legal standards.
| Clause | What to require | Red flag |
|---|---|---|
| Code and design ownership | Full assignment to your firm on final payment, including source files and design files | Licence only, or ownership kept by the agency |
| Content ownership | All copy, photos and videos produced for you assigned to you; stock licences listed | Copy reused on other clients' sites |
| Domain, hosting, analytics | Registered in your firm's name, provider gets delegated access | Domain under the agency's account |
| Milestone payments | 3 to 4 payments tied to accepted deliverables, 10 to 20% held until 30 days after launch | 50% or more upfront with no acceptance step |
| Acceptance criteria | Written list per milestone, 5 to 10 business days to test, defects classified by severity | "Deemed accepted" after 48 hours |
| Change requests | Written quote before work, hourly rate fixed in the contract | Open hourly billing |
| Warranty | 60 to 90 days of free bug fixes after launch | No warranty, or warranty voided by any content edit |
| Exit and handover | Full export, credentials and documentation within 10 business days | Exit fee or data held until a final invoice is disputed |
Two items are specific to wealth management. First, marketing content review: performance figures, testimonials, fee descriptions and service claims may fall under the rules of your regulator, such as the Ontario Securities Commission for registered portfolio managers or CIRO for dealer members. The contract should state that your compliance officer approves each page before launch and that the provider will not publish changes without that approval. Second, client portal links: the site often links to a custodian or reporting portal. The contract should say the provider does not host or process client account data unless that is explicitly in scope.
What do privacy and accessibility clauses need to cover?
Prospect forms collect names, emails, phone numbers and sometimes estimated assets. Under PIPEDA, your firm stays accountable for that data even when a vendor processes it, so the contract should cover: where form data is stored, who can access it, retention period, breach notification to you within a set time (for example 72 hours), and deletion at the end of the contract. If you serve clients in Quebec, Law 25 may add obligations. If you send newsletters, consent capture should support CASL requirements. Under the AODA, website accessibility obligations depend on your organization's size and type, so name who checks WCAG 2.0 or 2.1 AA conformance and who writes the accessibility statement. This is not legal advice; have your counsel review the final agreement.
How should milestones and acceptance work in practice?
A typical project with a remote studio takes 3 to 4 weeks of build once content is ready, plus compliance review time on your side. Here is a milestone plan that works for a 20 to 30 page wealth management site.
| Milestone | Deliverable | Payment | Acceptance criteria | Typical duration |
|---|---|---|---|---|
| 1. Kickoff and scope | Sitemap, page list, content plan, accounts list | 30% | Signed scope, all accounts in firm's name | Week 1 |
| 2. Design | Homepage and 3 key templates, desktop and mobile | 20% | Partner sign-off, brand guidelines respected | Week 1 to 2 |
| 3. Build and content | All pages built with final copy | 20% | Content approved by compliance, links and forms tested | Week 2 to 3 |
| 4. Launch | Live site, redirects, analytics, accessibility check | 20% | Zero critical defects, WCAG AA checks passed on key templates | Week 3 to 4 |
| 5. Holdback release | Warranty period | 10% | No open severity 1 or 2 defects after 30 days | Day 30 after launch |
Define severity in the contract: severity 1 blocks a form or the site, fixed within 1 business day; severity 2 breaks a page or a key feature, fixed within 3 business days; severity 3 is cosmetic and grouped into the next release.
With Kolonell's international offer, the price is fixed before kickoff: Starter $2,900, Growth $4,900, Premium $8,900, with a project manager reachable in your time zone, native English copywriting, delivery in 3 to 4 weeks and 3 months of support. Custom client tools and search optimization work are quoted separately. Typical Toronto agency quotes for comparable wealth management sites run around $20,000 to $70,000 in 2026, which makes the contract terms even more important at that level.
Mini case study
*Illustrative example.* Eleanor Chen is COO of a multi family office in Yorkville serving about 40 families. She chooses a Premium build at $8,900 and negotiates the schedule above.
Need a professional website?
Kolonell builds websites that attract clients, optimized for the Sénégalese market. Free quote in 2 minutes.
- Kickoff 30%: $2,670. Design 20%: $1,780. Build 20%: $1,780. Launch 20%: $1,780. Holdback 10%: $890.
- During the build, the partners ask for a new "Next generation" page for heirs. The change request clause sets a written quote first: 6 hours at an agreed $95 per hour, so $570, approved before work starts.
- At launch, testing finds one severity 2 defect: the prospect form fails on a mobile browser. It is fixed in 2 business days, and the $890 holdback is released at day 30.
Total paid: $9,470, every account in the family office's name, and a handover document Eleanor's IT provider can use if the firm changes vendors.
FAQ
Should a wealth firm accept a 50% upfront payment?
It is common, but 30% upfront with the rest tied to accepted milestones protects you better. Keep 10 to 20% held until 30 days after launch.
Who should own the website code after launch?
Your firm, through a written assignment that takes effect on final payment. Ask for the repository and design files to be transferred within 10 business days.
How long should our compliance review take?
Plan 3 to 5 business days per review round for a 20 to 30 page site. Build that time into the schedule so the provider's 3 to 4 week build is not blamed for delays.
Does PIPEDA apply if the website vendor is outside Canada?
Your firm remains accountable for personal information it transfers to a vendor for processing, wherever the vendor is. The contract should require comparable protection and say where data is stored.
What should the exit clause guarantee?
A full export of content, code, credentials and documentation within about 10 business days, with no exit fee. Test the handover list at kickoff by confirming all 5 to 7 key accounts are in your name.
Let's scope your project. Send us your page list, compliance workflow and target launch date, and we will return a fixed price, milestone plan and draft acceptance criteria. See the international offer or request a free quote: detailed reply within 48 hours.
Mohamed Bah
Fondateur, Kolonell
Passionate about digital and entrepreneurship in Africa, Mohamed has been helping Sénégalese businesses with their digital transformation since 2020. Founder of Kolonell, he believes every SME deserves a professional and accessible online présence.
