When the Owner Is Out: Continuity for a Business Built on One Person

Payroll runs Friday. The only person who can release it is in hospital, and nobody else has the banking authority, the password, or the second factor. Nothing about that is solvable on Thursday — every arrangement that would have fixed it required the participation of the person who isn't available. This is the least glamorous item on any small business's list and the one with the shortest fuse, because the obligations with fixed dates don't wait to find out what happened. Most of the fix is an afternoon's work, and none of it can be done retroactively.

What breaks, in what order

Function	Fails within	Consequence
Payroll release	Days	Per our payroll analysis — the most serious
Supplier payments	Days	Supply interruption, relationships
Loan and lease payments	Days	Default risk on obligations that were affordable
Tax remittances	Days to weeks	Penalties, personal exposure
System access	Immediately	Nothing can be done at all
Customer commitments	Days to weeks	Contractual and reputational
Collections and invoicing	Weeks	Cash stops arriving

The pattern worth noticing: everything with a fixed external date fails first, and those are the items with consequences the business can't negotiate. Operational knowledge and customer relationships feel more important and degrade more slowly — which is why they get the attention and the money movement doesn't.

The third row is the one owners underestimate. A loan payment missed because nobody could release it is a default on an obligation the business could comfortably afford, and per our covenant analysis it hands the lender rights that are difficult to unwind afterwards.

The list only you can write

The whole exercise, and it takes twenty minutes.

Write down everything that only you can do. Prompts:

• What can only you authorize? Payments, transfers, approvals above a threshold.
• What can only you access? Accounts, systems, the phone that receives the second factor.
• What do only you know? Which customer is waiting on what, which supplier is flexible, which deadline is real.
• Who only deals with you? Relationships where a substitute wouldn't be recognized.
• What happens on a date that only you track?

The list is longer than owners expect, and its length is the diagnostic. A business where forty items are on it is a business that stops entirely; one with six has a survivable interruption.

Then sort by how fast it causes damage — not by how important it feels. The money movement items go first regardless of anything else, because their consequences are dated and external.

Banking authority

The hardest problem to solve after the fact and the fastest to cause damage, which makes it the priority.

An account with one authorized person stops when that person does. Nobody can release payroll, pay a supplier, or move money between the tiers in our cash management guide.

What to arrange in advance, with the bank directly:

• An additional authorized signer, with defined limits if you prefer.
• Online banking permissions for someone else, which can frequently be scoped — view-only, payment initiation without release, or full authority.
• A tiered arrangement — someone who can pay payroll and suppliers but not move money out to new payees, which limits the risk of granting access.
• Documented authority under the entity's governing documents, so the bank knows who may act.
• Confirmation of what the bank requires in an incapacity situation, asked now rather than discovered then.

The tiered option is what makes this palatable for owners reluctant to grant broad access. Someone who can release an existing scheduled payroll and cannot add a payee has enough authority to keep the business running and not enough to be a serious risk — and per our payment fraud analysis, new payees are where the risk actually sits.

Ask your bank what they offer. The arrangements exist and are rarely volunteered, because nobody at the branch raises the possibility of the owner being unavailable.

Credentials and access

The problem that makes everything else impossible, and the cheapest to solve.

A password manager with an emergency access feature — where a named person can request access and receive it after a delay you set — solves most of this in about fifteen minutes. The delay means nobody gets access while you're able to decline it, and they do get it when you can't.

What needs to be reachable:

• Banking and payment systems.
• Payroll.
• Accounting, per our bookkeeping guide.
• Email, which is where everything else's recovery goes.
• The domain registrar and hosting, which if lost can be genuinely unrecoverable.
• Point of sale and merchant accounts.
• Insurance and key supplier portals.
• The phone or device holding authentication, and how to get past it.

The domain and email entries deserve particular attention. Email is the recovery route for every other system, so losing access to it makes everything else unrecoverable — and a domain that lapses because nobody knew where it was registered can take a business's identity with it.

The things nobody else knows

The operational layer, which matters over weeks rather than days.

Write down, in one document:

1. The recurring calendar — what's due on which dates, monthly and annually. Nobody else knows what happens on the eleventh.
2. The obligations list — loans, leases, subscriptions, with amounts and dates, which per our records guide you should maintain anyway.
3. Key contacts — accountant, attorney, banker, insurance broker, main suppliers, largest customers, with what each handles.
4. Work in progress — what's committed to whom and by when.
5. Where things are — records, keys, documents, the safe.
6. What to do first, in your own words, if you're unavailable for a fortnight.

Item six is the most valuable and the shortest. A page saying "release payroll, call these three customers, don't worry about anything else for two weeks" tells someone what matters far better than any list of everything.

Keep it with the credentials, update it when something material changes, and don't try to make it comprehensive. A short document that exists beats a thorough one that was never finished, which is how most of these attempts end.

Legal authority

The part requiring advice, and where assumptions cause the most trouble.

A personal power of attorney does not necessarily let someone act for a business entity. Whether it does depends on how it's drafted, what the entity's governing documents say, and what each institution will accept — and per our authority guide, institutions frequently have their own requirements regardless of what a document says.

What to discuss with an attorney:

• Whether your governing documents address incapacity — many operating agreements don't, and adding a provision is straightforward.
• Whether a business-specific authority document is appropriate.
• How your entity type affects it, which varies.
• What happens with multiple owners, and whether your buy-sell arrangement covers incapacity as well as death.
• Whether key person insurance is worth carrying.
• Registering documents with institutions in advance, since acceptance takes time you won't have.

That last point mirrors the finding in our authority guide: holding a valid document and being unable to use it is the most common frustration in this area, and registering it beforehand is what prevents it.

Telling someone

The step that converts preparation into a plan, and the one owners defer.

An arrangement nobody knows about is not an arrangement. If the emergency access request goes to someone who doesn't know they're named, doesn't know the business exists in that way, or doesn't know where to start, the preparation accomplishes nothing.

What the named person needs:

• To know they're named, and to have agreed.
• To know how to trigger access.
• To know who to call first — usually the accountant or a key employee.
• To know the scope — keep it running for a fortnight, not make strategic decisions.
• To have met the accountant and banker, ideally, so they aren't a stranger.

Who to name: someone who will be reachable and who you'd trust with the money. A spouse, a co-owner, a senior employee, a professional advisor. The most common mistake is naming someone based on closeness rather than on availability and competence — and the second most common is naming nobody because the choice felt difficult.

And a practical note: tell your accountant and your banker who it is. They're the parties most likely to notice something is wrong and most able to help, and they'll be far more useful if they know who to expect.

The afternoon version

If the full exercise won't happen, this will and covers most of the exposure:

1. Add a second authorized person to the bank account, tiered if you prefer, and confirm they can authenticate independently.
2. Set up a password manager with emergency access and put the critical logins in it.
3. Write one page — recurring dates, key contacts, what to do first.
4. Tell the named person and confirm they've agreed.
5. Tell your accountant who it is.
6. Diary a review for a year out.

Then the longer items — the legal documents, the insurance question, the fuller documentation — when there's time. Steps one and two carry most of the value and take about an hour between them.

The framing worth holding onto: this isn't planning for a disaster, it's planning for a broken leg. A fortnight's unavailability is a common event, and the arrangements that handle it are the same ones that handle worse.

Frequently asked questions

---

This guide is educational and does not constitute legal, financial, or insurance advice. The authority of signers and agents, the effect of powers of attorney on business entities, incapacity provisions in governing documents, and what institutions will accept vary substantially by state, entity type, and institution. Consult a qualified attorney and speak with your bank directly before relying on any arrangement described here.