Who is the domain actually hosted with (which registrar/company)?
Would you expect to be collateralising the entire business when the request is fulfilled by someone as that's likely what they'll be expecting.
Its registered on namecheap, could you please elaborate more on collateralising the entire business? Like give him access to the admin panel or give him the files