Small-business owners are often asked to buy SEO before they have a reliable way to judge it. The proposal may include a technical audit, content plan, local-search work, backlinks, dashboards, or “AI visibility.” The vocabulary can sound precise even when the business case is not.
Google’s current guidance for evaluating third-party SEO advice makes a useful distinction: outside tools and opinions can help, but they do not have access to Google’s internal ranking data and are not endorsed by Google. A trustworthy recommendation should be explainable, testable where possible, and consistent with official guidance.
01 · Define the job
Start with a first-party business outcome, not a ranking promise
“More traffic” and “page one” are incomplete goals. A local service business may need more qualified estimate requests. A salon may need more appointment starts for a priority service. A professional firm may need the right visitors to understand its expertise and request a consultation.
Ask the provider to connect the search work to one or two real customer actions. That does not make SEO perfectly attributable, but it gives the engagement a job beyond producing charts. The provider should also understand which services matter, who buys them, where the business actually operates, how leads are handled, and which constraints cannot be changed.
The plan can improve the page, search visibility, conversion path, and measurement around one real business need.
The promise ignores location, competition, intent, personalization, conversion quality, and Google’s control of results.
02 · Verify the recommendation
Separate official guidance, observed data, and professional judgment
Good SEO work combines several evidence types. The problem begins when they are blended together and presented as certainty. Ask where each recommendation came from and what would change the provider’s mind.
- Source 01Official search documentation
Useful for policies, supported features, crawl behavior, structured data, and stated best practices. It does not reveal a private ranking formula.
- Source 02Your first-party data
Search Console, Bing Webmaster Tools, analytics, lead records, call tracking, and customer questions show what is happening around the actual business.
- Source 03Direct website observation
Broken links, inaccessible forms, unclear headings, duplicate pages, slow templates, or missing service detail can be inspected and tested.
- Source 04Professional judgment
Prioritization and forecasting involve interpretation. A credible provider labels the inference instead of presenting it as a fact from Google.
A tool score can point toward an issue, but the score is not the customer experience or Google’s ranking system. Ask to see the affected URLs, the observed evidence, the practical consequence, and the proposed verification step.
03 · Read the deliverables
Inspect the work behind the monthly label
“SEO management” can describe very different services. The scope should say which pages, systems, and decisions are included. It should distinguish one-time repairs from recurring work and identify what requires owner approval.
- Technical review: crawlability, indexation, canonical URLs, redirects, structured data, performance, and broken paths.
- Content work: research, briefs, writing, editing, publishing, subject-matter review, and update responsibilities.
- Local search: Business Profile work, accurate categories and services, review processes, local pages, and citation cleanup.
- Authority work: the type of outreach or digital public relations, the quality standard, and which tactics are excluded.
- Measurement: baseline, reporting cadence, conversion definitions, access, annotations, and decision rules.
- Governance: who approves changes, who owns the accounts and content, and how the engagement ends.
Ask what the provider will do in the first 30, 60, and 90 days, but treat dates as a work plan—not a promise that Google will respond on schedule. Google’s own hiring guidance recommends realistic estimates, explanations of changes, and clear communication.
04 · Keep control
Protect account access, ownership, and your ability to leave
An audit does not automatically require full administrative control of the website or every marketing account. Google recommends read-only Search Console access at the audit stage. Broader access may be reasonable later, but it should match the approved work and use named collaborator accounts rather than shared passwords.
- Keep the business as the primary owner of the domain, website, Business Profile, analytics, Search Console, and advertising accounts.
- Grant the least access needed for the current task, then review it when the scope changes.
- Never email passwords. Use each platform’s collaborator or user-access controls.
- Require a change log for redirects, metadata, templates, tracking, structured data, and major content edits.
- Confirm ownership of writing, designs, research, dashboards, and other deliverables before signing.
- Document how access is removed and assets are handed back at the end.
The provider should be able to explain each site change. If a recommendation would remove a working page, combine services, alter legal text, collect new personal information, or publish an unverified claim, the owner should review the business consequence before deployment.
05 · Build the scorecard
Measure visibility, customer behavior, and business outcomes separately
A useful report does not collapse every signal into one “SEO score.” It shows the path from search visibility to meaningful action and states what the data cannot prove.
Relevant impressions, clicks, index coverage, local-profile actions, engaged visits, priority-page use, and completed inquiry steps.
Qualified calls or forms, booked appointments, accepted estimates, new customers, and revenue when the business can connect them accurately.
Start with a baseline and annotate important changes. Segment branded searches from broader discovery searches. Review priority services and locations separately. Compare trends over a useful period rather than treating one volatile daily position as the truth.
Ask who validates analytics events and how duplicate, spam, test, and internal activity are handled. If the business cannot connect a lead to revenue, say so. Honest gaps are more useful than false precision.
06 · Ask better AI questions
Test “AI visibility” claims without buying a new kind of certainty
Google says the same foundational SEO practices remain relevant for its AI search experiences; there is no separate technical requirement or special AI file needed to appear. That makes clear, useful, original content and a crawlable site more durable than a proprietary “AI optimization” checklist built around unsupported guarantees.
Bing’s AI Performance reporting adds useful first-party evidence: citations, cited pages, grounding query examples, and trends. Bing also states that citation activity does not indicate ranking, authority, placement, or the role a page played in an answer. A citation is therefore an observation—not automatically a lead or business result.
- Which AI search surfaces are being measured, and is the data first-party or sampled by a vendor?
- Does the report show citations, mentions, answer placement, traffic, or qualified conversions? These are different signals.
- Can the provider reproduce the observation, and how much do location, account state, model version, and prompt wording affect it?
- Is the recommendation still useful for a real customer reading the website?
- How will AI-search work be evaluated alongside ordinary search and business outcomes?
AI discovery deserves measurement, but it should not turn into an excuse for opaque deliverables. Treat new tools as additional evidence and keep the business goal stable.
07 · Know when to pause
Watch for promises that remove context or control
- “We guarantee number one.” Google explicitly warns against first-place guarantees.
- “Our tool has Google’s internal data.” Google says third-party tools do not have access to its internal systems and are not endorsed by Google.
- “You must link to us.” Google says you should never have to link to an SEO provider.
- “We need every password before the audit.” Access should match the approved task; read-only data is often enough to begin.
- “We will create hundreds of pages or links.” Volume without customer value, editorial control, or quality standards can create risk instead of durable visibility.
- “This AI score proves your brand is invisible.” Ask what the score measures, which systems it sampled, and whether it connects to actual customer behavior.
A red flag does not always prove bad intent. It does mean the proposal needs a clearer explanation, safer scope, or independent review before the business grants access or pays.
08 · Owner’s handoff
Ten questions to ask before choosing SEO help
- 01Which business outcome is this work meant to improve?
- 02What did you observe on our site and in our first-party data?
- 03Which recommendations come from official guidance, and which are your judgment?
- 04What will you change in the first 30, 60, and 90 days?
- 05What is excluded from the scope?
- 06What access do you need now, and why?
- 07How will changes be documented, approved, and reversed?
- 08How will you measure qualified leads—not just rankings or traffic?
- 09How do you evaluate AI citations or mentions without overstating them?
- 10Who owns the accounts, content, data, and deliverables when we stop?
Compare providers on clarity, evidence, priorities, communication, and risk—not only the size of the keyword list. A strong provider can describe uncertainty without becoming vague and can explain technical work in terms the owner can inspect.
Primary sources