Most advice on vetting SEO agencies is dangerously superficial. They suggest asking about keyword rankings or backlink counts, which are often just vanity metrics that mask a lack of true strategic depth.
In my experience, especially within high-trust sectors like legal and finance, the real risk isn't just failing to rank: it's the long-term damage to your brand's entity authority and regulatory standing.
When I started the Specialist Network, I realized that the standard agency model relies on opacity to maintain retention. They hide behind complex reports because their actual process is often generic and unscalable for highly regulated verticals.
This guide is not a list of basic interview questions. It is a framework for due diligence designed for executives and managing partners who cannot afford to treat SEO as a black box. We will move past the slogans and focus on Reviewable Visibility: a methodology where every claim is backed by documentation and every action is designed to stay publishable in high-scrutiny environments.
If an agency cannot answer these questions with specific process descriptions, they are likely using outdated tactics that could put your domain at risk during the next core algorithm update. Gather the inputs before the final call: the statement of work, tool list, sample report, sample change log, editorial workflow, access matrix, ownership terms, measurement definitions, and termination language.
Assign an internal owner who can coordinate marketing, subject matter experts, legal or compliance reviewers when relevant, and technical staff. The output should be a contract that states what will be changed, who approves it, where the work lives, how progress is evaluated, and what is delivered at exit.
Key Takeaways
- 1The Entity Custody Framework: how to keep ownership of the authority signals built during the campaign.
- 2Reviewable Visibility: why you must demand a documented paper trail for every technical change.
- 3The Expert-in-the-Loop Protocol: how to vet the content supply chain for regulatory compliance.
- 4The Clean Exit Clause: protecting your technical infrastructure from proprietary black box scripts.
- 5Signal-to-Noise Ratio (SNR) Protocol: distinguishing between empty traffic and qualified entity signals.
- 6Attribution of Authority: measuring how SEO impacts your brand's standing in AI search overviews.
- 7Vetting geographic search visibility providers: moving from tactical checklists to strategic risk management.
1Who Owns the Entity Signals Being Created?
In practice, many agencies build visibility using temporary assets that they control. They might use proprietary software to host your reviews, or they might build links from a private network that they own.
The moment you stop paying, that visibility vanishes. This is a form of digital sharecropping that I've found to be common in the legal and healthcare sectors. You must ask: 'How will all entity signals created stay owned by my domain?' What I've found is that a strong partner will focus on on-site schema architecture and verifiable third-party citations that you control.
They should be building your Knowledge Graph presence by optimizing your official profiles and presenting your brand as a distinct entity. This involves a documented process for managing your digital footprint across high-authority databases.
If the agency relies on their own 'proprietary tools' to display your content, you are likely building their authority, not yours. Furthermore, ask about the long-term portability of the data. If they are using a specific platform for local SEO or review management, can that data be exported?
A documented system should prioritize your domain's health over the agency's convenience. In high-trust industries, your digital reputation is your most valuable asset. You cannot afford to have it tied to a vendor's internal software that you do not own.
Ownership is not the same as access. Your company may own a website but still lack administrator credentials, recovery email control, billing access, or documentation needed to operate it. The contract should identify the client-side owner for each critical account and require agency access to be granted through named user permissions where the platform supports them.
The decision output should be a contract schedule listing each material asset, its owner, its administrator, its storage location, its dependency, and its transfer or retention rule.
2How Do You Verify Subject Matter Expertise?
For regulated industries, the cost of inaccuracy is far higher than the cost of poor rankings. If you are a law firm or a medical clinic, a single incorrect statement can lead to regulatory exposure or legal liability.
Most SEO agencies use generalist writers who 'research' topics they don't understand. I tested this with a financial services client and found that generic content consistently failed to earn high-quality citations because it lacked the nuance required by industry peers.
You should ask: 'What is your Expert-in-the-Loop workflow?' A credible agency must describe how they integrate your internal experts or external consultants into the content supply chain. They should not be 'writing content for you' in a vacuum.
Instead, they should be extracting expertise from your team through interviews or structured briefs. This prepares content that is not only SEO-friendly but also factually sound and written with your industry's compliance standards in mind.
In our experience, the most effective content systems use a multi-stage review process. This includes a technical SEO review, a grammatical edit, and, most importantly, a subject matter expert (SME) validation.
Ask to see their editorial guidelines. If those guidelines don't include a section on regulatory compliance or expert sourcing, the content will likely be a liability. You are looking for a partner that respects the complexity of your niche and doesn't try to simplify it for the sake of a keyword density score.
The contract should identify which topics require that review and what happens when the reviewer disagrees with the draft. A useful sample workflow starts with a brief that records the target decision, intended reader, approved sources, claims requiring confirmation, internal expert, prohibited language, and conversion action.
Ask how AI-assisted drafting is governed. The relevant issue is not the label on the tool, but whether the agency can trace claims, detect unsupported additions, preserve confidential information, and obtain the required human approval. Request a real sample brief, draft history, source record, and approval log with client details removed.
3What Does Your Documentation Trail Look Like?
One of the biggest frustrations I hear from managing partners is that they don't know what their SEO agency actually does all month. They get a report with some charts, but no documented workflow.
This lack of transparency is a red flag. You should ask: 'Can I see an example of a technical change log from a current client?' A professional agency should maintain a meticulous record of every title tag change, every redirect, and every schema update.
This is what I call Reviewable Visibility. It's designed to stay publishable and defensible. If your site's performance drops, you need to be able to look back at the documentation to see exactly what was changed and when.
Without this, you are just guessing. The documentation should also include the reasoning behind each change. Why was this specific internal link added? Why was this page de-indexed? This level of detail is necessary for high-scrutiny environments where every digital move must be justified.
Furthermore, this documentation serves as a knowledge base for your internal team. It keeps the 'SEO magic' from being trapped in the head of a single account manager. If that manager leaves the agency, your project shouldn't suffer.
A documented system is resilient. It allows for continuity and keeps the strategy based on measurable outputs rather than slogans or vague promises. If an agency hesitates to show you their documentation process, they likely don't have one.
A useful entry records the affected URL or system, the issue or opportunity, the baseline evidence, the proposed change, the person responsible, the approver, the implementation date, the verification method, and any rollback instruction.
Routine metadata edits may follow an approved batch process, while migrations, large redirect changes, indexation controls, analytics changes, or sitewide templates may require explicit client approval.
The output should be an agreed change record, decision log, issue register, and reporting cadence that your team can continue to use if account personnel change.
4What Happens to the Technical Infrastructure if We Part Ways?
I have seen many cases where an agency uses 'edge SEO' or proprietary plugins to implement changes without touching the client's actual code. While this can be efficient, it creates a dangerous dependency.
If you cancel the contract, they flip a switch, and all your SEO optimizations disappear. This is a technical trap that I've found to be increasingly common. You must ask: 'Are your technical implementations CMS-native or do they rely on a proprietary layer?' A sustainable approach involves making changes directly within your content management system (CMS) or through a transparent deployment process that your internal IT team can review.
With this approach, the work stays on your systems. You should also ask about the reversibility of their work. If they implement a massive redirect strategy that fails, how quickly can it be undone?
A documented process for rollbacks is just as important as the process for deployment. Before signing, confirm that the contract specifies that all meta-data, schema code, and content remain on your servers and are fully accessible to you.
You should not be paying a 'licensing fee' for your own SEO titles. In my practice, I've found that the best relationships are built on value, not lock-in. If an agency is confident in their work, they won't feel the need to hold your technical infrastructure hostage.
Always prioritize independence and ownership in your technical SEO strategy. The offboarding package may include an account and access inventory, current work log, open issue list, content and source files, configuration documentation, custom code covered by the agreement, reporting definitions, analytics annotations, placement records, renewal obligations, and a list of features that will stop.
Your internal technical owner should review whether the package is sufficient to keep the site operating. The commercial owner should check notice periods, transition assistance, data retention, deletion duties, and final billing.
5How Do You Optimize for Generative AI Overviews?
The search landscape is shifting from a list of links to a generative answer engine. If your agency is still talking about 'keyword density,' they are missing the most significant shift in a decade.
You must ask: 'What is your strategy for AI Search Visibility?' This isn't about 'tricking' an AI: it's about becoming the authoritative source that the AI chooses to cite. This requires a focus on structured data, clear hierarchies, and 'answer-first' content architecture.
In my experience, AI engines prioritize content that is unambiguous and highly cited. This means your agency needs to understand how to build topical authority rather than just ranking for individual terms.
They should be looking at how your brand is represented in the underlying LLM training data. This involves a more sophisticated approach to PR and off-site citations. It's not just about getting a link: it's about getting a contextually relevant mention in a high-authority publication.
Ask them how they measure 'share of voice' in AI overviews. The metrics are different here. You are looking for citation frequency and the 'sentiment' of the AI's summary of your brand. A documented system for AI optimization should include a plan for creating 'chunkable' content that AI bots can easily parse and summarize.
If they don't have a specific workflow for generative search, your brand will likely lose visibility as these features become more prominent. AI outputs can vary by prompt wording, time, location, account state, and product surface.
The agency should define a repeatable prompt set, record the date and context, preserve the response evidence permitted by the tool, and classify the observation precisely. Ask how the findings will change the work. For example, an inaccurate brand description may trigger entity consistency checks and source review.
Authority Specialist · Our managed SEO service
Ready to turn the research into a plan?
Explore our Managed SEO approach and review the scope, budget and terms before deciding.
No sales call required. Creating a workspace does not start a paid engagement.
6What is Your Signal-to-Noise Ratio (SNR) for Reporting?
Most SEO reports are full of 'noise': traffic that will never convert, rankings for irrelevant terms, and 'impressions' that mean nothing for the bottom line. I've found that in regulated verticals, a small amount of 'high-signal' traffic is worth more than a million 'low-signal' clicks.
You should ask: 'How do you distinguish between vanity traffic and qualified visibility?' This is the Signal-to-Noise Ratio (SNR) Protocol. A strong agency will help you define what a 'qualified signal' looks like.
Is it a visit to a specific practice area page? Is it a download of a white paper? They should be filtering their reports to show you how they are reaching decision-makers, not just casual searchers.
This requires a deep understanding of your client's niche language and pain points. If the agency can't explain your industry's 'decision-making process,' they can't possibly build a high-signal strategy.
Ask about their attribution model. How do they show that an SEO touchpoint contributed to a lead three months later? In high-trust industries, the sales cycle is often long. A documented system should track the 'Compounding Authority' of your content over time.
They should be able to show you how a specific piece of content is earning trust signals, not just clicks. If their reporting is purely about 'more traffic,' they are likely providing a low-SNR service that won't move the needle for your business.
Sales or intake teams may need to decide whether organic inquiries match the intended service, geography, and customer profile. The agency should document analytics events, call or form tracking where appropriate, CRM handoff assumptions, consent and privacy constraints, duplicate handling, and the point at which responsibility moves to the client's sales or intake process.
Geographic reporting should also reflect the business. A real office can justify a useful location page with location-specific staff, services, proof, directions, or operational details. Each metric needs an owner, source, definition, review frequency, and action threshold. The agency should be judged on the quality of decisions enabled as well as the quantity of work completed.
7What Most Guides Get Wrong
Most guides tell you to ask for a list of clients or a guarantee of page one rankings. This is flawed for two reasons. First, non-disclosure agreements often prevent the best agencies from sharing their most successful case studies in detail.
Second, no one can guarantee rankings because Google's algorithm is a dynamic, third-party system. What you should be asking for instead is a documented workflow. Most guides ignore the technical debt that poor SEO creates.
They focus on the 'what' instead of the 'how.' You need to know how they handle entity disambiguation, how they source subject matter experts, and how they keep their work your property long after the contract ends.
A proposal can look productive while depending on agency-owned accounts, scripts, dashboards, or publishing processes that your team cannot operate. Due diligence should end with a written decision record: accepted scope, rejected assumptions, unresolved risks, named owners, evidence required at each stage, and exit deliverables.
8What I Wish I Knew Before Starting a Specialist Network
When I first entered the SEO space, I believed that the 'best' agencies were the ones with the most awards and the flashiest offices. What I've found is that these are often the places where process is sacrificed for scale.
The real work of building entity authority is slow, meticulous, and often quite boring. It involves hours of technical auditing, content refining, and signal engineering. I've learned that the most valuable partners are those who prioritize documentation over slogans.
They don't promise 'domination': they promise a documented system that produces measurable results. I've also found that in regulated industries, 'doing no harm' is just as important as 'doing good.' A single aggressive tactic can lead to a penalty that takes years to recover from.
That's why I now focus on Reviewable Visibility: it's the only way to build toward long-term stability in an increasingly volatile search environment. Building durable search visibility usually involves repeated technical checks, content refinement, internal coordination, and correction of weak assumptions. In high-trust work, restraint is part of performance.
9Your 30-Day Vetting Action Plan
Days 1-5
Request a full list of all technical tools and 'proprietary' software the agency uses.
Outcome: Identification of potential 'vendor lock-in' or technical debt.
Days 6-12
Ask for a sample content brief and a description of their 'Expert-in-the-Loop' workflow.
Outcome: Verification that the agency can handle the complexity of your niche.
Days 13-20
Request a 'Clean Exit' clause in the contract and a sample technical change log.
Outcome: Legal and operational protection for your digital assets.
Days 21-30
Conduct a final 'Signal-to-Noise' interview to align on reporting and KPIs.
Outcome: Clear expectations for what 'success' looks like beyond vanity metrics.