The 2026 CBD SEO Checklist for Evidence, Ownership, and Verification

Use this section to verify that access controls, performance, structured data, transport security, and crawl directives work as intended without turning a legal requirement into an SEO assumption.

Age-verification and access controls Evidence required: live browser behavior, rendered crawler output, server responses, and the documented reason the control exists. Pass/fail condition: Pass when the required user control functions, public content remains available to search systems as intended, and implementation does not rely on deceptive cloaking; fail when the gate replaces or blocks the primary document, loops, or serves materially inconsistent content.

Severity: Critical when indexable content is inaccessible; otherwise High. Owner: Web engineering with SEO QA and the responsible legal or regulatory reviewer for the access requirement. Corrective action: Rework the implementation so it satisfies the reviewed access requirement while preserving stable URLs, accessible interaction, and crawlable public HTML where appropriate.

Validation step: Re-test representative templates in a browser, a rendered crawler, and Google Search Console, then document the result. Tools: AgeChecker.net, Google Search Console

Core Web Vitals and mobile usability Evidence required: field or lab performance data, template-level testing, and a sample of real mobile journeys. Pass/fail condition: Pass when major templates meet the team's documented performance targets and remain usable on common mobile devices; fail when slow or unstable rendering materially obstructs reading, navigation, or checkout.

Do not treat bounce rate as a documented ranking signal. Severity: High for purchase or information templates with persistent usability failures; Medium for isolated defects. Owner: Front-end engineering and technical SEO.

Corrective action: Address the measured bottleneck, such as image weight, render-blocking resources, script cost, layout instability, or server latency, rather than optimizing a score in isolation. Validation step: Re-run PageSpeed Insights and Chrome DevTools tests on the same templates after deployment and compare the underlying measurements. Tools: PageSpeed Insights, Chrome DevTools

Product and FAQ structured data Evidence required: visible page content, the implemented Schema.org properties, eligibility documentation, and validation output. Pass/fail condition: Pass when markup accurately describes content users can see and validates for the intended type; fail when properties are misleading, unsupported, hidden, or added only to chase a rich result.

FAQ content can be useful to readers, but do not treat FAQ markup as a current Google FAQ rich-result tactic. Severity: Medium, or High when misleading markup misrepresents products or claims. Owner: Technical SEO with engineering and content review.

Corrective action: Remove unsupported properties, align markup with visible content, and keep product details consistent with the canonical page. Validation step: Test the deployed output with Schema.org validation and inspect rendered source. Tools: Schema.org, Validator.schema.org

HTTPS coverage Evidence required: crawl results, certificate status, mixed-content checks, redirects, and subdomain inventory. Pass/fail condition: Pass when intended public pages and transactional paths use valid HTTPS without mixed-content or redirect defects; fail when users or crawlers can reach insecure or broken variants.

Severity: Critical for checkout or account flows; High for public pages with certificate or redirect failures. Owner: Platform or infrastructure engineering. Corrective action: Correct certificate, redirect, canonical, and mixed-content issues across affected hosts.

Validation step: Re-crawl all relevant subdomains and verify representative browser sessions. Tools: SSL Labs, Screaming Frog

Robots.txt and XML sitemap controls Evidence required: robots directives, sitemap files, indexability reports, canonical tags, and examples of filter or faceted URLs. Pass/fail condition: Pass when directives reflect the intended crawl and index strategy, priority URLs are discoverable, and low-value parameter combinations are handled deliberately; fail when important pages are blocked or large URL sets are generated without a clear purpose.

Severity: High when important pages are blocked or duplicate URL expansion is substantial; Medium otherwise. Owner: Technical SEO with engineering. Corrective action: Align crawl directives, sitemap inclusion, canonicalization, and internal links with the approved indexable URL set.

Validation step: Re-crawl the site and compare sitemap, indexability, and canonical reports before and after the change. Tools: Screaming Frog, GSC

This section checks whether readers can identify who created important CBD information, what evidence supports it, and whether product and business information can be verified.

Author and reviewer transparency Evidence required: author bylines, biography pages, credential records, reviewer logs, and examples of health-related articles. Pass/fail condition: Pass when authorship is truthful, relevant experience is described accurately, and review responsibility is clear where specialist review is warranted; fail when content is anonymous, credentials are unverifiable, or a nominal reviewer is displayed without a real review process.

Severity: High for health and wellness content; Medium for general commercial copy. Owner: Editorial lead with operations or compliance for credential verification. Corrective action: Assign accountable authors or teams, publish accurate bios, and document what a reviewer actually checked.

Do not invent a medical board for SEO. Validation step: Sample priority pages and trace each displayed author or reviewer to current internal records. Tools: LinkedIn, Internal CMS

Medical or specialist review governance Evidence required: written review criteria, reviewer qualifications, version history, approval records, and the content types routed for review. Pass/fail condition: Pass when material health statements receive the level of review required by the organization's policy and applicable obligations; fail when badges or reviewer names are added without documented review.

Severity: Critical for unsupported health claims; High for incomplete review records. Owner: Content governance lead and the responsible subject-matter reviewer. Corrective action: Define the review scope, remove decorative approval signals, and re-review high-risk content according to the documented process.

Validation step: Audit a sample from publication request through approval and live release. Tools: Credential verification services

Certificates of Analysis on product pages Evidence required: current product-specific COAs, batch or lot linkage where applicable, laboratory details, and the product page that references the document.

Pass/fail condition: Pass when the displayed COA is current, matches the product or batch represented, and can be opened by users; fail when the document is missing, stale, mismatched, or used to imply unsupported health outcomes.

COAs can support transparency but should not be described as a proven ranking factor. Severity: High when a product page materially misstates testing evidence; Medium when access is merely inconvenient.

Owner: Quality or product operations with web content ownership. Corrective action: Replace stale or mismatched files, correct product references, and explain the document's purpose without overclaiming what it proves.

Validation step: Open the live file from representative product pages and compare identifiers with the internal product record. Tools: PDF Embedder, QR Code generators

Company identity and About information Evidence required: business name, history, ownership or leadership details where appropriate, contact information, and physical-location facts that can be verified internally.

Pass/fail condition: Pass when the page accurately explains who operates the business and how customers can contact it; fail when material identity details are missing, contradictory, or unverifiable.

Do not assume an About page is a direct ranking factor. Severity: Medium, or High when the discrepancy affects customer trust or regulated disclosures. Owner: Brand or corporate communications with legal review where required.

Corrective action: Reconcile the page with authoritative company records and remove unverifiable claims. Validation step: Compare the published page with current business records and contact channels. Tools: Wayback Machine for history verification

Third-party review display and collection Evidence required: review-source configuration, moderation policy, request workflow, and examples of displayed reviews. Pass/fail condition: Pass when reviews are represented accurately and eligible customers are asked consistently for honest feedback without incentives, discouraging negative feedback, or selecting only satisfied customers; fail when the workflow gates reviews, fabricates sentiment, or obscures the source.

Severity: High for deceptive practices; Medium for inconsistent implementation. Owner: Reputation or customer-experience lead with compliance oversight. Corrective action: Remove gating or misleading presentation, standardize the request process, and disclose the review source accurately.

Validation step: Walk through the request workflow and reconcile displayed reviews with the source platform. Tools: Trustpilot, Yotpo

Use these checks to determine whether CBD content answers a defined reader question, avoids unsupported claims, and fits a coherent information architecture.

Search-intent mapping and content usefulness Evidence required: query data, page inventory, editorial brief, and representative competing results used only as research context. Pass/fail condition: Pass when each important page has a distinct reader task and provides original, accurate information needed to complete it; fail when the page is thin, duplicative, or written mainly to repeat a keyword.

Helpful content guidance is not a proprietary checklist or a guarantee of ranking. Severity: High for large groups of duplicative pages; Medium for isolated weak pages. Owner: SEO content strategist and editorial lead.

Corrective action: Clarify the page purpose, consolidate overlap, add missing evidence-based information, and remove filler that does not help the reader. Validation step: Re-map queries and internal links to the revised inventory and review whether each page has a unique role. Tools: Ahrefs, Semrush

Health and medical claim audit Evidence required: a crawl or export of claims-bearing text, source citations, product evidence, disclaimers, and review records. Pass/fail condition: Pass when material claims are supported and approved for the context in which they appear; fail when disease or therapeutic wording lacks a defensible basis or when a disclaimer is used as a substitute for substantiation.

Search guidance cannot determine whether wording satisfies FDA or FTC requirements. Severity: Critical for unsupported disease or therapeutic claims; High for unclear or inconsistent substantiation. Owner: Editorial or product content lead with responsible legal, medical, or regulatory review.

Corrective action: Remove or revise unsupported language, document the evidence trail, and republish only after the required review. Validation step: Re-crawl titles, metadata, body copy, FAQs, and internal anchor text to confirm the prohibited or unsupported wording is gone. Tools: FDA Warning Letter Database, Manual Audit

Topic organization around product and education needs Evidence required: content inventory, category structure, query themes, and internal-link graph. Pass/fail condition: Pass when related pages are grouped logically and each page serves a distinct intent; fail when the site produces overlapping articles around topics such as 'CBD for Sleep' or 'CBD Bioavailability' without a clear editorial distinction.

Severity: Medium, or High when overlap affects important commercial or health-information pages. Owner: SEO strategist with editorial ownership. Corrective action: Consolidate redundant pages, define parent and supporting topics based on reader needs, and align internal links with the resulting hierarchy.

Validation step: Re-crawl the site and inspect canonicalization, internal anchors, and indexable page counts after consolidation. Tools: Surfer SEO, MarketMuse

Local high-intent query coverage Evidence required: genuine location records, local query data, Google Business Profile eligibility, and location-specific page content. Pass/fail condition: Pass when a real location has accurate business information and a useful dedicated page where local information warrants one; fail when city pages are created for nominal service areas without a genuine location or meaningful local content.

Do not claim that 'where to buy CBD oil in [City]' has a guaranteed or documented conversion advantage without supporting evidence. Severity: High for inaccurate or misleading local representations; Medium for missing useful local information.

Owner: Local SEO or operations lead. Corrective action: Correct profile data, remove or consolidate thin location pages, and create a location page only for a genuine location with useful local details.

Validation step: Compare the live page and profile against internal location records, then test phone, hours, directions, and canonicalization. Tools: Google Keyword Planner

Internal linking and destination relevance Evidence required: internal-link crawl, anchor-text report, priority page list, and examples of user journeys. Pass/fail condition: Pass when links use descriptive anchors and point readers to contextually useful destinations; fail when links are inserted primarily to push authority toward revenue pages regardless of relevance.

Severity: Medium, or High when broken links or misleading anchors affect core navigation. Owner: SEO strategist with content and engineering support. Corrective action: Replace broken or forced links, simplify repetitive anchors, and connect educational pages to commercial destinations only where the relationship helps the reader.

Validation step: Re-crawl links and manually test representative paths from informational pages to product or category pages. Tools: Link Whisper, Internal Audit

Backlink work should be evaluated for editorial legitimacy and relevance rather than reduced to volume, third-party scores, or assumed authority transfer.

Expert-source outreach through HARO (Help A B2B Writer) or Connectively Evidence required: outreach brief, expert identity, claims used in pitches, publisher correspondence, and resulting placements.

Pass/fail condition: Pass when the contribution is accurate, attributable, editorially accepted, and useful to the publisher's audience; fail when quotes are fabricated, undisclosed placement is purchased, or regulated claims bypass review.

No placement should be described as guaranteeing E-E-A-T or referral traffic. Severity: High for fabricated expertise or undisclosed paid placement; Medium for weak relevance. Owner: Digital PR lead with claims review when regulated topics are discussed.

Corrective action: Tighten source qualifications, route sensitive statements through review, and stop outreach that depends on manipulation or misrepresentation. Validation step: Audit a sample of earned placements against the original pitch, final article, disclosure context, and destination URL. Tools: Connectively, Featured.com

Competitor backlink gap analysis Evidence required: competitor set, referring-domain exports, destination pages, and editorial context for candidate links. Pass/fail condition: Pass when prospects are selected because they are relevant and editorially plausible for the brand; fail when the team copies competitor links without assessing legitimacy or fit.

Severity: Medium, or High when copied tactics involve paid or manipulative schemes. Owner: SEO or digital PR lead. Corrective action: Classify prospects by relevance and editorial rationale, discard questionable sources, and create outreach only where the brand has something genuinely useful to contribute.

Validation step: Review acquired links for context, disclosure, and destination usefulness instead of checking only domain metrics. Tools: Ahrefs Link Intersect

Suspicious-link review and disavow decisions Evidence required: backlink trend data, manual samples, search-engine messages if any, and documentation of why links are considered manipulative. Pass/fail condition: Pass when suspicious links are investigated proportionately and any disavow decision is supported by a documented risk assessment; fail when normal low-quality links are treated as a proven negative SEO attack or mass-disavowed without evidence.

Severity: High when there is clear manipulative link activity associated with the site; Low to Medium for unsolicited noise with no supporting risk evidence. Owner: Senior technical SEO or link-risk owner.

Corrective action: Stop controllable manipulative acquisition, seek removal where appropriate, and use the Google Disavow Tool only when the team has a defensible reason under current guidance. Validation step: Record the decision, affected domains, and follow-up observations rather than promising a ranking recovery. Tools: Google Disavow Tool, Semrush Backlink Audit

Industry publication contributions Evidence required: publisher relevance, editorial standards, disclosure terms, contribution brief, and live placement context. Pass/fail condition: Pass when a contribution to a publication such as Leafly, High Times, or Project CBD is genuinely editorial and relevant to readers; fail when placement is bought or exchanged mainly for a ranking signal.

Brand fit matters more than assumed niche-specific weight. Severity: High for manipulative or undisclosed placements; Medium for low-value outreach. Owner: Digital PR or communications lead. Corrective action: Prioritize credible editorial relationships, provide accurate expertise, disclose commercial relationships where required, and avoid anchor-text demands designed to manipulate rankings.

Validation step: Review the published page, disclosures, anchor context, and referral relevance after placement. Tools: Hunter.io, Manual Outreach

Review page titles on high-intent templates (e.g., 'Best', 'Organic', 'Lab-Tested') - Severity: High - Evidence required: title export and target page purpose - Pass/fail: pass when titles are accurate, distinctive, and supported by page content; fail when modifiers are promotional claims the page cannot substantiate - Owner: SEO content lead - Corrective action: rewrite titles to match verified product attributes and search intent - Validation step: re-crawl titles after deployment - Effort: 2 hours

Review FAQ Schema on the top 10 traffic-driving pages - Severity: Medium - Evidence required: rendered markup, visible FAQ content, and eligibility documentation - Pass/fail: pass when markup accurately reflects visible content; fail when it is misleading, hidden, or retained only to pursue a Google FAQ rich result - Owner: Technical SEO - Corrective action: remove unsupported properties and align any remaining markup with visible content - Validation step: run schema validation and inspect rendered source - Effort: 3 hours

Repair broken internal links to high-margin product pages - Severity: Medium - Evidence required: internal-link crawl and destination status codes - Pass/fail: pass when relevant links resolve to the intended canonical destinations; fail when links are broken, redirected unnecessarily, or contextually misleading - Owner: SEO and web content - Corrective action: update or remove defective links based on reader usefulness - Validation step: re-crawl and manually test representative paths - Effort: 1 hour

• Unreviewed stale content: Evidence required: last substantive review record and current source set. Pass/fail: fail when regulated or product-sensitive statements remain live without a current review basis. Severity: High. Owner: Editorial governance. Corrective action: re-review, revise, or retire the page. Validation: compare the live version with the approved revision.
• Inaccurate local GMB profiles: Evidence required: real location records and live profile data. Pass/fail: fail when a profile is ineligible, stale, or inconsistent with the actual location. Severity: High. Owner: Local operations. Corrective action: reconcile profile data and remove unsupported location claims. Validation: test the live profile against the internal source of truth.
• Aggressive medical claims: Evidence required: claim inventory, evidence record, and approval history. Pass/fail: fail when the site makes unsupported disease or therapeutic statements, including patterns covered in the CBD SEO strategy mistakes guide. Severity: Critical. Owner: Content lead with responsible legal, medical, or regulatory review. Corrective action: remove or revise unsupported wording. Validation: re-crawl all claims-bearing fields.
• Automated AI content without accountable review: Evidence required: drafting history, source notes, author or reviewer record, and published copy. Pass/fail: fail when material facts or claims are published without verification because a tool generated them. Severity: High for health or product claims. Owner: Editorial lead. Corrective action: verify facts, rewrite unsupported passages, and assign human accountability. Validation: sample sources and approval records for the revised page.