Use this section as a reproducible technical audit. Keep crawl exports, Search Console evidence, test captures, deployment notes, and the date of each validation so another reviewer can confirm why an item passed or failed.
Checkpoint: Mobile performance and Core Web Vitals
Evidence required: PageSpeed Insights or Search Console output for representative practice-area, attorney, location, and contact templates, plus a recorded mobile usability test on the production site.
Pass condition: The largest-content element is stable and LCP is at or below 2.5 seconds on the tested templates; INP and CLS are within Google's documented good ranges at the time of review; primary contact actions remain usable while the page loads.
Fail condition: A priority template repeatedly falls outside documented good ranges, shifts controls during interaction, or blocks a user from reading or contacting the firm. Severity: High when the issue affects practice-area or contact templates; otherwise prioritize according to the affected journey and observed usage.
Owner: Web engineering, with SEO identifying the templates and queries that warrant priority. Corrective action: Reduce render-blocking work, right-size media, reserve layout space, remove unnecessary scripts, and fix the shared template rather than optimizing an isolated test page.
Validation step: Repeat the same tests after release and retain before-and-after evidence; use lab data for diagnosis and field data, when available, to judge real-user performance.
Checkpoint: Crawlability, indexability, canonical signals, and sitemaps
Evidence required: A fresh site crawl, Search Console coverage and URL inspection evidence, robots directives, canonical tags, and the submitted sitemap set.
Pass condition: Pages intended for search discovery are crawlable, return a normal indexable response, use a canonical that matches the intended preferred URL, and appear in a sitemap appropriate to their content type; intentionally excluded pages have a documented reason.
Fail condition: Important pages are blocked, unexpectedly noindexed, canonicalized to unrelated URLs, trapped behind broken navigation, or omitted from discovery paths without a reason. Severity: Critical when a priority practice, attorney, location, or contact page is unintentionally excluded; High for recurring template-level conflicts.
Owner: Technical SEO and web engineering. Corrective action: Resolve contradictory directives, repair canonical logic, update sitemap generation, and remove crawl traps while preserving deliberate exclusions.
Validation step: Re-crawl the affected templates, inspect representative URLs in Search Console, and confirm the production source contains the intended directives.
Checkpoint: Internal link architecture and orphan-page control
Evidence required: A crawl graph or internal-link export, rendered navigation, contextual links from relevant pages, and a list of priority practice areas and real office locations approved by the firm.
Pass condition: Priority pages receive descriptive internal links from contextually relevant pages, navigation does not hide essential paths, and no intended landing page is orphaned from the site's normal crawl path.
Fail condition: Important pages depend on search engines discovering them only through a sitemap, anchors are ambiguous, or multiple near-duplicate pages compete for the same user intent without a documented purpose.
Severity: High when the problem affects a core practice or office; Medium for isolated supporting content. Owner: SEO and content, with development support for navigation or template changes. Corrective action: Consolidate overlapping intent where appropriate, add descriptive contextual links, surface priority pages through logical navigation, and use a permanent redirect when a retired URL has a clear successor.
Validation step: Re-run the crawl and confirm each retained priority page has a clear parent context, descriptive inbound links, and no accidental competing version.
Checkpoint: Structured data accuracy
Evidence required: Production-page source, Schema.org vocabulary references, Google Rich Results Test output where applicable, and a content inventory showing which facts are visibly supported on each page.
Pass condition: Markup describes entities and facts that are visible or otherwise legitimately represented on the page, uses valid properties for the selected types, and does not add awards, ratings, locations, services, or attorney credentials that the page cannot substantiate.
Fail condition: Markup conflicts with visible content, contains fabricated or stale facts, or is deployed solely on the assumption that it guarantees local or organic ranking gains. Severity: High for misleading legal or identity data; Medium for noncritical validation errors that do not change the represented facts.
Owner: SEO and development, with attorney or operations review for credential and service facts. Corrective action: Remove unsupported properties, align entity details with the page, and keep the implementation limited to markup that accurately describes the content.
Validation step: Re-test the live URL after deployment and compare the parsed properties with the approved source facts.
Checkpoint: Lead-form security, privacy, and data handling
Evidence required: An inventory of form fields, secure-transport test results, vendor and data-flow documentation, access controls, retention practices, and the privacy disclosures presented to users.
Pass condition: Sensitive intake data is transmitted securely, access is limited to authorized roles, the form requests only information the firm has a documented reason to collect, and counsel or the responsible privacy reviewer has identified which legal requirements actually apply to the workflow.
Fail condition: A form sends data insecurely, collects unnecessary sensitive details, routes submissions to uncontrolled destinations, or makes privacy or regulatory claims that have not been substantiated.
Severity: Critical for exposed or misdirected sensitive data; High for unsupported compliance claims or unclear ownership. Owner: Web engineering, security or privacy operations, and responsible counsel.
Corrective action: Minimize requested data, secure transmission and storage, tighten access, correct disclosures, and replace unsupported compliance language with accurately reviewed statements. Validation step: Submit a controlled test entry, verify the full delivery and storage path, confirm access restrictions, and retain the responsible review record.