Decide whether you need an agency, specialist or internal work
Define the missing capability first: technical repair, commercial content, local visibility, authority, measurement, migration support or ongoing prioritisation. A small business may complete some foundations internally and bring in expertise for the parts that require deeper evidence or sustained execution.
Compare the delivery model with the decision speed, specialist range, workload and accountability you need. The largest team is not automatically the best fit, and the lowest retainer is not cheaper when critical scope is excluded.
Require a diagnosis before accepting a package
Ask the supplier to connect current crawl, content, competitor, local, backlink and conversion evidence to the recommended work. A useful proposal identifies what is known, what still needs investigation and why the first priorities matter commercially.
Be cautious when the package and keyword count are fixed before the supplier understands the site, market, geography or lead definition. Activity quantities are not a strategy.
Ask what success means and how it will be proved
Require a sequence from technical health and indexation through non-brand impressions, relevant rankings, clicks, Maps coverage and genuine stored enquiries. Confirm which provider supplies each metric, the reporting lag and the stable comparison rules.
A report should distinguish completed work from provider and customer outcomes. Ask to see how CTA clicks, phone taps, form starts, spam and qualified leads are separated.
Keep ownership and access with the business
The business should own or retain administrator access to its domain, hosting, Search Console, analytics, Business Profile, tag manager, content, citations and source files. Supplier access can be delegated without transferring ownership.
Ask how credentials are handed over, how access is revoked, what happens to data on cancellation and whether the site can operate without the supplier’s private account or proprietary plugin.
Inspect the technical change process
Ask how the supplier validates crawler findings, tests important routes, protects private systems, releases changes, records source hashes and rolls back a failure. A third-party audit score should not trigger broad production edits without confirming the affected template and user impact.
For migrations, require a URL inventory, redirect map, live crawl, canonical and sitemap checks, analytics continuity and monitoring after launch.
Review content for purpose and evidence
Ask how topics are assigned to service pages, regional hubs, case studies or articles; how cannibalisation is prevented; and what original expertise or evidence each page will contain. Publishing frequency should follow distinct useful briefs, not a volume promise.
Confirm authorship, factual review, client permissions and update ownership. Reject mass-generated suburb pages, paraphrased competitor articles and public claims that cannot be verified.
Demand transparency for links and citations
Require a ledger showing the source, destination, acquisition method, cost, anchor or profile field, qualification, approval and live status. Ask which opportunities are editorial, client or partner attribution, memberships, sponsorships or paid exposure.
Avoid private networks, bulk guest-post packages, automated directory submissions, forced reciprocal links and paid links that pass ranking credit. A submitted profile is not a live backlink, and an undisclosed network is not earned authority.
Test local and AI-search claims
For local SEO, ask how profile accuracy, service-area rules, reviews, citations, regional proof and fixed Maps grids will be handled without fake offices or invented branches.
For AI, AEO or GEO claims, ask for the exact work and official guidance supporting it. Useful fundamentals—clear entities, crawlable evidence, accurate authorship and answer-led pages—may help discovery, but no supplier controls inclusion in an AI response.
Make every cost and renewal visible
Separate setup, monthly implementation, tools, content, development, outreach, memberships, paid exposure and tax. Require itemised approval for charges outside the base scope and clear cancellation or renewal terms.
Ask whether tool costs are pass-through, marked up or included, and whether historical data remains available after cancellation. Low advertised pricing can be valid for narrow scope, but the exclusions must be explicit.
Look for evidence without accepting unverifiable claims
Request examples of relevant work, the decisions made and the provider or user-facing evidence available. Treat screenshots, task counts and self-selected ranking wins as partial evidence unless the comparison, date and query set are clear.
Respect client confidentiality, but expect the supplier to explain its method and evidence boundaries. A credible case study can be useful without inventing traffic, lead or revenue results.
Set review and stop rules before signing
Agree on weekly or monthly review dates, comparable ranges, leading indicators and what happens when a tactic remains flat. Define who can approve publishing, outreach, profile identity changes, public claims and paid placements.
At each review, classify work as scale, maintain, revise or stop. A supplier should be willing to reduce a tactic when evidence contradicts the original plan rather than defending activity for its own sake.
Check the contract and exit path
Read minimum term, notice period, automatic renewal, intellectual-property, subcontracting, confidentiality, data retention, account access and post-cancellation obligations. Record what is delivered at handover and the format it arrives in.
A healthy engagement is portable: the business keeps its accounts, content, data, link history, source and documentation. Avoid arrangements where cancelling removes the website, measurement history or the ability to maintain completed work.
Red flags that justify walking away
Walk away from guaranteed positions, secret methods, thousands of submissions, fake Google affiliations, pressure to create doorway pages, refusal to disclose paid links, ownership capture, unapproved charges or reporting that counts clicks as leads.
Google notes that irresponsible SEO can damage a site and its reputation, and that third-party tools do not have access to Google’s internal ranking data. A careful supplier can make recommendations and targets; it cannot sell control over organic rankings.