Read the contract the way a burned buyer reads it
Most buyers spend six weeks on the shortlist and six minutes on the contract. That is backwards. The pitch describes the best version of a provider; the contract describes the worst day: the quarter where nothing moves, the month you need to pause, the morning you decide to leave. Every clause you skim was drafted by someone else, in their favour, and stays invisible until you try to exit. If you have done the sourcing work in how to choose an SEO agency, this is the last place value quietly leaks away.
A buyer who has been burned once reads for asymmetry rather than reassurance: who carries the risk, who keeps the assets, who can end the arrangement and on what notice. They read the definitions, because that is where scope narrows without anyone noticing. They check that the deliverables promised in the proposal actually appear in the agreement, since a slide deck is not a contractual annex unless the contract says so. And they write terms that would still work if the relationship soured or the account manager left.
What follows is a practical reading guide, not legal advice. Contract law varies by country, and the same clause can be enforceable in one jurisdiction and void in another, particularly around automatic renewal. Treat this as the list of things to look for before you involve a lawyer, so the legal review is spent on what matters to you rather than on boilerplate. Above a modest annual value, an hour of commercial legal review is cheap next to a twelve month commitment you cannot leave.
Guaranteed rankings and other hollow promises
Start with the clause that should end conversations. A guaranteed ranking has no basis in how search works: the provider does not control the index, ranking systems change continuously, and nobody can commit to the behaviour of a third party. So when a guarantee appears in writing, it is never a promise about your visibility. It is a promise about something much narrower, and the narrowing hides in the definitions. Read what is guaranteed, over what period, on which engine, in which country, on which device, and measured by whom.
Three shapes recur. The guarantee applies to keywords the provider selects after signature, which in practice means your brand name and phrases nobody searches. Or it is a refund promise whose conditions include client delays, site changes and algorithm updates, which cover almost every real project. Or it is genuine, and achieved with link tactics whose risk you inherit. A guarantee transfers no risk to the provider: it either costs them nothing or costs you your domain. The same applies to guaranteed traffic volumes and link counts, where quantity is easy and quality is undefined.
What can legitimately go in writing is process, not outcome. A fair contract commits the provider to a defined volume of work, a named team, an agreed measurement source and a review cadence, and commits you to approvals and access within a stated time. If you want a performance dimension, tie a bonus to leading indicators you can both verify in Search Console rather than a penalty to positions neither side controls. Our guide to SEO KPIs and reporting sets out which indicators survive that test.
Scope: hours, deliverables, outcomes, or nothing at all
Scope is where disputes actually start, and there are only three honest ways to define it. You can buy hours, a stated number per month with a rate card and a log. You can buy deliverables, a specified list of audits, pages, technical tickets and reports. Or you can buy outcomes, agreed targets with the method left open. Each is defensible, and mature providers tell you which they sell. The problem is the fourth option, which is what most retainers contain: a monthly fee, a paragraph of adjectives, and no unit of account.
Each model fails differently, so pick the failure you can live with. Hours reward transparency but invite padding and make every question billable, so ask what happens to unused time. Deliverables are the easiest to audit and the easiest to game, because ten thin pages satisfy a clause that says ten pages; add quality criteria and an approval step. Outcomes sound ideal and rarely work in SEO, since the provider depends on your developers, your subject experts and your sign off speed, so the clause always arrives wrapped in exclusions.
When nothing is defined, the retainer degrades quietly. The first quarter is busy because there is an audit and a backlog. By month six the work has drifted toward reporting on itself, and you are paying a monitoring fee for a dashboard you could read yourself. The fix is boring and effective: attach the proposal as a contractual annex, state a minimum monthly volume in countable units, and require a written plan for each coming quarter. Then compare what you get against the ranges in our SEO pricing guide.
- The hours or deliverables included each month, expressed in countable units.
- Who does the work, at what seniority, and how much time each person commits.
- Quality criteria and an approval step for anything published in your name.
- What happens to unused hours or undelivered items at the end of a month.
- How a change of scope is requested, priced and approved, in writing.
Renewal, notice periods and the exit ramp
Three numbers decide how trapped you are: the initial term, the renewal mechanism and the notice period. They are only dangerous in combination. A twelve month initial term is reasonable in SEO, since results take a quarter or two to appear, and automatic renewal for another twelve months is common. But add ninety days notice and the arithmetic changes: you must decide in month nine, on the evidence available then, or you are committed through month twenty four. Most buyers discover this in month thirteen, which is exactly when the clause was designed to be discovered.
Ask for three changes and watch the reaction. Make the first renewal opt in rather than automatic, so a human has to sign something. Bring notice down to thirty days after the initial term, which is enough for any provider to wind down responsibly. And separate termination for convenience from termination for cause, so a serious failure, a missed deliverable schedule or a penalty caused by the provider lets you exit immediately without paying out the term. If onboarding costs justify a longer commitment, take that as a setup fee, not as a cage.
Then check the mechanics of leaving. Which notice format counts, and to which address. What happens to work in progress, prepaid amounts and content drafted but not yet published. Whether there is a transition period, at what rate, and whether the provider must help a successor. Local rules differ, and automatic renewal is regulated unevenly, so what is standard among SEO agencies in France may not hold when you contract with agencies in the United States. A short exit clause you understand beats a long one your lawyer has to litigate.
Who owns what on the day you leave
Ownership is the clause buyers regret most, because it only becomes real at the worst moment. Start with content. Unless the contract assigns intellectual property to you, in many jurisdictions the creator keeps it and you hold a licence that can end with the agreement. Ask for assignment of all deliverables on payment, covering text, images, data, structured markup, tracking configuration and anything produced by subcontractors. Watch two exceptions: reserving the provider's own templates and tooling is usually fair; tying your licence to continued payment is not.
Accounts and properties are the other half, and where a routine departure becomes a hostage situation. If the provider created your Google Business Profile, your Search Console property, your analytics account, your tag container or your ad accounts under its own organisation, you do not own them, you are a guest. The rule is simple: every property is created under an account you control, on an email address at your own domain, and the provider is added as a user, not an owner. Verify this on day one, and again after any staff change.
Then the data and the links. Require a right to raw exports on exit: Search Console history, analytics data, keyword research, crawl reports, the content calendar, and an inventory of every link acquired for you with its URL and acquisition method. That inventory matters beyond housekeeping, because some providers rent placements monthly and remove them when payment stops, turning a departure into a ranking drop. Ask directly whether any link is conditional on the retainer continuing, and see our guide to link building in 2026 for what a defensible inventory looks like.
- Assignment of all deliverables to you on payment, subcontracted work included.
- Every account and tracking property created under your own organisation.
- Provider access granted as a user, revocable by you at any time.
- A right to raw data exports in a usable format within a stated number of days.
- A full link inventory with URLs, dates and any rented placements flagged.
- No clause conditioning your right to use the content on continued payment.
Confidentiality, subcontracting and who carries the blame
Confidentiality clauses are usually written as mutual and applied in one direction. Read yours for two things. First, whether it stops you discussing the engagement, including with a successor conducting a handover, which would be an unreasonable restriction. Second, what the provider may publish about you. The workable middle ground is anonymised case studies: aggregate numbers, no domain, no logo, no query list, and a right of review before publication. That is how verified performance reaches rankings such as the agency leaderboard without exposing anyone.
Subcontracting deserves an explicit clause rather than silence. It is normal for a provider to use specialists for technical work, digital PR or translation, and reasonable to require disclosure of who they are, where the work is performed, and under what data protection terms. If personal data leaves your jurisdiction, that is a compliance question, not a preference. The clause should keep the provider fully liable for subcontracted work, prevent silent swaps of named people, and let you object. The questions to ask an SEO agency are the sales stage version of this clause.
Finally, liability. If a provider's links or content trigger a manual action or a systematic demotion, who pays for the cleanup. Most contracts cap liability at the fees paid over recent months, which is a normal commercial position, but the cap should not extinguish the duty to remediate. Ask for a specific undertaking: the provider will disavow, remove or rewrite at its own cost, within a defined window, anything it produced that caused the problem. A provider confident in its methods signs that without hesitation, which is precisely why the clause is a useful test.
Pilots, and the clauses worth insisting on
The cleanest way to de-risk a first engagement is a pilot with a real ending. Ninety days, a fixed fee, a named team, and a defined list of outputs: a technical audit with prioritised tickets, a keyword and intent map, a first batch of fixes or pages actually shipped, and a baseline report built on your own Search Console data. The pilot ends without penalty and without automatic conversion into a retainer. If you continue, the pilot fee counts toward the first months. What you buy in ninety days is not rankings, it is evidence.
Insist on a short list of terms and let the rest be negotiable. The load bearing clauses are ownership, access, exit and disclosure, and they cost a serious provider nothing, because they describe how it already operates. Payment timing, expenses, escalation paths and meeting cadence matter far less than buyers think. Keep your leverage for the four terms below, and put the pilot outputs and the monthly minimum volume into a signed annex, not into an email thread nobody will find eleven months from now.
Then watch the negotiation itself, because it is the last evidence you get before committing. A provider who has run these engagements before recognises the terms, explains which ones need adjusting and why, and signs. One who treats basic ownership and exit terms as an attack is telling you what leaving will feel like. Whether you are comparing SEO agencies or independent SEO freelancers, send the same paperwork to all of them: the responses are more comparable, and more revealing, than the proposals were.
- Full assignment of content, code and data to you on payment.
- Ownership of every account and tracking property, with the provider as a user.
- No automatic renewal in year one, and thirty days notice after the initial term.
- Disclosure of subcontractors, offshore execution and the sources of every link.
- Remediation at the provider's cost for penalties caused by its own work.