Before you sign

How to Hire a White Hat SEO Company: Questions That Force Evidence, Contract Terms, and Who Holds the Accounts

Every SEO company on earth follows best practices. They will all tell you so, and a few of them will tell you while buying links in your name. So stop asking what they believe. Ask for things they would have to hand you, in writing.

November 8, 2026 · 12 min read

acmeplumbing.com · proposal questions
Questions that need a document
One email, two kinds of answer
In the past year, has money gone to any site for a link you built? How was it marked?
We have strong publisher partnerships across our network.
Which accounts will you create, and in whose name?
None, if you have them. Add us to yours under a named login.
Illustrative: a sample email exchange with fictional vendors

The short answer

To hire a white hat SEO company, ask for documents and not assurances: a sample report with dated changes, a written answer on whether money reaches any site for links, and who will hold each account. Keep your domain, Search Console and Business Profile in your own name. Sign nothing that guarantees rankings, and read the exit terms before the price.

On this page
  1. Everyone is white hat until you ask for a receipt
  2. Nine questions, and what a good answer has to contain
  3. Who holds which key, account by account
  4. The clauses that make a promise cost something
  5. The pitch, translated into what it means
  6. Now put the same questions to us
  7. When the right hire is nobody, at least for now

Everyone is white hat until you ask for a receipt

White hat is a sales word. It costs nothing to print on a proposal, and Google does not use the term in its spam policies or its hiring page, by our text search of November 7, 2026. Its actual rules have their own page. So a vendor's claim of it tells you about the vendor's marketing. Our existing guide to hiring an SEO covers the first round: consultant or agency, Google's own interview questions, the first 90 days. This page is the second round, for the point where you like someone and are about to pay them.

The test is simple. A good question here can only be answered with a document, a URL or a specific refusal. Reassurance does not count as an answer. Nor does a dashboard login, or a story about a client whose name cannot be shared. Google's hiring page, last updated June 5, 2026, puts the stakes in a sentence: hiring an SEO "can potentially improve your site's visibility and save you time, but you can also risk damage to your site and reputation." Both halves are true, and only one of them is on the proposal.

Nine questions, and what a good answer has to contain

The good and bad answers below are our judgment, not Google's. They are not a script. Send the questions by email, let a day pass, and read what comes back. Written answers can be kept, compared and quoted later, and people choose their words differently when they know that.

Questions that demand evidence, with the answers worth hearing
Ask themA good answerA bad answer
Which accounts will you create, and in whose name?None we can avoid. You add us to yours under a named login."We set everything up under our agency account. It's easier."
Send me a sample monthly report, with the list of changes.A real or redacted report with URLs and dates. See what that report should hold.A login to a dashboard of green arrows.
In the past year, has money, product or service gone to any site for a link you built, and how was it marked?No. Or yes, a sponsorship, marked rel="sponsored," and here it is."We have publisher partnerships."
Who does the work? Do you use subcontractors or white-label vendors?These employees, this subcontractor, and what each one touches."Our team."
Tell me something you would refuse to do for me.A specific tactic and the reason."We do whatever it takes."
What would make you tell me this is not working?A condition they would watch for, and when they would raise it.A position and a date.
How do you collect the rankings you report?Search Console's average position, plus any named tool and how it gets its data."It's proprietary."
If a manual action arrives because of work you did, what do you do?A written answer about records, cleanup and who pays."That has never happened."
What do I keep on the last day?A list: every page, every link record, every account.Anything that goes dark, or links that get removed when you stop paying.

Why ask how rankings are collected? Google's spam policies, last updated August 28, 2026, say that scraping its results for rank-checking or other automated access without express permission violates both those policies and its Terms of Service. We have not checked how any particular tool works, and neither will you in one email. What you can ask is whether the vendor knows, and whether it can tell you where a number came from. Search Console's position data comes from Google itself.

Who holds which key, account by account

The agency that owns your Google account is the joke everyone tells, and like most jokes it is only partly accurate. The real position varies by account. In some, ownership is less absolute than the horror stories say. In others, the trap is quieter than anyone warns you. Read the table before you sign, because every line is easier to set up correctly on day one than to take back on the last day.

Account ownership for an SEO engagement, from each provider's help pages as read in November 2026
AccountWho should hold itWhat the source saysThe trap
Domain registrarYou, as registrant, on a company emailICANN wrote on March 26, 2018 that you should never give anyone the login, including web designers, and does not recommend listing them as registrant"We handle all that for you" means your address renews to someone else's inbox
Search ConsoleYou as verified owner; the agency as a full userGoogle says a removed verified owner loses access at once but can re-verify unless all their tokens are deletedThe leftover token. Removing the person is not the same as removing the file that vouches for them
Google AdsYour account, linked to their manager accountGoogle Ads Help says a manager that creates a new account automatically owns it, while manager ownership does "not take data ownership or administrative rights away from client accounts" and the client can unlinkAn owner manager's admins can add and remove users and transfer ownership. Create the account yourself, then link it
Business ProfileYou as primary owner; the agency as managerGoogle says managers cannot add or remove users, and that a new owner or manager waits 7 days before removing users or transferring primary ownershipAn agency listed as primary owner. Only the primary owner can transfer that role
Google AnalyticsYou as AdministratorGoogle says adding or changing users takes the Administrator roleA property built inside the agency's account, with you as a guest
Website and CMSYou, with a named login for each vendorOur practice, not a provider's ruleOne shared password that three past vendors still have

A note on what we are not. We are not lawyers, and domain rights and service contracts are legal questions. ICANN's statement of registrant responsibilities, read November 7, 2026, says you assume sole responsibility for the registration and use of your domain name, which is reason enough to know where it sits. Have your own attorney read any agreement that matters to you.

Dark green chalkboard with chalk arrows and doodles, a black-and-white halftone cutout of an old brass key in front, no words
Give a vendor a copy of the key and keep the original. The order of those two things matters.

The clauses that make a promise cost something

A proposal says what a company hopes to do. A contract says what happens when it does not. You are not asking for anything unusual below. You are asking for the sales conversation to be written down. Our page on the SEO retainer covers billing models and the free website trap; these are the terms specific to clean work.

  • A monthly work list. Every page changed and every technical fix, with URLs and dates. Google's own suggested question asks whether the SEO will share all the changes and the reasoning behind them, so this is hardly exotic.
  • A link record. Every link built or requested in your name, with its URL and how it came about, including anything that cost money.
  • No paying for followed links. Money, goods or services may go to a site only for a link marked sponsored or nofollow, which is the line Google's policy draws.
  • Approval before major changes. Google's page warns about firms that are secretive or will not clearly explain what they intend to do, so give that a place in the contract.
  • Named subcontractors. You should know who holds a login to your site.
  • No ranking guarantee, in either direction. A contract that promises a position is making a promise Google says nobody can keep. See the pitch below.
  • Exit and handover. Term, notice, what you get on the way out, and a date by which their logins and verification tokens come off.
  • What is yours. Written content, the link record, and the data in every account, on the day you stop paying.

The pitch, translated into what it means

Some phrases deserve to be read twice. Most of the ones below are not violations in themselves. They are a reason to ask the next question, and Google's hiring page gives you the wording for several of them. Our guide to what link vendors sell goes through the menu line by line.

"Guaranteed first page"

Google's page says "No one can guarantee a #1 ranking on Google," and, of anyone promising first place, "find someone else." A first page guarantee usually holds up on a search nobody types.

"We have a special relationship with Google"

Google says to beware of this claim and of "priority submit." It also says it "never accepts money to include or rank sites in our search results." There is no side door to be friends with.

"100 high-DA backlinks for $99"

That is 99 cents a link. No editor reads a pitch at that price, because no editor is being pitched. DA is a third-party score. Google says third-party tools have no access to its internal ranking data.

"Our publisher partnerships"

Could be real. Could be a private blog network that has been to finishing school. Ask for the list, ask who owns the sites, and open five of them.

"I noticed your site has issues"

Google tells you to give unsolicited email about search engines the skepticism you would bring to diet pills or a deposed dictator's transfer request.

"Our tool is Google-approved"

Google says it does not evaluate or endorse third-party SEO tools, and to be wary of ones claiming to be "acceptable" or "approved."

Sometimes the pitch gets to court. The FTC alleged that the Pointbreak Media operation robocalled small businesses, falsely claimed to represent Google, threatened removal from Google's search engine and charged $300 to $700 for first-page listings, according to a Digital Transactions report of May 17, 2019. Google's page says US businesses deceived by an SEO can complain to the Federal Trade Commission online or at 1-877-FTC-HELP. Whether you have a claim is a question for your attorney.

Now put the same questions to us

We sell this work, so we are not a neutral party and you should read this page accordingly. Here is how DataCram answers, using only what our own pages already say. Where a page does not say, we would rather you ask and write down the reply than take a promise from a web page.

  • Price: SEO programs start from $575 a month, depending on complexity, setup and budget. Our pricing page for this section says more.
  • Contract: no long contract, with a defined scope.
  • Links: our pricing page says authority work is "earned, never bought," and our guide to buying backlinks says we do not buy links in clients' names.
  • Reports: calls, leads and booked work, not a rankings chart with no dollar attached.
  • Guarantees: none on rankings, traffic, leads or recovery times. You have just read why.
  • Past work: our work page shows what we have built. Open it and judge it the way you would judge anyone's.
  • Who does the work, and how we handle accounts: ask us. (210) 346-0848, or the about page for who we are: a San Antonio web studio, building for the web since 1999.

If our answers do not hold up to your questions, hire someone else. You will have better questions for them than most of their clients ever asked. Our page on what a month of the work contains gives you something to compare.

When the right hire is nobody, at least for now

Google's hiring page says "If you run a small local business, you can probably do much of the work yourself," and points to its starter guide. That is a large company talking a lot of vendors out of a lot of invoices, and it is correct. If you have one location, few competitors and an afternoon a month, start with a checklist you can run yourself. Our free site audit will show you whether the site is the real problem.

The same Google page says a redesign or new launch is a great time to hire, the earlier the better. It also says a good SEO can help an existing site. So hire when the work exceeds your hours, when a rebuild is coming, or when your own inspection turned up something you cannot untangle. And give it time. Google's starter guide, last updated December 10, 2025, says some changes might take effect in a few hours and others could take several months. If you are comparing more than SEO firms, choosing a marketing agency runs the same tests across other services.

Hire the firm whose answers you could read aloud to Google without either of you wincing.

Questions owners ask about white hat SEO

You cannot know from the label, because anyone can claim it. Ask for a sample report with dated changes, a written answer on whether money reaches any site for links, and an example of something it would refuse to do. Then look up two or three of its current links and open them. Google also suggests checking references with past clients.

It should not need to. Google Ads Help says a manager that creates a new account becomes its owner, though the client still owns its data and can unlink. In Search Console, keep verified ownership yourself and give the agency full user access. For an audit, Google's hiring page says to grant read access only. A vendor needing more should say why.

Exit terms, a monthly list of work with URLs, a record of every link built in your name, and a clause saying nothing of value goes to a site for a followed link. Add named subcontractors and a date on which logins and verification tokens come off. Have your own attorney read anything you sign, since we are not lawyers.

Yes, and Google says so in plain words on its hiring page, last updated June 5, 2026: "If they guarantee you that their changes will give you first place in search results, find someone else." Some guarantees are carefully worded around searches with little value. Ask which searches, in writing, and how they are counted.

Ask us and judge the answers. Our published position is SEO from $575 a month depending on complexity, setup and budget, no long contract, a defined scope, links earned and not bought, and reports about calls and leads. We offer no guarantee of rankings or recovery times. We sell this work, so treat us the way you would treat any vendor.

Often, yes. Google's hiring page says a small local business can probably do much of the work itself, starting with its starter guide. The honest limits are your hours and any existing damage. Technical cleanup, a manual action or a big rebuild is when outside help tends to pay, and a free audit will show which case you are in.

Keep reading

Free · No obligation

Send us the questions and see what comes back

Tell us what you are shopping for, or forward the proposal you are weighing. A person at DataCram replies with what we would do, what it would cost and where we think the proposal holds up.

Which of these sounds like you? (pick any)

Rather talk now? Call (210) 346-0848.

CallGet a quote