Short answer: A client-side SEO contract should define the scope and deliverables, what is out of scope, fees and payment terms, the term and notice period, who owns the content, data and accounts, how handover works on exit, access and confidentiality, the agency's commitments on reporting, response times and Google's spam policies, your own responsibilities, an approval process for site changes, liability and indemnity, subcontracting disclosure and data protection terms.
Key takeaways
- Scope is the clause that causes most disputes. List deliverables with quantities and frequency, and list what is out of scope just as clearly.
- Keep the term and notice short enough that you can leave if the work stops, typically 30 to 90 days' notice after any minimum term.
- Your content, data and accounts should belong to you from day one, with a written handover obligation when the contract ends.
- Ask for a written commitment to follow Google's spam policies and to get your approval before any link building tactic or site change.
- Write down what you owe too: developer time, approvals and turnaround times. Many stalled SEO projects stall on the client side.
- Cover liability, indemnity, subcontracting and GDPR data processing terms in plain language, and have a lawyer review the final draft.
Most SEO contracts are written by the agency, for the agency. That is not sinister. It is simply whoever drafts first. But it means the template you receive will usually be clear on what you pay and vague on what you get, who owns what, and how you leave. The clauses below are the ones we would want to see as a client, and the reason each one matters.
This post covers a typical ongoing retainer for SEO services, not a one-off audit. The same clauses apply to a project, but the term and handover sections get simpler.
This is a practical checklist from the agency side of the table, not legal advice. Contract law differs between countries, and the example wordings below are illustrations, not drafted clauses. Have a lawyer review the final contract before you sign.
Which clauses should an SEO contract contain?
Use this as a checklist when you read the agency's draft. If a clause is missing, ask for it. If it is there but vague, ask for it to be made specific.
How specific should the scope and deliverables be?
Specific enough that a stranger could read the contract and tell, at the end of any month, whether the agency delivered. "Ongoing SEO optimisation" fails that test. "One technical audit in month one, up to four optimised pages and two new articles per month, and a monthly report by the fifth working day" passes it.
Scope matters most because it is where expectations quietly drift. You assume content is included. The agency assumes it is not. Six months later, both sides feel short-changed and neither can point to a sentence that settles it.
A good scope section usually has three parts. First, the deliverables with quantities and frequency. Second, the out-of-scope list: things like site development, design, paid search, copy for product pages or link buying, whatever the agency does not cover. Third, a change mechanism: how you request extra work, how it is quoted, and that nothing extra is billed without written approval.
Not every SEO task fits a fixed monthly count. Technical fixes, for example, depend on what the audit finds. In that case, the contract can commit to the process instead: an audit by a date, a prioritised fix list, and a set number of hours or tasks per month spent on it.
Deliverables
"Each calendar month the Agency will deliver: up to four on-page optimisations to agreed URLs, two new articles of 1,200 to 1,800 words on agreed topics, and implementation support for technical fixes from the agreed priority list, up to 10 hours."
Out of scope and changes
"Website development, design, paid media and purchased links are out of scope. Additional work will be quoted in writing and starts only after the Client's written approval."
The common mistake is accepting a scope written as activities ("keyword research, on-page SEO, link building") without quantities. Activities can be done for one hour or forty. Ask for the number.
What should the fees, term and termination clauses say?
They should state exactly what you pay and when, how long you are committed, and how either side can end the agreement. The aim is that you can leave cleanly if the work stops being worth it, while the agency gets enough notice to plan.
Fees and payment terms
Write down the monthly fee, what it includes, the invoice date and the payment term (for example 14 or 30 days). Then cover the costs that cause surprises: tools, content writers, outreach or translation. Either they are included, or they are passed through at cost with your prior approval above an agreed amount. If the agency can raise prices, the contract should say how often and with how much notice. If an agency proposes payment tied to rankings, treat it as a separate commercial question and make sure the contract defines exactly what is measured.
Term and notice
A minimum term of three to six months is common in SEO, because the first months are mostly audit and fixes. Beyond that, a rolling monthly agreement with 30 to 90 days' notice is typical. Watch for automatic renewal into another long fixed term. That is the clause clients most often regret, because the notice window closes before anyone remembers it.
Termination for cause
You should be able to end the contract early if the agency materially breaches it and does not fix the breach within a set period, say 14 or 30 days after written notice. Breaches worth naming include missed deliverables for two consecutive months and any breach of the conduct clause on spam tactics.
Short exit
Six-month minimum, then monthly rolling with 30 days' notice. You decide in month eight to stop. You give notice on 1 September, pay for September, and the relationship ends cleanly.
Locked in
Twelve months, auto-renewing for twelve unless cancelled 90 days before the end. You miss the window by a week. You are now committed to another year of fees.
SEO management services with deliverables you can check
We write monthly deliverables, reporting dates and handover terms into our agreements so you always know what you are paying for and how to leave.
See our SEO management servicesWho should own the content, data and accounts?
You should. The content the agency writes for your site, the keyword research and audits produced for you, and every account used to run your SEO should belong to your business, and the contract should say so in plain words.
The reason is simple: SEO work compounds. If you leave after a year and the articles, the reporting dashboards and the Search Console history are tied to the agency, you lose much of what you paid for. In our experience, ownership disputes rarely happen out of bad intent. They happen because nobody wrote it down and the accounts were set up under the agency's email for convenience.
Three things to cover:
- Content and deliverables. Copyright or a full licence in all deliverables passes to you on payment. The agency keeps its own tools, templates and know-how, which is fair.
- Accounts. Google Search Console, Google Analytics, Bing Webmaster Tools, tag managers and any paid SEO tool projects created for you are owned by your business, with the agency added as a user.
- Handover on exit. Within a set period after termination, the agency hands over all work in progress, files, reports, credentials it created and a short status note, and removes its own access.
Ownership
"All deliverables created for the Client, including content, research and reports, become the Client's property on payment. All analytics and webmaster accounts are registered to the Client. The Agency is granted user access for the term only."
Handover
"Within 10 working days of termination the Agency will deliver all deliverables and work in progress in editable form, provide a written status summary, and remove its access to the Client's systems."
Access and confidentiality
The agency will need access to your CMS, analytics and sometimes your hosting. The contract should say access is granted through individual user accounts rather than shared passwords, limited to what the work needs, and removed at the end. A confidentiality clause should cover your business data, sales figures and plans, for the term and a reasonable period after. Confidentiality should be mutual, since the agency's pricing and methods are also worth protecting.
What should the agency commit to in writing?
Beyond the deliverables, the agency should commit to how it will work with you: how often it reports, how fast it responds, who your contact is, and which tactics it will never use on your site.
- Reporting cadence. For example, a written monthly report by the fifth working day and a quarterly review call. State the minimum content, such as work delivered against plan and organic performance against the baseline.
- Response times. For example, replies to routine emails within two working days, and same-day acknowledgement of an urgent issue like a site-wide traffic drop.
- Named contact. Who leads the account, and that you are told in writing if that changes.
- Compliance with Google's spam policies. A commitment to follow Google's published spam policies, and not to buy links, use private blog networks, automated content at scale or other manipulative tactics without your informed written approval.
Leave rankings out of these commitments. No agency controls Google's results, so a clause promising a position is unenforceable at best and a warning sign at worst.
Subcontracting and white label
Many agencies use freelancers or other agencies for writing, development or outreach, and some resell another agency's work under their own name. That is not wrong in itself. The contract should require the agency to disclose which parts of the work are subcontracted, stay fully responsible for that work, and bind subcontractors to the same confidentiality, conduct and data protection terms.
What should you commit to as the client?
You should commit to the things the agency cannot do without you: developer time, timely approvals, access, and the information it needs about your business. Writing these down protects you as much as the agency, because it turns "the agency is slow" into a question you can actually answer.
In practice, the most common reason SEO work stalls is that fixes wait in the client's development queue. If the audit finds 20 technical issues and your developer has two hours a month for them, the plan will slip. The contract, or a schedule attached to it, should state roughly how much developer time you will allocate and how quickly you will review drafts, say within five working days.
Approval process for changes to the site
Agree in writing what the agency may change without asking and what needs sign-off. A sensible split: routine on-page edits to agreed pages can go live after a single approval of the plan, while anything touching templates, URLs, redirects, robots rules or navigation needs written approval for each change. Ask for a change log, so you can see what was changed, when and by whom, and roll back if needed.
Client responsibilities
"The Client will provide CMS and analytics access within five working days of signature, allocate at least eight developer hours per month to agreed fixes, and review drafts within five working days."
Site changes
"Changes to URLs, redirects, templates, robots.txt or site navigation require the Client's written approval before release. The Agency will keep a change log available to the Client."
How should liability, indemnity and data protection be handled?
In plain terms: liability says how much each side can be made to pay if something goes wrong, indemnity says who covers claims from third parties, and data protection says how personal data is handled. All three should be fair to both sides and written so you can understand them without a lawyer, even though a lawyer should still check them.
Liability
Agency templates often cap liability at the fees paid over a period, commonly three to twelve months. A cap is normal, since an agency cannot insure against every swing in your revenue. What to check is that the cap is not tiny, that it is mutual, and that it does not apply to things like breach of confidentiality or data protection, or deliberate misconduct. Also check whether the agency excludes lost profits entirely, which is common, and whether that exclusion makes the rest of the clause meaningless for your situation.
Indemnity
The agency should cover claims arising from its own work, for example copyright claims over images or text it supplied. You should cover claims arising from material you provided, such as product claims or images you sent. Keep it narrow and mutual.
Data protection
If the agency handles personal data on your behalf, such as user data in analytics, form leads or customer email lists, data protection law will usually require written processing terms. Under GDPR that means a data processing agreement covering what data is processed, for what purpose, security measures, subprocessors and deletion at the end. Many SEO engagements touch little personal data, but analytics access alone can be enough to need one, so ask.
Frequently asked questions
Ask for changes. A reasonable agency expects comments on its template, especially on scope, ownership and notice. If an agency refuses any change to basic points like account ownership, that tells you something about the relationship.
A statement of work usually covers scope, deliverables and fees well, but often says little about ownership, liability, confidentiality or data protection. A common setup is a master agreement for the legal terms plus a short statement of work for the scope, which you can update without renegotiating everything.
Naming the account lead is useful, along with a duty to tell you in writing if that person changes. Naming every team member is usually too rigid, since agencies need some flexibility in staffing.
Links earned through outreach and content stay where they are, because they sit on other sites. The contract should require a list of links built during the term as part of the handover, so you know what exists. If an agency says links will be removed when you stop paying, those were likely rented or paid placements, which the conduct clause should rule out.
The legal clauses are the same, but the scope changes. With SEO consulting services your team implements, so the deliverables are advice, workshops and reviews, and the client responsibilities section carries more weight.
What to do next
If you have an agency draft on your desk, compare it with the checklist above before your next call. If you are still comparing agencies, our guides on how to choose an SEO agency and the questions to ask a digital marketing agency cover that side.
- Mark each clause in the checklist as present, vague or missing.
- Send the agency a short list of requested changes, starting with scope, ownership and notice.
- Have a lawyer review the final version, especially liability, indemnity and data protection.
If you would like a second opinion on what your site actually needs before you agree a scope, ask for our free written SEO audit, delivered within 48 hours.