Completions

Done-for-you offer · Fractional CMO with AI Swarm · local-SEM 4-skill bundle · local-SEM agent

Per-location SEM bid + budget management for multi-location retail, multi-unit franchise, and multi-location service brand operators — Bid + Pace + Gate + Feedback 4-skill bundle on the local-SEM agent, under a 5-anchor compliance overlay anchored on Google Ads + Microsoft + Meta + LinkedIn + Pinterest + Snapchat + TikTok policies, FTC + Lanham + Endorsement Guides + Fake Review Rule, per-vertical advertising rules, Fair Housing + Fair Lending + Meta Special Ad Category + Google HEC, and GDPR + CCPA cross-context + DSA + EU AI Act Article 50

You run per-location SEM across 50-1,500 locations on 7-10 ad platforms (Google Ads + Microsoft Advertising + Meta Ads Manager + LinkedIn + Pinterest + Snapchat + TikTok at minimum) each with its own restricted-category policies, landing-page requirements, ad-disapproval categories, and 2024 enforcement posture (Google reported removing several billions of bad ads in 2024 and tightening consumer-protection enforcement; Meta and other platforms tightened AI-content policies and special- category enforcement). FTC Section 5 + Lanham + Endorsement Guides 2024 + Fake Review Rule 16 CFR Part 465 (effective October 2024) + Made-in-USA Labeling Rule 16 CFR Part 323 + Green Guides + ROSCA + Click-to-Cancel + state automatic renewal apply across verticals. Per-vertical advertising rules apply by vertical (ABA Model Rule 7.1 + state attorney advertising for legal; HIPAA + per-state medical/dental/ optometry/chiropractic/PT licensing-board for healthcare; FDA OPDP for DTC pharma; DEA for controlled substances; per-state cannabis-regulator with near-total platform prohibition for cannabis; DISCUS + TTB + per-state liquor for alcohol; FDA CTP for tobacco; state insurance-commissioner; state real- estate-commission). Fair Housing Act + Fair Lending + ECOA Regulation B + Meta Special Ad Category Housing/Employment/ Credit + Google equivalent Housing/Employment/Credit restrictions + EEOC AI hiring guidance + Colorado AI Act (effective February 1, 2026) + NYC Local Law 144 + Illinois AI Video Interview Act + Maryland HB 1202 apply when SEM touches employment + housing + credit + consequential AI decisions. GDPR Articles 6 + 9 + 22 + 26 + Article 35 DPIA + ePrivacy + CCPA Section 1798.140(ae) cross-context-behavioral- advertising opt-out + Section 1798.121 sensitive PI + state- comprehensive-privacy patchwork + COPPA + California Age- Appropriate Design Code Act (effective July 2024) + Connecticut SB 3 + Maryland AADC + DSA Article 26 transparency in online advertising + DSA Article 28 child protection apply across audiences. EU AI Act Article 50 generative-content marking applies when AI-generated ad creative is used. The ad-platform, bid-management, analytics, attribution, landing-page-QA, consent-management, and AI- content vendors below ship strong primitives. The orchestration above them — operator-counsel-and-paid-media- team-approved per-platform policy mirror, FTC and per-vertical advertising rule enforcement, Fair Housing + ECOA + Meta SCA + Google HEC + Colorado AI Act + NYC LL144 + Illinois AIVIA + EEOC flow, CCPA cross-context-behavioral-advertising opt-out propagation through consent-management to each platform, GDPR Article 22 + DPIA workflow, DSA Article 26/28 + EU AI Act Article 50 — is operator-side architecture. You keep the ad accounts, the bid management, the analytics, the attribution, the consent-management vendor, the per-platform policy mirror, the per-vertical ruleset, the Fair Housing/ ECOA/Meta SCA/Google HEC playbook, the privacy and DSA flow, the WORM audit trail, and the policy-as-code policies. You keep the ability to in-house at any time.

Published September 24, 2026

The real ecosystem this sits above

Ad platforms + bid management

Ad platforms: Google Ads, Microsoft Advertising, Meta Ads Manager, LinkedIn Campaign Manager, Pinterest Ads, Snapchat Ads, TikTok Ads. Bid management: Skai, Marin Software, Adobe Advertising Cloud, Optmyzr, Acquisio, WordStream, Search Ads 360 + Google Ads Smart Bidding + Microsoft Auto-bidding + Meta Advantage automated bidding. Each ships strong campaign management + automated bidding primitives. Cross-platform policy mirror + per-vertical advertising rule enforcement above them is operator-side architecture.

Analytics + attribution

Analytics: Google Analytics 4, Adobe Analytics, Amplitude, Mixpanel. Attribution: Northbeam, Hyros, AppsFlyer, Adjust, Branch, Kochava, Singular, Triple Whale. Each ships strong measurement primitives. CCPA cross-context- behavioral-advertising opt-out propagation above them is operator-side architecture.

Landing-page QA + consent + AI content

Landing-page QA: Google Search Central, Schema.org Validator, axe, WAVE, Pa11y, Lighthouse. Consent management: OneTrust, TrustArc, Ketch, Securiti, BigID. AI content: Anthropic Claude, OpenAI GPT, Microsoft Copilot, Google Gemini, Jasper, Copy.ai, Writesonic, Persado, Phrasee. Each ships strong primitives. EU AI Act Article 50 marking + ADA Title III + WCAG enforcement + Fair Housing/ECOA/Meta SCA/Google HEC flow above them is operator-side architecture.

Policy-as-code + WORM + legal research

Policy-as-code: OPA Rego, AWS Cedar, Casbin, Cerbos, Oso. WORM: AWS S3 Object Lock, GCS retention, Azure Blob immutable, Snowflake Time Travel. Legal research: Westlaw, Lexis+, Bloomberg Law, Practical Law, Compliance. ai. Each ships strong primitives. The 5-anchor compliance gate that maps per-platform policy + FTC + per-vertical + Fair Housing/ECOA/Meta SCA/Google HEC + privacy + DSA onto an operator-counsel-approved policy bundle is operator-side architecture.

Frequently asked

What does per-location SEM bid + budget management actually deliver, and how does the 4-skill bundle decompose?

An orchestration layer that sits above the operator ad-platform + bid-management + analytics + attribution + landing-page-QA + consent-management + AI-content + policy-as-code + WORM-storage stack and runs per-location bid and budget management at scale across 50-1,500 locations while keeping ad platforms, regulators, and operator counsel aligned. The skill is a four-skill bundle on the local-SEM agent. Skill 1 — Bid: emit per-location per-campaign per-keyword bid signals to the operator-chosen ad platform (Google Ads, Microsoft Advertising, Meta Ads Manager, LinkedIn Campaign Manager, Pinterest Ads, Snapchat Ads, TikTok Ads — operator chooses) through the operator-chosen bid-management vendor (Skai, Marin Software, Adobe Advertising Cloud, Optmyzr, Acquisio, WordStream — operator chooses) or platform-native automated bidding (Google Ads Smart Bidding, Microsoft Auto-bidding, Meta Advantage automated bidding). Bid signals account for per-location conversion-value, attribution credit (the operator-chosen attribution platform — Northbeam, Hyros, AppsFlyer, Adjust, Branch, Kochava, Singular, Triple Whale — operator chooses), competitive intensity, dayparting, geo-targeting precision, and platform-specific signals. Skill 2 — Pace: manage per-location per-campaign daily and monthly budget pacing so spend tracks operator-marketing-team-set targets without over-pacing into the platform’s ad-serving throttles or under-pacing into wasted budget. Pacing logic respects operator finance team budget caps, per-location budget envelopes, per-vertical seasonality, and known platform-side pacing behavior. Skill 3 — Gate: refuse to commit a bid or a budget shift that would route ad spend into a destination, audience, or creative class that violates the operator-counsel-approved per-platform-policy + FTC + per-vertical + Fair Housing/Lending + privacy compliance gate. Gate evaluates ad-platform policy (Google Ads + Microsoft Advertising + Meta Ads + LinkedIn + Pinterest + Snapchat + TikTok — each maintains its own restricted-category and content policy with per-platform updates often quarterly), FTC representation rules (Endorsement Guides 2024, Fake Review Rule 16 CFR Part 465 effective October 2024, Made-in-USA Labeling Rule 16 CFR Part 323, Green Guides, Negative Option + ROSCA + Click-to-Cancel + state automatic renewal when subscription destinations), per-vertical advertising rules (ABA Model Rule 7.1 and per-state attorney advertising for legal; HIPAA + per-state medical/dental/optometry/chiropractic/PT licensing-board for healthcare; FDA OPDP for DTC pharma; DEA for controlled substances; per-state cannabis-regulator with Google near-total prohibition for cannabis; DISCUS + TTB + per-state liquor-board for alcohol; FDA CTP and per-state vape-flavor for tobacco; state insurance-commissioner; state real-estate-commission), Fair Housing + Fair Lending + ECOA Regulation B + Meta Special Ad Category Housing/Employment/Credit + Google Housing/Employment/Credit restrictions on demographic targeting + EEOC AI hiring guidance + Colorado AI Act effective February 2026 + NYC Local Law 144 + Illinois AI Video Interview Act when targeting employment or housing or credit decisions, GDPR + ePrivacy + CCPA Section 1798.140(ae) cross-context-behavioral-advertising opt-out + Section 1798.121 sensitive PI + state-comprehensive-privacy + COPPA + California AADC + Connecticut SB 3 + DSA Article 26 transparency in online advertising + DSA Article 28 child protection when audience includes minors or EU users, EU AI Act Article 50 generative content marking when AI-generated ad creative is used. Skill 4 — Feedback: emit per-location per-campaign per-keyword conversion + revenue + LTV + attribution + landing-page quality signals back to Bid (for the next bid cycle), Pace (for budget reallocation), the operator CDP and attribution platform, the operator data warehouse, and the operator measurement layer. Feedback honors the per-jurisdiction CCPA cross-context-behavioral-advertising opt-out and state-comprehensive-privacy patchwork when downstream systems use the feedback for behavioral advertising. The ad-platform, bid-management, analytics, attribution, landing-page-QA, consent, AI-content vendors below ship strong primitives. The orchestration above them — operator-counsel-approved per-platform-policy maintenance, FTC and per-vertical advertising rule enforcement, Fair Housing + ECOA + Meta SCA + Google HEC enforcement, privacy and DSA enforcement, audit trail — is operator-side architecture.

Where does single-vendor bid management stop compounding for multi-location retail + multi-unit franchise operators?

Single-vendor bid management is solved. Google Ads Smart Bidding ships strong automated bidding. Microsoft Auto-bidding ships strong Microsoft-side automation. Meta Advantage ships strong Meta automation. Skai and Marin and Adobe Advertising Cloud each ship strong cross-platform bid management. The compound case the local-SEM agent has to handle is the one where (a) a single operator runs paid search + paid social + paid video + paid display + retail-media across 7-10 ad platforms with per-platform restricted-category policies, content policies, landing-page policies, and ad-disapproval categories that evolve roughly quarterly and intensify after policy updates (Google reported removing several billions of bad ads in 2024 and tightening enforcement on consumer-protection-flagged advertisers + AI-generated content + restricted categories), (b) per-location bid and budget management has to respect operator finance team budget envelopes + per-location revenue + LTV signals + competitive density without crossing into restricted categories at any of the 7-10 ad platforms, (c) per-vertical advertising rules govern what may be promoted (a legal practice cannot promote outcomes without state-bar-permissible language and ABA Model Rule 7.1 substantiation, a healthcare practice faces HIPAA when targeting and per-state medical-board on testimonial/outcome claims, a pharma operator faces FDA OPDP for DTC, a cannabis operator faces near-total prohibition on most platforms with per-state CBD carve-outs, an alcohol operator faces DISCUS + per-state liquor-board, a tobacco operator faces FDA CTP, a financial-services operator faces state-by-state advertising rules), (d) Fair Housing Act + Fair Lending + ECOA Regulation B + Meta Special Ad Category (the HEC category — Housing, Employment, Credit — restricts demographic targeting) + Google’s equivalent Housing/Employment/Credit restrictions on demographic-based targeting + EEOC AI hiring guidance + Colorado AI Act (effective February 2026) governing consequential AI decisions in employment + financial services + housing + insurance + legal services + NYC Local Law 144 governing automated employment decision tools + Illinois Artificial Intelligence Video Interview Act + state employment-AI bills apply when SEM targets reach housing or employment or credit decisions, (e) GDPR Article 22 governs solely automated decisionmaking with significant effects when AI-bid-decisions affect significant outcomes for individuals, Article 26 joint controller analysis applies when EU users targeted, ePrivacy applies to cookie-based audience joins, (f) CCPA Section 1798.140(ae) cross-context-behavioral-advertising opt-out + Section 1798.121 sensitive PI opt-out + state-comprehensive-privacy patchwork (Texas DPSA + Virginia CDPA + Connecticut CTDPA + Colorado CPA + Utah CPA + Oregon + Tennessee + Maryland Online Data Privacy Act + Washington My Health My Data Act + Florida + Delaware + Indiana + Iowa + Montana) impose per-state opt-out propagation when audience-join touches behavioral advertising, (g) DSA Article 26 imposes online-advertising transparency requirements on platforms (Real Online Advertising Repositories) and Article 28 imposes child-protection restrictions on platforms reachable to minors, (h) COPPA + California Age-Appropriate Design Code Act (effective July 2024) + Connecticut SB 3 + Maryland AADC restrict targeting and creative when audience may include under-13, (i) EU AI Act Article 50 imposes AI-generated content marking when AI-generated ad creative is used. Without an orchestration layer above the ad-platform + bid-management + analytics + attribution + consent + AI-content vendors, per-platform policy updates drift out of sync across consoles (a Google policy update on supplements rolls out at Google but the Meta-side equivalent does not get synchronized), the per-vertical advertising rules get applied inconsistently per platform, Fair Housing + ECOA + Meta SCA + Google HEC enforcement fragments (a campaign that respects Meta SCA fails to respect the equivalent at Google), CCPA cross-context opt-out fails to propagate from CDP to ad platform, DSA Article 26 transparency obligations get missed, AI-generated ad creative ships without Article 50 marking, and the audit trail of "what bid, against which platform policy + per-vertical ruleset + Fair Housing posture + privacy posture + DSA posture, at which counsel-policy-version" fragments across consoles. The orchestration above the vendors is what holds the cross-platform + cross-vertical + cross-jurisdiction + cross-doctrine invariants.

How does Skill 3 Gate handle the per-platform policy + 2024 enforcement environment alongside Fair Housing + ECOA + Meta SCA + Google HEC restrictions on demographic targeting?

Gate runs a per-bid per-budget-shift compliance cascade. Step 1 — per-platform policy compliance. The orchestration mirrors operator-counsel-and-paid-media-team-approved per-platform policy (Google Ads policy + Microsoft Advertising policy + Meta Ads policy + LinkedIn Campaign Manager policy + Pinterest Ads policy + Snapchat Ads policy + TikTok Ads policy) and refuses bids that would commit spend to a restricted category at the destination platform, a landing page that would violate the platform-specific landing-page requirements (consumer protection, deceptive content, prohibited content), or an ad creative that violates content rules (AI-generated content policies tightened in 2024 across multiple platforms, restricted product category content, sensational content). Step 2 — Fair Housing + Fair Lending + ECOA + Meta Special Ad Category + Google Housing/Employment/Credit. Fair Housing Act + HUD AI/algorithmic-decisionmaking guidance + state fair-housing acts + Fair Lending + ECOA Regulation B 12 CFR 1002 notice-of-action requirements + CFPB UDAAP enforcement apply when ads touch housing or credit decisions. Meta operationalized this through Special Ad Category (SCA) for Housing, Employment, Credit + Social Issues — campaigns in those categories cannot use the standard demographic + interest + behavior targeting, must use the SCA-limited audience options, and trigger Meta’s SCA-specific delivery model. Google operationalized equivalent restrictions through its Personalized Advertising Restrictions on housing, employment, credit, healthcare, social issues + ad targeting restrictions for sensitive categories. When the operator runs ads that fall into HEC categories (residential real estate, mortgage, banking products, hiring, talent acquisition, job ads), Gate routes the bid through the SCA + HEC compliance path that uses only the platform-allowed audience targeting and refuses bids that would attempt restricted demographic targeting. EEOC AI hiring guidance and the September 2024 ADA AI guidance also apply when employment-related ads use AI. Colorado AI Act (effective February 1, 2026) covers consequential decisions in employment + education + financial services + essential services + government services + healthcare + housing + insurance + legal services and imposes algorithmic discrimination risk management + consumer notice + appeals process; SEM targeting for consequential decisions routes through Colorado AI Act compliance when Colorado residents reachable. NYC Local Law 144 (effective July 2023) bias audits + notice for automated employment decision tools apply when employment ads use AEDTs. Illinois AI Video Interview Act + Maryland HB 1202 + similar state patchwork. Step 3 — Per-vertical advertising rules cascade (legal, healthcare, pharma, controlled-substance, cannabis, alcohol, tobacco, insurance, real estate). Each vertical has its own rule set and Gate routes per-vertical-tagged ads through the vertical-specific compliance path; counsel-flagged content cannot publish until restructured. Step 4 — FTC representation rules. Made-in-USA Labeling Rule 16 CFR Part 323 all-or-virtually-all standard; Green Guides environmental claims; Endorsement Guides 2024 (AI-disclosure); Fake Review Rule 16 CFR Part 465 (effective October 2024) when reviews appear in ad assets or landing pages; ROSCA + Click-to-Cancel + state automatic renewal when subscription landing pages. Step 5 — Privacy and DSA. CCPA Section 1798.140(ae) cross-context-behavioral-advertising opt-out propagation from operator CDP to ad platform via the operator consent-management vendor (OneTrust, TrustArc, Ketch, Securiti, BigID — operator chooses); state-comprehensive-privacy patchwork; COPPA + California AADC + Connecticut SB 3 + Maryland AADC when minors reachable; DSA Article 26 online-advertising transparency requirements; DSA Article 28 child-protection restrictions; EU AI Act Article 50 generative-content marking when AI-generated ad creative is used. Step 6 — Audit attestation. Each Gate decision writes per-bid per-budget-shift attestation with rule-citation evidence + counsel-policy-version + ad-platform-policy-version-at-evaluation to the WORM audit trail. Refused bids route to operator paid-media-and-counsel review; approved overrides update the per-platform exception register but never remove the audit-trail record of the original Gate decision. The Gate does not autonomously update per-platform policy interpretation; operator paid-media + operator counsel review platform policy updates and approve rule changes.

How does the orchestration handle GDPR Article 22 + ePrivacy + CCPA cross-context-behavioral-advertising opt-out propagation when AI bidding affects significant outcomes?

AI bidding through Google Smart Bidding, Microsoft Auto-bidding, or Meta Advantage runs on automated decisionmaking inputs. When that automated decisionmaking produces effects that meet the GDPR Article 22 threshold of solely automated decisionmaking with legal or similarly significant effects, Article 22 governs and requires meaningful human involvement or specified Article 22(2) exceptions. The orchestration enforces operator-counsel-approved boundaries — for advertising decisions that do not produce legal or significant effects (a routine ad-serve decision), Article 22 typically does not apply; for advertising decisions that may produce significant effects (decisions that determine access to credit, employment, housing, essential services), Article 22 enters scope and the orchestration routes the decision through the operator-counsel-approved meaningful-human-involvement path. Article 35 DPIA (Data Protection Impact Assessment) is required for high-risk processing including systematic and extensive evaluation including profiling. When the operator runs ad-bidding that profiles users for HEC categories, DPIA applies and the orchestration verifies the operator counsel has DPIA on file. Article 26 joint-controller analysis applies when the operator and the ad platform jointly determine purposes and means of processing; the joint-controller arrangement governs respective responsibilities under Article 26(1) and (2). ePrivacy Directive 2002/58/EC governs cookie-based audience joins and electronic communications marketing. CCPA Section 1798.140(ae) defines cross-context-behavioral-advertising and Section 1798.120 grants opt-out-of-sale/sharing rights that cover cross-context-behavioral-advertising sharing; Section 1798.121 covers sensitive PI opt-out. State-comprehensive-privacy patchwork (Texas DPSA + Virginia CDPA + Connecticut CTDPA + Colorado CPA + Utah CPA + Oregon CPA + Tennessee IPA + Maryland Online Data Privacy Act + Washington My Health My Data Act + Florida DBR + Delaware PDPA + Indiana CDPA + Iowa CDPA + Montana CDPA + state-specific patchwork) imposes per-state opt-out propagation and consent-class management. The orchestration propagates per-user opt-out status from operator CDP through the operator consent-management vendor (OneTrust, TrustArc, Ketch, Securiti, BigID — operator chooses) to each ad platform via the platform’s consent-management or audience-suppression API (Google Restricted Data Processing, Meta Limited Data Use, similar). When a user opts out of cross-context-behavioral-advertising, the operator-side opt-out propagates to suppress audience-join for that user at the destination ad platform. The Feedback skill emits attribution data downstream while respecting the per-user opt-out so downstream systems do not re-join the data for behavioral advertising. The audit trail records the per-bid consent-class verification and per-platform suppression attestation for state-AG, CPPA, and EU supervisory-authority inquiries.

What compliance does the orchestration enforce, and how does it map to per-platform policy + FTC + per-vertical + Fair Housing/Lending + privacy + DSA?

Five anchors. Anchor 1 — Per-platform advertising policy. Google Ads policy + Microsoft Advertising policy + Meta Ads policy + LinkedIn Campaign Manager policy + Pinterest Ads policy + Snapchat Ads policy + TikTok Ads policy with per-platform restricted-category enforcement + landing-page policies + destination requirements + ad disapproval categories + appeals process. 2024 enforcement environment saw Google report removing several billions of bad ads and tightening enforcement on consumer-protection flagged advertisers; Meta tightened on AI-generated content and political/issue ads; multiple platforms updated AI-content policies. Per-platform policy updates roughly quarterly. Anchor 2 — FTC Section 5 + Lanham Act 15 USC 1125(a) + state UDAP + FTC Endorsement Guides 2024 (October 2024 updates on AI-generated reviews + influencer disclosures) + FTC Fake Review Rule 16 CFR Part 465 (effective October 2024 — fake reviews + AI-generated reviews + incentivized reviews without clear-and-conspicuous disclosure + insider reviews + review suppression prohibited) + FTC Made-in-USA Labeling Rule 16 CFR Part 323 (final 2022 — all-or-virtually-all standard) + FTC Green Guides + FTC Negative Option Rule + FTC ROSCA + FTC Click-to-Cancel Rule + state automatic renewal laws (California Business and Professions Code 17602 + New York General Business Law 527 + state patchwork) when subscription destinations. Anchor 3 — Per-vertical advertising rules. Legal (ABA Model Rule 7.1 + ABA Model Rule 7.4 + per-state attorney advertising rules). Healthcare (HIPAA when targeting touches PHI + state medical-board + dental-board + optometry/chiropractic/PT licensing-board advertising rules with state-specific outcome-claim restrictions). Pharma (FDA Office of Prescription Drug Promotion DTC). Controlled substances (DEA advertising restrictions). Cannabis (per-state cannabis-regulator + near-total platform prohibition + CBD carve-outs). Alcohol (TTB Federal Alcohol Administration Act + DISCUS Code + per-state liquor-board + per-state shipping legality). Tobacco (FDA CTP + 21 CFR 1140 + per-state vape-flavor bans). Insurance (state insurance-commissioner advertising rules). Real estate (state real-estate-commission advertising rules). Children’s (CPSIA + COPPA when online). Anchor 4 — Fair Housing + Fair Lending + employment-AI. Fair Housing Act + HUD AI/algorithmic-decisionmaking guidance + state fair-housing acts. Fair Lending + ECOA Regulation B 12 CFR 1002 notice-of-action + CFPB UDAAP + state UDAP. Meta Special Ad Category Housing/Employment/Credit + Social Issues delivery model + Google equivalent Personalized Advertising Restrictions for housing/employment/credit/healthcare/social issues. EEOC AI hiring guidance + September 2024 ADA AI guidance for employment ads. Colorado AI Act (effective February 1, 2026) consequential decisions framework. NYC Local Law 144 (effective July 2023) bias audits and notice for AEDTs. Illinois Artificial Intelligence Video Interview Act. Maryland HB 1202 and similar state patchwork. Anchor 5 — Privacy + DSA + EU AI Act + COPPA + AADC. GDPR Articles 6 (lawful basis) + 9 (special-category) + 22 (solely automated decisionmaking) + 26 (joint controller) + 30 (records of processing) + Article 35 DPIA + ePrivacy. CCPA Section 1798.120 right-to-opt-out-of-sale/sharing + Section 1798.121 sensitive PI opt-out + Section 1798.140(ae) cross-context-behavioral-advertising opt-out + state-comprehensive-privacy patchwork. COPPA (15 USC 6501) + California Age-Appropriate Design Code Act (effective July 2024) + Connecticut SB 3 + Maryland AADC + DSA Article 28 child protection when minors reachable. DSA Article 26 online-advertising transparency (Real Online Advertising Repositories) + DSA Article 28 child-protection restrictions. EU AI Act (Regulation 2024/1689) Article 50 generative-content marking when AI-generated ad creative used. UK GDPR + UK PECR. Broader gate also enforced: HIPAA + HITECH + Washington MHMDA when health-data implicated + GLBA Safeguards when financial-data implicated + per-state breach notification via policy-as-code (OPA Rego + AWS Cedar + Casbin + Cerbos + Oso). WORM audit trail (AWS S3 Object Lock + GCS retention + Azure Blob immutable + Snowflake Time Travel) with per-statute retention (FTC 7yr + state-AG variable + GDPR 6yr + CCPA 3yr + COPPA 1yr after relationship ends + ECOA 25mo + Fair Housing variable + IRS 7yr) per operator counsel policy.

What does the engagement look like across Tier 1 → Tier 2 → Tier 3, and what does the Tier 3 reporting cycle commit to?

Tier 1 AI Readiness Assessment ($10k, 2-3 weeks, diagnostic): audits the operator current per-location SEM posture against the 4-skill bundle + 5-anchor compliance overlay + per-vendor ad-platform + bid-management + analytics + attribution + landing-page-QA + consent + AI-content state; deliverable is a gap-pack report identifying which campaigns lack per-platform-policy compliance review, which campaigns are committing spend to restricted-category landing pages, which per-vertical advertising rules are unenforced, whether Fair Housing + ECOA + Meta SCA + Google HEC restrictions are wired when HEC-category ads run, whether CCPA cross-context-behavioral-advertising opt-out propagates from operator CDP through consent-management to each ad platform, whether GDPR Article 22 + Article 35 DPIA workflow is wired when AI bidding produces significant effects, whether DSA Article 26 + Article 28 compliance is wired when EU users reachable, whether EU AI Act Article 50 marking is wired when AI-generated creative used, whether subscription destinations comply with FTC ROSCA + Click-to-Cancel + state automatic renewal, and a recommended remediation sequence for Tier 2. Tier 2 AI Swarm Setup Sprint ($25-50k, 4-8 weeks): builds the 4-skill bundle on the local-SEM agent, wires ad-platform + bid-management + analytics + attribution + landing-page-QA + consent-management + AI-content + policy-as-code + WORM-storage vendors (operator-chosen subset), configures the operator-counsel-and-paid-media-team-approved per-platform-policy mirror + FTC representation ruleset + per-vertical advertising ruleset + Fair Housing/ECOA/Meta SCA/Google HEC compliance flow + Colorado AI Act + NYC LL144 + Illinois AIVIA + EEOC AI hiring guidance flow + CCPA cross-context propagation through consent-management to each platform via Restricted Data Processing/Limited Data Use/equivalent + GDPR Article 22 + Article 35 DPIA workflow + DSA Article 26/28 + EU AI Act Article 50 marking + subscription FTC ROSCA + Click-to-Cancel flow, runs 30-day shadow + canary period before flipping to enforce-mode. Tier 3 Fractional CMO with AI Swarm ($15-25k/month, 6-month minimum, 1-2 days/wk embedded): continues operating with daily Bid + Pace + Gate + Feedback + weekly per-platform policy review against platform updates + monthly per-vertical advertising rule review + quarterly Fair Housing + ECOA + Meta SCA + Google HEC + Colorado AI Act + NYC LL144 + Illinois AIVIA + EEOC AI guidance review + quarterly compliance evidence packages. Tier 3 reporting is a 6-workstream pre-engagement-baseline reporting cycle (per-location campaign Gate pass-rate trend + per-platform policy compliance coverage + per-vertical advertising compliance coverage + Fair Housing/ECOA/Meta SCA/Google HEC enforcement coverage + CCPA cross-context opt-out propagation coverage + WORM audit-trail completeness) measured against the operator’s pre-engagement baseline. Each workstream surfaces trend direction and the gap to operator-defined targets. Reporting carries explicit caveats: ad-platform SLA + bid-management vendor SLA + Google Ads policy updates + Microsoft Advertising policy updates + Meta Ads policy updates + per-platform policy update cadence + 2024 enforcement environment evolution + FTC Endorsement Guides + Fake Review Rule + Made-in-USA + Green Guides + ROSCA + Click-to-Cancel + state automatic renewal amendments + state-AG enforcement signals + per-vertical regulator amendments + Fair Housing/ECOA/CFPB amendments + Meta SCA + Google HEC updates + EEOC AI guidance + Colorado AI Act implementing rules + NYC LL144 + Illinois AIVIA + Maryland HB 1202 + GDPR + ePrivacy + CCPA + state-comprehensive-privacy implementing rules + DSA Article 26/28 implementing guidance + EU AI Act Article 50 implementing acts + COPPA + AADC implementing guidance sit outside Completions control. Attorney-client privilege preservation across operator-counsel-approved per-platform-policy mirror + FTC ruleset + per-vertical ruleset + Fair Housing/ECOA/Meta SCA/Google HEC flow + Colorado AI Act + NYC LL144 + Illinois AIVIA + EEOC guidance flow + privacy and DSA flow + Article 50 marking records is maintained per operator counsel policy.

Who owns the ad accounts, the per-platform policy mirror, the per-vertical ruleset, the consent flow, and the audit trail?

Operator owns every artifact. The ad-platform accounts (Google Ads, Microsoft Advertising, Meta Ads Manager, LinkedIn Campaign Manager, Pinterest Ads, Snapchat Ads, TikTok Ads) run under operator-controlled credentials. The bid-management subscription (Skai, Marin Software, Adobe Advertising Cloud, Optmyzr, Acquisio, WordStream — operator chooses, or platform-native automated bidding) runs under operator billing. The analytics + attribution subscriptions (Google Analytics 4, Adobe Analytics, Amplitude, Mixpanel; Northbeam, Hyros, AppsFlyer, Adjust, Branch, Kochava, Singular, Triple Whale — operator chooses) run under operator billing. The landing-page-QA tools (Google Search Central, Schema.org Validator, axe, WAVE, Pa11y, Lighthouse) are operator-deployed. The consent-management vendor (OneTrust, TrustArc, Ketch, Securiti, BigID — operator chooses) runs under operator account. The AI content tool (Anthropic Claude, OpenAI GPT, Microsoft Copilot, Google Gemini, Jasper, Copy.ai, Writesonic, Persado, Phrasee — operator chooses with operator-approved deployment posture) runs under operator account. The operator-counsel-and-paid-media-team-approved per-platform policy mirror + FTC representation ruleset + per-vertical advertising ruleset + Fair Housing/Fair Lending/Meta SCA/Google HEC compliance library + Colorado AI Act + NYC LL144 + Illinois AIVIA + EEOC AI guidance library + CCPA cross-context-behavioral-advertising opt-out propagation flow + GDPR Article 22 + DPIA workflow + DSA Article 26/28 compliance library + EU AI Act Article 50 marking library + subscription FTC ROSCA + Click-to-Cancel + state automatic renewal library all live in operator counsel + paid-media-team repo. The Bid + Pace + Gate + Feedback skill code lives in operator code repo. The WORM audit trail lives on operator-controlled cloud storage (AWS S3 Object Lock + GCS retention + Azure Blob immutable + Snowflake Time Travel) with per-statute retention enforcement. The policy-as-code policies (OPA Rego + AWS Cedar + Casbin + Cerbos + Oso) live in operator code repo, counsel-aligned. The per-platform policy + FTC + per-vertical + Fair Housing/ECOA + Meta SCA + Google HEC + state employment-AI + privacy + DSA + EU AI Act compliance evidence records are operator-counsel-maintained. Completions owns the orchestration knowledge — how to design the per-location bid + budget management contract against the operator’s 7-10 ad-platform mix, how to wire per-platform policy mirror maintenance against platform update cadence, how to compose the per-vertical advertising rule enforcement against the operator vertical mix, how to wire Fair Housing + ECOA + Meta SCA + Google HEC + Colorado AI Act + NYC LL144 enforcement flow, how to propagate CCPA cross-context opt-out from CDP through consent-management to each ad platform via Restricted Data Processing/Limited Data Use, how to wire GDPR Article 22 + DPIA workflow for AI bidding, how to wire DSA Article 26/28 + EU AI Act Article 50 — and that knowledge transfers under the Tier 3 transition path (30-60 days at engagement end with full hand-off of the per-platform policy mirror maintenance playbook, the per-vertical advertising ruleset maintenance playbook, the Fair Housing/ECOA/Meta SCA/Google HEC playbook, the Colorado AI Act/NYC LL144/Illinois AIVIA/EEOC playbook, the CCPA cross-context propagation playbook, the GDPR Article 22 + DPIA workflow, the DSA + EU AI Act Article 50 playbook, and the compliance evidence-package generation playbook). Completions credentials revoke on engagement-end.

Engage Completions

Start with the AI Readiness Assessment (Tier 1, 2-3 weeks, $10k): audit of operator current per-location SEM posture against the 4-skill bundle + 5-anchor compliance overlay + per-vendor ad-platform + bid-management + analytics + attribution + landing-page-QA + consent + AI-content state. Hand off to Tier 2 AI Swarm Setup Sprint ($25-50k, 4-8 weeks): build the 4-skill bundle on the local-SEM agent, wire ad-platform + bid-management + analytics + attribution + landing-page-QA + consent-management + AI-content + policy-as-code + WORM-storage, configure per-platform policy mirror + FTC ruleset + per-vertical ruleset + Fair Housing/ECOA/Meta SCA/Google HEC + Colorado AI Act + NYC LL144 + Illinois AIVIA flow + CCPA cross-context propagation + GDPR Article 22 + DPIA + DSA Article 26/28 + EU AI Act Article 50 marking, run 30-day shadow + canary before flipping to enforce-mode. Continue under Tier 3 Fractional CMO with AI Swarm ($15-25k/mo, 6-month minimum, 1-2 days/wk embedded).