Done-for-you offer · Fractional CMO with AI Swarm · gbp-management 4-skill bundle · gbp-management agent
Per-location Google Business Profile posting at scale for multi-location retail, multi-unit franchise, and multi-location service brand operators — Draft + Localize + Gate + Publish 4-skill bundle on the gbp-management agent, under a 5-anchor compliance overlay anchored on Google Business Profile Guidelines + 2024 enforcement, FTC + Lanham + Fake Review Rule, per-vertical advertising rules, ADA Title III, and per-platform editorial
You manage 50-1,500 Google Business Profile listings and want to post 4-12 times per location per month while staying inside Google Business Profile Guidelines (which Google enforced aggressively through 2024 with large-scale fake-review removal, AI-generated photo restrictions, stricter service-area-business verification, and stricter address verification), staying inside the FTC Fake Review Rule 16 CFR Part 465 (effective October 2024) and FTC Endorsement Guides 2024, respecting per-vertical advertising rules (HIPAA when healthcare, FDA Office of Prescription Drug Promotion when pharma, DEA when controlled-substance prescribers, per-state professional licensing-board rules for legal practices under ABA Model Rule 7.1 and state attorney advertising rules + medical, dental, optometry, chiropractic, physical therapy, insurance, real- estate practices each with state-specific restrictions, DISCUS Code and per-state liquor-board for alcohol, FDA Center for Tobacco Products for tobacco, per--regulator and the platform-level near-prohibition of content), respecting ADA Title III digital accessibility under Robles v Domino’s 9th Cir 2019 + DOJ 2022 web access guidance + WCAG 2.2 AA + California Unruh Civil Rights Act + New York Human Rights Law, and respecting per-platform editorial policies across GBP + Apple Business Connect + Bing Places + Yelp + Facebook Pages + Foursquare + COPPA + California Age- Appropriate Design Code Act (effective July 2024) + Connecticut SB 3 + DSA Article 16/28 when audience includes minors or EU users. The GBP-management, local-SEO, listings-management, scheduler, AI-content, image-generation, accessibility- validation, and review-management vendors below ship strong primitives. The orchestration above them — operator-counsel- approved GBP Guidelines policy mirror, per-vertical advertising rule enforcement, ADA Title III + WCAG 2.2 AA enforcement on every post and image, per-platform editorial enforcement, suspension-and-appeals workflow, audit trail — is operator- side architecture. The compliance gate is anchored on five real anchors: Google Business Profile Guidelines + Maps content policy + 2024 enforcement environment + suspension/ appeals workflow; FTC Section 5 + Lanham + state UDAP + FTC Fake Review Rule 16 CFR Part 465 + FTC Endorsement Guides 2024; per-vertical advertising rules (HIPAA + FDA OPDP + DEA + per-state professional licensing-board + DISCUS + per--regulator + FDA CTP); ADA Title III digital accessibility (Robles v Domino + DOJ 2022 + WCAG 2.2 AA + state Unruh + state similar); per-platform editorial (GBP + Apple Business Connect + Bing Places + Yelp + Facebook + Foursquare) + COPPA + California AADC + DSA Article 16/28. You keep the Google credentials, the listings-management relationships, the local-SEO platforms, the GBP Guidelines policy mirror, the per-vertical advertising ruleset, the ADA Title III + WCAG policy, the per-platform editorial library, the suspension-and-appeals records, the WORM audit trail, and the policy-as-code policies. You keep the ability to in-house at any time.
Published September 24, 2026
The real ecosystem this sits above
Listings management
Yext, Birdeye, Vendasta, Moz Local, Synup, Uberall, Brandify, Rio SEO, RallyMind, Reputation, SOCi, Chatmeter, Surefire Local. Each ships strong listings + reviews + pages primitives. Cross-vendor GBP Guidelines mirror + per-listing exception register above them is operator- side architecture.
Local SEO + rank tracking
BrightLocal, Whitespark, Local Falcon, Local Viking, GMB Crush, Pleper. Each ships strong local-pack rank tracking + audit primitives. Cross-tool per-listing posting-cadence tracking above them is operator-side architecture.
Schedulers + AI content + image generation
Schedulers: Hootsuite, Sprout Social, Sprinklr, Sendible, SocialPilot, Agorapulse, Buffer, Later, Loomly, Khoros. AI content: Anthropic Claude, OpenAI GPT, Microsoft Copilot, Google Gemini, Jasper, Copy.ai, Writesonic. Image generation: Midjourney, DALL-E, Stable Diffusion, Adobe Firefly, Canva Magic Design, Ideogram. Each ships strong primitives. Operator-counsel-approved brand voice + per- vertical advertising rule enforcement + GBP image-policy enforcement above them is operator-side architecture.
Accessibility validation + review management
Accessibility: WAVE, axe, Pa11y, Stark, Microsoft Accessibility Insights. Review management: Birdeye, Podium, ReviewTrackers, Reputation, Trustpilot, Yotpo. Each ships strong primitives. ADA Title III + WCAG 2.2 AA enforcement on every post + FTC Fake Review Rule moderation above them is operator-side architecture.
Policy-as-code + WORM + legal research
Policy-as-code: OPA Rego, AWS Cedar, Casbin, Cerbos, Oso. WORM: AWS S3 Object Lock, GCS retention, Azure Blob immutable, Snowflake Time Travel. Legal research: Westlaw, Lexis+, Bloomberg Law, Practical Law, Compliance.ai. Each ships strong primitives. The 5-anchor compliance gate that maps GBP Guidelines + FTC + per-vertical advertising + ADA Title III + per-platform editorial onto an operator- counsel-approved policy bundle is operator-side architecture.
Frequently asked
What does per-location GBP posting at scale actually deliver, and how does the 4-skill bundle decompose?
An orchestration layer that sits above the operator GBP-management + local-SEO + listings-management + scheduler + AI-content + image-generation + accessibility-validation + review-management + policy-as-code + WORM-storage stack and ships per-location Google Business Profile posts across 50-1,500 listings with operator-counsel-approved compliance, brand voice, local signal, and accessibility built in. The skill is a four-skill bundle on the gbp-management agent. Skill 1 — Draft: generate the per-location post copy and creative through the operator-chosen AI content tool (Anthropic Claude, OpenAI GPT, Microsoft Copilot, Google Gemini, Jasper, Copy.ai, Writesonic — operator chooses) under operator-approved deployment posture, and generate or select per-post imagery through the operator-chosen image source (Midjourney, DALL-E, Stable Diffusion, Adobe Firefly, Canva Magic Design, Ideogram — operator chooses, plus the operator-owned brand image library). Draft produces a candidate post aligned to one of the operator-counsel-approved GBP post types (the current Google-supported set is What’s New, Event, Offer; product surfacing now flows mostly through the Local Inventory App and product feeds; the COVID-19 post type was deprecated in 2022 and the orchestration will not draft against deprecated types). Skill 2 — Localize: apply per-location signal (operator-defined location-specific opening hours, service area polygon, current promotions, current inventory or service-availability constraints, current staff and amenity attributes, local-event calendar where the operator has decided to use it, language and translation per the operator-approved per-market translation memory) to the candidate post so each location reads as that location rather than as a generic banner template. Localize never invents claims; it composes operator-validated facts. Skill 3 — Gate: refuse to publish any post that fails the operator-counsel-approved compliance gate. The Gate evaluates GBP Guidelines compliance (the Google Business Profile content policy + Local Posts policy + Maps user-contributed content policy + post-type-specific rules), FTC Section 5 + Lanham + FTC Endorsement Guides 2024 + FTC Fake Review Rule (16 CFR Part 465 effective October 2024), per-vertical advertising rules (HIPAA when healthcare, FDA OPDP when DTC pharma, DEA when controlled-substance prescriber, per-state professional licensing-board rules for legal/medical/dental/optometry/chiropractic/PT/insurance/real-estate per-state restrictions, DISCUS Code and per-state liquor for alcohol, FDA Center for Tobacco Products for tobacco, per--regulator and the platform-level near-prohibition of content), ADA Title III digital accessibility (alt-text on images, color-contrast on creative, WCAG 2.2 AA compliance per DOJ 2022 web access guidance and the post-Robles v Domino’s 9th Cir 2019 line of cases), per-platform editorial policy for the destination set the operator chose, COPPA + California AADC (effective July 2024) + Connecticut SB 3 when audiences include minors, DSA Article 16 notice-and-action and Article 28 child protection when EU users are reachable through the post. Skill 4 — Publish: emit the approved post to Google Business Profile via the Business Profile Performance API and the Business Profile API (post-deprecation of the legacy GMB API in 2022 the public API surface is reduced — many bulk actions now flow through the Business Profile Manager + per-listing API endpoints + listings-management partners like Yext, Birdeye, Vendasta, Moz Local, Synup, Uberall, Brandify, Rio SEO, RallyMind, Reputation, SOCi, Chatmeter, Surefire Local). Publish honors per-location throttling against the current GBP rate limits and per-listing quotas. Each Publish event writes per-post per-listing routing decision + Gate rule-citation evidence trail + counsel-policy-version to the WORM audit trail (AWS S3 Object Lock, GCS retention, Azure Blob immutable, Snowflake Time Travel — operator chooses). The listings, local SEO, scheduler, AI content, image generation, accessibility, review-management vendors below ship strong primitives. The orchestration above them — operator-counsel-approved GBP Guidelines policy maintenance, FTC + per-vertical advertising rule maintenance, ADA Title III + WCAG enforcement, per-platform editorial maintenance, suspension-and-appeals workflow, audit trail — is operator-side architecture.
Where does single-vendor listings management stop compounding for multi-location operators posting at scale?
Single-vendor listings management is solved. Yext ships a strong listings + reviews + pages platform. Birdeye ships strong listings + reputation. BrightLocal and Whitespark ship strong local SEO tooling. SOCi and Chatmeter ship strong multi-location social. Local Falcon ships strong local-pack rank tracking. The compound case the gbp-management agent has to handle is the one where a 50-1,500 location operator posts 4-12 times per location per month, where (a) the same post needs to look like the location it represents while respecting banner-level brand voice, (b) Google Business Profile Guidelines + Maps content policy have been under active enforcement evolution since 2024 (Google removed millions of fake reviews + AI-generated reviews + AI-generated photos in 2024 + tightened service-area-business verification + tightened address verification for non-storefront listings), (c) per-vertical advertising rules govern what may be promoted (a dental practice cannot guarantee treatment outcomes under most state dental-board rules, a law firm cannot claim specialization without state-bar certification per ABA Model Rule 7.4 and state attorney advertising rules, a medical practice faces state medical-board restrictions, an alcohol retailer faces DISCUS Code and state liquor-board rules, a retailer faces near-total prohibition on most platforms with state-by-state CBD carve-outs), (d) ADA Title III digital accessibility applies — Robles v Domino’s (9th Cir 2019) established website accessibility is required when the digital experience has nexus with a physical place of public accommodation, DOJ 2022 web access guidance reaffirmed; California Unruh Civil Rights Act and New York Human Rights Law have driven a wave of state-court enforcement, and the orchestration must enforce alt-text and color-contrast and WCAG 2.2 AA on every post image, (e) per-platform editorial policy varies across GBP + Apple Business Connect + Bing Places + Yelp + Facebook Pages + Foursquare each with its own content rules, (f) COPPA + California Age-Appropriate Design Code Act (effective July 2024) + Connecticut SB 3 + DSA Article 16 + DSA Article 28 add another dimension when audience contains minors or the post is reachable to EU users, (g) FTC Endorsement Guides 2024 + FTC Fake Review Rule 16 CFR Part 465 effective October 2024 reach GBP reviews and Q&A (the Fake Review Rule prohibits AI-generated reviews, incentivized reviews without disclosure, insider reviews, review suppression — and creates an FTC action path for violations). Without an orchestration layer above the listings + local SEO + scheduler + AI content + image generation + accessibility + review management vendors, GBP Guidelines policy updates (typically quarterly) drift out of sync across vendor consoles, per-vertical advertising rule enforcement varies post-to-post, ADA Title III alt-text enforcement breaks (an AI image without operator-approved alt-text gets posted to a regulated-vertical listing), the Fake Review Rule exposure compounds across listings, the suspension-and-appeals queue fragments, and the audit trail of "what post, against which GBP Guidelines version + which per-vertical advertising ruleset + which ADA enforcement state, published to which listing with what compliance attestation" splinters across consoles. The orchestration above the vendors is what holds the cross-vendor + cross-location + cross-vertical + cross-platform + cross-jurisdiction invariants.
How does Skill 3 Gate handle Google Business Profile Guidelines + 2024 enforcement updates + suspension exposure?
Gate operates against an operator-counsel-and-local-SEO-team-maintained GBP Guidelines policy that mirrors current Google Business Profile policies (the canonical Google Business Profile Guidelines + Google Maps user-contributed content policy + Local Posts policy + Q&A policy + Photos and Videos policy + Reviews policy + Spam and Fake Content policy). The 2024 enforcement environment introduced material changes. Google publicly stated that millions of reviews were removed in 2024 for policy violations including AI-generated and fake reviews. Google tightened service-area-business verification — non-storefront listings face more rigorous verification than they did pre-2024. Google tightened address verification including for businesses operating from residential addresses or shared workspaces. Google introduced AI-generated content restrictions on photos and videos — synthetically generated imagery that does not represent the actual business is policy-violating. Google’s appeals process for suspensions runs through the Business Profile Help Community and the formal reinstatement request flow; suspension reasons are not always specific, so operator-side records of every post + every photo + every attribute change with rule-citation evidence are what supports a defensible appeal. The Gate enforces: business-name compliance (no keyword-stuffing, no city-name appending unless legally registered, no slogans in name), category compliance (categories must reflect actual primary business; secondary categories must not include categories unrelated to the actual business), description compliance (no prohibited content, no offer details, no contact info that duplicates other fields, no URLs other than the official site), post-type-specific compliance per current Google policy, photo compliance (must be original or properly licensed; no AI-generated synthetic imagery passing as real; no stock photography presented as actual location), review and Q&A compliance per the FTC Fake Review Rule 16 CFR Part 465 (which is enforced by FTC; Google’s own policy aligns), service-area-business compliance (accurate service areas; address hidden for service-area businesses per Google policy when no public storefront). When Gate refuses a post, it routes to the operator review queue with rule-citation evidence and a counsel-policy-version tag. Approved overrides go through the operator-counsel-approved appeals path and update the per-location exception register without removing the audit-trail record of the original Gate decision. The Gate does not autonomously update GBP Guidelines interpretation; operator local-SEO team + operator counsel review Google policy updates and approve the rule changes.
How does the orchestration handle ADA Title III + WCAG 2.2 AA + Robles v Domino’s + DOJ 2022 guidance on every post image and per-listing accessibility attribute?
Every image and every post passes through an accessibility check before Publish. Robles v Domino’s (9th Cir 2019) held that ADA Title III applies to a website and mobile app when the digital experience has a nexus to a physical place of public accommodation; the Supreme Court denied cert. The 11th Circuit’s Gil v Winn-Dixie (2021) was vacated as moot, leaving circuit-level law inconsistent on websites unmoored from a physical location, but multi-location operators with physical locations clearly fall within the Robles line. DOJ’s 2022 guidance on web accessibility under Title III reaffirmed the agency’s position that web accessibility is required. State-level enforcement under California Unruh Civil Rights Act (which incorporates ADA Title III violations as Unruh violations triggering minimum statutory damages of $4,000 per offense in California) and New York Human Rights Law produces high-volume state-court litigation. The orchestration enforces: per-image alt-text generation by the AI content tool, then verified by the operator-approved alt-text-quality check (the AI may draft alt-text but operator policy decides whether to require human review for regulated verticals); WCAG 2.2 AA color-contrast on text overlaid on images via WAVE, axe, Pa11y, Stark, Microsoft Accessibility Insights or equivalent; readable post copy at the operator-counsel-approved reading-grade target; per-listing accessibility attributes on Google Business Profile populated correctly (wheelchair-accessible entrance, wheelchair-accessible parking, wheelchair-accessible restroom, gender-neutral restroom, and so on — Google added these accessibility attributes progressively and the operator-counsel-approved policy specifies which attributes to populate where, and whether to populate them at all if uncertain rather than risking misrepresentation under Section 12182(b)(2)(A)(iv) ADA or state UDAP); language and translation alignment with the operator-defined per-market translation memory. When an image fails an accessibility check, the orchestration refuses Publish and routes to the operator queue. Per-listing accessibility-attribute Publish writes attestation to WORM audit trail with rule-citation including the relevant DOJ guidance version and the operator-counsel-approved policy version. The orchestration does not autonomously interpret ADA case law; operator counsel decides policy and the orchestration enforces it.
What compliance does the orchestration enforce, and how does it map to GBP Guidelines + FTC/Lanham/Fake Review + per-vertical advertising + ADA Title III + per-platform editorial?
Five anchors. Anchor 1 — Google Business Profile Guidelines + Google Maps user-contributed content policy + 2024 enforcement environment. Canonical Google Business Profile Guidelines + Local Posts policy + Q&A policy + Reviews policy + Photos and Videos policy + Spam and Fake Content policy. 2024 enforcement updates include large-scale fake-review removal, AI-generated photo restrictions, stricter service-area-business verification, stricter address verification for non-storefront listings. Suspension and reinstatement workflow runs through Business Profile Help Community and the formal reinstatement request. Anchor 2 — FTC Section 5 + Lanham Act 15 USC 1125(a) + state UDAP + FTC Fake Review Rule 16 CFR Part 465 (effective October 2024, prohibiting fake reviews, AI-generated reviews, incentivized reviews without clear-and-conspicuous disclosure, insider reviews, review suppression, and providing FTC enforcement path including civil penalties) + FTC Endorsement Guides 2024 (updated October 2024 with AI-disclosure expectations and updated rules on review collection, display, and AI-generated content) + per-state-AG enforcement (NY AG, CA AG, DC AG history on misleading local business representations). Anchor 3 — Per-vertical advertising rules. Healthcare (HIPAA when posts touch PHI + state medical-board advertising rules + state dental-board advertising rules per state — for example California Business and Professions Code 651 and 17500 + similar state laws + AMA Code of Medical Ethics 9.6.1 + ADA Principles of Ethics + state similar). Legal (ABA Model Rule 7.1 + ABA Model Rule 7.4 + per-state attorney advertising rules). Pharma (FDA Office of Prescription Drug Promotion DTC rules). Controlled substances (DEA advertising restrictions for prescribers). Alcohol (TTB Federal Alcohol Administration Act + DISCUS Code of Responsible Practices + per-state liquor-board advertising rules + per-state shipping legality). Tobacco (FDA Center for Tobacco Products + per-state vape-flavor bans). (per--regulator + near-total platform prohibition on most platforms + CBD carve-outs with restrictions). Real estate (state real-estate-commission advertising rules). Insurance (state insurance-commissioner advertising rules). Children’s products (CPSIA + COPPA when online). Anchor 4 — ADA Title III digital accessibility. Robles v Domino’s Pizza LLC (9th Cir 2019) + DOJ 2022 web access guidance + WCAG 2.2 AA standards + California Unruh Civil Rights Act (Cal Civ Code 51 with ADA-violation-as-Unruh-violation minimum $4,000 per-violation damages) + New York Human Rights Law + state similar. Alt-text on images, color-contrast on text-on-image, readable copy, per-listing accessibility-attribute disclosures populated accurately. Anchor 5 — Per-platform editorial policy + COPPA + California AADC + DSA. GBP Local Posts policy + Q&A policy + Photos policy + Apple Business Connect content policy + Bing Places for Business content policy + Yelp Content Guidelines + Facebook Pages and Posts policy + Foursquare editorial. COPPA (15 USC 6501) when posts target under-13 audience + California Age-Appropriate Design Code Act (effective July 2024) + Connecticut SB 3 + DSA Article 16 notice-and-action + DSA Article 28 child protection + per-state children-online-privacy patchwork when EU or applicable audience reachable. Broader gate also enforced: per-state pricing-display rules where applicable + per-state professional licensing-board accuracy rules + per-state consumer-protection rules + GDPR for EU PII collected through linked landing pages via policy-as-code (OPA Rego + AWS Cedar + Casbin + Cerbos + Oso). WORM audit trail (AWS S3 Object Lock + GCS retention + Azure Blob immutable + Snowflake Time Travel) with per-statute retention (FTC 7yr + state-AG variable + ADA litigation variable + state licensing-board variable + COPPA 1yr after relationship ends + GDPR 6yr + IRS 7yr) per operator counsel policy.
What does the engagement look like across Tier 1 → Tier 2 → Tier 3, and what does the Tier 3 reporting cycle commit to?
Tier 1 AI Readiness Assessment (2-3 weeks, diagnostic): audits the operator current GBP posting posture against the 4-skill bundle + 5-anchor compliance overlay + per-vendor listings + scheduler + AI content + image generation + accessibility-validation state; deliverable is a gap-pack report identifying which listings post at sub-target cadence, which posts deploy without per-location signal, which posts fail Gate against current GBP Guidelines, which per-vertical advertising rules are unenforced, which listings have stale or inaccurate accessibility attributes, which images lack alt-text or fail WCAG 2.2 AA color-contrast, whether Q&A and review moderation aligns with FTC Fake Review Rule, which per-platform editorial regimes are misaligned, whether COPPA + California AADC + DSA Article 16/28 are wired when audience includes minors or EU users, and a recommended remediation sequence for Tier 2. Tier 2 AI Swarm Setup Sprint (4-8 weeks): builds the 4-skill bundle on the gbp-management agent, wires listings-management + local-SEO + scheduler + AI-content + image-generation + accessibility-validation + review-management vendors (operator-chosen subset), configures the operator-counsel-approved GBP Guidelines policy mirror + per-vertical advertising ruleset + ADA Title III + WCAG 2.2 AA enforcement + per-platform editorial policy library, wires the suspension-and-appeals workflow, wires policy-as-code + WORM-storage, runs 30-day shadow + canary period before flipping to enforce-mode. Tier 3 Fractional CMO with AI Swarm (6-month minimum, 1-2 days/wk embedded): continues operating with daily Draft + Localize + Gate + Publish + weekly per-listing posting-cadence trend review + monthly GBP Guidelines policy mirror update + monthly per-vertical advertising rule review + quarterly ADA + WCAG + state-accessibility-statute review with operator counsel + quarterly per-platform editorial policy review + quarterly compliance evidence packages. Tier 3 reporting is a 6-workstream pre-engagement-baseline reporting cycle (per-listing posting-cadence trend + per-listing Gate pass-rate trend + per-listing per-vertical advertising compliance coverage + per-listing accessibility-attribute completeness + per-image alt-text + WCAG color-contrast coverage + WORM audit-trail completeness) measured against the operator’s pre-engagement baseline. Each workstream surfaces trend direction and the gap to operator-defined targets. Reporting carries explicit caveats: GBP API + listings + scheduler + AI content + image generation + accessibility vendor SLA + Google Business Profile policy update cadence + Google Maps content policy updates + 2024 enforcement environment evolution + FTC Fake Review Rule + FTC Endorsement Guides amendments + state-AG enforcement signals + state attorney/medical/dental/optometry/PT/insurance/real-estate licensing-board advertising rule amendments + DISCUS Code updates + per--regulator + FDA OPDP + FDA CTP rule updates + ADA case-law evolution + DOJ web accessibility rulemaking + state Unruh + NY Human Rights Law case-law + COPPA + California AADC implementing guidance + DSA implementing guidance sit outside Completions control. Attorney-client privilege preservation across operator-counsel-approved GBP Guidelines policy mirror + per-vertical advertising ruleset + ADA Title III + WCAG policy + per-platform editorial library + suspension-and-appeals records is maintained per operator counsel policy.
Who owns the GBP credentials, the policy mirror, the per-vertical ruleset, the accessibility policy, the suspension-appeals records, and the audit trail?
Operator owns every artifact. The Google Business Profile credentials for each listing live on operator-controlled Google accounts. The listings-management subscription (Yext, Birdeye, Vendasta, Moz Local, Synup, Uberall, Brandify, Rio SEO, RallyMind, Reputation, SOCi, Chatmeter, Surefire Local — operator chooses) runs under operator billing on operator-controlled accounts. The local SEO subscriptions (BrightLocal, Whitespark, Local Falcon, Local Viking, GMB Crush, Pleper — operator chooses) run under operator billing. The scheduler subscriptions (Hootsuite, Sprout Social, Sprinklr, Sendible, SocialPilot, Agorapulse, Buffer, Later, Loomly, Khoros — operator chooses) run under operator billing. The AI content tool (Anthropic Claude, OpenAI GPT, Microsoft Copilot, Google Gemini, Jasper, Copy.ai, Writesonic — operator chooses, with operator-approved deployment posture) runs under operator account. The image generation tool (Midjourney, DALL-E, Stable Diffusion, Adobe Firefly, Canva Magic Design, Ideogram — operator chooses) runs under operator account. The accessibility validation tools (WAVE, axe, Pa11y, Stark, Microsoft Accessibility Insights) are operator-deployed. The review management subscription (Birdeye, Podium, ReviewTrackers, Reputation, Trustpilot, Yotpo — operator chooses) runs under operator billing. The operator-counsel-approved GBP Guidelines policy mirror + per-vertical advertising ruleset + ADA Title III + WCAG 2.2 AA policy + per-platform editorial policy library + FTC Fake Review Rule compliance library + suspension-and-appeals workflow + per-listing exception register all live in operator counsel + operator local-SEO-team repo. The Draft + Localize + Gate + Publish skill code lives in operator code repo. The operator-counsel-approved brand voice library, per-banner brand spec, per-market translation memory live in operator code repo. The WORM audit trail lives on operator-controlled cloud storage (AWS S3 Object Lock + GCS retention + Azure Blob immutable + Snowflake Time Travel) with per-statute retention enforcement. The policy-as-code policies (OPA Rego + AWS Cedar + Casbin + Cerbos + Oso) live in operator code repo, counsel-aligned. The GBP Guidelines compliance evidence + FTC + ADA + state licensing-board + DISCUS + -regulator + per-platform editorial compliance evidence records are operator-counsel-maintained. Completions owns the orchestration knowledge — how to design the per-listing posting cadence against operator capacity and Google rate limits, how to wire per-vertical advertising rule enforcement against the operator vertical mix, how to wire ADA Title III + WCAG enforcement on every post, how to coordinate the suspension-and-appeals workflow with operator counsel and Google Business Profile Help Community, how to integrate with sibling skills (review management, listings management, content moderation queue) — and that knowledge transfers under the Tier 3 transition path (30-60 days at engagement end with full hand-off of the GBP Guidelines policy mirror maintenance playbook, the per-vertical advertising ruleset maintenance playbook, the ADA Title III + WCAG enforcement playbook, the per-platform editorial policy maintenance playbook, the suspension-and-appeals workflow playbook, the per-listing exception register maintenance playbook, and the compliance evidence-package generation playbook). Completions credentials revoke on engagement-end.
Engage Completions
Start with the AI Readiness Assessment (Tier 1, 2-3 weeks): audit of operator current GBP posting posture against the 4-skill bundle + 5-anchor compliance overlay + per- vendor listings + scheduler + AI content + image generation + accessibility-validation + review-management state. Hand off to Tier 2 AI Swarm Setup Sprint (4-8 weeks): build the 4-skill bundle on the gbp-management agent, wire listings-management + local-SEO + scheduler + AI-content + image-generation + accessibility-validation + review- management + policy-as-code + WORM-storage, configure GBP Guidelines policy mirror + per-vertical advertising ruleset + ADA Title III + WCAG 2.2 AA + per-platform editorial library + suspension-and-appeals workflow, run 30-day shadow + canary before flipping to enforce-mode. Continue under Tier 3 Fractional CMO with AI Swarm (/ mo, 6-month minimum, 1-2 days/wk embedded).