What is per-location SERP history retention — and what is the GSC-16-month-vs-FTC-7-year retention-gap problem?

A multi-location retail operator with 80-300 stores depends on per-location SERP visibility for the local pack + organic blue links + AI Overviews + featured snippets + rich-result expansions. The operationally distinctive anchor: Google Search Console Performance API ships a 16-month rolling retention window. Google Search Console BigQuery export (effective February 2023) lifts the 16-month cap when streamed to BigQuery, but only data after the BigQuery export was enabled. Operators who enable BigQuery export today still have a 16-month gap from before. FTC substantiation requires 7-year retention. IRS requires 7-year. HIPAA requires 7-year when MedicalBusiness. SEC requires 6-year. State bar requires 7-year when LegalService. The four-skill bundle on the local-pack-rank-tracking agent — Snapshot, Diff, Store, Audit — sits above the per-API SERP-scrape substrate (Ahrefs + SEMrush + Moz + Sistrix + DataForSEO + SerpAPI + Bright Data SERP API + Oxylabs SERP API) and the Google Search Console Performance API / BigQuery export and writes a per-query WORM canonical record that retains beyond the 16-month native cap.

Why do Ahrefs + SEMrush + Moz + Sistrix + AccuRanker + STAT + Authority Labs break at multi-location SERP-history-retention scale?

Each SERP-scrape vendor ships a per-account flat position-primitive — the SEO logs in, sees current rank, sees a chart of the last 12-24 months. None retains beyond the vendor account life. None coordinates per-API license terms (Ahrefs API Terms + SEMrush API Terms + Moz Mozscape Terms + DataForSEO ToS + SerpAPI ToS + Bright Data SERP API ToS + Oxylabs SERP API ToS + per-vendor scrape volume limit). None enforces CFAA-scraping doctrine compliance (hiQ Labs v LinkedIn 9th Cir 2022 + Van Buren v United States 2021 + Meta Platforms v Bright Data ND Cal 2024) when scrape touches public-vs-private SERP-feature boundaries. None coordinates USPTO trademark monitoring when SERP scrape involves competitor brand surface. None enforces per-vertical regulatory anchors (HIPAA when MedicalBusiness + FINRA when FinancialService + state bar when LegalService + ABA Model Rule 7.1-7.5). None writes a per-query WORM canonical record with regulatory-defense retention. The four-skill bundle Snapshot + Diff + Store + Audit sits above the SERP-scrape surface — it does not replace it.

How does Snapshot + Diff work across per-location SERP surface?

Snapshot runs per-portfolio per-banner per-location per-query per-locale per-device-type (mobile + desktop + tablet) per-search-volume per-search-intent per-SERP-feature (10-blue-link + local-pack-3 + featured-snippet + people-also-ask + image-pack + video-pack + knowledge-panel + Top-Stories + Twitter-pack + carousel + sitelinks-search-box + rich-result + AI-Overview + sponsored-pack + shopping-pack) snapshots through the per-API SERP-scrape substrate (Ahrefs + SEMrush + Moz + Sistrix + STAT + AccuRanker + DataForSEO + SerpAPI + Bright Data SERP API + Oxylabs SERP API) and the Google Search Console Performance API (per-query + per-page + per-country + per-device + clicks + impressions + CTR + position). Snapshot cadence: per-query daily for top-100 + per-query weekly for top-500 + per-query monthly for top-2500 + on-Google-update on-demand + on-deploy on-demand. Diff runs per-portfolio per-query per-snapshot delta detection: position delta + SERP-feature delta + ranking-URL delta + competitor-presence delta + AI-Overview-presence delta + trademark-mention delta + per-Google-update attribution + per-Google-algorithm-event attribution (core update + product reviews update + spam update + helpful content update + March 2024 core + May 2024 site reputation abuse + future updates).

What does Store + Audit do?

Store runs per-portfolio per-query WORM retention beyond the GSC 16-month cap. Per-query snapshot stored in columnar format (Parquet + ORC + Avro + Arrow + Polars) on immutable WORM storage (AWS S3 Object Lock + Azure Blob immutable + Google Cloud Storage Bucket Lock + Wasabi WORM + Backblaze B2 + Cloudflare R2 + DigitalOcean Spaces + MinIO). Analytical warehouse layer (Snowflake + BigQuery + Databricks + Redshift + Synapse + ClickHouse + DuckDB + StarRocks + Doris + Druid + Pinot) with Iceberg + Hudi + Delta Lake table format for time-travel + schema evolution + compaction. Per-query retention stacks (longest applicable): 7-year FTC substantiation + 7-year IRS + 7-year HIPAA when MedicalBusiness + 6-year SEC + 3-year FINRA + 7-year state bar when LegalService + per-state SOL. Audit writes a per-query canonical record: per-API source attribution + per-snapshot scrape-policy compliance + per-snapshot CFAA-doctrine attestation + per-snapshot trademark-mention disclosure + per-snapshot per-vertical regulatory applicability + per-snapshot AI-ML-attribution-applicability (when AI-ML SERP scoring drives content prioritization) + audit trail of which retention requirement drives the persist decision. Storage immutable with hash chain for tamper-evidence. Replay: per-query historical SERP reconstruction at any point in time within retention window.

What does this skill connect to on the local-pack-rank-tracking agent and across the swarm?

On the local-pack-rank-tracking agent: local-pack-rank-tracking (parent commercial pillar) + per-market competitor rank tracking (sibling build-pillar at /how-to-build-per-market-competitor-rank-tracking-for-multi-location-franchises) + per-location SERP feature-presence monitoring + alerting (sibling build-pillar — pending) + per-location rich-result eligibility scoring + revenue-impact estimation (#563 sibling on schema-audit-remediation agent — eligibility-to-ranking signal cluster) + SERP-snippet-drift detection. Across the swarm: schema-audit-remediation agent (rich-result eligibility scoring + JSON-LD generation + continuous schema audit + per-vertical schema validation) + multi-location-seo-architecture + franchise-local-seo-orchestration + url-hierarchy-authoring + canonical-tag-management + orphan-page-detection + title-rewrite-tracking + ai-overview-tracking + seo-alerts. Build-pillar siblings: tiered pre-filter deterministic gates for AI content compliance + marketing AI autonomy profile configuration + master record + per-jurisdiction compliance multi-state franchise + per-location per-cohort two-sigma anomaly detection. Commercial-pillar parent: /local-pack-rank-tracking.

What does the 6-workstream pre-engagement-baseline reporting cycle look like for this skill?

Every two weeks during the Tier 3 Fractional CMO with AI Swarm engagement, six workstreams report against the pre-engagement baseline. Workstream 1: per-portfolio per-query SERP-scrape coverage — which queries are tracked per-location + cadence + per-API source + per-locale + per-device-type + per-SERP-feature. Workstream 2: Diff detection distribution — per-query position-delta + SERP-feature-delta + ranking-URL-delta + competitor-presence-delta + AI-Overview-presence-delta + per-Google-update-attribution. Workstream 3: Store retention coverage — per-query WORM-storage hash + columnar format + warehouse tier + retention-applicability snapshot + replay capability. Workstream 4: Audit canonical-record coverage — per-API license attestation + CFAA-doctrine attestation + per-vertical regulatory applicability + AI-ML attribution applicability. Workstream 5: Regulatory-defense audit coverage — per-API license terms + hiQ Labs/Van Buren/Meta v Bright Data CFAA + USPTO trademark monitoring + FTC substantiation 7-year + IRS 7-year + HIPAA 7-year + SEC 6-year + FINRA 3-year + state bar + ABA Model Rule + FDD Item 12 + EU AI Act Article 50. Workstream 6: FBC feedback-loop pattern-learning — per-Google-update impact retrospective + per-vendor scrape-volume reconciliation + per-query trademark-near-miss tracking + replay-validation success rate.

Build pillar · local-pack-rank-tracking agent

How to build per-location SERP history retention

Ahrefs + SEMrush + Moz + Sistrix + SimilarWeb + AccuRanker + STAT + Authority Labs + DataForSEO + SerpAPI + Bright Data SERP API + Oxylabs SERP API ship per-account flat SERP-position primitives. The Snapshot + Diff + Store + Audit skill bundle on the local- pack-rank-tracking agent sits above the per-API SERP-scrape substrate and the Google Search Console Performance API 16-month native retention window and writes a per-query WORM canonical record with named regulatory anchors covering hiQ Labs + Van Buren + Meta v Bright Data CFAA-scraping doctrine + USPTO trademark monitoring + FTC substantiation 7-year + IRS 7-year + HIPAA 7-year + SEC 6-year + FINRA 3-year + FDD Item 12.

Published October 3, 2026 · 3,200 words

The 4-skill bundle on the local-pack-rank-tracking agent

One agent. Four coordinated skills. The Snapshot + Diff + Store + Audit bundle runs above the per-API SERP-scrape substrate (Ahrefs + SEMrush + Moz + Sistrix + DataForSEO + SerpAPI + Bright Data + Oxylabs) and the Google Search Console Performance API / BigQuery export and writes one canonical per-query WORM record beyond the 16-month native retention cap.

Snapshot

Per-portfolio per-banner per-location per-query per-locale per-device-type per-search-intent per-SERP-feature snapshot across the SERP-scrape API surface + GSC Performance API. Cadence: per-query daily top-100 + weekly top-500 + monthly top-2500 + on-Google-update + on-deploy.

Diff

Per-snapshot delta detection: position delta + SERP-feature delta + ranking-URL delta + competitor-presence delta + AI-Overview-presence delta + trademark-mention delta + per- Google-update attribution + per-Google-algorithm-event attribution (core + product reviews + spam + helpful content + site reputation abuse + future).

Store

Per-query WORM retention beyond GSC 16-month cap. Columnar format (Parquet + ORC + Avro + Arrow + Polars) on AWS S3 Object Lock + Azure Blob immutable + Google Cloud Storage Bucket Lock + Wasabi WORM. Analytical warehouse (Snowflake + BigQuery + Databricks + Redshift + ClickHouse + DuckDB) with Iceberg + Hudi + Delta Lake table format.

Audit

Per-query canonical record: per-API source attribution + per- snapshot scrape-policy compliance + per-snapshot CFAA- doctrine attestation + per-snapshot trademark-mention disclosure + per-snapshot per-vertical regulatory applicability. Hash chain for tamper-evidence. Retention: 7-year FTC + 7-year IRS + 7-year HIPAA + 6-year SEC + 3-year FINRA + 7-year state bar + per-state SOL + GDPR Article 30 + EU AI Act Article 12 + SOC 2 CC7/CC8.

The real ecosystem this sits above

Snapshot + Diff + Store + Audit does not replace the SERP-scrape vendors or GSC. It sits above them, coordinates them, and writes one canonical per-query WORM record beyond the 16-month cap.

First-party + scrape surface

GSC Performance API + GSC BigQuery export
Bing Webmaster + Yandex Webmaster + Naver Search Advisor
Ahrefs + SEMrush + Moz + Sistrix + STAT + AccuRanker
DataForSEO + SerpAPI + Bright Data + Oxylabs + Apify
Whitespark + BrightLocal + Local Falcon + Local Viking

WORM-storage + warehouse

AWS S3 Object Lock + Azure Blob immutable + GCS
Wasabi WORM + Backblaze B2 + Cloudflare R2 + MinIO
Snowflake + BigQuery + Databricks + Redshift + ClickHouse
DuckDB + StarRocks + Doris + Druid + Pinot
Iceberg + Hudi + Delta Lake + Parquet + ORC + Arrow

Local-pack + map detection

Google Maps Platform Places API + Apple MapKit
Bing Maps + HERE + Mapbox + TomTom + Foursquare Places
Grid My Business + LocalSearchGrid + GeoRanker
Places Scout + Pleper + BiQ + Mangools SerpWatcher
Linkdex + per-locale SERP localization

Compliance overlay

Five anchors run before any per-query snapshot persists. The first anchor is operationally distinctive to SERP history retention: GSC Performance API 16-month native retention is shorter than every relevant regulatory retention requirement, and per-API SERP-scrape ToS intersects CFAA-scraping doctrine.

Anchor 1: GSC 16-month + per-API license + CFAA-scraping doctrine + USPTO trademark (operationally distinctive)

Google Search Console Performance API 16-month rolling retention. GSC BigQuery export (effective February 2023; lifts 16-month cap only forward from enable date). Per-API license terms (Ahrefs API Terms + SEMrush API Terms + Moz Mozscape Terms + Sistrix API Terms + DataForSEO ToS + SerpAPI ToS + Bright Data SERP API ToS + Oxylabs SERP API ToS + per- vendor scrape volume limit). Computer Fraud and Abuse Act 18 USC 1030 + hiQ Labs v LinkedIn 9th Cir 2022 + Van Buren v United States 2021 + Meta Platforms v Bright Data ND Cal 2024 CFAA-scraping doctrine (public-vs-private boundary + robots.txt + Google Search Essentials no-bot policy). USPTO trademark monitoring when SERP scrape involves competitor brand surface (Lanham Act 15 USC 1051 trademark dilution + 15 USC 1125(a) false-designation + FTC Endorsement Guides 16 CFR Part 255 when SERP-evidence used in competitive claim).

Anchor 2: Per-vertical regulatory retention (HIPAA + FINRA + state bar + medical board)

HIPAA 45 CFR 164.502 + 504 + 514 + 308 + 312 when MedicalBusiness SERP includes patient-relationship signal + 7-year HIPAA retention. FINRA Rule 2210 when FinancialService SERP + 3-year FINRA retention. SEC Regulation FD + 6-year SEC retention when public-company-IR SERP. ABA Model Rule 7.1-7.5 when LegalService SERP + 7-year state bar retention + 50-state bar advertising matrix. State medical board + state professional licensing. FDA OPDP when prescription drug SERP. DEA Schedule when controlled substance. Alcohol TABC + CalABC + cannabis state-board.

Anchor 3: FTC + franchise + Lanham

FTC Act Section 5 + Pfizer 1972 substantiation when SERP- history-driven claim used in marketing + 7-year FTC retention. FTC MARS Made-in-USA SERP-evidence. Robinson- Patman territorial-pricing-discrimination when per-location pricing variance surfaces in SERP history. FDD Item 12 territorial-protection per FTC Franchise Rule 16 CFR 436 + 15-state franchise registration + state UDTPA. Lanham Act false-advertising when competitor SERP-position used in comparative claim. SEC Reg S-K material disclosure when SERP-position drives investor-facing claim. FASB ASC 350 intangible-asset SERP-attribution.

Anchor 4: AI governance + privacy

EU AI Act Article 22 transparency for automated decisions + Article 26 deployer + Article 50 + Article 13 + 14 + 15 + Annex III high-risk when AI-ML SERP scoring drives content prioritization. Digital Services Act + DMA. GDPR Article 6 + 7 + 17 + 22 + Article 28 + 30. CCPA + CPRA + COPPA + 18-state privacy. LGPD + DPDP + PIPEDA + Quebec Law 25. NIST AI Risk Management Framework. ISO 42001.

Anchor 5: WORM + tax + record-keeping

7-year IRS retention. SOC 2 Type II CC7/CC8. ISO 27001. Storage: AWS S3 Object Lock + Azure Blob immutable + Google Cloud Storage Bucket Lock + Wasabi WORM + Backblaze B2 immutable + Cloudflare R2 + MinIO WORM. Hash chain for tamper-evidence. Per-vendor LLM zero-retention verified per call. Per-source DPA. Per-API rate-limit honoring. Policy- as-code via OPA Rego + AWS Cedar + Casbin + Cerbos + Oso + Styra DAS + Permit.io.

6-workstream reporting cycle

Every two weeks during a Tier 3 Fractional CMO engagement, six workstreams report against the pre-engagement baseline. No forecast accuracy claims. Process commitments only.

1. Per-portfolio per-query SERP-scrape coverage. Queries tracked per-location + cadence + per-API source + per- locale + per-device-type + per-SERP-feature.
2. Diff detection distribution. Per-query position + SERP-feature + ranking-URL + competitor- presence + AI-Overview-presence + per-Google-update attribution.
3. Store retention coverage. Per-query WORM-storage hash + columnar format + warehouse tier + retention-applicability snapshot + replay capability.
4. Audit canonical-record coverage. Per-API license attestation + CFAA-doctrine attestation + per- vertical regulatory applicability + AI-ML attribution applicability.
5. Regulatory-defense audit coverage. Per-API license + hiQ Labs/Van Buren/Meta v Bright Data CFAA + USPTO trademark + FTC 7-year + IRS 7-year + HIPAA 7-year + SEC 6-year + FINRA 3-year + state bar + FDD Item 12.
6. FBC feedback-loop pattern-learning. Per-Google-update impact + per-vendor scrape-volume reconciliation + per-query trademark-near-miss + replay- validation success rate.

FAQ

What is per-location SERP history retention — and what is the GSC-16-month-vs-FTC-7-year retention-gap problem?: A multi-location retail operator with 80-300 stores depends on per-location SERP visibility for the local pack + organic blue links + AI Overviews + featured snippets + rich-result expansions. The operationally distinctive anchor: Google Search Console Performance API ships a 16-month rolling retention window. Google Search Console BigQuery export (effective February 2023) lifts the 16-month cap when streamed to BigQuery, but only data after the BigQuery export was enabled. Operators who enable BigQuery export today still have a 16-month gap from before. FTC substantiation requires 7-year retention. IRS requires 7-year. HIPAA requires 7-year when MedicalBusiness. SEC requires 6-year. State bar requires 7-year when LegalService. The four-skill bundle on the local-pack-rank-tracking agent — Snapshot, Diff, Store, Audit — sits above the per-API SERP-scrape substrate (Ahrefs + SEMrush + Moz + Sistrix + DataForSEO + SerpAPI + Bright Data SERP API + Oxylabs SERP API) and the Google Search Console Performance API / BigQuery export and writes a per-query WORM canonical record that retains beyond the 16-month native cap.
Why do Ahrefs + SEMrush + Moz + Sistrix + AccuRanker + STAT + Authority Labs break at multi-location SERP-history-retention scale?: Each SERP-scrape vendor ships a per-account flat position-primitive — the SEO logs in, sees current rank, sees a chart of the last 12-24 months. None retains beyond the vendor account life. None coordinates per-API license terms (Ahrefs API Terms + SEMrush API Terms + Moz Mozscape Terms + DataForSEO ToS + SerpAPI ToS + Bright Data SERP API ToS + Oxylabs SERP API ToS + per-vendor scrape volume limit). None enforces CFAA-scraping doctrine compliance (hiQ Labs v LinkedIn 9th Cir 2022 + Van Buren v United States 2021 + Meta Platforms v Bright Data ND Cal 2024) when scrape touches public-vs-private SERP-feature boundaries. None coordinates USPTO trademark monitoring when SERP scrape involves competitor brand surface. None enforces per-vertical regulatory anchors (HIPAA when MedicalBusiness + FINRA when FinancialService + state bar when LegalService + ABA Model Rule 7.1-7.5). None writes a per-query WORM canonical record with regulatory-defense retention. The four-skill bundle Snapshot + Diff + Store + Audit sits above the SERP-scrape surface — it does not replace it.
How does Snapshot + Diff work across per-location SERP surface?: Snapshot runs per-portfolio per-banner per-location per-query per-locale per-device-type (mobile + desktop + tablet) per-search-volume per-search-intent per-SERP-feature (10-blue-link + local-pack-3 + featured-snippet + people-also-ask + image-pack + video-pack + knowledge-panel + Top-Stories + Twitter-pack + carousel + sitelinks-search-box + rich-result + AI-Overview + sponsored-pack + shopping-pack) snapshots through the per-API SERP-scrape substrate (Ahrefs + SEMrush + Moz + Sistrix + STAT + AccuRanker + DataForSEO + SerpAPI + Bright Data SERP API + Oxylabs SERP API) and the Google Search Console Performance API (per-query + per-page + per-country + per-device + clicks + impressions + CTR + position). Snapshot cadence: per-query daily for top-100 + per-query weekly for top-500 + per-query monthly for top-2500 + on-Google-update on-demand + on-deploy on-demand. Diff runs per-portfolio per-query per-snapshot delta detection: position delta + SERP-feature delta + ranking-URL delta + competitor-presence delta + AI-Overview-presence delta + trademark-mention delta + per-Google-update attribution + per-Google-algorithm-event attribution (core update + product reviews update + spam update + helpful content update + March 2024 core + May 2024 site reputation abuse + future updates).
What does Store + Audit do?: Store runs per-portfolio per-query WORM retention beyond the GSC 16-month cap. Per-query snapshot stored in columnar format (Parquet + ORC + Avro + Arrow + Polars) on immutable WORM storage (AWS S3 Object Lock + Azure Blob immutable + Google Cloud Storage Bucket Lock + Wasabi WORM + Backblaze B2 + Cloudflare R2 + DigitalOcean Spaces + MinIO). Analytical warehouse layer (Snowflake + BigQuery + Databricks + Redshift + Synapse + ClickHouse + DuckDB + StarRocks + Doris + Druid + Pinot) with Iceberg + Hudi + Delta Lake table format for time-travel + schema evolution + compaction. Per-query retention stacks (longest applicable): 7-year FTC substantiation + 7-year IRS + 7-year HIPAA when MedicalBusiness + 6-year SEC + 3-year FINRA + 7-year state bar when LegalService + per-state SOL. Audit writes a per-query canonical record: per-API source attribution + per-snapshot scrape-policy compliance + per-snapshot CFAA-doctrine attestation + per-snapshot trademark-mention disclosure + per-snapshot per-vertical regulatory applicability + per-snapshot AI-ML-attribution-applicability (when AI-ML SERP scoring drives content prioritization) + audit trail of which retention requirement drives the persist decision. Storage immutable with hash chain for tamper-evidence. Replay: per-query historical SERP reconstruction at any point in time within retention window.
What does this skill connect to on the local-pack-rank-tracking agent and across the swarm?: On the local-pack-rank-tracking agent: local-pack-rank-tracking (parent commercial pillar) + per-market competitor rank tracking (sibling build-pillar at /how-to-build-per-market-competitor-rank-tracking-for-multi-location-franchises) + per-location SERP feature-presence monitoring + alerting (sibling build-pillar — pending) + per-location rich-result eligibility scoring + revenue-impact estimation (#563 sibling on schema-audit-remediation agent — eligibility-to-ranking signal cluster) + SERP-snippet-drift detection. Across the swarm: schema-audit-remediation agent (rich-result eligibility scoring + JSON-LD generation + continuous schema audit + per-vertical schema validation) + multi-location-seo-architecture + franchise-local-seo-orchestration + url-hierarchy-authoring + canonical-tag-management + orphan-page-detection + title-rewrite-tracking + ai-overview-tracking + seo-alerts. Build-pillar siblings: tiered pre-filter deterministic gates for AI content compliance + marketing AI autonomy profile configuration + master record + per-jurisdiction compliance multi-state franchise + per-location per-cohort two-sigma anomaly detection. Commercial-pillar parent: /local-pack-rank-tracking.
What does the 6-workstream pre-engagement-baseline reporting cycle look like for this skill?: Every two weeks during the Tier 3 Fractional CMO with AI Swarm engagement, six workstreams report against the pre-engagement baseline. Workstream 1: per-portfolio per-query SERP-scrape coverage — which queries are tracked per-location + cadence + per-API source + per-locale + per-device-type + per-SERP-feature. Workstream 2: Diff detection distribution — per-query position-delta + SERP-feature-delta + ranking-URL-delta + competitor-presence-delta + AI-Overview-presence-delta + per-Google-update-attribution. Workstream 3: Store retention coverage — per-query WORM-storage hash + columnar format + warehouse tier + retention-applicability snapshot + replay capability. Workstream 4: Audit canonical-record coverage — per-API license attestation + CFAA-doctrine attestation + per-vertical regulatory applicability + AI-ML attribution applicability. Workstream 5: Regulatory-defense audit coverage — per-API license terms + hiQ Labs/Van Buren/Meta v Bright Data CFAA + USPTO trademark monitoring + FTC substantiation 7-year + IRS 7-year + HIPAA 7-year + SEC 6-year + FINRA 3-year + state bar + ABA Model Rule + FDD Item 12 + EU AI Act Article 50. Workstream 6: FBC feedback-loop pattern-learning — per-Google-update impact retrospective + per-vendor scrape-volume reconciliation + per-query trademark-near-miss tracking + replay-validation success rate.

Engage Completions

Two ways to engage. The Tier 1 AI Readiness Assessment maps the SERP-scrape substrate + GSC-retention surface + per-vertical compliance overlay against the Snapshot + Diff + Store + Audit bundle. The Tier 3 Fractional CMO with AI Swarm embeds 1-2 days per week for 6+ months and runs the bundle end-to-end against the local-pack-rank-tracking agent across the swarm.

Tier 1 AI Readiness Assessment — $10k, 2-3 weeks Tier 3 Fractional CMO with AI Swarm — $15-25k/mo Not sure which tier? Take the 3-question quiz