In house vs agency reputation management: who does what
In house vs agency reputation management: a task-by-task test, a decision table by situation, a handover checklist and the lawful limits for outside firms.
In house vs agency reputation management is not one choice but a split of tasks. Keep in house everything that needs your accounts, your facts or your voice: owned pages, business listings, review replies and internal records. Bring in an outside specialist for what needs leverage you do not have: legal removal routes, a large-scale audit, or crisis support with experience behind it.
Most guides ask which side is cheaper, which frames it wrongly: the two sides rarely compete for the same task. A review reply written by a stranger who has never seen the order is worse than yours. A court-order request written by someone who has never filed one is worse than a specialist's.
This guide gives you a test you can apply to any task, a decision table for four common situations, a worked scenario with a timeline, a handover checklist, and the limits on what an outside firm may lawfully do for you. We are a reputation firm, so weigh that, and note that several rows below send you to a lawyer or keep the work with you. Rules are described as the pages said when we read them for this guide. This is information, not legal advice.
- Sort every task by three questions: does it need your account access, your internal facts, or outside leverage such as legal skill, platform contacts or surge capacity?
- Owner access and context stay with you: owned pages, listings, review replies, corrections of fact. Legal routes, big audits and crisis support are where outsiders earn their fee.
- Whatever you outsource, you keep ownership of every account, a written scope and the logs. An outside firm may not buy links, post fake reviews or suppress reviews by threat.
Who should handle reputation management: a three-question test
Ask three questions of each task, and the answers decide the owner of that task. The test is quick and it removes most of the argument about in house versus agency.
The first question is access. Does the task need a login, a verified identity or a right that only the owner of the asset holds? Replying to a review on your business listing, editing your own site and updating a profile you created all do. The second is context. Does it need facts that are not public: what happened with that customer, what the contract said, what legal has already decided, what you are willing to say? The third is leverage. Does it need skills or relationships you do not have in the team: drafting a legal request that survives review, reading how a platform's enforcement tends to behave, or putting five people on a problem for ten days?
Related readReputation management report: what to expectA task that scores yes on access or context and no on leverage is in house. A task that scores yes on leverage and no on the other two is a good outside task. A task that scores yes on two or more is shared, and the rest of this guide is about running a shared task without losing control of it.
Tasks that belong in house: owner access and context
Four groups of tasks belong with you because nobody else can do them as well, or at all. The common thread is that they depend on being the owner or on knowing what is true.
Owned pages and profiles
Your own site, your profiles and the accurate pages that should lead your name results are assets you control. Writing them needs facts only you hold, and publishing them needs your logins. An outsider can draft, but the facts, the approval and the account stay yours. This is also the lowest-risk work in the field, because it is lawful, it is accurate, and nobody can take it away from you.
Business listings and review replies
A business listing is tied to an owner account. Google's Business Profile help describes the roles: a profile can have several owners but one primary owner, owners can add or remove other users, and managers have mostly the same access as owners except that they cannot add or remove users or remove the profile. That structure is the reason replies and listing edits fit in house: the right to act sits with whoever you put in those roles. Replies are also where context matters most. A good reply refers to what really happened, takes a view on whether it was a mistake, and says what you will do. A vendor working from a template cannot know any of that.
Related readReputation Management RFP and Vendor ScorecardInternal facts and corrections of fact
When a statement about you is wrong, the fix starts with evidence only you have: the contract, the date, the invoice, the correspondence. A request to a publisher to correct a factual error usually lands better when it comes from the subject, with documents attached, in a calm tone. A firm can polish the request, but sending it from your side is often more credible.
Tasks where outside specialists add value
Three groups of tasks are worth buying, because they need leverage that most teams do not have and cannot build for one problem. In each case the specialist adds method and capacity. None of them adds a power to override a publisher or a platform.
Legal removal routes
Removing content from a site you do not control is a legal or policy exercise: a defamation notice, a privacy or data protection request, a copyright notice, a court order. Google's Legal Help Center walks a requester through questions that depend on the product and the reason. It says legal reports cover country-specific laws while policy reports cover Google's own policies, that a policy report does not substitute for a legal one, and that a separate report is needed for each Google product where the content appears. For content that still shows in search after the site owner removed it, the page points to a help page about contacting the website owner. A specialist, usually a lawyer, adds the judgment on which route fits, what evidence is needed, and when a route will fail. For most legal routes the specialist should be a qualified lawyer in the right country, not a marketing firm.
Related readHow long does reputation management take?Large-scale audits
An audit of one name on one search engine is a task for you. An audit of a company, its founders and executives across search engines, AI assistants, review sites, data brokers and old accounts is a different volume of work, and fresh eyes see what you stopped noticing years ago.
Crisis support
A crisis is a surge in volume and speed: monitoring, holding statements, briefings, requests and a log, all at once, for days. A small team cannot do that and its normal job too. An outside desk adds capacity and experience, but what you say, and whether you say anything, stays with you and your counsel.
Decision table: in house, agency or shared, by situation
The table below applies the test to four situations. Read the last column as the default owner of the whole file, and the middle columns as the split of tasks inside it.
| Situation | Keep in house | Bring in outside help for | Default lead |
|---|---|---|---|
| One negative article | Fact check, correction request to the publisher, owned pages that answer it | Legal letter or deindexing request if the article is unlawful; a plan for accurate pages that outrank it | You, with a lawyer on call |
| Review attack | Evidence of who the reviewers are, replies, reports through your owner account | Volume, pattern analysis, platform escalation, legal advice on extortion | Shared, you lead |
| Executive footprint | Approval of facts, personal accounts, privacy decisions, what to publish | Scale audit, broker opt-outs, ongoing monitoring across surfaces | Shared, agency leads the audit |
| Crisis | The decisions, the statement, the facts, the legal position | Surge capacity, monitoring, drafting, platform and publisher requests, a log | Shared, you decide and they run |
A single negative article is the case where most people over-hire. If it is accurate and lawful, a firm has no lawful route to force its removal, and the work is accurate pages of your own over time. If it contains a factual error, your correction request carries more weight than a vendor's. If it is unlawful, a lawyer is the right outside party.
A review attack runs the other way. The evidence, whether these are real customers, is in your records. The volume, though, can overwhelm a small team, and a pattern across dozens of accounts is easier for a specialist to document. The FTC's staff Q&A on its consumer reviews rule says review suppression through knowingly false accusations, intimidation or unfounded legal threats is prohibited, so a firm hired to stop the attackers needs a lawful method.
Related readReputation management brief: a template for agenciesAn executive footprint is where an agency adds the most: the work is wide and tedious, with dozens of brokers, old profiles and mentions. But what is true, what stays public and what is private are the executive's decisions.
A crisis needs both, and the split is easiest to run if it is agreed beforehand: the people with the facts and authority decide, and the people with capacity execute.
A worked scenario with a timeline
The scenario is invented and uses generic parties. A mid-sized services company, six employees on the marketing and operations side, finds that a regional news site has published an article with one factual error about the company's licence status, and within a week a cluster of one-star reviews appears on its listing that quote the article. Assumptions: the licence error is provable with a document, the reviews come from a mix of real and unverifiable accounts, and the company has a lawyer it uses for contracts.
| When | Who | What happens | Why that owner |
|---|---|---|---|
| Day 1 | In house | Operations pulls the licence document and the dates; marketing logs the article and every review with screenshots | Only the company has the documents and the customer records |
| Day 2 | In house | The owner sends a short correction request to the publisher with the document attached; replies to real customers go out from the owner account | The subject's request is more credible; replies need real context |
| Days 3 to 5 | Outside | A specialist reviews the review cluster for patterns and prepares platform reports; the lawyer reviews the article for a possible notice | Pattern analysis and legal judgment are leverage tasks |
| Week 2 | Shared | If the publisher corrects, the company updates its own pages; if not, the lawyer decides on a notice and the firm plans accurate pages that answer the claim | The decisions are the company's; the work can be split |
| Weeks 3 to 8 | In house | Monitoring continues; the outside scope ends on a written date | The steady state is cheap to run inside |
Notice what the outside party did not do: own the listing, post a review, or contact the publisher without a written scope. Each outside step had a stop date.
The handover checklist: how to bring outside help in safely
Hand over work, not control. This is the minimum to have in place before an outside firm touches anything.
- Keep ownership of every accountThe primary owner of each listing, profile, domain and analytics property stays a person in your organization. The firm is added as a manager or editor under a role you can remove.
- Grant named access, not shared passwordsEach person at the firm gets an individual login or role. No shared credentials, so you can see who did what and remove one person without disruption.
- Keep an access and change logA running record of what was changed, by whom and when, on every asset. Ask for it weekly. If the firm cannot produce one, the work cannot be checked.
- Write the scope in nouns and datesName the pages, the requests to file, the reports and the end date. Name what is excluded: any tactic that breaks platform rules, any contact with a journalist or complainant that you have not approved.
- Promise inputs, not outcomesThe contract may commit to what will be filed and reported. It should not commit to a result that depends on a publisher, a platform or a court.
- Keep the work productDrafts, evidence files, request copies and reports belong to you and come back at the end of the engagement, in a usable format.
- Plan the exit on day oneA written list of what is handed back, who revokes which role, and how long the firm keeps your data. Test it by removing the firm's access at the end.
The first item is the one people skip. Google's Business Profile page says a primary owner cannot remove themselves until primary ownership has been transferred, and that only owners can remove other owners and managers. Only owners can add or remove users, so a vendor holding an owner role on your listing, and above all the primary owner role, holds the keys. Check the owner list of every asset before work starts.
Related readHow to document online defamation evidenceWhat an agency may and may not lawfully do
An agency may do anything you may do, and it may not do what you may not do. Hiring a firm does not move the legal risk off you, and the rules that bind the firm are the same rules that bind your own team.
Three sources set the limits: the search engine's rules, the review platforms' rules, and consumer protection law. On search, Google's spam policies define link spam as creating links to or from a site primarily for the purpose of manipulating search rankings, and say that paid or exchanged links used for ranking fall under it unless marked with a rel value of nofollow or sponsored. They define scaled content abuse as many pages generated primarily to manipulate rankings, including with generative AI, and expired domain abuse as an expired domain bought and repurposed primarily to manipulate rankings. Sites that break these policies may rank lower or not appear at all, and repeated attempts to get around the policies can lead to a loss of eligibility for features. A firm that offers hundreds of pages on bought domains or a network of paid links to move a result is selling that risk to you.
On reviews, Google's Business Profile policy page says fake engagement is not allowed and will be removed, that incentivized or biased reviews are rating manipulation, and that merchants may not discourage negative reviews or selectively solicit positive ones. Enforcement ranges from suspending account privileges to account termination.
On law, the FTC's staff Q&A on its Consumer Reviews and Testimonials Rule says the rule took effect on October 21, 2024, that it is not definitive and gives no safe harbor, and that ad agencies, PR firms, review brokers and reputation management companies can be liable for writing or selling fake reviews, for improper incentives, for review suppression and for misusing fake social media indicators. It also says paying customers to remove or change truthful negative reviews may violate the FTC Act. The page says courts may impose civil penalties for knowing violations and does not give an amount. Other countries have their own rules, so ask your counsel.
Related readOnline reputation checklist for individuals| Activity | Lawful and within rules | Outside the rules | Who carries the risk |
|---|---|---|---|
| Reviews | Replying, reporting policy breaches, asking real customers for honest feedback | Fake reviews, paid positive reviews, discouraging negative ones, paying to alter true ones | You and the firm |
| Rankings | Accurate pages you own, real profiles, real interviews | Paid links for ranking, mass pages, repurposed expired domains | Your site, by demotion |
| Removal | Platform reports, publisher requests, privacy and legal requests with evidence | False accusations, intimidation, unfounded legal threats | You, in civil or regulatory exposure |
Where this decision ends and others begin
Five neighboring questions are settled elsewhere. Choosing a firm means comparing providers and asking three the same questions; this decision comes first and tells you whether you need one. The contract turns the handover checklist into clauses and deserves a lawyer's hour. Doing it yourself is a full topic with its own routine and limits. Scams and red flags describe unasked offers that charge before they work. Promised outcomes are promises about other people's decisions, because whoever sells removal does not decide removal.
When we are the right outside help, and when we are not
Reputation Partners works as the outside party in the split above, and we would rather tell you where we fit than where we do not. We are a good fit for audits across search engines and AI assistants, for planning accurate pages that answer a result that cannot be removed, for monitoring and for a crisis desk that works under your decisions. We are not the right party for a court order, a defamation notice or any contract dispute: those need a qualified lawyer in your country, and we work with yours.
In most files, the shape that works is a short outside engagement with a written end date, after which the work lives in house again. Our ethics page lists the tactics we refuse, so you can hold any firm, including us, to the same list.
Decide the split this week
Pick your most pressing reputation problem and write down its tasks, one per line. Mark each one with the three questions: access, context, leverage. You will usually find most of the list is yours, a small part belongs to a lawyer, and one or two items are worth buying. Then check the owner list on every account the work will touch, before anyone else has access.
If you are not sure which of your tasks should stay with you and which should go to a specialist, a private audit sorts them for you before you commit to anything. You see the findings first, and you decide who does what.
Questions people ask
Is in house or an agency cheaper for reputation management?
It depends on volume. Routine work such as replies and monitoring is usually cheaper in house, because it takes small amounts of time from people who already know the facts. Rare, intense work such as a crisis or a wide audit is usually cheaper to buy for a fixed period than to staff permanently. We cannot give a figure that holds across cases.
Can a small business manage its online reputation without an agency?
Yes, for most of what matters. A small business can answer reviews, keep its listing accurate, publish pages that describe it truthfully and watch for new mentions. It needs outside help for legal routes, a sudden volume of attacks, or when nobody has time for the routine.
Should an agency have admin access to my accounts?
Give the minimum role the task needs, under named logins, with you as primary owner. For a business listing, that usually means a manager role rather than an owner role. Remove the access when the work ends. An agency that insists on being the primary owner is asking for control it does not need.
Is it legal for an agency to remove or hide reviews for me?
An agency may report reviews that break a platform's rules and may help you reply. It may not threaten reviewers, make false accusations, discourage negative reviews or pay for changes to truthful ones. The FTC's staff Q&A says reputation management companies are not immune from liability for review suppression, so a firm promising to make reviews vanish deserves hard questions.
