--- title: "Agency AI rules: data, approvals, and spend" description: "Set AI rules for agencies and freelancers covering client separation, claim evidence, final approvals, contractor access, and spending per function" canonical: "https://scalewithsearch.com/articles/agency-ai-rules-data-approvals-spend" --- ## Site navigation - [Scale With Search](https://scalewithsearch.com/) - Services - Services - [AI systems](https://scalewithsearch.com/ai-systems) - [Site build](https://scalewithsearch.com/work#site-build) - [Whole website fix](https://scalewithsearch.com/work#whole-website-fix) - [Content library with SEO](https://scalewithsearch.com/work#content-library) - [Working session](https://scalewithsearch.com/audit) - Start here - [Send your brief](https://scalewithsearch.com/work#send-your-brief) - [Example scope](https://scalewithsearch.com/work#review-the-example-scope) - [Prices and terms](https://scalewithsearch.com/work#prices-and-terms) - Industries - Real estate - [Real estate agents and teams](https://scalewithsearch.com/for/real-estate) - [Platforms, ownership, and IDX](https://scalewithsearch.com/for/real-estate/real-estate-website-platforms-ownership-idx) - [Search, content, and AI](https://scalewithsearch.com/for/real-estate/real-estate-search-content-ai) - [Inquiries, campaigns, and handoffs](https://scalewithsearch.com/for/real-estate/real-estate-website-inquiries-campaigns-handoffs) - [Buyer, seller, and local pages](https://scalewithsearch.com/for/real-estate/real-estate-buyer-seller-local-resources) - [Rules, privacy, and trust](https://scalewithsearch.com/for/real-estate/real-estate-website-rules-privacy-trust) - Browse by business - [Trades and home services](https://scalewithsearch.com/for/#group-trades) - [Health, wellness, and animal care](https://scalewithsearch.com/for/#group-practices) - [Law, finance, and IT](https://scalewithsearch.com/for/#group-professional) - [Marketing and SEO agencies](https://scalewithsearch.com/for/#group-agencies) - [Shops and manufacturers](https://scalewithsearch.com/for/#group-manufacturing) - [Restaurants, shops, studios, and nonprofits](https://scalewithsearch.com/for/#group-local-services) - Chiropractic practices - [Chiropractic and wellness practices](https://scalewithsearch.com/for/chiropractic-and-wellness-practices) - [Chiropractic and physical therapy clinics](https://scalewithsearch.com/for/chiropractic-and-physical-therapy-clinics) - [All industries](https://scalewithsearch.com/for/) - Resources - Free tools - [AI readiness check](https://scalewithsearch.com/check) - [Free tools](https://scalewithsearch.com/tools/) - [Free Starter Kit](https://scalewithsearch.com/kit/business-memory-starter-kit.zip) - Guides - [AI-native library](https://scalewithsearch.com/ai-native) - [Industry intelligence](https://scalewithsearch.com/intelligence) - [Office job guides](https://scalewithsearch.com/guides/) - [Business memory](https://scalewithsearch.com/articles/business-memory-for-ai-agents-guide) - [Agent governance](https://scalewithsearch.com/articles/ai-agent-governance-guide-small-business) - [Migration and ownership](https://scalewithsearch.com/articles/leaving-vendor-ai-memory-guide) - Articles - [All articles](https://scalewithsearch.com/articles/) - [What changed](https://scalewithsearch.com/changes/) - About - Evidence - [Proof](https://scalewithsearch.com/proof) - Scale With Search - [About](https://scalewithsearch.com/about) - [How it works](https://scalewithsearch.com/how-it-works) # Agency AI rules: data, approvals, and spend Write agency AI rules at the account level. Every task should name the client, permitted records, intended output, checker, and budget. Keep reusable agency methods separate from client-specific material. For a freelancer, write the same rules even when one person runs the whole job. A prepared draft, a checked draft, and a sent message are different states. Preserve that difference in the record so the next task reads the right version. Start with a permission sheet for one function. Use it to review a proposed briefing, reporting, or contractor handoff system before connecting account folders and communication tools. ## Classify what the function may read Have the account owner identify the sources needed for the named output. Require a field-level decision for personal information and a document-level decision for confidential strategy and creative work. Use these proposed classes: | Source | Handling to approve | | --- | --- | | Published client facts | Current approved reference with its source date | | Accepted scope and brief | Restricted to that account's authorized tasks | | Campaign measurement export | Selected fields with period and definition preserved | | Audience lists and personal details | Excluded unless a reviewed task requires them | | Contracts, private strategy, unreleased creative | Specific permission and restricted processing route | | Passwords, keys, payment credentials | Outside prompts, working files, and retained transcripts | A source marked unresolved remains unavailable. Do not connect a whole drive and ask the model to decide what it should avoid. Make retrieval enforce the approved account and file list. The FTC recommends limiting personal information to business needs and controlling access. [FTC security guidance, checked 2026.10.26](https://www.ftc.gov/business-guidance/resources/start-security-guide-business). Apply those principles to exports, contractor packets, logs, and debugging records. Have the responsible reviewer determine additional legal and contractual duties for the actual client and data. Keep that determination beside the source register. ## Prove client separation before drafting Require one client identifier at the start of a task. Bind it to a permitted source root and output destination. Stop when the identifier is missing or a source claims a different account. Use the [client-separation guide](/articles/separate-business-contexts-ai-agents) for the underlying access boundary. Apply this article's claim, approval, and budget rules to each agency function within it. Keep shared templates empty of retained facts. A reusable reporting outline can contain headings, definitions, and checking instructions. A former client's results, audience names, screenshots, and strategy remain that client's material unless separately approved for reuse. Use a synthetic two-account test. Put a distinctive invented phrase in each account and ask for a brief from only one. Check both the draft and the retrieval receipt. The wrong phrase should never appear, and the source list should contain no other-account file. Test the boundary again after changing search, storage, or access settings. A clean final paragraph is insufficient if an unauthorized file was read during preparation. ## Attach evidence to advertising claims The FTC requires advertisers to support express and implied claims before publication. Its guidance says the needed evidence depends on the claim. [FTC advertising guidance, checked 2026.10.26](https://www.ftc.gov/business-guidance/resources/advertising-faqs-guide-small-business). Keep a claim register for each campaign. Record the proposed statement, intended meaning, supporting source, qualification, reviewer, and approved use. Require the drafting function to select from that register or flag a new claim for review. Do not let AI invent a testimonial, customer result, certification, or price. An approved statement from one campaign should not become permission for a broader claim elsewhere. Keep the relevant product, audience, period, and qualification attached. For reporting, distinguish a measured change from an explanation of its cause. Ask the reviewer to inspect both. If the source supplies a number without establishing attribution, preserve that limit in the report. The [anonymous case study guide](/articles/agency-anonymous-case-study-website) addresses public evidence. Use the same source discipline when a draft proposes to reuse a report finding in sales material. ## Make approval specific to the action Write an approval map before enabling communication or publication: | Action | Proposed approval owner | | --- | --- | | Client update | Account owner | | Scope or delivery commitment | Authorized commercial owner | | Campaign claim | Client's designated claim reviewer | | Publication or scheduling | Authorized channel owner | | Contractor disclosure | Account owner and relevant source owner | | Spending or account change | Person with explicit account authority | One person may fill several roles. Record which role they are exercising for the action. A project manager accepting an internal draft should not accidentally approve publication or another paid service. Bind approval to the exact client, account, channel, recipient, text, attachments, and version. Require another review when a material input changes. Keep sending separate from preparation so an unfinished draft cannot leave through an overly broad tool permission. For a synthetic test, approve a report and then change the reporting period. The action should be held for another check. Approval of the earlier figures should not transfer to the replacement. ## Treat incoming comments as requests A client comment may change the proposed direction. It should not silently change system permissions, recipients, or the accepted commercial scope. Have the account owner record an accepted decision before the function treats it as controlling. Test a copied brief that instructs the assistant to publish immediately or attach another account's report. Require a blocked result. The content being summarized cannot grant itself access or action authority. Preserve contradictory stakeholder feedback. Name the designated client approver instead of letting the model choose whose request wins. Keep the unresolved issue visible to the project owner. The [agency hub](/for/marketing-agencies-and-freelancers) describes records for briefs and handoffs. Use those records to distinguish new requests, accepted decisions, completed work, and material awaiting review. ## Give spending a client and a function Use separate spending entries for the agency's internal work and any client-funded function. Give each function a monthly allowance and a named owner. Identify the account responsible for usage before the first paid request. Cap source pages, account count, requests, retries, and response length per run. Put direct checks outside the model when a fixed rule supplies the result. Do not rerun every account because one source file changed. Before each paid request, check the remaining allowance and reserve a conservative amount. Stop when the pending work would exceed the ceiling. Send an alert to the owner before the limit is reached. Record delayed or estimated charges as pending. Reconcile them against final usage. Keep model identifiers, unit-pricing references used by the implementation, and the reconciliation state in private operating records. Use a replacement model only after the same account-boundary and approval examples pass. The agency should keep the source map, correction history, runbook, and receipts when it changes the model. ## Revoke access when an assignment ends Name who removes a contractor's access after the approved assignment. Keep access expiry separate from whether the final deliverable has been accepted. The account owner should confirm which files remain necessary for corrections and which permissions can close. Test that transition with a synthetic contractor identity. The completed packet should remain in the client's authorized record while the former recipient loses access under the approved plan. Require a new account decision before another assignment reopens the source set. Save the observed permission result with the handoff record. ## Keep evidence that the rules work Require a receipt for every completed, blocked, failed, and empty run. Include the account, function, source references, output version, model, cost state, and checker. Avoid copying private client details into the receipt when identifiers are enough. Use a small synthetic acceptance set: wrong account, unsupported claim, conflicting reviewer, changed scope, unauthorized recipient, and exhausted budget. Have a backup account owner follow the runbook and identify the next required decision. Teach the team how to pause the function and correct the authoritative record. Rerun the affected example after a correction. Preserve expected and observed behavior so future changes have a stable checking standard. Bring one account function and its permission sheet to [AI systems](/ai-systems). Send Scale With Search the output, approval owners, and spending rules through [the written scope form](/work). Continue the website review: [Anonymous agency case studies: show the evidence](/articles/agency-anonymous-case-study-website); [Embed Behance work on your agency website](/articles/agency-behance-portfolio-embed); [Clutch review widgets for an agency website](/articles/agency-clutch-review-widget); [Figma prototype embeds on an agency website](/articles/agency-figma-prototype-embed); [Google Partner badge on an agency website](/articles/agency-google-partner-badge-website); [HubSpot directory referrals: check your agency website](/articles/agency-hubspot-directory-website-handoff); [Squarespace file uploads for agency project briefs](/articles/agency-squarespace-file-upload-briefs); [AI-native agencies: the first functions to build](/articles/ai-native-agencies-first-functions); [Adobe Portfolio custom domains for freelancers](/articles/freelancer-adobe-portfolio-custom-domain); [Freelance project availability on your website](/articles/freelancer-project-availability-page); [Google reviews for an agency: ask without filtering](/articles/marketing-agency-google-review-requests); [Marketing agency inquiry form: collect a useful brief](/articles/marketing-agency-project-inquiry-form). [marketing agencies and freelancers](/for/marketing-agencies-and-freelancers): website and search resources. ## Related: marketing agencies and freelancers - [Anonymous agency case studies: show the evidence](/articles/agency-anonymous-case-study-website) - [Embed Behance work on your agency website](/articles/agency-behance-portfolio-embed) - [Clutch review widgets for an agency website](/articles/agency-clutch-review-widget) ---- ```text .|########||. .|########||. .|########||. |##||. .||##|. |##||. .||##|. |##||. .||##|. |#|. .|#|. |#|. .|#|. |#|. .|#|. |#| |#| |#| |#| |#| |#| .#| |#. .#| |#. .#| |#. .#. .#| .#. .#| .#. .#| |#. .#| |#. .#| |#. .#| |# ...... #| |# ...... #| |# ...... #| .# ||#########| #| .# ||#########| #| .# ||#########| #| .#. |######||######|. .#. .#. |######||######|. .#. .#. |######||######|. .#. #. .##|###|##|#|######| .# #. .##|###|##|#|######| .# #. .##|###|##|#|######| .# || |##|#||||||||||||#||#| || || |##|#||||||||||||#||#| || || |##|#||||||||||||#||#| || # |#||||||||||||||||||||#| #. # |#||||||||||||||||||||#| #. # |#||||||||||||||||||||#| #. || |#||||||||||||||||||||||#| || || |#||||||||||||||||||||||#| || || |#||||||||||||||||||||||#| || # .#||||||||||||||||||||||||#| # # .#||||||||||||||||||||||||#| # # .#||||||||||||||||||||||||#| # || ....|||#||||||##|#|||#|#||##||||....|. || || ....|||#||||||##|#|||#|#||##||||....|. || || ....|||#||||||##|#|||#|#||##||||....|. || #. . ....|# ....#||| ||| .#||| ....#. .# #. . ....|# ....#||| ||| .#||| ....#. .# #. . ....|# ....#||| ||| .#||| ....#. .# # . ||||#| .#####|| . .#| .#||| ||||# #. # . ||||#| .#####|| . .#| .#||| ||||# #. # . ||||#| .#####|| . .#| .#||| ||||# #. .| ||||| #. |#|||||. || #. |#||. .||||| || .| ||||| #. |#|||||. || #. |#||. .||||| || .| ||||| #. |#|||||. || #. |#||. .||||| || || |.... #. ....|#. |. ...|. ....|| || || |.... #. ....|#. |. ...|. ....|| || || |.... #. ....|#. |. ...|. ....|| || #. .||||||##||||||##||####|||||||#||||||#| .# #. .||||||##||||||##||####|||||||#||||||#| .# #. .||||||##||||||##||####|||||||#||||||#| .# # .||####|###########################|. # # .||####|###########################|. # # .||####|###########################|. # # .#||||||.#.|| # |. ..# #| #|||||#| # # .#||||||.#.|| # |. ..# #| #|||||#| # # .#||||||.#.|| # |. ..# #| #|||||#| # # .#|||||| .. |# ## |#| ...#|#|||#| # # .#|||||| .. |# ## |#| ...#|#|||#| # # .#|||||| .. |# ## |#| ...#|#|||#| # # .#|||#|# .# .#| #| ##|.#..#|||||#| # # .#|||#|# .# .#| #| ##|.#..#|||||#| # # .#|||#|# .# .#| #| ##|.#..#|||||#| # # .#||||||############|######|||||#| # # .#||||||############|######|||||#| # # .#||||||############|######|||||#| # # |...||#||||||#||||#|#||||||#|||||#||| |.| # # |...||#||||||#||||#|#||||||#|||||#||| |.| # # |...||#||||||#||||#|#||||||#|||||#||| |.| # #. .. ||||# .|||##|. |#| .|| || .|||#. #| # .# #. .. ||||# .|||##|. |#| .|| || .|||#. #| # .# #. .. ||||# .|||##|. |#| .|| || .|||#. #| # .# || | ...|| ...##| | #| .|. |. ##### .. .| || || | ...|| ...##| | #| .|. |. ##### .. .| || || | ...|| ...##| | #| .|. |. ##### .. .| || || ||||| || ||||#| . |. |. |#. ||||| |#| || || || ||||| || ||||#| . |. |. |#. ||||| |#| || || || ||||| || ||||#| . |. |. |#. ||||| |#| || || .# |.....#|....|#.||||.|||##.|#|....||.#||.#. #. .# |.....#|....|#.||||.|||##.|#|....||.#||.#. #. .# |.....#|....|#.||||.|||##.|#|....||.#||.#. #. #.|||||||#############################| ||| .# #.|||||||#############################| ||| .# #.|||||||#############################| ||| .# || ##||#||#||||||#||#||#||#||##. || || ##||#||#||||||#||#||#||#||##. || || ##||#||#||||||#||#||#||#||##. || # .#|||||||||#||#|||||||||||#| # # .#|||||||||#||#|||||||||||#| # # .#|||||||||#||#|||||||||||#| # || |#||||||||||||||||||||||#| || || |#||||||||||||||||||||||#| || || |#||||||||||||||||||||||#| || .# |#||||||||||||||||||||#| #. .# |#||||||||||||||||||||#| #. .# |#||||||||||||||||||||#| #. || |#||||||||||||||||||#| || || |#||||||||||||||||||#| || || |#||||||||||||||||||#| || #. .######|#|#########| .# #. .######|#|#########| .# #. .######|#|#########| .# .#. |#####||||#####| .#. .#. |#####||||#####| .#. .#. |#####||||#####| .#. |# ||########|| #. |# ||########|| #. |# ||########|| #. |# ...... #| |# ...... #| |# ...... #| |#. .#| |#. .#| |#. .#| |#. .#. |#. .#. |#. .#. .#| |#. .#| |#. .#| |#. |#| |#| |#| |#| |#| |#| .|#|. .|#|. .|#|. .|#|. .|#|. .|#|. |##||. .||##| |##||. .||##| |##||. .||##| .||########||. .||########||. .||########||. Scale With Search 2026 [scalewithsearch.com](https://scalewithsearch.com) ```