No author, no proof, no chance: the trust gap on small business websites

Open the website of almost any accountant, builder, consultancy or software firm with fewer than fifty staff and look for three things: who wrote the content, who runs the company, and what evidence exists that they are good at it. On most sites you will find a "Blog" with posts by "Admin", a team page with stock photos or none at all, and testimonials from "J.S., Sussex". No dates. No credentials. No numbers.

For a decade that was survivable, because Google's ranking systems could lean on links and the visitor could phone you and form their own view. AI engines cannot phone you. They decide whether to name your business from what they can read and corroborate, and a site that offers nothing checkable gives them nothing to work with.

Why trust is now a retrieval problem

When an engine assembles an answer to "who should I use for X", it is doing something closer to due diligence than to ranking. It retrieves candidate pages, judges whether each one comes from a credible source, checks whether other sources agree, and then decides which names are safe to put in front of a user. Google's May 2026 guide for generative AI features says outright that the same signals it has used for years still apply, and points back to its people-first content guidance. That guidance is a list of questions: does the content make clear who wrote it? Does it show first-hand experience? Would you trust it for a decision about money or health? Does the site have a clear owner, purpose and contact details?

An anonymous post on a site with no team page answers no to all of them. The engine does not punish you for that. It simply has no reason to prefer you over a competitor whose site answers yes, or over a review platform that at least has volume.

What the trust gap looks like in audits

The pattern repeats across sectors. The About page is a mission statement with no names. Blog posts are attributed to the company or to nobody. Photos are stock: the smiling headset woman, the handshake, the laptop on a wooden table. Case studies say "a leading manufacturer" and "significant savings". Certifications are logos with no numbers. Reviews live on the site only, undated, with initials. The footer has a contact form but no address, no company number, no phone.

Individually each of these is a small omission. Together they describe a business that could be anyone, and engines are increasingly built to avoid recommending anyone.

What engines actually weigh

Three things, in our experience, move the needle more than the rest.

Named people with a footprint. A page written by "Sarah Cole, Chartered Accountant, founder" whose LinkedIn profile says the same thing and who has spoken at a Chamber event is a corroborated source. Studies of AI citations through 2025 and 2026 show LinkedIn rising sharply as a cited domain, driven by articles and posts from named professionals rather than company pages. The engine is not citing LinkedIn for its own sake; it is citing people it can identify.

Specifics that could be checked. "We have completed over 400 EPC assessments across East Sussex since 2018" is a claim with a shape, a number, a place and a date. "Trusted by businesses across the South East" is decoration. Engines extract the first and ignore the second.

Agreement between sources. Your site says you were founded in 2015; Companies House agrees; your Google Business Profile agrees; your accreditation body lists you. Every match raises confidence. Every mismatch, including a founder whose LinkedIn headline still names their old employer, lowers it.

The seven things to add this month

1. A team page with real people. Names, roles, a two-sentence bio each, a real photograph, and a link to their LinkedIn profile. Founders first.
2. An author on every piece of content. A byline, a short bio at the foot of the page, and a link to an author page that lists everything they have written. Add Person schema with sameAs pointing to LinkedIn and worksFor pointing to your Organization.
3. Dates that are true. Published and updated dates, visible and in schema, on every article and every service page.
4. Credentials with numbers. Accreditation names, membership numbers, registration numbers, the year obtained. Link to the register where one exists.
5. Case studies with specifics. Sector, size, location, what was done, how long it took, what changed, with a number. Anonymise the client if you must; do not anonymise the facts.
6. Reviews where engines read them. Google first, then the platform your sector trusts. Ask for detail, not stars. Show the count and the platform on your site rather than hosting undated quotes.
7. A footer that identifies you. Legal name, company number, registered address, phone, email. It is a legal requirement for UK companies anyway, and it is the cheapest trust signal available.

What not to do

Do not invent an author. Do not buy reviews. Do not put "As featured in" logos for publications that never featured you. Google's 2026 guide names inauthentic mentions as a risk, and every engine is built to detect the gap between what you claim and what the rest of the web says. The whole point of proof is that it can be checked; fabricated proof is the one kind guaranteed to fail the check.

The uncomfortable version

Most businesses are not losing AI visibility to a competitor with a bigger budget. They are losing it to a competitor whose founder put their name and face on the site, published under it, and wrote down what the company has actually done. That competitor gave the engine something to trust. Do the same and you are back in the conversation. Keep hiding behind "Admin" and stock photos and you will keep being described by whoever else the engine can find.