There are two kinds of social proof on a law firm website, and most firms — and most agencies — treat them as if they’re the same thing. They’re not. A third-party review on Google is something the firm doesn’t control. A client testimonial on your own site is something the firm does control. The American Bar Association draws a sharp line between the two, and so does every state bar. Get the distinction wrong and you have a 7.1 problem. Get the disclaimers wrong and you have a 7.1 problem. Get the consent wrong and you have a confidentiality problem on top of it. This page walks through what’s actually different, what each state requires, and how to surface social proof on your site without putting your license at risk.
The headline framing: third-party reviews are inherently more credible to readers and to Google, but they’re outside your control. Testimonials are inside your control but inherently less credible, and the bar rules around them are stricter. Most firms should be using both — with the right structure for each — instead of picking one and overusing it.
The basic definition the ABA cares about
A review is content published by a client on a third-party platform the lawyer doesn’t operate — Google Business Profile, Yelp, Avvo, Facebook, Martindale. The platform aggregates reviews, displays them publicly, and the lawyer’s involvement is limited to soliciting the review (within bar rules) and responding to it. The review is unfiltered in the sense that the lawyer can’t edit or remove it. Bad reviews live next to good ones. The lawyer didn’t write any of it.
A testimonial is content the lawyer obtained from a client or representative client and publishes on the lawyer’s own marketing materials — the firm website, a brochure, a video on the firm’s homepage, an email signature. The testimonial is filtered by definition — the lawyer chose which ones to publish. The lawyer wrote or edited the surrounding context. The client gave specific permission for the use. The lawyer is the publisher.
This distinction matters because ABA Model Rule 7.1 prohibits “false or misleading communication about a lawyer or the lawyer’s services.” A communication can be misleading by omission. A testimonial that says “Sarah won my case and got me $2 million” is misleading if every other client of Sarah’s lost their case — even though the statement is literally true for that one client. The lawyer, by curating the testimonial out of context, has implicitly promised that this outcome is typical. That’s misleading under 7.1 even if no individual word is false.
The line between a review and a testimonial is who controls the publishing. A Google review embed is a review. The same quote in a pull-quote on your homepage is a testimonial — and a different rule book applies.
What the ABA Model Rules actually say
ABA Model Rule 7.1 is the baseline — “A lawyer shall not make a false or misleading communication about the lawyer or the lawyer’s services.” Comment 3 to Rule 7.1 specifically addresses testimonials and case results: “an advertisement that truthfully reports a lawyer’s achievements on behalf of clients or former clients may be misleading if presented so as to lead a reasonable person to form an unjustified expectation that the same results could be obtained for other clients in similar matters without reference to the specific factual and legal circumstances of each client’s case.”
Translation: a testimonial is allowed, but it has to be accompanied by enough context that a reasonable reader doesn’t think they’ll get the same result. Most state bars have implemented this through specific disclaimer requirements — “results may vary,” “every case is different,” “past results do not guarantee future outcomes.” These disclaimers are not optional in most jurisdictions. Some states require the disclaimer to appear with each testimonial. Some require it once per page. Some require specific language. The variations matter.
Rule 7.1 is part of why the testimonial-vs-review distinction matters operationally. A third-party Google review embed is not a “communication by the lawyer about the lawyer’s services” in the same sense — it’s a communication by the client, displayed via a third-party API, and most bar interpretations treat it more like a citation than like advertising copy. The lawyer hasn’t drafted, edited, or curated it. That’s not zero risk — if you choose which reviews to embed (cherry-picking only five-stars), you’ve curated and you’ve moved closer to the testimonial side of the line. But a real, unfiltered Google review widget is closer to a citation of public information than to a testimonial.
State-by-state — where the rules get sharper
Every state has adopted some version of Rule 7.1, and many have added stricter rules. A few examples of how states differ — this isn’t a comprehensive list, just the patterns to be aware of when you’re publishing.
Florida has the strictest legal advertising rules in the country. Rule 4-7.13 prohibits any testimonial that is not “objectively verifiable.” That eliminates most “she was great” testimonials in favor of testimonials tied to specific, provable claims. Rule 4-7.14 requires that any communication referring to past results include a clear disclaimer. Florida also requires advertising review by the bar for certain types of communications.
New York Rule 7.1(d) requires that testimonials and endorsements include a specific disclaimer when the testimonial relates to a result the lawyer obtained for a client: “Prior results do not guarantee a similar outcome.” The disclaimer must appear with the testimonial, not buried in a footer.
Texas Rule 7.04 prohibits testimonials that are misleading and has been interpreted broadly to require disclaimers and verification of substantive claims. Texas bar has been more aggressive than most about enforcing testimonial rules through bar grievances.
Arizona (relevant for our Phoenix-based clients) follows the ABA Model Rule 7.1 closely with state-specific Rule 7.1 of the Arizona Rules of Professional Conduct. Disclaimers are required for results-based testimonials. The 2021 updates to Arizona’s rules loosened some restrictions but kept the false-or-misleading prohibition intact.
California Rule 7.1 requires that testimonials not create an unjustified expectation. California’s Business and Professions Code §6157 separately requires that certain advertising claims be substantiated and that testimonials clearly identify whether the speaker is a current or former client. California also has unique rules around video testimonials.
The practical move: do not publish testimonials on your site without confirming your state bar’s specific rules. The cost of a 7.1 violation isn’t always disbarment — most violations result in private reprimands or public censure — but it shows up on the lawyer’s public bar profile forever and is the kind of thing prospective clients can find with a thirty-second search. The downside of getting it wrong is meaningfully larger than the upside of one cherry-picked testimonial.
Disclaimer language that actually holds up
If you’re publishing testimonials, the disclaimers need to do real work. The mistake most firms make is using a single boilerplate disclaimer in the footer, which most bars consider insufficient when the testimonial is on a different page. The disclaimer needs to be visible with the testimonial — same page, ideally in the same visual frame.
Standard language that satisfies most state bars: “The testimonials presented on this page are individual experiences from clients who have worked with our firm. Each case is unique. Past results do not guarantee a similar outcome. The testimonials are not paid and are presented as received with the client’s permission.”
For results-based testimonials specifically: “This client outcome is one specific result obtained in one specific case. Other clients have experienced different results. Past results do not predict or guarantee future outcomes.” If the testimonial mentions a dollar amount: include attorney fees disclosure context where required (some states require this on case results — see case result disclaimers for the full treatment).
What doesn’t hold up: a generic site-wide footer disclaimer like “Past results don’t guarantee future outcomes” with no contextual placement near the testimonial. A pop-up disclaimer that disappears after first visit. A hidden disclaimer that requires hovering over a tooltip. The principle is “reasonable visibility” — the disclaimer should be encountered by the same reader at the same time as the testimonial.
Google review embeds vs published testimonials — operational differences
Embedding a Google review widget on your site looks the same to a casual visitor as a written testimonial, but the regulatory treatment is different in meaningful ways.
Google review embed. The reviews are pulled live from your Google Business Profile. You can’t edit them. You can’t choose which ones display (usually). They include the reviewer’s name, date, star rating, and full text — exactly as published on Google. The disclaimer requirements are typically lighter because the content is sourced from a third-party platform. The credibility to readers is significantly higher because they can verify by clicking through to Google. The SEO benefit is moderate — Google reviews embedded via API don’t always pass review-rich-result schema benefits, but they do reinforce trust signals on the page.
Published written testimonial. The text is on your site, you wrote or edited it (or transcribed it from a client interview), and you chose to publish it. Disclaimer requirements are stricter. Consent requirements are stricter. You need written or recorded consent from the client to use their words and (especially) their image. The credibility to readers is lower because they have no way to verify. The SEO benefit can be higher if you implement the right schema (Review and Person schemas) — but only if the testimonials are real and verifiable in some form.
The practical recommendation for most firms: lead with a Google review widget on the homepage and key practice pages — credible, low-risk, easy. Supplement with two to four carefully written testimonials with proper disclaimers and signed consent. Don’t run a testimonial slider with twelve cherry-picked five-star quotes. That’s the configuration most bar examiners and most prospective clients react badly to. For the broader review-strategy frame see Google review strategy for law firms and review schema and rich results.
Attorney rating badges — Avvo, SuperLawyers, Martindale, Best Lawyers
Attorney rating badges occupy a strange middle ground between reviews and testimonials. They’re third-party recognitions, which gives them some review-like credibility. But you display them on your site, you choose which to display, and you control the context — which makes them testimonial-like. The bar rules treat them mostly as testimonials, with the additional wrinkle that they’re comparative claims about the lawyer’s standing relative to peers.
The legitimacy spectrum on rating badges is wide. SuperLawyers uses a multi-step peer-nomination and editorial-review process. It’s real recognition, though there are critiques of the methodology. Best Lawyers uses peer-review surveys and has a long track record. Martindale-Hubbell AV Preeminent is based on peer-confidential reviews and has been around for over a century — real signal. Avvo “Top Rated” is algorithmic and weakly correlated with quality. Many other “Top X Lawyers” badges are pay-to-play directory listings with no editorial process — the firm pays for the listing, gets the badge, displays it. These look identical to a casual reader.
The bar rules generally allow display of legitimate peer-reviewed designations with proper attribution (the issuing organization, the year, what the designation means). Pay-to-play badges presented as if they were peer-reviewed are a 7.1 problem — the implication that they represent peer recognition when they don’t is misleading by omission. Display rules vary, but the safer practice is: pick three to five real recognitions you’ve actually earned, surface them with full attribution and year, and leave the rest off the site. The badge soup of fifteen recognitions in a horizontal scroll is the legal SEO equivalent of trust-badge stuffing on an e-commerce site — it actively reduces credibility for sophisticated readers.
One specific detail: badges that include a year (e.g., “SuperLawyers 2024”) should reflect the actual year the lawyer earned the recognition. Displaying a 2018 badge in 2026 with no year context is potentially misleading. Either update the displayed year annually or include the original year as context.
Consent — the part most firms skip
You can’t publish a client’s name, words, or photograph on your marketing materials without their consent. This is true under bar rules — Model Rule 1.6 prohibits revealing information related to the representation without informed consent. It’s also true under common-law privacy and right-of-publicity claims. And it’s true under state-specific statutes — some states have explicit publicity rights that allow former clients to sue for unauthorized use of their likeness in commercial materials.
For published testimonials, get the consent in writing. The consent should specify: what content is being used (the quote, the name, the photograph if any), where it will be used (the website, social media, brochures, etc.), for how long (typically until the client withdraws consent in writing), and that the client understands the use will identify them as a former client of the firm. Most firms can use a simple one-page consent form that the client signs along with their other case-closing documents. Some bar associations have model forms.
For Google reviews, the consent question is different. The client has voluntarily posted the review on a public platform, identifying themselves and (implicitly) their relationship with the firm. The lawyer’s obligation is not to amplify the disclosure beyond what the client has already done publicly. Embedding the Google review widget is generally fine because it surfaces what’s already public. Extracting a Google review quote and republishing it as a testimonial in a different context is closer to the consent line — get written consent before doing this.
Photographs deserve a separate paragraph. A client headshot used in a testimonial requires explicit photo-release consent — usually a separate form. Some firms use stock photos with their testimonials, which is worse than no photo — it implies a real client when there isn’t one. Some firms use initials only or first-name/last-initial format (“Sarah M.”) to anonymize without sacrificing all credibility. That’s a reasonable middle ground, though some states still require disclosure of the use.
The structural recommendation
For most firms I work with, the social-proof configuration that works is roughly this. On the homepage: a Google review widget pulling live, with the actual count and rating, linked to GBP. On each practice page: a smaller embed or a “Read [X] reviews on Google” line with rating, linked to GBP. Optionally on one or two key pages: two to three carefully written and properly disclaimed testimonials with signed consent, ideally tied to representative case scenarios (anonymized where required). No testimonial slider. No badge soup. Three to five real peer recognitions in a credentials section with full attribution.
That configuration produces meaningful social proof, complies with bar rules across most states, doesn’t trigger the trust-decay that comes from over-curated testimonials, and is sustainable as the firm grows. The added benefit: it lets the firm’s review profile do the heavy social-proof lifting, which is where most of the SEO value lives anyway. For the relationship between review profile and rankings see review velocity and rankings and local pack ranking factors for attorneys.
A short list of things to fix today
- Check your state’s specific rule. ABA 7.1 is baseline. Your state may have additional requirements on testimonial disclaimers, verification, or filing.
- Audit your current testimonials. Is each one disclaimed with visible language near the testimonial? Is the consent on file? If either answer is no, fix it or take the testimonial down.
- Audit your badges. For each one — is it real, is it current, is it attributed clearly? If you can’t defend it under cross-examination, take it off.
- Add a real Google review widget. Most firms are leaving credible social proof on the table by not surfacing their actual review profile on the homepage.
- Get a consent form template. A one-page client consent form, signed at case closing, makes the next year of testimonial-publishing decisions much faster.
- Kill the testimonial slider. Twelve cherry-picked five-star quotes on a rotating carousel signals nothing useful and looks dated. Replace with two or three substantive testimonials and a real review widget.
The boring summary
Reviews and testimonials look similar to a visitor and very different to a bar examiner. Reviews are lower-risk and higher-credibility but less controllable. Testimonials are higher-risk and lower-credibility but you control the curation and context. Most firms should be running both, weighted toward reviews, with the right disclaimers and consents on the testimonial side. The legal advertising rules in your state are not optional — they’re enforceable, they’re searchable, and a bar violation outweighs any social-proof benefit you’d get from cutting the corner.
For the full guide see the reviews and reputation guide. For the broader ethical frame on building reputation without crossing bar lines see building a reputation without violating ethics rules. For the case-result-specific disclaimer treatment see case result disclaimers. For the practice-page treatment of E-E-A-T and how reviews support it see E-E-A-T signals for law firm pages.
If you want a second set of eyes
The free audit I offer includes a review of your current testimonials, badges, and review widgets — checked against ABA Model Rule 7.1 and your state’s specific rules. I’ll tell you what’s at risk, what to disclaim better, what to take down, and what to add. No deck. Yours to keep whether you hire us or not.
— The owner, PHX Search Co.