Keep your brand safe when AI places your ads by setting guardrails before launch: account-level exclusions for placements and sensitive content, negative keywords and brand exclusions, and switching off the AI features that rewrite your text, swap landing pages or generate images. Then check placement and search-term reports weekly for the first six weeks.
Brand safety now has two halves. The familiar half is where your ad appears: next to a video about a disaster, on a junk app, against a search term you'd never have chosen. The newer half is what the AI says on your behalf, because Performance Max and Meta's Advantage+ can write headlines, change landing pages, add music and generate backgrounds. For a small business, the second half is usually the bigger risk.
The worked example is an illustrative events company that plans weddings and corporate parties and spends about $1,500 a month on ads, split between a Google Performance Max campaign and a Meta Advantage+ leads campaign. Examples from an online clothing shop, a software reseller, a print shop and a jewellery seller show the same problems in other settings.
One fact shapes the order of work. Meta now makes Advantage+ the default for Sales, App and Leads campaigns, and Google's Performance Max decides placements across Search, YouTube, Display and more by itself. You can't approve each placement, so your control comes from the rules you set beforehand and the reports you read afterwards.
Two kinds of brand risk when an algorithm buys the space
It helps to name the risks, because the settings that address them live in different places.
| Risk | What it looks like for the events company | Where you control it |
|---|---|---|
| Placement: where the ad shows | A wedding ad running before a news video about a crowd accident at a festival | Google content suitability settings; Meta inventory filter and topic exclusions |
| Search term: what triggered it | Ads showing for "wedding planner jobs" or "free wedding planning template" | Negative keywords (account and campaign level), brand exclusions |
| Message: what the AI wrote | A generated headline saying "Free venue finding", a service it charges for | Text customisation settings, asset review, Meta creative enhancements |
| Destination: where the click lands | Clicks sent to a 2024 wedding fair page that still exists on the site | Final URL expansion and URL exclusions |
| Look: how the ad appears | An old logo, the wrong colours, upbeat music on a formal corporate ad | Google brand guidelines; Meta enhancements such as music and overlays |
If you're not sure how these automated campaigns decide anything, the plain-English explainer on how Meta and Google use AI to run your ads is a good primer before changing settings.
Google Ads guardrails, in the order to set them
Set these before the campaign starts. Google recommends letting a Performance Max campaign run for at least six weeks before comparing performance, and its help pages note that changes to budget, bids or assets reset the learning phase. Guardrails added in week three cost you learning; guardrails set on day one don't.
- Account-level negative keywords. In the Admin menu, open Account settings and expand "Negative keywords". These block search terms across Search and Shopping inventory in all relevant campaign types, including Performance Max. Google allows up to 1,000 per account. Start with the list further down this page.
- Content suitability. In the Tools menu, open Content suitability. Choose an inventory type for YouTube, Display and Google Video Partners: Maximum, Moderate or Limited. Moderate excludes strong profanity, dramatised violence and sexually suggestive themes; Limited is stricter and, in Google's words, may limit your reach and performance.
- Excluded sensitive content. On the same page you can exclude five categories on Display and Video Partner inventory: Tragedy and conflict, Sensitive social issues, Profanity and rough language, Sexually suggestive content, and Sensational and shocking. An events company selling celebrations has good reason to exclude Tragedy and conflict and Sensational and shocking.
- Content types and themes. Content type exclusions cover live streaming videos, embedded YouTube videos and, for Display campaigns, below-the-fold placements. Excluded content themes, under Advanced settings on the same page, cover subjects such as mature video games.
- Placement exclusions. Exclude specific sites, apps, channels or videos, up to 65,000 of them. Performance Max respects account-level and manager-account placement exclusions.
- Brand exclusions. In the campaign's Other settings, apply a brand list to stop Performance Max serving on branded searches you want to avoid, such as a competitor's name or your own brand if a separate search campaign already covers it.
Google's page on content suitability lists every option, and adds a caveat worth quoting to anyone who expects perfection: exclusions are applied to the best of Google's ability, but it can't guarantee all related content will be excluded.
The Performance Max settings that let AI change your message
These sit in the campaign itself, and they are where most small-business embarrassments start:
- Final URL expansion is on by default for Performance Max. It lets Google send clicks to whichever page on your domain it judges more relevant. Turn it off, or add URL exclusions for pages that shouldn't receive ad traffic (old events, careers pages, news posts, policies).
- Text customisation, formerly called automatically created assets, lets Google generate headlines and descriptions from your landing pages. Keep it on only if you will review the generated assets; switch it off if your pages contain old offers the AI might reuse.
- Brand guidelines hold your business name, logos, brand colours and font for automated formats. Google infers colours and fonts from your final URL and asks you to confirm them, and its help page suggests checking the account-level "Dynamic Business Logos" setting if the wrong logo appears.
If you also run Google's AI Max for Search campaigns, the same two settings switch on together: turning on AI Max turns on text customisation and Final URL expansion, which you can then turn off individually. AI Max also has brand inclusions and exclusions, which are the cleanest way to keep search ads away from competitors' brand names.
Meta settings that follow Advantage+ everywhere
Meta's controls are set on the ad account, in the Brand Safety and Suitability Centre, or per ad set in Ads Manager. The account level matters most: Meta says that brand suitability controls applied to an ad account, including the inventory filter, publisher and content block lists, topic exclusions and content type exclusions, apply automatically when people create ads, even when they choose Advantage+ placements. For the inventory filter, people can make an individual ad set stricter than the account setting, but not looser.
| Meta inventory filter | What Meta says it does | Who it suits |
|---|---|---|
| Expanded (the default) | Shows ads next to content that follows Meta's content monetisation policies, for the most reach | Most retail and service ads with no sensitive angle |
| Moderate | Excludes highly sensitive content; lowers reach and may increase costs | Businesses selling celebrations, family services, gifts |
| Limited | Excludes additional sensitive content and live videos; lowers reach and can increase costs | Children's products, health, anything where a bad adjacency would be serious |
The inventory filter covers Facebook and Instagram feed ads, Reels feed ads and ads in the Threads feed, Facebook in-stream reels and ads on Facebook Reels, and Audience Network. For in-stream reels and ads on Facebook Reels there are also topic exclusions in four categories: News, Politics, Gaming, and Religious and spiritual. Content type exclusions let you keep ads out of live videos and videos from publishers that haven't signed up for monetisation.
Advantage+ creative enhancements
This is Meta's equivalent of text customisation, and it needs a look on every new ad. Meta says some enhancements are on by default, that they may adjust the media and text you upload, and that some can only be switched off in Advanced preview rather than in the ad creative section, so you need to check both. Enhancements that use generative AI are labelled "AI" in the list. The ones that change your message are the ones to review first: added overlays, enhanced calls to action, enhanced media text, music (which can include AI-generated music) and image animation.
An illustrative example from an online clothing shop: a winter coat ad went out with a generated background that placed the coat on a sunny beach, and upbeat music added to a video of the knitwear range. Neither was offensive; both made the shop look careless. The fix took five minutes per ad in Advanced preview, which is five minutes worth spending before publishing rather than after.
The events company's setup, step by step
Here is how the illustrative events company set up both campaigns in one afternoon, with the numbers it recorded.
- Negative keywords (45 minutes). It pasted its search terms from an older search campaign into a spreadsheet and found 38 irrelevant terms in the previous three months: jobs, courses, "free", "template", "DIY" and "cheap". Those became 22 account-level negative keywords, grouped by theme.
- Content suitability (15 minutes). Moderate inventory on Google; Tragedy and conflict, and Sensational and shocking excluded; live streaming videos excluded.
- Placements (20 minutes). Two dozen app categories and channels excluded after checking a previous Display campaign's placement report, mostly children's games that had soaked up spend with no enquiries.
- Performance Max settings (20 minutes). Final URL expansion off, because the site still had pages for past wedding fairs with old dates and prices. Text customisation left on but with a weekly asset review booked in the calendar. Brand guidelines checked: Google had picked up a pink from an old banner as the brand colour, which was corrected to the real one.
- Meta settings (30 minutes). Account-level inventory filter set to Moderate. On each ad, music and added overlays switched off, text improvements left on only for the corporate ads, which were reviewed in Advanced preview before publishing.
The first two weeks of Performance Max search-term data showed 1,180 distinct searches. Of these, 41 were irrelevant, including "wedding planner salary" and "how to plan a wedding yourself", which added nine more negative keywords. One placement report entry, a prank video channel, went onto the exclusion list. At about 40 minutes a week for six weeks, the monitoring cost roughly four hours in total, which is modest next to $9,000 of spend over that period.
When comparing results before and after the change, the owner had one more thing to allow for: since March 2026, Meta's click-through attribution counts link clicks only, so conversion figures from before and after that date aren't like for like.
A negative keyword and exclusion starter list for a small business
Every business needs its own list, but most start with the same themes. This is the events company's list, filled in, with notes on how a print shop and a software reseller adapted it.
| Theme | Events company examples | How others adapted it |
|---|---|---|
| Jobs and training | jobs, salary, course, apprenticeship, "how to become" | Print shop added "printer technician"; reseller added "certification" |
| Free and DIY | free, template, printable, "do it yourself", "on a budget" | Print shop kept "cheap" off the list because cheap business cards sell well |
| Wrong meaning | "event log", "event viewer" (computer terms) | Reseller added "event" to its own list for the opposite reason |
| Sensitive news words | accident, collapse, stampede, cancelled | Jewellery seller added "stolen" and "recall" |
| Competitors (as a brand list, not keywords) | Names of three rival planners | Reseller excluded vendor brand names it isn't licensed to sell |
Review the list quarterly. A word you excluded in spring (the print shop's "cheap") may be exactly what customers type in autumn.
What the AI wrote on your behalf: reviewing generated assets
Generated text and pages are where claims slip through. The asset report in Performance Max shows the headlines and descriptions that served, including generated ones; in Meta, the ad preview and Advanced preview show what enhancements will do. Some illustrative catches:
- An offer that doesn't exist. The events company's generated headline read "Free venue finding for every couple". The site mentioned free venue finding once, in a 2024 promotion page. Switching off Final URL expansion and adding URL exclusions stopped the AI finding that page.
- A material claim. A jewellery seller's text customisation produced "Solid gold stacking rings" when the rings are gold-plated. That isn't a tone problem; it's a false claim in an ad. The tutorial on backing up every claim AI writes in your marketing covers how to catch these.
- The wrong landing page. A software reseller's ads for "Microsoft 365 migration" were landing on its careers page, which happened to mention migration projects. Final URL expansion off, and an exclusion rule for /careers, fixed it.
- A search term with the wrong intent. A print shop's AI Max campaign matched "free printable birthday cards", a search from people who want to print at home. It became a negative keyword the same day.
Keep a simple record of what you approved and what you removed, with dates and screenshots. If a customer complains about an ad, that record shows what you knew and when. It also stops the same mistake returning after a colleague edits the campaign.
A weekly six-week check that takes 40 minutes
The first six weeks are when most problems appear, because the system is still exploring. Put this in the calendar for the same time each week, and batch changes into that slot rather than tinkering daily, since every change can reset learning.
- Search terms (15 minutes). Read the new search terms, add negatives for anything irrelevant or unsuitable.
- Placements (10 minutes). On Google, check where Display and YouTube ads showed; on Meta, break results down by placement in Ads Manager. Exclude anything that surprises you.
- Generated assets (10 minutes). Read every new AI-written headline and description. Remove anything inaccurate, off-brand or promising what you don't offer.
- Landing pages (5 minutes). Check which URLs received clicks. Any page you didn't choose deserves a look.
After six weeks, drop to a monthly check unless you change the offer, the website or the budget. If you're still deciding how much to spend before judging an AI campaign at all, the tutorial on what to spend on AI-run ads before judging results helps set that number, and the guide to Performance Max mistakes small businesses make covers the non-brand-safety errors.
When something unsuitable gets through anyway
No setting is perfect, and both platforms say so. If a customer sends you a screenshot of your ad somewhere awkward, or you spot a generated claim that isn't true:
- Capture it. Screenshot the ad, the placement and the date. Ask the customer where they saw it if they haven't said.
- Stop the specific cause. Remove the asset, exclude the placement or add the negative keyword. Pause the whole campaign only if you can't find the cause, because a full restart loses the learning you have paid for.
- Answer the customer. Thank them, say what you've changed, and don't blame the platform in public. Their complaint is about your name, not Google's or Meta's.
- Tighten one level if it repeats. One bad placement is bad luck; two in a month suggests moving from Expanded to Moderate on Meta, or from Maximum to Moderate on Google.
Tighter settings cost reach, and both platforms warn that stricter inventory can raise costs. Most small businesses end up on the middle setting, with precise exclusions and switched-off text generation doing the real work. If you're weighing whether Advantage+ suits you at all, see whether a small business should use Meta Advantage+.
Brand safety questions about AI-run campaigns
Will tighter brand safety settings make my ads cost more?
They can. Meta says its Moderate and Limited inventory settings lower reach and may increase costs, and Google says Limited inventory may limit reach and performance. For most small businesses the middle setting is a sensible default, with the strictest level kept for brands that sell to children or deal with sensitive subjects.
Can I see every website and app where my Performance Max ads appeared?
You can see placement and search-term information in reporting, and you can exclude placements at account level, which Performance Max respects. Google also says it can't guarantee that exclusions catch all related content, so reviewing the reports regularly still matters.
Do Meta's account-level settings apply when I use Advantage+ placements?
Yes. Meta says brand suitability controls set on the ad account, such as the inventory filter, block lists, topic exclusions and content type exclusions, are applied automatically when people create ads, even when they choose Advantage+ placements. The inventory filter can be made stricter on an individual ad set, but not looser than the account.
Should I pause a campaign as soon as something unsuitable appears?
Pause the specific ad, asset or placement rather than the whole campaign where you can, then add the exclusion that would have prevented it. Large changes to budget, bids or assets reset the learning phase, so fix the cause precisely instead of starting over.
Who is responsible if an AI-written headline makes a false claim?
You are, as the advertiser. The platform generated it, but it runs under your name and on your account. Review generated assets before and after launch, keep a record of what you approved, and switch off text generation if you can't review it.
Further reads
- Can AI Manage Your Google Ads Without an Agency? — What AI can and can't do if you run Google Ads without an agency.
- How to Check AI-Generated Images for Errors Before Posting — Check AI images for errors before they appear in ads.
- How to Label AI-Generated Images and Video on Social Media — When and how to label AI-made visuals in your marketing.
- AI Error Log: Track Mistakes and Stop Them Happening Again — Log ad incidents so the same slip doesn't happen twice.
- Brand Guidelines for AI Images: Colours, Style and Limits — Set the visual rules AI-generated creative has to follow.
- AI Incident Response Plan for Small Businesses (With Template) — A template for handling an AI mistake that reaches customers.
- Which Marketing Tasks Should a Small Business Never Hand to AI? — Fourteen marketing tasks where AI may draft but must never decide or publish, each with a real-looking failure, plus a sign-off policy you can copy.
- AI Tools and AI Development: The Complete 2026 Guide — the AI hub, including every tutorial in the AI-for-business series.
Sources: Google Ads Help (About content suitability; How to use brand suitability features in Performance Max; About Final URL expansion in Performance Max; About brand guidelines; How AI Max for Search campaigns works; Performance Max optimisation tips); Meta Business Help Centre (brand suitability controls on ads and ad accounts; About inventory filter; Advantage+ creative enhancements and how to turn them off). Checked September 2026.