questrade.com — AI Site Grade

Analysis

I have enough data to write a strong audit. Let me compile the findings.

The key findings are: 1. All AI bots get full 200 access with identical content - no blocking 2. No llms.txt (404) 3. No AI-specific robots.txt rules 4. Sitemap is gzipped at a non-standard path 5. Learning centre is JS-heavy - only 31 words extracted via plain GET 6. Cold LLM knowledge is accurate but mentions customer service complaints - site doesn't address this 7. Rich JSON-LD schema on key pages 8. Hosted on Cloudflare with strong security headers

Let me write the audit.

Questrade AI-Visibility Audit

The site's learning centre, a core asset for AI training signal, delivers only 31 words of visible text to crawlers despite returning a 200 status — a JavaScript-rendering wall that undermines one of the most content-rich sections on the domain.

Crawler Access

All major AI crawlers — GPTBot, ClaudeBot, PerplexityBot, Google-Extended, OAI-SearchBot, Applebot-Extended, Bytespider — receive a full 200 response with identical byte payloads (~197KB) and no UA-based blocking. Cloudflare serves the site with HSTS preload, a strict CSP, and X-Frame-Options: SAMEORIGIN. The robots.txt uses a single User-agent: * rule disallowing only /components/online-chat/, /access-denied, /docs/, and /questmortgage-* paths. No AI-specific directives exist for any crawler. The llms.txt returns a 404. The sitemap lives at /sitemap/sitemap.xml (not the standard /sitemap.xml, which 404s) and is served gzip-compressed with application/octet-stream content type — technically functional but non-standard.

Content & Schema Posture

The homepage and key product pages carry rich, well-structured JSON-LD including Organization, WebSite, WebPage, FinancialProduct, and FAQPage types. The Organization schema includes founding date, founder, address, contact points, social profiles, regulatory memberships (CIRO, CIPF), and product offers. The self-directed investing page uses FinancialProduct with detailed fee breakdowns. The fractional shares page includes an FAQ schema with 6 Q&A pairs. However, the learning centre (/learning) — the site's educational content hub — extracts only 31 words via plain GET. The page is a JavaScript shell: headings and navigation render, but the actual article content, webinars, and guides are loaded client-side. This means AI crawlers that do not execute JS see essentially nothing from the site's most linkable, knowledge-rich section.

Cold-Knowledge Gap

The LLM's prior knowledge of Questrade is substantially accurate and current: it correctly identifies the founding year (1999), founder (Edward Kholodenko), product lines (self-directed, Questwealth robo-advisor), fee structure ($0 commissions, free ETF buys), regulatory status (CIRO, CIPF), and even recent reputational signals (slow customer service, platform outages, margin call complaints). The site itself does not acknowledge or address these service complaints anywhere on the public pages. The gap is not factual inaccuracy but reputational asymmetry — the model knows about customer friction that the site's marketing copy omits entirely.

External Signals

DNS records reveal an anthropic-domain-verification TXT record, indicating Questrade has proactively verified domain ownership with Anthropic (Claude's parent). Multiple Google site verification tokens, OneTrust consent management, and Mimecast email security are present. The site claims "Canada's #1 rated online broker" and "13x winner" of MoneySense's Best Online Broker award, but web search results for these claims were not retrievable through available search tools. The site references "Investor Economics Report Spring 2024" as the source for "largest independent online brokerage" — a specific, verifiable citation.

Findings

1. Learning centre renders as JavaScript shell for AI crawlers High

   The /learning page returns 200 but extracts only 31 words via plain GET; actual article content is loaded client-side, making it invisible to crawlers that do not execute JavaScript.

   What to change: Implement server-side rendering or static HTML fallback for the learning centre content so that AI crawlers can index the full educational material.

2. No llms.txt file available Medium

   The /llms.txt endpoint returns a 404, missing an opportunity to guide AI crawlers to key pages and provide structured context.

   What to change: Create an llms.txt file at the root listing important pages (pricing, self-directed investing, learning centre) and a brief description of the company.

3. Sitemap served at non-standard path with non-standard content type Low

   The sitemap is at /sitemap/sitemap.xml (not /sitemap.xml) and served as application/octet-stream gzip, which may confuse some crawlers.

   What to change: Serve the sitemap at the standard /sitemap.xml path with content-type text/xml or application/xml.

4. Cold LLM knowledge includes customer service complaints not addressed on site Medium

   LLM prior knowledge accurately mentions slow customer service, platform outages, and margin call complaints, but the site's public pages do not acknowledge or address these issues.

   What to change: Consider adding a dedicated page or FAQ section that transparently addresses common customer concerns and outlines improvements.

5. No AI-specific directives in robots.txt Low

   The robots.txt uses a single User-agent: * rule and does not include any AI-specific directives (e.g., for GPTBot, ClaudeBot), leaving all AI crawlers unrestricted but also unguided.

   What to change: Add explicit directives for major AI crawlers to control access and signal which sections are most valuable for training.

What's working

• All major AI crawlers receive full 200 access with identical content — GPTBot, ClaudeBot, PerplexityBot, and others get the same HTML as browsers, with no UA-based blocking or cloaking.
• Rich JSON-LD schema on key pages — Homepage and product pages include Organization, WebSite, FinancialProduct, and FAQPage schemas with detailed attributes like founding date, fees, and regulatory memberships.
• Anthropic domain verification TXT record present — DNS includes an anthropic-domain-verification TXT record, indicating proactive verification with Claude's parent company.
• Strong security headers and Cloudflare hosting — Site uses HSTS preload, strict CSP, X-Frame-Options: SAMEORIGIN, and Cloudflare CDN, ensuring secure and fast delivery.