Skip to main content
no code neededunlimited viewsfree forever

Free BBB Review Widgets via iFrame

Embed BBB reviews on environments that strip <script> tags — locked-down CMSes, SharePoint, ServiceNow, WordPress.com Free, intranet portals. BBB has no official embed at all; BlooTrue's iframe URL works wherever HTML is allowed.

Build Your BBB Review Widget

BBB

Key facts: universal <script>-tag fallback · fills BBB's missing embed gap · no BBB API key required · works on script-restricted CMSes · same renderer as the script embed · manual min-height (600–800px typical)

Last updated ·by Mike Ragimov

SEO + AI schema · paid plans

Star ratings in search results, on paid plans

Paid widgets add schema.org Review and AggregateRating JSON-LD to the page they sit on, so search engines and AI answer engines can read your Google reviews as structured data. The free plan shows the reviews without the schema. See how the schema works

Why Use the iFrame Embed for BBB Reviews?

BBB publishes no embed at all. The iframe approach works wherever HTML is allowed — including the places scripts can't run.

Bypasses Script-Stripping CMSes

Locked-down enterprise CMSes and intranet portals strip <script> tags by policy. The iframe is a static HTML element — it always survives. SharePoint, ServiceNow, WordPress.com Free, custom IT-locked CMSes.

Fills BBB's Missing Embed

BBB doesn't publish any embed widget — script or iframe. BlooTrue's iframe-direct URL is the only BBB-display option for script-restricted hosts (and one of very few even on hosts where scripts work).

No BBB API Key Required

Works with any public BBB business profile. No BBB Fusion application, no API quotas, no business-level claim. Just paste your bbb.org/./profile/your-business-slug URL into the BlooTrue builder on this page.

Same Renderer as Script Embed

The iframe URL is the same endpoint the script loader mounts internally. Pixel-identical BBB review output — same theme, same styles, same data refresh cadence.

What makes a BBB widget different from a Google review widget?

BBB customer reviews are a native 1–5 star system. Knowing how they differ from BBB's A+-to-F letter rating, how profile setup works, and how reviews are moderated avoids surprises after you embed.

BBB customer reviews vs the A+-to-F “BBB rating”

BBB has two separate signals, and this widget shows only one of them. The first is the 1–5 star customer reviews — written by your customers about their experience — with an overall customer-review average; that's what BlooTrue displays. The second is the A+-to-F letter “BBB rating”, which is BBB's own grade for how a business interacts with BBB (complaint history, transparency, time in business, accreditation status) — the widget does not show this letter rating or the accreditation seal. BlooTrue renders each customer review exactly as stars: a 5-star review shows 5 stars, a 3-star review shows 3, and the header shows your real BBB customer-review average and count. The header rating always comes from BBB's own published customer-review aggregate, never from averaging the individual cards on screen.

Where the reviews come from and how often they refresh

BlooTrue fetches the publicly-visible customer reviews from your BBB business profile on a server-side schedule — roughly once every 24 hours on paid plans — and caches the result. Your site never calls BBB directly, so visitor traffic to your page doesn't depend on BBB being reachable, and the widget loads instantly from cache. Only reviews that are public on your profile are included. Each review keeps its reviewer name, star rating, and text, and links back to your BBB business profile.

Accreditation, profile setup, and what shows up in the widget

You do not need to be a BBB Accredited Business to use this widget — it works with any public BBB business profile, accredited or not. Reviews only appear if your profile is public and has customer reviews. If your profile is brand new or has zero reviews, there's nothing for the widget to import yet — it will populate as soon as your first public customer review lands. Once your profile has reviews, the widget shows whatever is public: no more, no less. If a review disappears from your widget after a sync, it almost always means the customer deleted it or BBB removed it — the widget simply follows your profile's public state.

Moderation, review guidelines, and attribution

BBB moderates customer reviews under its review guidelines and removes spam, fraudulent submissions, and content that violates its policies. Because BlooTrue reads only your profile's public reviews, the widget automatically reflects those removals on the next sync — you never display content BBB has already taken down. Every card keeps the BBB mark and the reviewer's name, and clicking a review links back to your BBB business profile, so attribution stays intact. BlooTrue never fabricates a rating: an empty star-only review (a star rating with no written text) is still shown as a real review, and the header number is always BBB's own customer-review aggregate.

BBB tips for plain HTML / iframe embed

  • For raw HTML sites, the BBB widget loads inside its own iframe so it cannot pollute or be polluted by parent-page CSS.
  • If your site uses Content Security Policy (CSP), add `frame-src https://www.blootrue.com` to allow the BBB widget iframe.
  • The BBB widget works inside an iframe even on sandboxed HTML environments (e.g. CodePen embeds, MDN-style sandboxes).

Want more on BBB itself? See the BBB widget overview or our guide to the best review widgets for websites.

How Do I Embed BBB Reviews via iFrame?

Four steps. The only manual bit is extracting your widget ID from the standard snippet.

1

Build Your Widget and Get the Embed Code

Use the BlooTrue builder on this page. Paste your BBB business profile URL (e.g. bbb.org/./profile/your-business-slug), pick a style, then click Get Embed Code below to grab the standard snippet.

You only need a single value out of that snippet — the widget ID. Step 2 covers it. No BBB API key required.

2

Pull the Widget ID Out of the Snippet

Read the snippet — your ID is the part after blootrue-widget- in the <div> class.

Example — given class="blootrue-widget-abc123", the ID is abc123. Copy just that string.

3

Replace the Snippet with an iFrame Tag

Replace the standard <script> + <div> snippet with this iframe instead:

<iframe
 src="https://api.blootrue.com/api/widgets/embed/YOUR_ID/render"
 style="border:0;width:100%;min-height:600px;"
 frameborder="0"
 title="Reviews">
</iframe>

Swap YOUR_ID for the ID you grabbed in step 2. The iframe URL is the same endpoint the script loader mounts internally — same BBB widget, just a different mount strategy.

4

Paste the iFrame Wherever You Can Write Raw HTML

Paste the iframe wherever you can write raw HTML — locked-down CMSes, SharePoint web parts, ServiceNow content blocks, Notion HTML embeds, headless CMS rich-text fields, intranet portal pages.

Heads-up: iframe mode loses auto-resize, so set min-height generously. 600–800px is typical for BBB widgets — pick the higher end for Grid or Masonry styles. If you set min-height too low you'll see internal scrollbars in the widget.

Reviews still auto-sync from BBB every 24 hours.

Where Does iFrame-Only Embed Make Sense for BBB?

Whenever the host environment strips <script> tags. BBB has no official embed at all, so the iframe URL is the only BBB-display option in these cases.

Locked-Down Enterprise CMSes

IT departments often configure CMSes to strip <script> tags as a baseline security policy. Iframe always survives the filter — and there's no BBB-first-party fallback that works there at all.

SharePoint and ServiceNow Intranets

Intranet portals frequently block third-party scripts via Content Security Policy. They typically allow iframes via a dedicated "Embed" or "Page Viewer" web part. Paste the iframe URL there directly.

WordPress.com Free Plan

WordPress.com on the Free plan strips inline scripts. Self-hosted WordPress.org has no such restriction. If you're on WordPress.com Free, the iframe embed is the only path to displaying BBB reviews.

URL-Only Embed Slots

Notion, some wikis, and headless CMSes whitelist embeds by domain rather than by script. The iframe URL pastes directly into their "Add an embed" or "Embed URL" field — no HTML editing required.

HTML Newsletters and Email Signatures

Most email clients strip both scripts and iframes, but some preserve iframes (HubSpot signatures, certain Apple Mail templates). When iframes survive, BlooTrue's iframe is the only BBB-display option that works in that channel.

Compliance-Strict Environments

Healthcare, legal, and government sites that audit every <script> on a page often prefer iframes because the JavaScript surface area is fully sandboxed. Easier security review, fewer audit exceptions.

How BlooTrue iFrame Compares to Other BBB-Embed Options

BBB doesn't offer an embed. Most third-party widgets are script-only. Here's how the iframe path compares.

CapabilityBlooTrue iFrameBBB officialScript-only widgets
BBB embed available at all
Direct iframe URL published
Works on script-stripping CMSes
No BBB API key needed
Sometimes
Free embed
Higher tier
No widget view caps
Pricing for full features$9/moN/A$15+/mo

BBB Review Widget for iFrame — Universal Embed for Script-Restricted Environments

BlooTrue's BBB Review Widget for iFrame is a free embed for environments that don't allow <script> tags — locked-down CMSes, intranet portals, email-style HTML, and any platform that strips JavaScript loaders. It's the universal escape hatch when the standard script embed is blocked. For BBB specifically this matters more than for any other source: BBB publishes no embed at all (neither a script widget nor an iframe URL), so on script-restricted hosts there is literally no BBB-shipped option that works. The iframe approach works wherever HTML is allowed. Common targets: locked-down enterprise CMSes that strip <script> tags as a security policy; email signature platforms (HubSpot, Apple Mail templates) where iframes sometimes survive but scripts almost never do; intranet portals like SharePoint and ServiceNow CMS where IT blocks third-party scripts; the old WordPress.com Free plan (which strips scripts); platforms with a "URL-only" embed slot like Notion, some wikis, and headless CMSes that whitelist by domain; and HTML newsletters where the recipient's email client strips scripts but preserves iframes.

Same renderer, different mount point

The iframe URL https://api.blootrue.com/api/widgets/embed/YOUR_ID/render is the same endpoint the standard <script> loader mounts internally. iframe mode renders the exact same widget, just without the auto-resize and the script-driven mounting. Tradeoff: simpler integration, fixed height (you setmin-height manually). Visually pixel-identical to the script-embed output.

Why doesn't BBB have an iframe embed of its own?

BBB's Fusion API is positioned as a partner-channel product (used by sites like Apple Maps and Trivago) rather than as a merchant self-service product. BBB does not publish a paste-ready widget the way Google publishes Place Cards — and they don't publish a direct iframe URL either. Third-party widgets are the only way to surface BBB reviews on your own pages. BlooTrue's iframe-direct mode is the free option in that category, and the only one that works on script-restricted hosts.

About BBB reviews in this widget

A BBB widget carries the customer reviews posted on your BBB business profile, each with the 1 to 5 stars the customer gave. The figure in the header is the profile's customer-review star average and how many reviews BBB lists, never the letter grade: the A+ to F rating is BBB's own grade for how your business deals with BBB, complaints included, and stays separate from what customers write. Accreditation is not required. Some owners paste the BBB Accredited Business seal expecting reviews, but the seal only displays the letter grade and accreditation status.

Frequently Asked Questions

Can my A+ BBB rating be the number in the widget header?

No. The header shows the star average of your BBB customer reviews, pulled from your public profile, together with the review count. The A+ to F letter grade is BBB's own assessment of how you interact with BBB and stays separate from customer reviews, so a profile can hold an A+ alongside a 3-star average.

I am not BBB accredited, can I still put my BBB reviews on my site?

Yes. Accreditation is a separate BBB status and the builder does not check for it; it reads any public BBB business profile from its URL, accredited or not. The BBB Accredited Business seal is a different thing again: it displays your letter grade and accreditation status, not the customer review cards you want on the page.

Do BBB complaints show up in the review widget?

No. BBB keeps complaints and customer reviews as separate records on your profile, and the widget imports only the 1 to 5 star customer reviews. Complaints feed into the letter grade, which the widget does not show. A free widget shows the customer reviews as of the day you built it; paid plans re-check your profile daily.

Why use the iframe embed for BBB instead of the standard script embed?

Use the iframe embed when the host environment strips <script> tags. The standard script loader is the recommended path because it auto-resizes and mounts inline. But on locked-down enterprise CMSes, SharePoint, ServiceNow, WordPress.com Free, intranet portals, and HTML newsletters, scripts get stripped as a security policy. For BBB specifically this matters even more: BBB has no official embed widget at all, so there is literally no first-party fallback. BlooTrue's iframe-direct mode is the only path on those hosts. The iframe URL is the same endpoint the script loader mounts internally, so the widget itself is identical.

What environments require the iframe-only embed for BBB?

Common ones include: locked-down enterprise CMSes that strip <script> tags as a security policy; SharePoint and ServiceNow intranet portals where IT blocks third-party scripts; the WordPress.com Free plan; Notion and other headless CMSes that whitelist embeds by domain; some wikis that allow only iframe URLs; and HTML newsletters where the recipient's email client preserves iframes but strips scripts. Since BBB itself doesn't publish any embed (script or iframe), BlooTrue's iframe-direct is the only realistic path on these hosts.

Does BBB offer its own iframe embed widget?

No. BBB does not publish any embed widget — neither a script-driven one nor an iframe-direct URL. BBB's Fusion API is gated for partner apps, not for merchant self-embedding. BlooTrue's iframe URL fills the entire gap: it pulls reviews from any public BBB business page and renders them inside an iframe that pastes anywhere HTML is allowed.

Do I need a BBB API key or BBB Fusion access?

No. BlooTrue works with any public BBB business profile — no BBB API key, no BBB Fusion application, no business-level claim required. Just paste your bbb.org/./profile/your-business-slug URL into the BlooTrue builder and BlooTrue pulls your real reviews from the public profile.

How do I find my widget ID after generating an embed code?

Generate the standard embed code in the BlooTrue builder, then read the <div> class. Your ID is the part after blootrue-widget- — for example, in class="blootrue-widget-abc123" the ID is abc123. Copy that string into the iframe src URL: https://api.blootrue.com/api/widgets/embed/abc123/render.

Can I auto-resize the iframe to match the widget content?

No — and this is the main tradeoff of iframe mode. Cross-origin iframes can't communicate their natural height back to the parent page without postMessage, and most script-restricted environments also strip postMessage handlers. So you have to set a manual min-height on the iframe. For BBB review widgets, 600–800px is a reasonable default. If you need true auto-resize, use the standard script embed instead.

Does the iframe embed have the same SEO benefits as the script embed?

No — and this is a meaningful tradeoff. The schema.org Review and AggregateRating JSON-LD lives inside the iframe document, not on the host page. Google does not bubble schema from a cross-origin iframe up to the parent page, so star rich snippets won't fire on the host URL via the iframe embed. If you need rich snippets on the host page, use the standard script embed — it injects the JSON-LD directly into the host page's DOM. The iframe embed is purely a visual display option for environments where scripts aren't allowed.

Ready to Embed BBB Reviews via iFrame?

Build your free widget in 60 seconds, swap the snippet for an iframe, and paste anywhere HTML is allowed — including the places BBB has no first-party answer.

Build Your Widget