Ten contract areas to check for paid social account ownership and evidence

These ten paid social agencies commercial contract areas change control, evidence or continuity. English counsel must draft for the parties and facts.

What to take away

1. Parties, scope and authority

Verify each legal entity, signatory and subcontractor. Define platforms, markets, deliverables, exclusions, acceptance evidence and change control. State who may instruct work and commit spend. A proposal deck should not silently expand the signed service.

2. Account, asset and evidence ownership

Identify the owner of each business account, page, advert account, creative file, audience, pixel, analytics property and export. The client should have a workable recovery route. The NCSC's social account guidance supports access logging where available, controlled credentials, leaver removal and recovery preparation.

3. Billing and media payment

Name the media payer, currency, spending authority, cap, invoice evidence and failed-payment response. Allocate credits and refunds. Set out fees, taxes subject to professional review, expenses, renewal and late changes without suggesting a typical rate.

4. Conflicts, commissions and rebates

Require disclosure of reseller margins, referral payments, platform credits, volume rebates and creator relationships. Record who assesses whether a benefit conflicts with the client's channel or supplier decision.

5. Claims, creative and disclosures

Allocate evidence supply, copy approval, regulated-category review, creator briefing, monitoring, correction and withdrawal. CAP's misleading advertising rules (CAP Code section 3) require documentary substantiation for objective claims before publication. Platform approval is not contractual acceptance by the client or regulatory clearance.

6. Data roles and Article 28 terms

Map controller, joint-controller and processor roles by activity. Where processing is on instructions, include the applicable UK GDPR Article 28 requirements. The ICO's contract guidance covers instructions, confidentiality, security, subprocessors, assistance, deletion or return and audit information. It is under review after the DUAA, so check current law and guidance before signature.

7. Platform access, change and suspension

Record individual permissions, administrator controls, policy-change monitoring and what happens if an account or feature is restricted. LinkedIn's Ads Agreement illustrates that platform terms can govern accounts, optional analytics and audience services. The parties' contract should not promise access a platform controls.

8. Measurement and acceptance

Define every metric's population, numerator, denominator, unit, period, timezone, source, attribution window and exclusions. State how platform events reconcile to client records. Separate attributed activity from any causal outcome; do not make payment acceptance depend on an undefined dashboard label.

9. Security, incidents and accessibility

Set access safeguards, log availability, incident contacts, evidence preservation and internal notification. Specify accessibility deliverables and test records for advert and destination, informed by WCAG 2.2 where appropriate. A security certificate or accessibility statement supports only its stated scope.

10. Liability, termination and continuity

Qualified counsel should address liability, indemnities, insurance and remedies. Define termination triggers, campaign pause, billing closure, access revocation, exports, retention, deletion propagation, creative handover and supplier cooperation. Test the exit while relationships are healthy. No single clause compensates for a missing privacy, advertising, security or commercial gate.

Attach a continuity schedule naming the client administrator, emergency media contact, evidence location and replacement access route. Set an order for conflicting instructions and an escalation clock. The schedule should allow authorised containment without deciding the ultimate dispute, and it should say which essential records remain available while legal and commercial questions are resolved.

For example, one clause could name the client marketing lead as administrator and the agency operations lead as emergency media contact. It could also name a shared folder as the evidence location and the client's IT owner as the replacement access route.

It could also set a same-day escalation clock and allow either party to pause spend without ending the contract.

Before you act

Common questions

What should the contract say about ownership of accounts and assets?

Name the owner of each business account, page, advert account, creative file, audience, pixel, analytics property and export. Set access controls, leaver removal and named credentials. Keep the evidence trail with the client.

How should measurement and acceptance be defined?

Set the population, numerator, denominator, unit, period, timezone, source, attribution window and exclusions for every metric. Reconcile platform events to client records. Link payment to attributed activity, not to an undefined dashboard label or a causal outcome.

What must happen on termination to keep campaigns running?

Use the continuity schedule for termination triggers, campaign pause, billing closure, access revocation, exports, retention, deletion propagation, creative handover and supplier cooperation. Name the client administrator, emergency media contact, evidence location and replacement access route, with an escalation clock.