UGC operations: eight gated states from admitted brief to acceptance, payment and closure

A UGC marketplace workflow should move an asset only when the next decision has evidence. A completed upload is not approval. Nor does a platform status settle creator authority, advertising recognition, intellectual property, safeguarding, privacy, accessibility or payment.

This guide follows one fictional England commission, F-UGC-01. One English brand unit wants one 20-second vertical video for one buyer-controlled social account.

The creator is not yet selected. Product, claim, fee, usage term and publication date stay blank, and the fixture holds no real person, account credential or audience data. The buyer can rehearse the operating system without pretending a campaign ran.

Every lane is non-compensating. A fail or unresolved finding produces HOLD, even if other reviewers approve their parts.

What to take away

Give the commission one record

The commissioning owner opens F-UGC-01 with a legal buyer entity, decision owner, asset specification, proposed channel and acceptance definition. The brief identifies who may approve spend, select and contact a creator, change copy, accept delivery, publish, stop distribution and authorise correction.

Keep actors distinct: the brand owns its brief and product evidence; a marketplace operator runs the contracted service and an agency may coordinate work.

A representative may act for a creator only within evidenced authority. The creator makes the agreed asset, and specialist reviewers decide within their remits.

Account publisher controls final release; finance reconciles obligations and payment; a role name or software permission does not transfer another party's duty.

Before any contact, record the creator-source field, permitted use, freshness, claimed or verified status, correction route and owner. Do not infer residence, age, authority, audience composition or suitability from a profile. The workflow admits evidence, not impressions.

State 1: authority and brief admitted

The commission starts as PROPOSED. It can become BRIEF ADMITTED only when the buyer proves the commissioning authority and supplies a controlled brief version. The record needs the product, intended audience, objective, one asset, one channel, required format, prohibited content, accessibility outputs, correction route and expiry date.

Objective claims enter a separate evidence register. CAP Code Section 3 says marketers should hold documentary substantiation before distributing objective claims. The advertising reviewer links each proposed claim to a current source and writes the limits. Unsupported wording is removed or the job remains on HOLD.

Commercial recognition is another decision. CAP Section 2 requires marketing communications to be obviously identifiable. CMA guidance for brands covers incentives, brand responsibility, monitoring and prompt correction. A disclosure control helps with recognition; it does not substantiate the product claim.

State 2: creator route and authority checked

The selection owner may review only records admitted under the buyer's approved source and data rules. Record why a candidate meets observable brief criteria, which statements remain supplier or creator claims, and who can correct them. Selection does not authorise outreach. The privacy and PECR reviewer decides whether a proposed contact route may be used for this purpose.

Before contracting, verify the legal parties and the representative's authority. Define who supplies the performance, who receives each consideration, who approves edits and who grants rights. Where age is uncertain, stop and send the case to the safeguarding owner.

Department for Education child-performance guidance concerns specified performances and activities in England. It supports a case-specific check, not age estimation or a universal conclusion about online content.

State 3: contract and rights accepted

The commercial owner records the deliverable, acceptance event, review rounds, cancellation, creator consideration, marketplace or agency charge, invoicing, correction and exit. Finance records the payer and payee separately. If platform reporting may apply, HMRC's page about selling services on a digital platform explains narrow seller and reporting concepts; an accountant and tax adviser must apply them to the actual arrangement.

Rights are not buried in the deliverable label; register covers script, performance, footage, stills and product material. Music, trade marks, likeness, territory, channel. Duration, editing, paid use, reuse, sublicensing; withdrawal included.

The IPO's commissioned-work guidance says the creator is usually the first copyright owner unless otherwise agreed in writing. Payment or file delivery alone does not prove buyer holds every required permission.

The gate accepts a named document and version for each authority. Missing music or featured-person permission is a stop, not an issue to settle after publication.

State 4: production released under controls

Production receives only the approved brief and minimum necessary information. Creator, representative, agency and marketplace see the fields their tasks require. The privacy owner records controller and processor reality, instructions, access and retention.

ICO contract guidance covers assistance, security and return or deletion terms, but does not set the roles for F-UGC-01; wider guidance needs a publication-day DUAA status check.

Use a version register for scripts, raw material, edits and review copies. Each item has a creator, timestamp, checksum or other stable identifier, permitted recipients and status. Comments do not overwrite the source. A rejected cut stays linked to the reason and replacement.

Accessible production is designed into the brief. GOV.UK guidance on accessible communication formats discusses approved source text, captions and supplier hand-offs for government communications. A private brand can use those points as operational prompts, but qualified accessibility review of the exact asset and channel is still needed.

State 5: independent review and acceptance

The production owner cannot approve their own work on behalf of every specialist. The claim reviewer checks the words and overall impression against admitted evidence. The advertising reviewer checks recognition and placement in the intended format. Rights counsel checks the asset version against the permissions. Safeguarding, privacy and PECR, accessibility, security and finance owners each issue a dated decision.

Acceptance means the file matches the contracted specification. It does not mean publication is permitted. Record the accepted asset identifier, open defects, approved exceptions and expiry. No exception may turn a failed non-compensating gate into a pass.

If the supplier replaces a creator, changes a subprocessor, changes the platform path or exports a different file, return to the relevant earlier state. The team should not patch the record with an informal note and continue.

State 6: publishing is a controlled release

The account owner prepares a release candidate using a buyer-controlled account. NCSC guidance on protecting social media publishing covers account logging, credential protection, managed devices and recovery. Give the publisher only the access needed, keep credentials out of briefs and supplier messages, and rehearse revocation before the scheduled release.

Inspect the live-format preview, disclosure position, captions or transcript, link destination, claim wording and account identity. Platform approval cannot replace the buyer's checks. Record the publication identifier and time only after all gates pass. F-UGC-01 has none, so its current state cannot move beyond HOLD.

State 7: monitor, correct or withdraw

Monitoring covers the exact published asset, not every mention of the product. The register identifies who checks disclosure persistence, claim accuracy, rights term, accessibility, account access, complaints and platform notices. It also defines the evidence source, frequency and escalation route without inventing a universal service level.

A suspected defect moves the record to PAUSED REVIEW. The publishing owner can restrict or withdraw the asset while the relevant specialist investigates. Preserve the original evidence, decision time and corrected version. CMA guidance tells brands not to ignore improper labelling and to work promptly with creators and intermediaries to correct it. Correction should not silently erase the audit trail.

A security event follows the incident plan rather than the content-approval route. NCSC incident-management guidance covers contacts, escalation, decision-making, evidence capture and recovery planning. The security owner decides containment; the brand separately decides consumer and advertising correction.

State 8: payment, exit and closure

Finance matches the accepted deliverable, contractual event, invoice and approved consideration. A publication metric is not proof that payment terms were met. Disputes, refunds and deductions remain separate entries with owners and evidence.

Closure needs more than a paid invoice. Revoke supplier and individual access, export the brief, contract, accepted asset, evidence, decisions, publication record, correction history and finance record. Confirm which copies must be retained, returned or deleted and who can prove completion. Test that the buyer can read the export and operate the withdrawal route without the supplier.

The record becomes CLOSED only when every owner signs their field or documents a lawful retention exception. A rights expiry or later substantiation change can reopen the asset for withdrawal even after commercial closure.

Run the operation from exceptions

A useful daily view shows blocked states and expiring evidence before activity totals. Queue missing creator authority, an unresolved age question, unsupported claim text, rights gaps, inaccessible renders, excessive access, invoice mismatch, overdue correction and failed export separately. The queue owner records the next decision and evidence needed.

Do not reward throughput that bypasses review. Measures should describe a defined event and population, such as accepted assets with complete rights evidence, divided by eligible accepted assets in the period. The buyer sets thresholds only after observing its own process and error costs. A marketplace dashboard does not prove completeness.

Publication decision for this guide

F-UGC-01 remains HOLD. No creator, product evidence, consideration, rights schedule, accessible final render, account configuration, specialist decisions or recovery test exists. That is the honest result of the fictional fixture.

Before this guide or a real workflow is used, assign named UK advertising and consumer, IP, privacy and PECR, safeguarding, accessibility, security, commercial, finance and tax reviewers. Recheck every time-sensitive source and the actual platform path on publication day. The process can organise evidence; it cannot guarantee lawful operation, safety, quality or a campaign outcome.

Before you act

Common questions

What must the buyer prove before the commission moves from PROPOSED to BRIEF ADMITTED?

The buyer must prove the commissioning authority and supply a controlled brief version. The record then needs the product, intended audience, objective, one asset, one channel, required format, prohibited content, accessibility outputs, correction route and expiry date. Objective claims go into a separate evidence register with a current source.

Why can the production owner not approve their own work?

The production owner cannot approve their own work on behalf of every specialist. The claim reviewer checks the words and overall impression against admitted evidence. The advertising reviewer checks recognition and placement in the intended format. Rights counsel checks the asset version against the permissions. Safeguarding, privacy and PECR, accessibility, security and finance owners each issue a dated decision.

What happens if the supplier replaces a creator or exports a different file?

Return to the relevant earlier state. The text says the team should not patch the record with an informal note and continue. The same applies if a subprocessor changes or the platform path changes. Each state depends on evidence, so a changed input invalidates the decisions built on the old one.