Running a pre-launch marketing compliance check

It is 16:58 on a Thursday. Media is booked for midnight, five creators have their posting slots, and someone asks where the substantiation for "up to 4.5%" is saved. Nobody knows. The launch gets pulled, and the first two days of booked inventory are gone.

A pre-launch check exists to make that question boring. It is an operational routine: a fixed artefact list, a fixed order of sign-off, a verification step on each platform, and a file you can hand a regulator eighteen months later. This lesson follows one campaign through it.

The campaign on the table

Take a UK consumer fintech running a three-week acquisition push. Four channels:

• paid social on TikTok and Meta: six video cuts, two statics
• five paid creators, briefed but not yet filmed
• an in-app referral offer, £20 a side
• a landing pagelanding pageA standalone web page built for a single campaign goal, designed to maximise conversions by removing distractions and focusing visitors on one action.View full definition → and three email sends to the existing base

Whether each of those counts as a financial promotion and who inside the firm holds the approval permission was settled before this point (the foundations lesson sets out scope and approvers). Assume the answer is yes for all four, and that the wording itself has already been drafted against the standards the messaging lesson covers. What follows is the operational layer: getting it reviewed, verified and filed.

The artefact list

Reviewers cannot sign off a screenshot pasted into Slack. The pack contains six things.

Final creative in the format and dimensions it will actually ship in. A risk warning that reads fine on an artboard can be unreadable at 9:16 on a phone with the caption overlay sitting on top of it. Reviewers who only see the design file miss this every time.

The media plan: platforms, geographies, audience definitions, budget per channel. Geography changes the regime. The same asset pointed at Dublin instead of Manchester leaves the UK rules and lands somewhere else, and the audience definition matters because targeting choices carry the fair-treatment obligations covered elsewhere in this module.

A substantiation folder, one document per quantitative claim, each dated and owned by a named person. "Save £500 a year" needs the assumptions written down: average balance, comparison product, period, source of the competitor rate. If the comparison rate came from a competitor's website, the folder needs the screenshot, not the URL.

Creator briefs plus the contract clause giving you pre-publication approval and takedown rights within a stated number of hours. Without that clause you are negotiating, not instructing.

The landing page and the full flow behind it: app store listing, first-run screens, the point at which the £20 bonus terms appear.

The customer list logic for email, including exclusions.

The sign-off chain

Serial, not parallel. Sending the pack to five reviewers simultaneously produces contradictory edits and a version nobody has approved as a whole. One compliance reviewer, then the approver, then the business owner who confirms the media plan matches what was reviewed.

Run it three times, not once. Concept review at brief stage costs a fifteen-minute call; the same objection raised on final creative costs the launch date. Second pass on near-final assets. Third pass on the exact files going to the ad account.

Budget ten working days for a multi-channel promotion, and treat creator content as a separate track: the final cut, with the disclosure visible in the frame, reviewed at least 72 hours before the posting slot. Reviewing the brief is not reviewing the post. Creators improvise, and the improvisation is what gets reported.

Platform verification

Platform approval is not regulatory approval, and the two fail in different directions.

The major platforms require proof of local authorisation before a financial services advertiser can run. Verification sits at account level and takes days, so it belongs in the reverse calendar, not in launch week. TikTok also treats financial services as a restricted category in its branded content rules, which means a creator post tagged as branded content can be removed on platform grounds even when your compliance team has cleared every word of it. Route paid creator content through the ad product instead, and check the toggle state on each post rather than trusting the brief.

Verify geogeoThe practice of making your brand and content visible and citable inside AI-generated answers from tools like ChatGPT, Gemini and Perplexity.View full definition →-targeting on the live campaign, not in the plan. A UK-only promotion leaking into another market is a scope problem you created with a checkbox.

The other direction: nothing pre-clears non-broadcast ads in the UK. TV and radio go through Clearcast and Radiocentre; a poster or a paid social ad goes live on your own judgement and gets ruled on afterwards. The ASA upheld a complaint against a Coinbase ad in 2021 on the grounds that it did not make the risks of crypto investment clear. The ad had already run.

The two checks teams skip

The destination, and whether it can stand up. Coinbase's February 2022 Super Bowl spot was a bouncing QR code and little else. The traffic that followed overwhelmed the destination. Treat capacity as part of the review: a promotional promise that lands on a failed page or a queue is a customer outcome problem, not just an engineering one, and the flow behind the click carries disclosure obligations the ad itself does not.

Firm-level restrictions that have nothing to do with the copy. Since 8 October 2023 the FCA's crypto promotion regime has required a 24-hour cooling-off period for first-time investors and banned refer-a-friend incentives. That £20 referral offer is ordinary practice for a current account and prohibited for a crypto product, and no amount of careful wording fixes it.

Restrictions can also be specific to your firm. In October 2024 the FCA fined Starling Bank about £29m over financial crime control failings, including opening accounts for high-risk customers after the bank had agreed in 2021 to a requirement not to. The marketing consequence of any such requirement is immediate: acquisition targeting the restricted segment has to stop, whatever the creative says. Check the firm's current permissions and any voluntary requirement before the media is booked, because a campaign paused after launch still bills.

The FCA's financial promotions guidance sets out what "clear, fair and not misleading" looks like in practice, with worked examples from enforcement cases.

The evidence file

The test is retrieval speed. Someone asks what a specific banner said on 14 March 2025, who approved it and on what evidence. Ten minutes is a good file. Two days of digging is a finding.

Store the asset itself, not a link to it. Ad platforms are not archives: creative disappears when campaigns end, ad library coverage varies by ad type, and creators delete posts. Download every live asset and capture creator posts as recorded video with the disclosure visible. Keep the approver's name and timestamp against a version number, the substantiation folder as it stood on approval day (not as it was later corrected), the media plan as run, and a takedown log with reason and time elapsed.

Retention runs to years, and it varies by product and regime, so the workable default is the longest period that could apply to anything in the pack. Assume the person who ran the campaign will have left.

🎬 [VIDEO: "How the CFPB Regulates Financial Advertising" - youtube.com - search for CFPB or Consumer Finance explainer channels covering Regulation Z and UDAP enforcement basics, useful for a plain-language walkthrough of US disclosure rules]

What changes after the second pull

Teams that stop losing launch dates make four structural changes: compliance sits in the brief review, a shared library holds pre-approved risk warnings and calculation templates so nobody rewrites them at 17:00, each channel has a named sign-off owner because character limits force different disclosure formats, and the reverse calendar starts from platform verification rather than from creative delivery.

Key Takeaways

• The pack, not the asset: final creative at shipping dimensions, media plan with geographies, substantiation folder, creator contracts, the full post-click flow and the email list logic all go into review together.
• Sequence sign-off serially with three passes (brief, near-final, final files) and budget around ten working days; creator content needs the actual final cut reviewed, typically 72 hours before posting.
• Platform verification is an account-level task that takes days, and platform clearance is not regulatory clearance: in the UK, non-broadcast ads have no pre-clearance body, as the 2021 ASA ruling against a Coinbase ad shows.
• Check firm-level constraints before booking media. Crypto promotions carry a 24-hour cooling-off requirement and an incentives ban since October 2023, and a firm operating under an onboarding restriction (Starling was fined roughly £29m in 2024 partly for breaching one) cannot run acquisition into that segment at all.
• Build the evidence file for retrieval: downloaded assets, version numbers, named approvers with timestamps, substantiation as it stood on approval day, and a takedown log. Ad platforms will not keep it for you.