The worst version of this call starts with a brand manager forwarding me a screenshot at 11pm. By the time it reaches me, it has already left the building. Their customers have seen it. Their boss has seen it. I am the third person to learn about a problem that started on a channel we were paid to watch.

In roughly 1,200 integrations over three years, I have never had to take that call. This letter is about why.

Every brand brief I read mentions brand safety. It is usually one paragraph: the agency will ensure the creator's content aligns with the brand's values. Sometimes there is a list of categories to avoid. That paragraph is the agency's hope, written down. It is not a protocol.

The honest version of why most agencies stop there: the clause is what the RFP asks for, and it is cheap. Incidents are rare enough that most quarters, skipping the protocol pays off. It is a rational gamble. It works right up until the quarter it doesn't, and that quarter costs the campaign budget twice: once to run it, once to repair it.

Brand safety almost never fails because nobody read the contract. It fails because the contract was the whole system. Once it is signed, nobody on the agency side is watching until something circulates.

The three windows where brand safety actually fails

Every incident I have studied lives in one of three windows. None of them is the integration itself.

Window 1: Pre-signing — the creator's prior content

Five years of video, the comment surface underneath it, public statements on other platforms, and the pattern of who they have collaborated with. Most agencies check the last quarter and a few platform buttons. We pull the full back catalog and sample comments at scale. It is slow. It catches things. We have walked away from creators who would have been our most profitable signings of the year on the strength of one thing in that catalog.

Window 2: Mid-campaign — what the creator does while the integration is live

The integration is live for weeks, and so is the creator. Most agencies stop watching the day the video ships. We monitor the creator's full output across the window and the comment surface around the integration. Last quarter I watched a creator's tone shift three weeks in. The brand was on a call the same business day, before it became anything.

Window 3: Account integrity — the part that produces the headlines

A compromised account. A hijacked livestream next to a sponsored post. An AI impersonation publishing content the creator never made. Recovery is measured in hours, not business days. If the agency has not pre-built a response, the brand finds out from a support inbox. We treat account integrity as part of the deliverable: the contract has the clauses, the protocol has the contact tree and the timeline.

What "zero incidents" actually requires

Zero is not a marketing number. It is the visible end of a stack of decisions that cost real time.

A vetting process that rejects creators who would have been profitable signings. A manager-to-creator ratio low enough that someone is watching in real time. A contract stack with account-recovery cooperation, prior-content disclosure, and crisis timelines written in hours, not business days. And the willingness to walk from briefs where the brand wants the protections but will not pay for the protocol that produces them.

What it costs the brand. What it saves the brand.

Without the protocol

  • Brand discovers issues from screenshots, not from agency
  • Response window measured in business days
  • Old creator content surfaces mid-campaign
  • Hijacked livestream sits next to sponsored post for hours
  • Reputation repair cost is the entire campaign budget, again

With the protocol

  • Issues flagged by agency before they surface publicly
  • Response window measured in hours
  • Prior content reviewed and addressed before signing
  • Account compromise contained within the first response window
  • Brand never learns from a screenshot

The takeaway

If you are a brand reading this, your current agency probably has the brand safety paragraph. Ask them three things: their vetting depth, their mid-campaign monitoring cadence, and their account-compromise response protocol with an actual timeline.

If you get vague reassurance, the protocol does not exist. The contract is the system, and the system has known gaps.

Ask your agency how many brand safety incidents they have had across their roster in the last 12 months. If the answer is not a number, it is not zero. It is unmeasured.

What did your agency tell you last time you asked?

P

Paul

Founder at Not Average. Writing about what we're learning from 70+ creator campaigns.