How to run a creator contracts operating workflow step by step

What to take away

Map the workflow stages

The creator contracts workflow runs in seven steps, and each step has an owner, a slot in the register and a record that shows it happened.

Step 1: intake and triage

Start with a single intake form. It should capture the brand, the creator, the deliverables, the fee, the campaign window and who will approve the final post. Anything missing gets chased before a draft is opened.

Triage separates low-value repeat deals from bespoke ones. A one-post deal with a returning brand needs less review than a twelve-month ambassadorship; the operations and delivery guidance shows how this workflow sits inside a full programme.

Give each deal a reference number. That number follows the contract, the invoice and the disclosure record, so anyone can trace a deal months later without searching inboxes.

Steps 2 and 3: drafting and disclosure review

Draft from an approved template, then change only what the deal requires. Bespoke drafting every time is slow and hides risk.

Disclosure wording should be agreed with the creator before the brief is finalised. The ICO's direct marketing compliance checklist for campaign planning is a useful prompt if the campaign contacts audiences directly: under the Privacy and Electronic Communications Regulations 2003 (PECR), marketing by email or text needs consent, the consent record must show what the person agreed to, and every message needs a working opt-out.

The detail matters. Section 2 of the CAP Code (recognition of marketing communications) requires ads to be obviously identifiable as such, and the ASA enforces that against brands and creators alike. In practice the label has to be clear and up front: '#ad', 'ad' or 'advertisement' at the start of the caption, or a plain 'paid partnership with [brand]' line, not a tag buried in a block of hashtags.

Use the platform's own tool as well — Instagram's paid partnership label, TikTok's branded content toggle, YouTube's paid promotion checkbox — and keep the wording identical in the contract, the brief and the post. Consumer law runs alongside: the Competition and Markets Authority's guidance on social media endorsements expects followers not to be misled about whether a post is an ad, and the CMA can take enforcement action where the commercial relationship is hidden.

Record the exact wording and placement in the contract. If the creator later changes it, the change is a variation, not a detail.

Paperwork is where most workflows leak: sign-off, filings, records and retention each need an owner and a place in the register.

Steps 4 and 5: sign-off and filing

Set a named approver for each deal. One person signs off the contract, and one person signs off the published post. They can be the same person on small deals, but the roles should be written down.

For limited companies, registration and filing duties sit with the company itself, not with the brand or the creator. Companies House publishes the company registration and filing guidance covering accounts, confirmation statements and their deadlines: put the next confirmation statement date and the accounts filing date into the register when the company is set up, so the workflow carries them rather than memory.

File the signed contract, the brief, the disclosure record and the invoice in one folder. If a complaint arrives six months later, that folder is the evidence.

Step 6: records, data and retention

The workflow will collect personal data: names, contact details, payment information. Hold it only where you have a lawful basis, and say how long you keep it.

Personal data must be kept no longer than necessary — the UK GDPR's storage limitation principle — and that is what fixes your retention period. Schedule 12 of the Data Protection Act 2018 makes further minor and consequential amendments to other legislation, so do not assume an old retention note still matches the current position. Set the period for each type of record, write it in the register and review it annually.

Decide who can see what. Freelance producers rarely need payment details, and creators rarely need your internal margin notes; see team roles and data access for how to split access by role so the register stays accurate without exposing more than it must.

Keep the workflow running

A workflow only holds if it is checked on a fixed rhythm and the roles behind it stay clear.

Weekly and monthly checks

Run a weekly register review: deals awaiting signature, posts due, disclosures outstanding. Run a monthly check on filings, retention and any contract nearing renewal.

For example, a team handling fifteen live deals a month might spend two hours a week on this. The point is not the hours but the fixed slot.

Glossary

Common questions

Who owns the workflow?

One operations owner should hold the register and the templates, even if drafting and sign-off sit with others. Without a single owner, deals drift between inboxes.

When should disclosure be agreed?

Before the brief is finalised. Agreeing it at publication stage invites edits, delays and possible regulator complaints.

What should the ad label say?

Use a plain label at the start of the caption — '#ad', 'ad' or 'advertisement' — or a clear 'paid partnership with [brand]' line. Pair it with the platform's disclosure tool, keep it out of a hashtag block, and record the exact wording in the disclosure record so the contract, the brief and the post all match.

How long should we keep records?

Set a period you can justify, write it into the workflow and record it against each type of record — contract, invoice, disclosure record. The UK GDPR's storage limitation principle means no longer than necessary, and the underlying rules can change, so review the periods annually.

This is general guidance only. Individual cases need a qualified adviser.