COMPLIANCEBrand compliance the idea behind the paperwork

Permission and proof, in plain terms.

The concept page · The measures are on the Security page, the contract on the DPA.

What it means

Brand compliance is making sure every use of a brand’s assets happens under the rules attached to them — and being able to show that afterwards. In two words: permission and proof.

Where the rules come from

Your own guidelines — how the brand is allowed to look, sound and be applied.

Rights and licenses — who may use which asset, in which market, during which window, on which channel, in which version. This is the hard part: a photo cleared for EU packaging is not cleared for a US ad, and an expired music license does not expire politely.

External law — advertising rules, disclosures, accessibility, and since August 2026, machine-readability requirements enforced in the EU.

Permission, before it ships

Territory, window, channel and version are checked against your licenses, with the clause cited. Access is scoped by role, so every desk — and every AI tool it connects — sees only what it may use.

Proof, after the fact

Every transaction is logged — human or agent — with the rule it applied and the date. When counsel or an auditor asks, the decision trail answers first.

Why it is usually slow

The old model treats compliance as a human review step at the end of a process — hence the four-week clearance. The record model attaches the clearance to the asset itself, so the check takes seconds and can be done by a person or a machine.

What we do about it

Prelight turns each part of that definition into a standing feature of the record:

We ingest the rules. Guidelines, brandbooks and license terms become a machine-readable record attached to your assets — not a PDF someone is supposed to remember. How it works.
We scope access. Roles decide what every desk — and every AI tool it connects — may see and use, so only cleared assets reach whoever is asking.
We check before it ships. Territory, window, channel and version are checked against your licenses at the moment of use; an uncleared request is blocked and the clause is cited. The gate in action.
We log every decision. Human or agent, the rule applied and the date — a decision trail counsel or an auditor can read without an interview.
We serve it to your tools. The record answers over MCP with OAuth 2.0, so Claude, ChatGPT or your own agents ask the record instead of guessing. The MCP connector.
We let you leave. Open export and hard deletion when you go — the record is yours, not ours. The DPA.