On this page5 sections
Published October 22, 2026.
Record the permission, not just the quote
Capture the customer name, the company, the asset type, the channels allowed, the geographic scope, the date, and the expiry. A quote approved for a website may not be approved for paid ads or a conference slide.
Keep the signed permission or the recorded approval with the asset. A verbal yes remembered by one employee is not a record.
Separate the story from the personal data
Use the minimum personal detail needed. A full name and title may be appropriate for a case study; a customer’s personal email or phone number is not. Check whether the customer wants their company named.
For regulated industries, route the final asset for the required review before publication.
Honor withdrawal and expiry
Record the withdrawal date and where the asset was used. Remove it from active channels and note any printed material that cannot be recalled. Set a reminder before the permission expires.
Do not rely on the customer to remember the terms. The business owns the register.
Audit the register quarterly
Match live testimonials to a current permission record. Look for expired permissions and assets used outside the approved channels. Fix or remove them.
Keep the audit note with the register.
Related reading
For the supporting routine, see this guide and this guide. To discuss the workflow, contact us.
