Health, Education & Government HR & Talent Sports Recruiting & Scouting

Name, Image & Likeness Compliance

People decisions with significant organizational, financial, and cultural stakes.

INFLCR Opendorse Teamworks Compliance Line
Inside this journey
  1. Pre-Discovery

    Align the room on outcomes, decision process, and constraints before deeper discovery.

    1. Stakeholder Alignment

      Confirm decision roles (compliance director, GC, ADs, conference officer), timeline, and what regulatory ‘good’ looks like for the institution.

      Alignment Questions

      Quick Check — Where We Are Right Now

      • What's the immediate trigger that brought us together today (select all that apply)? Options: Public undisclosed deal surfaced in media, Conference compliance inquiry, New state NIL law effective soon, Internal audit flagged gaps, Proactive review / upgrade, Other
      • How recently did that trigger occur? Options: Today / within 24 hours, Within the last week, Within the last month, 1–3 months ago, Longer than 3 months
      • Who first identified the issue and how did it surface (athlete, booster, public post, internal report, conference)? Options: Athlete report, Booster or collective, External media / influencer, Conference inquiry, Internal staff discovery, Other
      • What immediate steps have you already taken in response (brief chronology)?

      If This Went Public Tomorrow, What Keeps You Up?

      • What would the worst-case headline look like for your program or institution?
      • Which internal and external stakeholders would face the most exposure if that headline happened? (choose up to three) Options: Compliance Director / Office, General Counsel, Athletic Director, Conference Office, Institutional PR/Communications, Boosters / Collectives, Student-athlete(s), Other
      • Have you experienced a similar public exposure before? Tell the brief story and outcome.
      • Emotionally, what does that risk do to your ability to focus on other priorities? Options: Paralyzes progress across projects, Creates high, intermittent stress, Is manageable but distracting, Minimal emotional impact

      Are Your Current Controls Illusions of Safety?

      • How confident are you that your current spreadsheets and manual reviews would catch a high-risk undisclosed deal? Options: Very confident, Somewhat confident, Not very confident, Not confident at all
      • Describe your disclosure workflow from athlete submission to final institutional record—who touches it and when?
      • Which tools or systems do you currently use to track disclosures and monitoring (select all that apply)? Options: Spreadsheets, Custom internal app, Third-party compliance tool, Shared drives / folders, LMS for education, No formal tool
      • How many full-time equivalents (FTEs) or staff hours per week are dedicated to NIL compliance and oversight? Options: <1 FTE / <10 hrs, 1–2 FTEs / 10–40 hrs, 3–5 FTEs, 5+ FTEs, Variable / shared responsibilities
      • In the last 12 months, how many undisclosed or late-disclosed deals surfaced after-the-fact (estimate)? Options: None, 1–2, 3–5, 6–10, 10+

      Where Are The Clever Ways Things Break?

      • What clever loophole or blind spot worries you most—booster collectives, private intermediaries, visual-only content, or something else? Options: Booster-funded collectives, Third-party intermediaries/agents, Visual-only posts (no hashtags/captions), Private messages/deal channels, Contractual ambiguity with sponsors, Other
      • Have you encountered booster collectives or intermediaries operating outside institutional oversight? If yes, describe one example. Options: Yes — documented example, Yes — suspected but undocumented, Not that I know of
      • How do you currently detect visual-only social posts (images or videos without identifying text)? Options: Manual scans by staff, Keyword/hashtag monitoring only, Third-party visual scan tool, We don't reliably detect them
      • Where has rule ambiguity (state vs. conference vs. NCAA guidance) caused confusion or inconsistent decisions recently?

      How Would You Measure 'We Fixed It' in 90 Days?

      • If we ran a focused 90-day pilot, what one outcome would convince you the greatest institutional risk was meaningfully reduced?
      • Which KPIs should we track during the pilot? (pick up to three) Options: Undisclosed deal detection rate, Disclosure submission rate, Time-to-approval for disclosures, Rule engine accuracy, Social detection coverage, Audit-trail completeness, Athlete education completion
      • What minimum thresholds would you require for success (e.g., detection accuracy ≥ X%, disclosure increase ≥ Y%)? Options: Detection accuracy ≥ 80%, Detection accuracy ≥ 90%, Disclosure rate improvement ≥ 20%, Disclosure rate improvement ≥ 50%, Audit-trail accepted by conference/GC
      • Who inside your GC or conference team needs to sign off on those success thresholds? Options: General Counsel, Compliance Director, Conference Compliance Officer, Athletic Director, Other

      Who Decides — And How Fast Can They?

      • If the compliance director signs off but the general counsel pushes back, what typically happens next and how long does a resolution take?
      • List the decision-makers and their role in a pilot (select all that apply, then name them if possible). Options: Compliance Director, General Counsel, Associate ADs (Compliance), Conference Officer, Athletic Director, Institutional IT/Data, Procurement
      • What procurement, legal review, or institutional IT milestones commonly create the longest delays? Options: Legal contract review, Data privacy review, Security assessment, Procurement approval, None of the above
      • What timeline would you consider immovable (e.g., conference review date, legislation effective date)?

      Show Me a Week — Where Bottlenecks Hide

      • Which recurring review, approval, or audit in your weekly cycle would cause the biggest disruption if it failed? Options: Weekly disclosure reviews, Sponsor deal audits, Education completions review, Social monitoring triage, Monthly compliance reporting
      • Walk me through a typical athlete disclosure path and note where most delays or handoffs occur.
      • How often do you update internal rule logic when laws or guidance change, and who makes the update? Options: Within 72 hours by in-house team, Within 72 hours via vendor, Takes days–weeks, Ad-hoc, no set cadence
      • Which data feeds or integrations are missing today that would materially improve monitoring (social APIs, contract databases, booster registries)?

      What Would Make You Trust a Pilot Enough to Expand?

      • What single tangible result would turn a skeptical stakeholder into an active advocate for expansion?
      • Which sport and approximate roster size would be the ideal pilot for meaningful signal without overtaxing teams? Options: Single high-profile sport (e.g., football, basketball), Mid-size sport (e.g., baseball, volleyball), Multiple small sports, Cross-sport sample
      • What specific data access, feeds, or permissions must be granted before launch (select all that apply)? Options: Athlete social handles, Roster and eligibility feeds, Contract/deal uploads, Booster registry access, Institutional SSO/ID integration, None / minimal data
      • What maximum duration would you accept for a pilot before deciding go/no-go? Options: 30 days, 60 days, 90 days, Longer than 90 days

      What Could We Deliver Fast That Changes the Game?

      • What is one small capability we could deliver in 2–4 weeks that would materially lower your exposure? Options: Automated visual social scans, Instant disclosure reminders for athletes, Rule engine update for a specific state, Audit-trail export for conference, Booster flagging dashboard
      • Which of those quick wins would be hardest to get athletes to adopt, and why?
      • Who would need to enable or sign off internally to deploy a quick capability (select all that apply)? Options: Compliance Director, General Counsel, Athlete Ops / Head Coach, IT / Security, Communications
      • How would you want us to demonstrate impact of that quick capability in the first 30 days (reporting cadence, sample alerts, pilot user interviews)? Options: Weekly KPI reports, Sample detected cases with audit trail, Stakeholder demo calls, Athlete feedback survey

      Agreeing Next Steps — Who Does What and When

      • If we leave this conversation agreeing to two concrete actions, what must they be?
      • Who on your side will be the operational owners for the pilot (select roles and optionally list names)? Options: Compliance Director, Associate AD (Compliance), General Counsel, IT/Data Owner, Athlete Education Lead
      • What is an acceptable target window to launch the pilot (choose one)? Options: Within 2 weeks, 2–4 weeks, 4–6 weeks, 6+ weeks
      • Are there procurement, contracting, or data agreements that must be completed before we begin? If yes, what is the expected timeline? Options: Yes — legal/procurement required (timeline provided below), No — ready to proceed, Unsure — need guidance
    2. Current State Mapping

      Document existing disclosure workflows, spreadsheet pain points, social monitoring gaps, and known failure modes (e.g., booster collectives, undisclosed deals).

      Current State

      Start Here: A Quick Snapshot of Today

      • How do you currently track athlete NIL disclosures day-to-day? Options: Spreadsheets (manual), Homegrown database, Third‑party platform, Shared drive + email threads, Combination of the above, Other
      • Roughly how many active disclosure records or new deals does your office handle each month? Options: 0–25, 26–50, 51–100, 101–250, 250+
      • Who is directly responsible for initial collection, verification, and filing of disclosures? Options: Compliance Director, Associate AD – Compliance, Compliance Coordinator, Graduate assistant/team of students, Athletics admin staff, Shared with Legal, Other
      • Walk me through the typical lifecycle of a disclosure in your current process—from athlete submission to final record. Please include handoffs.
      • Where do you store historical disclosure records and supporting materials (contracts, receipts, screenshots)? Options: Shared drive (eg. Google/OneDrive), Local spreadsheets, Institutional records system/CRM, LMS or training system, Paper files, Third‑party vendor portal, Other
      • How confident would you be that your current records would withstand a conference or NCAA compliance audit? Options: Very confident, Somewhat confident, Not confident, Unsure

      If One Missed Post Could Start an Investigation, How Would You Explain It?

      • How often do undisclosed or questionable deals surface publicly (media, boosters, social posts) in a given year? Options: Never, Once, 2–3 times, Quarterly, Monthly or more
      • Tell us about the most recent time a social post or media story created compliance exposure—what happened and what did it reveal about your process?
      • When an undisclosed deal appears, what are the most common root causes you identify? Options: Athlete unaware of rules, Process too cumbersome, Booster collective involvement, Lack of monitoring coverage, Data/version control errors, Other
      • On average, how long passes between a problematic post and your team becoming aware? Options: Same day, 1–3 days, 4–7 days, 8–30 days, Over 30 days
      • What immediate evidence or documents do you wish you had available when responding to a public exposure? Options: Timestamped audit trail, Original disclosure form, Conversation logs/emails, Proof of education/training, Social post archive/screenshots, Other
      • How does handling public exposures typically affect your team—operationally and emotionally?

      Where the Spreadsheet Stops Being Enough

      • If spreadsheets are central to your process, what three problems do they cause most often?
      • Which day‑to‑day tasks tied to disclosures consume the most staff hours? Options: Manual data entry, Reconciling conflicting records, Chasing athletes for signatures, Generating reports for leadership, Responding to flagged posts, Other
      • How frequently do you encounter version control issues or multiple conflicting copies of disclosure data? Options: Never, Rarely, Sometimes, Often, Constantly
      • Have you missed deadlines or failed to capture key evidence because of manual tracking limitations? Options: Yes, multiple times, Occasionally, Rarely, Never
      • If you could remove one manual step right now, which would deliver the most relief?
      • What proportion of your compliance workload feels reactive (firefighting) versus proactive (prevention, education)? Options: Mostly reactive, More reactive than proactive, Balanced, More proactive than reactive, Mostly proactive

      Blind Spots: The Things You Can't See Until It's Too Late

      • Which social platforms and channels are you intentionally monitoring for athlete brand activity today? Options: Instagram, TikTok, X/Twitter, YouTube, Facebook, Snapchat, Third‑party sites/media, Other
      • Are you using any automated visual recognition (logos, products) or are you relying on text/hashtags only? Options: Image/video recognition in use, Text/hashtag based monitoring only, Manual human review only, No active monitoring
      • What blind‑spot concerns keep you up at night (booster collectives, surrogate deals, dark posts, influencer layers)?
      • Approximately what percentage of flagged content is a true compliance concern versus false positive noise? Options: <1%, 1–5%, 6–15%, 16–30%, >30%
      • Describe your current process for triaging flagged content—who reviews, what are timelines, and how are decisions documented?
      • Which types of visual or indirect sponsorships are hardest for you to detect today? Options: Logos on products, Branded locations, Paid shoutouts, Event appearances, Collective‑funded deals, Cross‑platform campaigns, Other

      When Rules Change Overnight, Who's Left Holding the Bag?

      • How do you currently monitor and track state, conference, and NCAA NIL rule changes? Options: Dedicated staff/person, Legal/GC office, Manual monitoring of sources, Vendor/regulatory feed, We rely on ad hoc alerts, Other
      • When a regulatory change occurs, how fast can you update internal policies and communicate to athletes? Options: Within 24 hours, 48–72 hours, 1 week, Several weeks, No reliable SLA
      • Has a recent rule change ever impacted a signed or pending deal? Tell us how you handled it. Options: Yes—we adjusted or canceled deals, Yes—handled case-by-case, No impact to date, Not sure
      • Who needs to approve regulatory interpretation and outbound communications (check all that apply)? Options: Compliance Director, General Counsel, Conference office, Athletic Director, External counsel, Other
      • What SLA would you require from a vendor for updating rule logic after an official change? Options: Same day, Within 72 hours, Within 1 week, Standard quarterly updates, Flexible depending on change
      • What is the single biggest risk to your program if regulatory rules are interpreted or applied incorrectly?

      What Would True Confidence Look Like in 90 Days?

      • Which pilot KPIs would prove the platform materially reduces your institutional risk? Options: Reduction in undisclosed deals, Increase in disclosure completion rate, Social detection coverage, Rule accuracy, Time-to-resolution for flagged items, Audit‑trail completeness, Athlete portal adoption
      • Set a measurable target for undisclosed deals reduction or disclosure rate improvement you’d consider a success after 90 days. Options: 10% improvement, 25% improvement, 50%+ improvement, Specific numeric target (enter below)
      • What is an acceptable false positive rate for social monitoring that still allows your team to operate efficiently? Options: <1%, 1–5%, 6–10%, 11–20%, I need guidance
      • How many sports or teams would you include in an initial pilot to get a representative sample? Options: Single sport, 2–3 sports, Department subset (3–6 teams), Majority of teams
      • Who should be on the pilot steering committee to approve go/no‑go decisions? Options: Compliance Director, Associate AD – Compliance, General Counsel, Athletic Director, IT/Security, Student‑athlete representative, Other
      • What objective criteria would you require to greenlight full rollout after the pilot?

      Ready to Change? What Support Would Remove the Friction

      • What commercial, legal, or data‑privacy concerns usually slow vendor contracting for your office? Options: Data ownership, PII/FERPA concerns, Indemnity/limitation clauses, Integration costs, Length of contract, SLAs and uptime, Other
      • Which internal stakeholders must be involved in procurement and implementation sign‑off? Options: Compliance, General Counsel, Athletic Director, IT/Security, Procurement, University Privacy Office, Other
      • What system integrations are must‑haves for a successful deployment (eg. SSO, student records, LMS, analytics)? Options: Single Sign‑On (SSO), Student Information System, Email/calendar, LMS/training system, Athletics CRM, BI/reporting tools, Social API access, Other
      • Which training formats produce the best athlete adoption for you—live sessions, recorded modules, in‑portal microlearning, or ongoing office hours? Options: Live workshops, Recorded on‑demand, LMS microlearning, Office hours/Q&A, Peer-to-peer champions, Combination
      • What level of vendor transparency and reporting do you expect during a pilot (dashboard access, raw data export, weekly summaries)? Options: Full dashboard access + raw export, Weekly executive summary, Ad hoc reports on request, Minimal reporting (pilot only)
      • If we proposed a 60–90 day pilot with agreed KPIs, what would be your single biggest hesitation to starting?

      Small Wins That Prove Big Value

      • If we could deliver one meaningful result in the first 30 days, what outcome would make you most comfortable to continue?
      • Which specific processes could realistically be fully automated or simplified within the first month? Options: Disclosure intake form, Automated reminders to athletes, Social media scanning for logos, Rule‑based deal triage, Audit‑trail capture, Reporting exports
      • What minimum reporting package would you need to show leadership immediate pilot value? Options: Weekly KPI dashboard, Incident log + root causes, Audit trail snapshots, Athlete adoption metrics, Executive 1‑page summary
      • Who will own day‑to‑day operations of a pilot on your side (name/role) and how many hours per week can they dedicate? Options: Compliance Director (0–5 hrs), Compliance Coordinator (5–15 hrs), Dedicated resource (15+ hrs), Shared responsibility across team, TBD
      • Are there any data access limitations, legal restrictions, or privacy considerations we must resolve before data sharing?
      • What would be the ideal next step after this discovery call to get a pilot started? Options: Technical scoping session, Legal/data sharing review, Executive briefing, Pilot proposal with cost, Other
  2. Outcome Discovery

    Define measurable success signals (reduction in undisclosed deals, audit-trail acceptance, rule accuracy thresholds) and pilot objectives tied to risk mitigation within 90 days.

    Discovery Questions

    Quick Intro: Who's in the Room?

    • Which role(s) are you speaking for today? Options: Compliance Director, Associate AD - Compliance, General Counsel, Conference Compliance Officer, Athletic Director, Other
    • Roughly how many student-athletes do you manage for NIL disclosures? Options: <50, 50–150, 150–300, 300–600, >600
    • Which sport would you prefer to use as the pilot (or select 'Multiple sports')? Options: Football, Men's Basketball, Women's Basketball, Baseball/Softball, Olympic sports (e.g., soccer, track), Multiple sports, Other
    • What specifically triggered this conversation now (pick the primary reason)? Options: Undisclosed deal surfaced publicly, Conference inquiry, New or changing state law, Internal audit or review, Proactive improvement, Other
    • Briefly summarize the most recent disclosure-related incident or near-miss (what happened, when, who noticed).

    If an Undisclosed Deal Became a Headline Tomorrow…

    • If a single undisclosed athlete deal landed in the press tomorrow, how would your department be judged? Options: Severely (formal inquiry likely), Moderately (leadership questions & reputational hit), Minor (managed internally), Uncertain
    • How many times in the last 24 months have undisclosed deals been discovered via media or external inquiries? Options: None, 1–2, 3–5, 6–10, >10
    • Where do the undisclosed deals you find most often originate from? Options: Booster collectives, Athlete family/friends, Third-party agencies/marketing, Athlete social posts, Paid influencer campaigns, Other
    • When a deal goes public, how long does it typically take your office to detect it? Options: <24 hours, 1–3 days, 1 week, 2–4 weeks, >1 month
    • How do these incidents make you feel about your current oversight? Options: Vulnerable, Frustrated, Resigned, Motivated to act, Confident

    Are You Sure You’re Catching the Hidden Stuff?

    • Are you confident your current monitoring finds visual brand placements and booster-funded activity? Options: Yes—high confidence, Partially—we miss some visual content, No—we rely on manual or athlete self-reporting, We don’t monitor visual content
    • Which social channels and content types do you actively scan today? Options: Instagram posts, Instagram stories/reels, TikTok videos, Twitter/X posts, YouTube content, Snapchat, Private groups/Discord, Paid ad monitoring, Other
    • How do you currently detect undisclosed deals (pick all that apply)? Options: Athlete self-reporting, Manual review of posts, Keyword/hashtag monitoring, Third-party vendor monitoring, Tips from boosters/public, Other
    • What percentage of posts with brand logos or product placement do you believe your team reliably detects today? Options: <25%, 25–50%, 51–75%, 76–90%, >90%
    • How frequently do false positives from your current monitoring consume meaningful staff time? Options: Daily, Weekly, Monthly, Rarely, Never
    • How quickly does your team usually convert a regulatory change into an updated internal rule? Options: Within 72 hours, Within 1 week, 1–4 weeks, >1 month, Ad-hoc

    What Would a Regulator Need to See to Call This 'Adequate'?

    • What would a regulator or conference need to see to consider your oversight 'adequate'—and do you already have that evidence? Options: Clear audit trail of disclosures, Documented training & attestations, Rule engine & detection logs, Regular reporting to leadership, We don’t know / need guidance
    • Has a conference or NCAA review ever requested your NIL audit trail, and what was the outcome? Options: Yes—accepted as sufficient, Yes—requested additional documentation, No, never requested
    • Which artifacts would most strengthen your defense in a review (select top three)? Options: Signed athlete attestations, Time‑stamped disclosure logs, Monitoring alerts and resolution notes, Policy and education completion records, Investigation reports
    • What baseline disclosure rate would you consider defensible if asked by leadership or a regulator? Options: Unknown, <50%, 50–70%, 71–85%, 86–95%, >95%
    • Tell us about one past exchange with a regulator or conference that changed how you think about 'adequate' oversight.

    Success Signals That Actually Move the Needle

    • Which measurable change would make you call a 90‑day pilot a clear success? Options: Improved disclosure rate, Reduction in public exposures, Audit‑trail acceptance by leadership, Faster review turnaround time, Rule accuracy improvements
    • What is your current baseline disclosure rate (estimate if exact data isn’t handy)? Options: Unknown, <50%, 50–70%, 71–85%, 86–95%, >95%
    • Select the top three KPIs you’d prioritize for a 90‑day pilot. Options: Disclosure rate, Time-to-detect public exposure, False negative rate (missed violations), False positive rate (noise), Average review time per disclosure, Athlete portal adoption / completion, Regulatory update lag
    • For each KPI you selected, what absolute or relative improvement would justify full rollout? (e.g., disclosure +15% or detection latency cut in half)
    • How many deals or flagged posts do you think are needed in the pilot to be statistically meaningful for these KPIs? Options: <25, 25–50, 51–150, 151–300, >300
    • Who will formally sign off on pilot success? Options: Compliance Director, General Counsel, Athletic Director, Conference Office, External Auditor, Other

    Pilot Objectives: Small Scope, Big Risk Reduction

    • If we could eliminate one exposure in 90 days, which of the following would most improve your risk posture? Options: Booster collectives operating off-books, Undisclosed athlete brand posts, Slow or inaccurate rule updates, Lack of time-stamped audit trail, Low athlete education/attestation rates
    • Which of these modules must be included in a pilot to achieve that objective? Options: Disclosure workflows, State-by-state rule engine, Social monitoring (visual & text), Athlete education & attestations, Reporting & exportable audit trail
    • For the pilot, what scope do you prefer (single team size, multi-team small, or department-level)? Options: Single team (<=30 athletes), Multi-team small (30–100 athletes), Department-level (100+ athletes)
    • What internal responsibilities will your team own during pilot execution? Options: Provide athlete roster & contacts, Review flagged items, Approve policy/rule changes, Deliver athlete training, Name configuration owner
    • What acceptance threshold for rule accuracy (precision/recall) would you require to consider automation trustworthy? Options: >=90% precision, >=85% precision & recall, >=80% with human review, We need vendor guidance
    • Are there any data-sharing, privacy, or IT constraints we must design the pilot around? Please list.

    Who Needs to Say Yes (and Will They?)

    • Who in your institution holds the real veto power over launching a pilot—and do they view the risk as urgent? Options: Compliance Director, General Counsel, Athletic Director, President/Chancellor, Conference Office
    • Which stakeholders must be consulted before kickoff (select all that apply)? Options: General Counsel, IT / Security, Athlete leadership/Athlete union, Booster liaison/foundation, Marketing/Brand, Communications/Public Affairs
    • What contractual or commercial constraints would block a pilot (pick any that apply)? Options: Data residency restrictions, No access to athlete social data, Unacceptable indemnity terms, No SLA on regulatory updates, Procurement timeline
    • How much executive bandwidth can be realistically allocated to pilot governance each week? Options: <1 hour, 1–3 hours, 3–6 hours, >6 hours
    • If the pilot shows mixed results, who makes the final go/no‑go decision? Options: Compliance Director, Decision committee (multi-stakeholder), General Counsel, Athletic Director, Conference Office
    • Describe a previous pilot with a vendor—what specifically helped adoption, and what derailed it?

    If Things Go Wrong, How Do We Respond?

    • Which outcome would most quickly erode confidence in a pilot—an avalanche of false alarms, a missed public exposure, slow fixes, or something else? Options: False alarms/too noisy, Missed detections/public exposure, Slow remediation/response, Poor communication, Data/privacy incident
    • What maximum false positive rate (% of flagged items that are non-issues) is acceptable before your team loses engagement? Options: <10%, 10–25%, 26–50%, >50%
    • What maximum false negative rate (missed violations) would be tolerable during the pilot? Options: <5%, 5–15%, 16–30%, >30%
    • How quickly must critical issues be resolved during the pilot to maintain trust? Options: <24 hours, 24–72 hours, Within a week, >1 week
    • What escalation path should we use if a public exposure or regulator inquiry occurs during the pilot? Options: Immediate call to General Counsel, Notify AD and Compliance leadership, Coordinate with Public Affairs, Pause pilot and investigate, Other
    • How would you like performance and incident reporting delivered during the pilot? Options: Weekly dashboard, Bi-weekly call + report, Real-time alerts + monthly summary, Monthly summary only

    Next Steps: What a 90‑Day Pilot Actually Looks Like

    • What would make you say 'start the pilot today'—clear ROI, low operational lift, audit evidence, or leadership pressure? Options: Clear risk reduction / ROI, Low operational lift for our team, Definitive audit trail evidence, Executive sponsorship, Other
    • Which non-negotiable items must be in place before kickoff (select all that apply)? Options: Athlete roster & opt-in/consent, Data feed access (social APIs), Signed pilot SOW/MSA, Defined KPI & acceptance criteria, Configuration owner named
    • How soon do you need a pilot to start to address the most pressing regulatory or reputational risks? Options: Immediately (within 2 weeks), Within 1 month, Within 2–3 months, No immediate urgency
    • What communication cadence and format do you prefer during the 90‑day pilot? Options: Weekly status + dashboard, Bi-weekly working session + report, Real-time alerts + monthly executive summary, Ad-hoc for incidents only
    • Which post-pilot deliverables would best convince leadership to scale (choose up to three)? Options: Executive summary with KPI comparisons, Full audit trail exports & logs, Playbook for expansion & SOPs, Training materials for athletes & admins, ROI / cost-benefit analysis
    • What questions have we not asked that matter to you right now?
  3. Solution Experience

    Walk through outcome delivery using the customer’s scenarios—how disclosures, visual social scans, rule updates, and audit trails prevent public exposures and regulatory findings.

    Experience Meetings

    • Current State Confirmation
    • Consequence & Risk Quantification
    • Define Future State & Success Signals
    • Scenario-Based Solution Experience (Live Walkthrough)
    • Validation, Acceptance Criteria & Next Steps (Sign-off Workshop)
    • Welcome & Objectives
    • Product to draft a risk-prioritization list that maps detection types to mitigation value for pilot selection.
    • Future State Readout (one sentence)
    • Finalize a one-sentence future state that all participants can reference during the experience.
    • Agree on a minimum set of measurable success signals with numeric thresholds for pilot acceptance.
    • Confirm pilot scope (which sport, which athlete cohort, timeframe) and the evidence package required for validation.
    • Ensure every success signal maps to a single, demonstrable capability to avoid feature wandering.
    • Product to produce a one-page Future State + KPI mapping document and share within 48 hours.
    • Customer to confirm pilot sport, athlete cohort, and target acceptance thresholds within 3 business days.
    • Compliance and Legal to list required evidence formats and any regulatory sign-off steps.
    • Brief Re-check of Preconditions
    • Prove the future state for each prioritized scenario with concrete detection-to-audit evidence.
    • Tie every demonstrated step back to the customer's stated problems and quantify the improvement for each KPI.
    • Obtain explicit validation or constructive objections from stakeholder owners for each scenario.
    • Agree on immediate configuration tasks required to replicate the proofs in the pilot environment.
    • Product to configure the validated detection rules in the pilot environment and seed with scenario data.
    • Compliance to review and approve the audit-trail export format (pdf/csv/log) for regulator acceptance.
    • Customer to confirm any changes to escalation paths based on the scenario outcomes.
    • Schedule a 1-week follow-up to review initial pilot detection performance on the validated scenarios.
    • Recap of Future State & Demonstrated Proofs
    • Obtain formal sign-off on pilot acceptance criteria and required evidence package.
    • Assign clear owners for all pilot tasks (data feeds, rule configuration, athlete notification, reporting).
    • Set the pilot timeline and the first reporting checkpoint for KPI review.
    • Document and accept remediation plans for any residual risks that could affect pilot validity.
    • Customer and Product to sign and record the agreed pilot acceptance checklist and timeline.
    • Technical team to enable data feeds and confirm athlete/admin access prior to pilot start date.
    • Compliance to prepare a one-page evidence submission template for end-of-pilot validation.
    • Schedule the pilot launch meeting and the first KPI review at the agreed checkpoint (e.g., 30 days).
    • Agree verbatim on the one-sentence current state that will drive the experience.
    • Catalog specific failure modes to be used as scenarios in later sessions (e.g., booster collectives, visual-only deals).
    • Confirm data access availability and designate compliance and technical owners for follow-up.
    • Identify any missing pre-work items and schedule immediate remediation.
    • Customer to deliver anonymized incident packets (screenshots, timestamps, affected athlete IDs) within 48 hours.
    • Customer to provide read-only access or exports of current disclosure spreadsheets and social feed samples.
    • Assign a single technical point-of-contact for data feed validation and a compliance owner for scenario validation.
    • Re-state Current State & Failure Modes
    • Make the consequence explicit with quantifiable impact metrics tied to institutional risk.
    • Agree on baseline KPIs that the Solution Experience will use to prove value.
    • Prioritize 2–4 risk scenarios that must be demonstrably mitigated in the pilot.
    • Identify legal/regulatory thresholds (e.g., acceptable audit-trail formats) required for validation.
    • Compliance team to provide baseline KPIs (current disclosure rate, detection coverage, mean time-to-detect) by end of week.
    • Legal/GC to document any regulatory acceptance criteria or recent audit language relevant to oversight documentation.
    • Incident Impact Review
    • Review Pilot Acceptance Checklist
    • Map Outcomes to Capabilities
    • Scenario 1: Undisclosed Sponsor Post (Diagnosis)
    • Readback: One-Sentence Current State
    • Regulatory & Audit Exposure Mapping
    • Evidence Review: Recent Incidents
    • Roles, Timeline & Communication Plan
    • Scenario 1: Proof — Detection to Disclosure Workflow
    • Define 3–5 Success Signals & Thresholds
    • Scenario 1: Tieback & Validation
    • Outstanding Risks & Remediation Plans
    • Inventory: Tools, Spreadsheets, and Feeds
    • Pilot Objectives & Scope
    • Baseline Metrics & KPIs
    • Formal Sign-off & Next Steps
    • Validation Criteria & Evidence Types
    • Prioritize Risks for the Pilot
  4. Solution Scope

    Specify modules (disclosure workflows, rule engine, social monitoring, athlete education, reporting), pilot sport, responsibilities, and acceptance criteria.

    Scope Configuration

    • Deploy Athlete Disclosure Intake Form
    • Activate Deal Review Workflow Automation
    • Activate State-by-State Rule Engine
    • Enable Social Media Visual Content Monitoring
    • Launch Athlete Education Course Modules
    • Provision E-Signature for NIL Contracts
    • Generate Audit-Trail Export Package
    • Deploy Booster Collective Transaction Monitoring
    • Configure Conference Reporting Exports
    • Integrate Roster Sync with SIS
    • Enable Role-Based Access Controls and Permissions
    • Activate NCAA and State Update Alert Feed

    Scope Questions

    Deploy Athlete Disclosure Intake Form

    • Do you currently use any digital disclosure/intake form today? Options: Yes, No
    • Which required fields must the intake capture (role, deal value, counterparty, dates, platform evidence, location)?
    • Should the intake support attachments (images, screenshots, contracts)? Options: Yes, No
    • What authentication method should athletes use to submit disclosures? Options: Email + password, SSO via SIS/AD account, Phone OTP, No authentication
    • Do you require conditional fields (e.g., agent fields only if agent involved)? Options: Yes, No
    • Should the form be available mobile-first or desktop-only? Options: Mobile-first, Responsive (mobile & desktop), Desktop-only
    • Estimated average monthly disclosure submissions during pilot? Options: <50, 50-200, 200-500, 500+

    Activate Deal Review Workflow Automation

    • Which review roles should be included in the workflow (compliance director, reviewer, legal, AD)? Options: Compliance Director, Compliance Reviewer, General Counsel, Associate AD, Other
    • How many approval stages do you require before a disclosure is accepted? Options: 1, 2, 3, 3+
    • Do you need automated routing based on rules (e.g., value thresholds, sport, agent involvement)? Options: Yes, No
    • What SLA should the workflow enforce for each review stage? Options: 24 hours, 48 hours, 5 business days, Custom
    • Should reviewers be able to request edits from athletes with an in-app loop? Options: Yes, No
    • Do you want escalation rules for overdue reviews or high-risk flags? Options: Yes, No
    • Are there monetary or benefit thresholds that require legal review? If yes, specify.

    Activate State-by-State Rule Engine

    • Which states must be active in the pilot rule set?
    • Do you require sport-specific rule overrides (e.g., football vs. non-revenue sports)? Options: Yes, No
    • Do you want institution-specific policy overrides layered on top of state/NCAA rules? Options: Yes, No
    • What acceptance threshold for rule accuracy do you require during pilot (for go/no-go)? Options: >= 95%, 90-95%, 80-90%, Custom
    • What SLA do you require for regulatory updates (engine update cadence)? Options: Standard (72 hours), Expedited (24 hours), Custom
    • Which rule types are most important to enforce (compensation, agent registration, disclosure timing, booster involvement)? Options: Compensation, Agent rules, Disclosure timing, Booster interaction, Other
    • Who will be the policy owner(s) at the institution to validate rule mappings?

    Enable Social Media Visual Content Monitoring

    • Which social platforms should be monitored in pilot (Instagram, TikTok, Twitter/X, Facebook, Snapchat)? Options: Instagram, TikTok, X (Twitter), Facebook, Snapchat, YouTube, Other
    • Do you require visual (image/video) content scanning in addition to text/hashtag scanning? Options: Yes, No
    • What detection sensitivity do you prefer initially (high sensitivity with more false positives vs. high precision)? Options: High sensitivity, Balanced, High precision
    • How frequently should athlete social feeds be scanned? Options: Real-time, Hourly, Daily, Custom cadence
    • Do you want alerts routed into the deal review workflow or a separate intake queue? Options: Deal review workflow, Separate monitoring queue, Both
    • Are there athlete accounts we should exclude from monitoring (club/private accounts)? Options: Yes, No
    • Languages or regions to prioritize for visual/text recognition?

    Launch Athlete Education Course Modules

    • Which topics should be included in the pilot education modules (disclosure process, state rules, booster guidance, agent relationships)? Options: Disclosure process, State rules, Booster guidance, Agent relationships, Contract basics, Social media best practices
    • Should courses be mandatory for athletes in the pilot sport? Options: Yes, No
    • What delivery format do you prefer (micro-lessons, video + quiz, live webinar)? Options: Micro-lessons, Video + quiz, Live webinar, PDF guides
    • Do you require certificate/attestation tracking upon completion? Options: Yes, No
    • How often should refresh training be required (quarterly, annually, on-policy-change)? Options: Quarterly, Annually, On policy change, Custom
    • Should athlete completion status feed into roster/clearance systems? Options: Yes, No
    • Any accessibility or language requirements for course content?

    Provision E-Signature for NIL Contracts

    • Do you plan to use e-signatures for agent agreements, brand deals, or both? Options: Agent agreements, Brand deals, Both, None
    • Do you have a preferred e-sign provider? Options: DocuSign, Adobe Sign, HelloSign, Other, No preference
    • Do contracts require witness or countersignature workflows? Options: Yes, No
    • What signer identity verification level is required? Options: Basic email verification, Two-factor/phone OTP, ID verification (scan), Not required
    • Should fully executed contracts auto-attach to athlete profiles and audit exports? Options: Yes, No
    • Retention policy for signed agreements (years)? Options: 1 year, 3 years, 7 years, Custom

    Generate Audit-Trail Export Package

    • Which export formats are required by your auditors or conference (PDF, CSV, JSON)? Options: PDF, CSV, JSON, Other
    • What time window should exports cover (rolling 90 days, full pilot period, custom)? Options: Rolling 90 days, Pilot period, Full historical, Custom
    • Do you require user-level activity logs (who viewed/edited/disputed a disclosure)? Options: Yes, No
    • Should exports be scheduled automatically or generated on-demand? Options: Scheduled, On-demand, Both
    • Who are the recipients of audit exports (internal, conference, legal)?
    • Any redaction or PII masking requirements for exports? Options: Yes, No

    Deploy Booster Collective Transaction Monitoring

    • Are booster collectives known to operate at your institution currently? Options: Yes, No, Unknown
    • What data sources are available to detect booster transactions (donor lists, public filings, payment feeds)?
    • Do you require transaction-level thresholds to trigger alerts (amount, frequency)? Options: Yes, No
    • Should suspected booster transactions create a case in the review workflow? Options: Yes, No
    • Are privacy or legal limitations on accessing booster data a concern? Options: Yes, No
    • Do you want monitoring for informal benefits (meals, travel) or only monetary transfers? Options: Monetary only, Monetary + in-kind benefits, All types

    Configure Conference Reporting Exports

    • Which conference(s) require reporting during pilot?
    • What fields and format does each conference expect in exports?
    • How often must reports be delivered to the conference (monthly, quarterly, ad-hoc)? Options: Monthly, Quarterly, Ad-hoc, Custom
    • Should reports be auto-submitted to conference portals or provided to your compliance contact? Options: Auto-submit to portal, Send to compliance contact, Both
    • Do conferences require a specific audit trail or supporting documentation with each export? Options: Yes, No, Unknown
    • Who will validate conference report acceptance criteria on your side?

    Integrate Roster Sync with SIS

    • Which SIS/roster system do you use? Options: Banner, Workday, PeopleSoft, Custom/Other
  5. Mutual Commit

    Agree commercial and legal terms, pilot length, data access, SLAs for regulatory updates, and go/no-go acceptance criteria.

    Agreement Modules

    • Non-Disclosure Agreement (NDA)
    • Master Services Agreement (MSA)
    • Statement of Work (SOW)
    • Pilot Addendum
    • Service Level Agreement (SLA)
    • Commercial Terms & Payment Schedule
    • Data Processing Agreement (DPA)
    • Data Access & Integration Agreement
    • Security & Compliance Addendum
    • Intellectual Property & Licensing
    • Acceptance Criteria & Go/No-Go Checklist
    • Change Order & Scope Management
    • Termination & Exit Plan
    • Regulatory Liability & Indemnity Schedule
  6. Deployment

    Operationalize rollout with readiness checks, enablement, and outcome validation.

    1. Pre-Deployment Readiness

      Confirm data feeds, athlete/admin access, integrations, configuration owners, and regulatory feed subscriptions are in place before execution.

      Readiness Questions

      Starting Point — Tell Me About Your Program

      • How would you describe the current maturity of your NIL compliance program? Options: Ad hoc / manual spreadsheets, Defined processes but manual, Partially automated with tools, Fully supported by a compliance platform
      • Who is primarily responsible day-to-day for tracking disclosures and reviews? Options: Compliance Director, Associate AD for Compliance, Compliance Coordinator / Staff, Legal / GC team, Shared across roles
      • Roughly how many active athlete deals do you track per year (estimate)? Options: <100, 100–300, 300–600, 600–1,000, >1,000
      • Which tools or methods are you currently using to manage NIL activity? Options: Spreadsheets, Homegrown database, Commercial NIL platform, Email + shared drives, Paper / PDFs, Other
      • When you think about the last time an NIL issue caused stress, what stands out—what happened and how did it feel?
      • What event most recently triggered a change in your approach to NIL oversight (e.g., public exposure, conference inquiry, law change)? Options: Public media exposure, Conference review, State law change, NCAA guidance, Internal audit, Other

      If One Undisclosed Deal Appeared Tomorrow…

      • When an undisclosed deal surfaces publicly, what usually surprises you most about how it unfolded? Options: Timing of discovery, Where it was posted (visual vs. text), How many people knew, Gaps in documentation, Speed of media amplification
      • How long does it typically take from when you suspect a missing disclosure to when you can confirm and document it? Options: Same day, 1–3 days, 4–10 days, More than 10 days
      • Tell me about a recent example where an undisclosed relationship became a compliance issue—who found it, what evidence mattered, and what was the outcome?
      • When these incidents happen, which consequence worries you most? Options: Regulatory penalties/fines, Conference/institutional reputational damage, Internal discipline challenges, Inability to prove oversight in review, Fan/booster backlash
      • How confident are you today that your existing records would satisfy a conference or NCAA review? Options: Very confident, Somewhat confident, Uncertain, Not confident at all

      Where Your Spreadsheets Secretly Break

      • Do you believe your current manual processes are missing patterns that an automated system would catch? Options: Yes — frequently, Sometimes, Rarely, Not sure
      • Which parts of the disclosure workflow are most manual or error-prone for your team? Options: Intake of athlete disclosures, Verification of sponsor legitimacy, Linking social posts to deals, Audit trail generation, Reporting to conference
      • Approximately how many staff-hours per week are spent on manual NIL tracking, reconciliation, and reporting? Options: <5 hrs, 5–15 hrs, 15–40 hrs, >40 hrs
      • Where do most errors show up—missing metadata, inconsistent naming, missed social posts, or something else? Options: Missing metadata, Inconsistent entries, Missed social posts/visuals, Duplicate records, Other
      • If spreadsheets are creating blind spots, which blind spot worries you most and why?

      Who Really Decides — and Who Gets Blamed?

      • If institutional oversight failed and a regulator questioned your program, who internally would bear the brunt of responsibility? Options: Compliance Director, Athletics Director, General Counsel, Specific sport AD/coach, Shared across leadership
      • List the stakeholders who must sign off on policy changes, vendor data access, or a pilot (select all that apply). Options: Compliance Director, AD/CEO, General Counsel, IT/Data Security, Finance, Student-Athlete Advisory Committee, Conference Office
      • How aligned are those stakeholders today on priorities like speed of disclosure review versus thorough legal review? Options: Fully aligned, Mostly aligned, Some misalignment, Significant disagreement
      • Describe any political or cultural dynamics—booster influence, coach pressure, athlete privacy concerns—that have shaped how NIL oversight is handled here.
      • When decisions are made about escalation, who is the final decision-maker and how is that communicated? Options: Compliance Director, General Counsel, AD, Committee, No clear owner

      What Would Regulatory 'Good' Actually Look Like Here?

      • If a regulator audited you tomorrow, what single gap would you most fear they'd highlight? Options: Insufficient audit trail, Incomplete disclosures, Poor social monitoring, No formal workflows, Inadequate athlete education
      • Which of these measurable success signals would have the biggest impact on your risk posture? Options: % reduction in undisclosed deals, Audit-trail acceptance by conference, Rule accuracy threshold, Detection coverage of social posts, Speed of disclosure review
      • What targets would you consider a clear win for a pilot (select realistic ranges)? Options: Disclosure rate >90%, Detection coverage >80%, Rule accuracy >85%, Avg review time <48 hours, Audit-trail complete 100%
      • How often would you want automated regulatory updates and why (frequency and rationale)? Options: Real-time/within 72 hours, Weekly, Monthly, On-demand with notification
      • What evidence or artifacts do you need to feel comfortable that the institution could defend its oversight in a review?

      What's Stopping a Faster, Safer Pilot?

      • What's the single biggest friction that typically prevents pilots from launching or succeeding here? Options: Data access delays, Legal/commercial negotiations, Athlete buy-in, IT/security approval, Resource availability
      • Which legal or commercial items still need resolution before a pilot (select all that apply)? Options: Contract terms, Data processing agreement, SLAs for regulatory updates, Liability/indemnity, Pilot length and acceptance criteria
      • How long does your legal/contract review process normally take for vendor pilots? Options: <2 weeks, 2–4 weeks, 4–8 weeks, >8 weeks
      • What approvals or signatures are absolute blockers if not obtained (name roles or committees)?
      • If we shaved two weeks off the setup timeline, what would that enable for your department this quarter?

      Data & Integration Reality Check

      • How confident are you that the data feeds you rely on (roster, contracts, payments, social handles) are accurate and accessible? Options: Very confident, Somewhat confident, Low confidence, Not accessible currently
      • Which of these data feeds can you provide for a pilot without IT changes? Options: Roster with IDs, Athlete contact info, Existing disclosure records, Booster/collective registry, Social handle list
      • Who owns each integration or feed on your side (list roles and contact points)?
      • Have you experienced missing or delayed feeds in the past 12 months? If yes, how often and what caused them? Options: Never, Rarely (1–2x), Occasionally (3–6x), Frequently (>6x)
      • Are there regulatory data subscriptions (state law feeds, conference bulletins) you must subscribe to before a pilot? Options: Yes — already subscribed, Yes — need to subscribe, No required subscriptions, Unsure

      Athlete Behavior & Education — The Human Wildcard

      • How realistic is it to expect full, timely athlete disclosure without a targeted education and incentive program? Options: Unrealistic without it, Helpful but not required, Neutral, Not needed
      • What formats are you currently using to educate athletes about NIL obligations? Options: Online modules, One-pagers/handbooks, Team meetings, Live Q&A sessions, In-person workshops
      • What percentage of athletes typically complete required education within a season? Options: >90%, 70–90%, 50–69%, <50%
      • Describe common athlete objections or blind spots that lead to missed disclosures (e.g., misunderstanding visuals, booster deals, privacy concerns).
      • Have you used incentives, penalties, or gamification to improve disclosure rates? What worked or failed?

      Pilot Design — What Success Actually Requires

      • Could a two-month pilot truly validate your readiness for a full rollout—or are there outcomes only visible long-term? Options: Yes—short pilot sufficient, Mostly—need some extensions, No—requires longer pilot, Unsure
      • Which sport would you pick for a representative pilot and why (capture risk profile and visibility)?
      • Select the KPIs you’d require from the pilot to consider it successful (choose top 3). Options: Disclosure rate, Detection coverage of social posts, Rule accuracy, Avg review time, Audit-trail completeness, Athlete portal adoption
      • Who will own pilot day-to-day responsibilities on your side (identify roles and backup owners)?
      • What specific acceptance criteria would make you say 'go' or 'no-go' at pilot close?
      • What would constitute a fatal flaw during the pilot (single item that would stop rollout)? Options: Data quality issues, Poor detection accuracy, Athlete non-participation, Security concerns, Unresolved legal terms

      Next Steps & Commitments — Who Will Own This?

      • What’s the most likely reason this project would stall after initial enthusiasm? Options: Lack of operational ownership, Legal/commercial delays, IT/security roadblocks, Insufficient athlete engagement, Budget constraints
      • Which approvals need to be secured to begin Pre-Deployment Readiness (data access, athlete consent, legal sign-off, IT security)? Options: Data access, Athlete consent, Legal sign-off, IT/security approval, Budget approval
      • Who would be the configuration and integration owner on your side and who is their backup?
      • What is your ideal target date to start a pilot (month/quarter) and what internal dependencies must be resolved first? Options: Within 2 weeks, Within 1 month, Within quarter, Next quarter or later
      • Which readiness items below must be in place before execution (select all that apply)? Options: Roster feed live, Athlete portal access, Legal/contract signed, Data sharing agreement, IT security sign-off, Regulatory feed subscriptions
      • If we committed to a short joint-workshop next week, what would you most want to resolve during that session?
    2. Deployment Enablement

      Schedule configuration, athlete education rollout, pilot launch tasks, and assign owners with clear sequencing and escalation paths.

    3. Validation Checklist

      Verify pilot KPIs (disclosure rate, detection coverage, rule accuracy), document issues, and confirm remediation plans prior to full rollout.

      Validation Questions

      Start Here: What Brought You In Today?

      • What immediate event or concern prompted you to explore NIL compliance tooling today? Options: A public undisclosed athlete deal, A conference inquiry or audit, Upcoming state law change, Internal capacity strain, Other
      • Briefly describe the most recent example of a disclosure or monitoring issue you had (what happened, who saw it, and what the near-term consequence was).
      • How frequently do incidents like that occur at your institution? Options: Weekly, Monthly, Quarterly, Rarely / Ad hoc
      • How urgent is resolving this—what's your target timeframe for a meaningful pilot or mitigation (choose the closest)? Options: Within 30 days, Within 60–90 days, Within this quarter, No firm timeline yet
      • Who on your team will primarily own follow-up conversations and pilot coordination (role/title)?

      If Left Unchecked, How Bad Could This Get?

      • Imagine a high-profile undisclosed deal goes viral—what institutional consequences keep you awake at night? Options: Public relations fallout, Conference sanction/inquiry, NCAA investigation, Loss of donor/booster relationships, Legal exposure, Other
      • How many undisclosed or questionably disclosed athlete deals do you suspect exist right now (order-of-magnitude)? Options: None / confident, 1–5, 6–20, 20+
      • When similar exposures have happened elsewhere, what were the ripple effects you noted (staff time, policy changes, compliance burden)?
      • How long has this level of risk been building in your program? Options: Just started, A few months, 1–2 years, Several years
      • What would be the single clearest signal that you’d categorize the situation as ‘out of control’?

      What Are You Quietly Tolerating?

      • What manual processes or spreadsheets are you still relying on for disclosures and why haven’t they been replaced?
      • Which of the following current gaps cause the most daily friction for your team? Options: Missed disclosures, Slow review times, Fragmented audit trail, Poor social coverage (visual posts), Rule engine inaccuracies, Athlete portal confusion
      • Quantify the compliance team’s current capacity—how many full-time equivalents (FTEs) support disclosures and monitoring? Options: <1 FTE, 1–2 FTEs, 3–5 FTEs, 6+ FTEs
      • How do these tolerated problems make the team feel—frustrated, embarrassed, resigned, defensive, or something else? Options: Frustrated, Overwhelmed, Defensive, Resigned / Doing minimum, Motivated to change, Other
      • Can you share a specific example where a manual process directly failed to catch an issue? What happened next?

      Who’s Deciding—and Who’s Being Blamed?

      • Who are the decision-makers and approvers for NIL compliance changes (list roles: compliance director, GC, ADs, conference officer, others)?
      • Where have you experienced misalignment between legal, compliance, and athletics on disclosure expectations?
      • Which stakeholder’s buy-in would be hardest to secure and why? Options: General Counsel, Athletic Director, Conference Office, Boosters/Donors, Head Coaches, Other
      • Who outside your department (e.g., boosters, agents, camp directors) impacts disclosures or deal flows, and how cooperative are they? Options: Very cooperative, Somewhat cooperative, Reluctant, Adversarial / unknown
      • If an external regulator asked for proof of oversight, who would be responsible for preparing that evidence today?

      What Does 'Safe' Look Like in 90 Days?

      • If we ran a 90-day pilot, which primary success signal would make you say it succeeded? Options: Significant reduction in undisclosed deals, Audit-trail accepted by conference, Rule engine reaches agreed accuracy, Athlete adoption rate meets target, Faster review/approval times
      • Which KPI thresholds would feel materially successful to you (provide numbers where possible)?
      • How tolerant are you of false positives from social monitoring in a pilot (how much extra triage is acceptable)? Options: Very low (<=5% extra triage), Moderate (5–15%), High (15–30%), Unsure
      • What reporting cadence and format would you need to feel confident during the pilot (weekly dashboard, biweekly review, monthly exec summary)? Options: Weekly operational dashboard, Biweekly review with team, Monthly executive summary, Ad-hoc as issues emerge
      • Are there specific sports, rosters, or athlete segments you want included or excluded in the pilot (e.g., revenue sport, high-profile athletes)?

      What Would Make You Say 'No'—Deal Breakers?

      • Which contractual or operational limitations would immediately prevent you from moving forward? Options: No data access, Vendor legal terms unacceptable, Insufficient SLAs for regulatory updates, Price exceeds budget, Inability to integrate with key systems, Other
      • What minimum data access and integrations must be available for a pilot to be meaningful (roster feed, social handles, booster lists, payment records)?
      • What security/privacy certifications or controls are mandatory for your institution (e.g., FERPA considerations, institutional security review)? Options: Yes—mandatory, Preferable but not required, Not applicable/unsure
      • How flexible is your procurement team on contract length, pilot-to-production conversion, and renewal terms? Options: Very flexible, Somewhat flexible, Rigid, Unsure
      • What timeline or milestone would you require before legal/commercial teams sign off on a pilot?

      Who Will Run the Pilot—And Do They Have Bandwidth?

      • Who will be the day-to-day pilot owner and who is the executive sponsor (role/title)?
      • Do you have an internal configuration owner and IT contact available for a 4–6 week setup window? Options: Yes—both assigned, Partially—need to assign, No
      • What internal systems should the pilot integrate with and how accessible are those feeds (easy, requires approvals, restricted)? Options: Student information/roster feed, Athlete portal/SSO, Payment/boosters record, Social account lists, None / manual
      • What training and education will athletes and staff require during the pilot (live sessions, recorded modules, quick reference guides)? Options: Live training, Recorded modules, Quick reference guides, Office hours/support desk, No training needed
      • What internal blockers (IT approvals, data governance, coach resistance) could delay pilot start and how long would each typically take to resolve?

      What Would Success Change for You—Beyond the Pilot?

      • If the pilot met your success signals, how would day-to-day operations look different in 6 months?
      • How do you envision scaling beyond the pilot sport—phased by sport, full-dept rollout, or mixed approach? Options: Phased by sport, Department-wide after pilot, Hybrid approach, Unsure
      • What governance or policy changes would you plan to put in place once the platform is trusted? Options: Formal audit trail policy, Regular booster reporting, Athlete disclosure mandates, Automated rule updates, Other
      • Who else—outside compliance—would need to be convinced to adopt the platform long-term (list roles and likely objections)?
      • What ongoing support and update cadence would you expect from a vendor to keep pace with fast-moving NIL rules? Options: Weekly regulatory alerts, 72-hour law change updates, Monthly rule reviews, Quarterly strategy check-ins

      Are You Ready to Decide—and What’s Next?

      • Where are you in the decision process today (just exploring, gathering quotes, ready for pilot, budget approved)? Options: Just exploring, Gathering options, Ready to pilot—need procurement, Budget approved—ready to sign
      • Who else needs to be involved in the next meeting for this to move forward (legal, IT, AD, conference contact)?
      • What would you like the vendor to deliver as the next step from this discovery (technical scoping, pilot proposal, legal terms outline, demo tailored to sport)? Options: Pilot proposal with KPIs, Technical integration scoping, Tailored demo, Commercial/ legal draft
      • What are the top three things we should fix first if we run a pilot with you?
      • Is there anything else you want us to know that would materially affect the pilot or evaluation (political dynamics, upcoming events, sensitive athlete situations)?
  7. Success

    Review pilot outcomes against success signals, capture lessons, and maintain a shared channel for issues and enhancements.

    Success Reviews

    • Pilot Outcomes Review — Success Signal Validation
    • Lessons Learned & Root Cause Analysis
    • Enhancement Prioritization & Roadmap Decision
    • Regulatory & Audit Acceptance Review
    • Operational Handoff & Shared Enhancements Channel Setup

    Issues & Enhancements

    • Agree owners and timelines for providing any additional regulatory evidence.
    • Update pilot SOPs and athlete education materials to reflect lessons learned.
    • Backlog Review & Context
    • Finalize a prioritized enhancement roadmap with committed timelines and owners.
    • Define clear acceptance criteria for each roadmap item tied to success signals.
    • Agree interim risk mitigations for high-priority regulatory items.
    • Publish the prioritized roadmap with owners, dates, and acceptance criteria to the shared channel.
    • Create engineering tickets for top-priority enhancements with SLAs for delivery.
    • Document interim controls and communicate them to compliance and legal teams.
    • Regulatory Requirements Recap
    • Obtain formal regulatory acceptance or a clear list of outstanding items required for sign-off.
    • Ensure the audit trail artifacts meet institutional and conference evidentiary standards.
    • Introductions & Meeting Objectives
    • Deliver an audit-packet (redacted as needed) to GC and conference contacts for archive.
    • Track outstanding regulatory evidence items with owners and due dates.
    • Obtain written confirmation of acceptance or conditional acceptance to attach to the project file.
    • Handoff Checklist & Owner Assignments
    • Establish a single shared channel for issues and enhancements with clear governance.
    • Define and agree SLAs, escalation paths, and operational owners for ongoing support.
    • Set the training schedule and recurring measurement cadence to ensure sustained success.
    • Create the shared channel and invite governance members; publish channel rules and triage flow.
    • Document SLAs and escalation matrix and circulate to stakeholders.
    • Schedule the first monthly success review and operational training sessions.
    • Confirm which pilot success signals are satisfied with evidence-backed agreement from customer and seller.
    • Surface and quantify the operational and regulatory consequences of unmet signals.
    • Agree on immediate remediation tasks and owners for any gaps preventing success signal attainment.
    • Deliver a validated KPI report with raw data links and measurement methodology within 3 business days.
    • List unmet signals with root-cause notes and assign owners for remediation.
    • Schedule a follow-up validation checkpoint after remediation work is completed.
    • Incident Timeline Review
    • Identify root causes for the pilot's top incidents and document reproducible lessons.
    • Produce a prioritized set of corrective actions with clear owners and due dates.
    • Capture and preserve practices that proved effective for inclusion in standard operating procedures.
    • Produce RCA documents for each major incident and attach sample evidence.
    • Create a prioritized corrective-action register with owners and target dates.
    • Impact vs Effort Scoring
    • Issue Triage & SLA Definitions
    • Audit Trail Walkthrough
    • One-sentence Current State Recap
    • Top-3 Failure RCA Deep Dive
    • What Worked Well
    • KPI Dashboard Walkthrough
    • Shared Channel Setup & Governance
    • Regulatory Urgency & Compliance Mapping
    • Legal/Conference Feedback
    • Agree Roadmap & Timelines
    • Audit Trail & Evidence Review
    • Breakout: Fix Options & Impact
    • Training & Measurement Cadence
    • Risk Acceptance & Remediation Plan
    • Next Steps & Launch
    • Consequence Assessment
    • Risk Mitigation & Contingency Planning
    • Synthesis & Prioritization
    • Formal Sign-off or Conditional Acceptance
    • Consensus & Validation
    • Next Steps & Ownership
First-Party AI

1-2 minutes please — Your AI agent is working

First-Party AI™ can make mistakes. Always check important information.