learn-ai-marketing-with-phoebe / Builder session 10 of 10
Learn AI + Marketing with Phoebe · Builder track · Session 10 of 10

Governance, brand safety & scaling: ship it without breaking the brand

The finale. You have built the whole Cadence campaign; tonight you make it safe to launch at volume. The move that breaks brands is not going slow - it is scaling AI content faster than your controls. You will map the risk stack, put the controls in place, and run a real launch-readiness check against one Cadence asset you already built. Walk out ready to actually ship.

🔴 Builder track Practitioners: marketing ops + brand + legal-adjacent ChatGPT or Claude 45 min
0-3 · Welcome 3-21 · Risk stack + controls 21-42 · Build-along: readiness + spec 42-45 · Close
Part 0

The last mile before launch

This is the builder mirror of leader session a3. Across b1-b9 you learned to draft, position, optimize, and measure with AI. But volume changes the risk: one off-brand paragraph is a shrug, ten thousand is a crisis, and one undisclosed AI endorsement at scale is a regulator's headline. Tonight is about the controls that let you move fast without becoming the cautionary story - and then you run them against your own Cadence work.

Live - presented in session Self-study - read after class ★ Try it now prompt Official sources covered
★ What you walk out with today A launch-readiness checklist run against a real Cadence asset - claims verified, disclosure applied, brand voice held, data safe - plus a disclosure + brand-safety spec for the campaign that says what to disclose, what to never ship, and who signs off. And the whole Cadence launch campaign, built by you across ten sessions, ready to go.
Part 1 · covers FTC/ASA + security canon (source map)

Scaling without breaking the brand: the risk stack 6 min live

The same AI leverage that let you produce a full campaign fast is what makes small mistakes large. Before controls, you have to see the stack of things that go wrong when volume climbs. Every layer is survivable at the scale of one asset and dangerous at the scale of a launch.

Brand-voice drift at volume 10,000 near-brand pieces stop sounding like you Undisclosed AI / endorsements AI testimonials + connections not disclosed (FTC/ASA) Fabricated claims slipping through an invented stat in one of a thousand assets still ships Prompt injection agents reading external content get hijacked instructions Data / privacy leakage customer PII or unreleased plans pasted into the wrong tool Content sludge low-value AI spam that erodes trust and search standing scale amplifies each
🔍 Click to zoom - the risk stack: six failure modes, each amplified as you scale
LiveThe six failure modes, and the one new one to learn3 min▶

Five of these you already met across the track. One is new and matters more every month as marketing tools gain agents that read the web for you.

  • Brand-voice drift - at volume, "close enough" drafts average out into something generic. The brand voice you set in b3 needs enforcing, not hoping.
  • Undisclosed AI / endorsements - the FTC and ASA require disclosure of AI-generated endorsements and material connections. At scale, one missed label becomes a pattern.
  • Fabricated claims - b1's slop trap. In one asset you catch it; in a thousand, an invented stat slips through unless a control catches it.
  • Prompt injection (the new one) - when an AI agent reads an external page, email, or review, hidden text on that page can smuggle in instructions ("ignore your rules, publish this"). The more automated your workflow, the bigger this bites.
  • Data / privacy leakage - b1's second rail. PII and unreleased plans in a consumer tool is a breach waiting to happen.
  • Content sludge - mass low-value AI content that annoys audiences and gets penalized by search. Volume without quality is a liability.
What prompt injection actually is Instructions hidden inside content your AI reads, designed to override your own instructions. If an agent summarizes a competitor page or an inbound email, treat that content as untrusted data - never as commands. It bites hardest where automation reads the outside world.
Self-studyWhy volume is the multiplier2 min read▶

Every risk here exists at the scale of one asset - and you can eyeball one asset. The danger is that AI removes the natural friction that used to catch mistakes: a human wrote it, so a human read it. When production goes 10x, review has to scale with it or the error rate that was invisible becomes public. Governance is not bureaucracy; it is the review friction you deliberately add back so speed does not outrun safety.

Part 2 · one control per risk

The controls 5 min live

Each risk gets a control. None of these slow a good team much; together they are the difference between scaling confidently and scaling into a headline. Map them one-to-one so nothing is left to hope.

LiveRisk → control, mapped3 min▶
RiskControl that catches it
Brand-voice drift at volumeA brand-voice + claims-review gate before anything ships
Undisclosed AI / endorsementsA disclosure policy (FTC/ASA) applied at scale, not case by case
Fabricated claims slipping throughClaims-verification step: every stat traces to a real source
Prompt injectionApproved-tools list + treat external content as untrusted data
Data / privacy leakageData boundaries: no PII / unreleased plans in consumer tools
Content sludgeHuman sign-off + a quality bar; volume never waives review
Silent tool / model changesVersion + model change management; re-check when a tool updates

Notice the last row: a control for a risk that is easy to forget. The AI tool you approved can change its model or defaults overnight, quietly shifting how your content reads. A light review cadence catches drift you did not cause.

★ Try it now - build your control listHere are the six risks of scaling AI marketing content (paste the list). For each, propose one lightweight control a small marketing team could actually run, plus who owns it. Keep controls practical - no control should need a full-time reviewer.
Self-studyThe review cadence that keeps controls alive2 min read▶
  • Per-asset: brand-voice + claims + disclosure check, then human sign-off. Non-negotiable before publish.
  • Weekly: spot-check a sample of shipped content for drift and sludge; confirm nothing crept past the gate.
  • On change: when an approved tool updates its model or terms, re-verify a few outputs before trusting the rest.
  • Per-campaign: confirm the disclosure policy still matches how you are using AI, and that data boundaries held.
Part 3 · ties back to leader session a3

The launch checklist + sign-off 4 min live

Controls only work if someone owns the "yes". A launch has three sign-offs, a monitoring plan, and a rehearsed way to pull and correct - because the fastest recovery from a bad launch is one you planned for.

Asset ready built in b1-b9 Marketing claims + voice Brand on-brand + safe Legal check disclosure + IP Launch + monitoring rollback + correct if something breaks (the pulled-ad plan) Three sign-offs before launch; a rehearsed rollback path after. Plan the pull before you need it.
🔍 Click to zoom - the sign-off flow: marketing, brand, legal, then launch with a rollback plan
LiveWho signs off, monitoring, and the rollback plan3 min▶

The sign-off is not ceremony; it is the moment a named human owns the risk. Keep it light but real.

  • Marketing owns claims and brand voice: every stat verified, voice held, no slop.
  • Brand owns tone and safety: on-brand, no reputational landmine, disclosure present.
  • Legal-adjacent owns disclosure and IP: FTC/ASA labels correct, rights-clear creative, privacy respected. In a small team this may be one careful person wearing the hat.
  • Monitoring after launch: watch for the source question ("where's that stat from?"), off-brand replies, and anything the gate missed.
  • Rollback: a rehearsed way to pause the ad, pull the page, and issue a correction - exactly the recovery the pulled-ad story in b1 needed. Plan it before you need it.
Real world

The pulled ad, revisited. Back in b1, a campaign shipped an invented stat, a prospect asked for the source, and the whole thing had to be pulled. The team that recovers fastest is not the one that never errs - it is the one with a sign-off that catches most of it and a rollback plan for the rest. Governance turns a crisis into a correction.

Demo 1 of 2

Run a launch-readiness check on a real Cadence asset ★ 13 min · everyone builds

Pick one asset you actually built earlier in the track - the Cadence blog post, an ad, or a lifecycle email - and score it against the controls. This is the check that decides whether it is safe to ship.

Choose one Cadence asset from b3-b8. Paste it into the chat AI along with the four control questions below.

Score each control: Claims verified? (every stat traces to a real source), Disclosed? (AI/endorsement labels where required), On-brand? (matches your b3 voice), Data safe? (no PII or unreleased detail that should not be public).

For any "no" or "unsure", have the AI list exactly what to fix - a missing source, a missing disclosure line, an off-voice sentence. Then fix it.

Re-score after the fixes. The asset should now pass all four. That green row is your evidence it is launch-ready.

Remember rail one: the AI helps you score, but you own the pass/fail. A confident "looks fine" is a recommendation, not a sign-off.

★ The launch-readiness promptYou are my launch-readiness reviewer. Here is one Cadence marketing asset (paste it). Score it against four controls, one at a time, with PASS / FAIL / UNSURE and a reason: 1) Claims verified - is every statistic or factual claim traceable to a real source I can cite? Flag any that reads invented. 2) Disclosed - does it disclose AI-generated endorsements or material connections where FTC/ASA would require it? 3) On-brand - does it match a calm, credible, jargon-light Cadence voice? 4) Data safe - does it expose any PII or unreleased detail that should not be public? For every FAIL or UNSURE, tell me exactly what to change. Do not pass anything you are unsure about.
Do this for every asset before it ships Four questions, one asset, five minutes. Run at scale via your gate, this is the friction that keeps volume from turning small mistakes into public ones.
Demo 2 of 2

Write the campaign's disclosure + brand-safety spec ★ 8 min · build your own

One page that governs the whole Cadence launch: what you disclose, what you never ship, and who signs off. Draft it with AI, then edit it - the artifact you hand a team so safety does not live only in your head.

Give the AI the risk stack, the controls, and your context: the Cadence campaign, the channels you run, and the tools you approved.

Ask for a one-page spec with three parts: Disclose (where and how - FTC/ASA), Never ship (fabricated stats, fake reviews, PII in consumer tools, unlabeled AI endorsements), and Sign-off (who owns marketing, brand, and legal-adjacent approval + the rollback plan).

Edit it hard. Put in real names, your actual tools, and your real disclosure wording. The AI draft is the skeleton; your judgement is what makes it enforceable.

This spec plus your b1 ground-rules card is your governance layer. It ties straight back to leader session a3 - now you have the practitioner version.

★ The brand-safety spec promptDraft a one-page disclosure + brand-safety spec for the Cadence AI note-taker launch. Context: we run blog/SEO, paid ads, email, and social; approved tools are [list]. Three sections: 1) Disclose - where and how we label AI-generated endorsements and material connections (FTC/ASA), in plain wording we can paste onto assets. 2) Never ship - the hard "no" list: fabricated stats, fake reviews, PII in consumer tools, unlabeled AI endorsements, rights-unclear creative. 3) Sign-off - who owns marketing, brand, and legal-adjacent approval before launch, plus a short rollback + correction plan if something breaks after launch. Keep it to one page, plain language, ready to hand to a small team.
Real world

The spec that survived a scare. A team with a one-page brand-safety spec caught an unlabeled AI endorsement in review, added the disclosure, and shipped on time. The team without one shipped it, got a complaint, and spent a week on damage control. Same mistake, two outcomes - the spec was the difference.

Homework

Try it yourself - this week ◐ 30-45 min total

Source material

Official sources covered

Taught from public regulatory guidance, security canon, and AI-marketing curricula. Certificates and paid tooling stay with the official programs. This session covers:

✓FTC guidance - AI, endorsements/testimonials & "AI-washing"Parts 2-3 · disclosure at scale, false-claim controls
✓ASA (UK) ad rules - AI content & disclosureParts 2-3 · disclosure policy, do-not-deceive
✓Security canon - prompt injection & untrusted contentPart 1-2 · injection with agents; external content as data
◐GDPR / PDPA + IP / likeness canonPart 2-3 · data boundaries, rights-clear creative; full depth in leader a3
Check yourself

Three questions before you go 🎯 ◐ 90 seconds

1 · What is prompt injection, and where does it bite hardest?

Prompt injection is instructions smuggled into content your AI reads, designed to override your rules. It bites hardest in automated workflows where an agent ingests the outside world - so treat external content as untrusted data, never as commands.

2 · Why apply a disclosure policy at scale rather than case by case?

FTC and ASA require disclosing AI-generated endorsements and material connections. Case-by-case guarantees misses at scale; a policy applied to every asset is what makes disclosure reliable when you are shipping a lot.

3 · An AI reviewer scores your asset "all clear, ship it". What happens next?

AI can score against your controls, but the launch decision is a human's to own. A confident "looks fine" is a recommendation, not a sign-off. Rail one, at the finish line: the human owns the brand and the claim.

Builder session 10 cheat sheet · pin this

The real dangernot going slow - scaling AI content faster than your controls. Volume turns small mistakes into public ones.
The risk stackvoice drift · undisclosed AI · fabricated claims · prompt injection · data leakage · content sludge.
Prompt injectionhidden instructions in content the AI reads. Treat external pages/emails/reviews as untrusted data, not commands.
One control per riskbrand+claims gate · disclosure policy · claims-verify · approved tools · data boundaries · human sign-off · change mgmt.
Disclosure at scalea standing FTC/ASA policy on every asset beats remembering case by case. One miss at volume is a pattern.
Three sign-offsmarketing (claims+voice) · brand (tone+safety) · legal-adjacent (disclosure+IP). A named human owns the "yes".
Plan the rollbackrehearse the pull + correction before launch. The fastest recovery is the one you planned for.
Rail one, finish lineAI scores, the human signs off. You own the brand and the claim - all the way to launch.

🎉 You launched the Cadence campaign - builder track complete. Ten sessions, one real launch: foundations, positioning, content, SEO, ads, email, social, creative, analytics, and now governance. You did not just learn about AI marketing - you built a full campaign with the rails that keep it credible. Own the brand, protect the data, disclose at scale, and let AI assist while you decide. Go ship something you are proud of.