Name, Image & Likeness Compliance
People decisions with significant organizational, financial, and cultural stakes.
Inside this journey
-
Pre-Discovery
Align the room on outcomes, decision process, and constraints before deeper discovery.
-
Stakeholder Alignment
Confirm decision roles (compliance director, GC, ADs, conference officer), timeline, and what regulatory ‘good’ looks like for the institution.
Alignment Questions
Quick Check — Where We Are Right Now
- What's the immediate trigger that brought us together today (select all that apply)?
- How recently did that trigger occur?
- Who first identified the issue and how did it surface (athlete, booster, public post, internal report, conference)?
- What immediate steps have you already taken in response (brief chronology)?
If This Went Public Tomorrow, What Keeps You Up?
- What would the worst-case headline look like for your program or institution?
- Which internal and external stakeholders would face the most exposure if that headline happened? (choose up to three)
- Have you experienced a similar public exposure before? Tell the brief story and outcome.
- Emotionally, what does that risk do to your ability to focus on other priorities?
Are Your Current Controls Illusions of Safety?
- How confident are you that your current spreadsheets and manual reviews would catch a high-risk undisclosed deal?
- Describe your disclosure workflow from athlete submission to final institutional record—who touches it and when?
- Which tools or systems do you currently use to track disclosures and monitoring (select all that apply)?
- How many full-time equivalents (FTEs) or staff hours per week are dedicated to NIL compliance and oversight?
- In the last 12 months, how many undisclosed or late-disclosed deals surfaced after-the-fact (estimate)?
Where Are The Clever Ways Things Break?
- What clever loophole or blind spot worries you most—booster collectives, private intermediaries, visual-only content, or something else?
- Have you encountered booster collectives or intermediaries operating outside institutional oversight? If yes, describe one example.
- How do you currently detect visual-only social posts (images or videos without identifying text)?
- Where has rule ambiguity (state vs. conference vs. NCAA guidance) caused confusion or inconsistent decisions recently?
How Would You Measure 'We Fixed It' in 90 Days?
- If we ran a focused 90-day pilot, what one outcome would convince you the greatest institutional risk was meaningfully reduced?
- Which KPIs should we track during the pilot? (pick up to three)
- What minimum thresholds would you require for success (e.g., detection accuracy ≥ X%, disclosure increase ≥ Y%)?
- Who inside your GC or conference team needs to sign off on those success thresholds?
Who Decides — And How Fast Can They?
- If the compliance director signs off but the general counsel pushes back, what typically happens next and how long does a resolution take?
- List the decision-makers and their role in a pilot (select all that apply, then name them if possible).
- What procurement, legal review, or institutional IT milestones commonly create the longest delays?
- What timeline would you consider immovable (e.g., conference review date, legislation effective date)?
Show Me a Week — Where Bottlenecks Hide
- Which recurring review, approval, or audit in your weekly cycle would cause the biggest disruption if it failed?
- Walk me through a typical athlete disclosure path and note where most delays or handoffs occur.
- How often do you update internal rule logic when laws or guidance change, and who makes the update?
- Which data feeds or integrations are missing today that would materially improve monitoring (social APIs, contract databases, booster registries)?
What Would Make You Trust a Pilot Enough to Expand?
- What single tangible result would turn a skeptical stakeholder into an active advocate for expansion?
- Which sport and approximate roster size would be the ideal pilot for meaningful signal without overtaxing teams?
- What specific data access, feeds, or permissions must be granted before launch (select all that apply)?
- What maximum duration would you accept for a pilot before deciding go/no-go?
What Could We Deliver Fast That Changes the Game?
- What is one small capability we could deliver in 2–4 weeks that would materially lower your exposure?
- Which of those quick wins would be hardest to get athletes to adopt, and why?
- Who would need to enable or sign off internally to deploy a quick capability (select all that apply)?
- How would you want us to demonstrate impact of that quick capability in the first 30 days (reporting cadence, sample alerts, pilot user interviews)?
Agreeing Next Steps — Who Does What and When
- If we leave this conversation agreeing to two concrete actions, what must they be?
- Who on your side will be the operational owners for the pilot (select roles and optionally list names)?
- What is an acceptable target window to launch the pilot (choose one)?
- Are there procurement, contracting, or data agreements that must be completed before we begin? If yes, what is the expected timeline?
-
Current State Mapping
Document existing disclosure workflows, spreadsheet pain points, social monitoring gaps, and known failure modes (e.g., booster collectives, undisclosed deals).
Current State
Start Here: A Quick Snapshot of Today
- How do you currently track athlete NIL disclosures day-to-day?
- Roughly how many active disclosure records or new deals does your office handle each month?
- Who is directly responsible for initial collection, verification, and filing of disclosures?
- Walk me through the typical lifecycle of a disclosure in your current process—from athlete submission to final record. Please include handoffs.
- Where do you store historical disclosure records and supporting materials (contracts, receipts, screenshots)?
- How confident would you be that your current records would withstand a conference or NCAA compliance audit?
If One Missed Post Could Start an Investigation, How Would You Explain It?
- How often do undisclosed or questionable deals surface publicly (media, boosters, social posts) in a given year?
- Tell us about the most recent time a social post or media story created compliance exposure—what happened and what did it reveal about your process?
- When an undisclosed deal appears, what are the most common root causes you identify?
- On average, how long passes between a problematic post and your team becoming aware?
- What immediate evidence or documents do you wish you had available when responding to a public exposure?
- How does handling public exposures typically affect your team—operationally and emotionally?
Where the Spreadsheet Stops Being Enough
- If spreadsheets are central to your process, what three problems do they cause most often?
- Which day‑to‑day tasks tied to disclosures consume the most staff hours?
- How frequently do you encounter version control issues or multiple conflicting copies of disclosure data?
- Have you missed deadlines or failed to capture key evidence because of manual tracking limitations?
- If you could remove one manual step right now, which would deliver the most relief?
- What proportion of your compliance workload feels reactive (firefighting) versus proactive (prevention, education)?
Blind Spots: The Things You Can't See Until It's Too Late
- Which social platforms and channels are you intentionally monitoring for athlete brand activity today?
- Are you using any automated visual recognition (logos, products) or are you relying on text/hashtags only?
- What blind‑spot concerns keep you up at night (booster collectives, surrogate deals, dark posts, influencer layers)?
- Approximately what percentage of flagged content is a true compliance concern versus false positive noise?
- Describe your current process for triaging flagged content—who reviews, what are timelines, and how are decisions documented?
- Which types of visual or indirect sponsorships are hardest for you to detect today?
When Rules Change Overnight, Who's Left Holding the Bag?
- How do you currently monitor and track state, conference, and NCAA NIL rule changes?
- When a regulatory change occurs, how fast can you update internal policies and communicate to athletes?
- Has a recent rule change ever impacted a signed or pending deal? Tell us how you handled it.
- Who needs to approve regulatory interpretation and outbound communications (check all that apply)?
- What SLA would you require from a vendor for updating rule logic after an official change?
- What is the single biggest risk to your program if regulatory rules are interpreted or applied incorrectly?
What Would True Confidence Look Like in 90 Days?
- Which pilot KPIs would prove the platform materially reduces your institutional risk?
- Set a measurable target for undisclosed deals reduction or disclosure rate improvement you’d consider a success after 90 days.
- What is an acceptable false positive rate for social monitoring that still allows your team to operate efficiently?
- How many sports or teams would you include in an initial pilot to get a representative sample?
- Who should be on the pilot steering committee to approve go/no‑go decisions?
- What objective criteria would you require to greenlight full rollout after the pilot?
Ready to Change? What Support Would Remove the Friction
- What commercial, legal, or data‑privacy concerns usually slow vendor contracting for your office?
- Which internal stakeholders must be involved in procurement and implementation sign‑off?
- What system integrations are must‑haves for a successful deployment (eg. SSO, student records, LMS, analytics)?
- Which training formats produce the best athlete adoption for you—live sessions, recorded modules, in‑portal microlearning, or ongoing office hours?
- What level of vendor transparency and reporting do you expect during a pilot (dashboard access, raw data export, weekly summaries)?
- If we proposed a 60–90 day pilot with agreed KPIs, what would be your single biggest hesitation to starting?
Small Wins That Prove Big Value
- If we could deliver one meaningful result in the first 30 days, what outcome would make you most comfortable to continue?
- Which specific processes could realistically be fully automated or simplified within the first month?
- What minimum reporting package would you need to show leadership immediate pilot value?
- Who will own day‑to‑day operations of a pilot on your side (name/role) and how many hours per week can they dedicate?
- Are there any data access limitations, legal restrictions, or privacy considerations we must resolve before data sharing?
- What would be the ideal next step after this discovery call to get a pilot started?
-
-
Outcome Discovery
Define measurable success signals (reduction in undisclosed deals, audit-trail acceptance, rule accuracy thresholds) and pilot objectives tied to risk mitigation within 90 days.
Discovery Questions
Quick Intro: Who's in the Room?
- Which role(s) are you speaking for today?
- Roughly how many student-athletes do you manage for NIL disclosures?
- Which sport would you prefer to use as the pilot (or select 'Multiple sports')?
- What specifically triggered this conversation now (pick the primary reason)?
- Briefly summarize the most recent disclosure-related incident or near-miss (what happened, when, who noticed).
If an Undisclosed Deal Became a Headline Tomorrow…
- If a single undisclosed athlete deal landed in the press tomorrow, how would your department be judged?
- How many times in the last 24 months have undisclosed deals been discovered via media or external inquiries?
- Where do the undisclosed deals you find most often originate from?
- When a deal goes public, how long does it typically take your office to detect it?
- How do these incidents make you feel about your current oversight?
Are You Sure You’re Catching the Hidden Stuff?
- Are you confident your current monitoring finds visual brand placements and booster-funded activity?
- Which social channels and content types do you actively scan today?
- How do you currently detect undisclosed deals (pick all that apply)?
- What percentage of posts with brand logos or product placement do you believe your team reliably detects today?
- How frequently do false positives from your current monitoring consume meaningful staff time?
- How quickly does your team usually convert a regulatory change into an updated internal rule?
What Would a Regulator Need to See to Call This 'Adequate'?
- What would a regulator or conference need to see to consider your oversight 'adequate'—and do you already have that evidence?
- Has a conference or NCAA review ever requested your NIL audit trail, and what was the outcome?
- Which artifacts would most strengthen your defense in a review (select top three)?
- What baseline disclosure rate would you consider defensible if asked by leadership or a regulator?
- Tell us about one past exchange with a regulator or conference that changed how you think about 'adequate' oversight.
Success Signals That Actually Move the Needle
- Which measurable change would make you call a 90‑day pilot a clear success?
- What is your current baseline disclosure rate (estimate if exact data isn’t handy)?
- Select the top three KPIs you’d prioritize for a 90‑day pilot.
- For each KPI you selected, what absolute or relative improvement would justify full rollout? (e.g., disclosure +15% or detection latency cut in half)
- How many deals or flagged posts do you think are needed in the pilot to be statistically meaningful for these KPIs?
- Who will formally sign off on pilot success?
Pilot Objectives: Small Scope, Big Risk Reduction
- If we could eliminate one exposure in 90 days, which of the following would most improve your risk posture?
- Which of these modules must be included in a pilot to achieve that objective?
- For the pilot, what scope do you prefer (single team size, multi-team small, or department-level)?
- What internal responsibilities will your team own during pilot execution?
- What acceptance threshold for rule accuracy (precision/recall) would you require to consider automation trustworthy?
- Are there any data-sharing, privacy, or IT constraints we must design the pilot around? Please list.
Who Needs to Say Yes (and Will They?)
- Who in your institution holds the real veto power over launching a pilot—and do they view the risk as urgent?
- Which stakeholders must be consulted before kickoff (select all that apply)?
- What contractual or commercial constraints would block a pilot (pick any that apply)?
- How much executive bandwidth can be realistically allocated to pilot governance each week?
- If the pilot shows mixed results, who makes the final go/no‑go decision?
- Describe a previous pilot with a vendor—what specifically helped adoption, and what derailed it?
If Things Go Wrong, How Do We Respond?
- Which outcome would most quickly erode confidence in a pilot—an avalanche of false alarms, a missed public exposure, slow fixes, or something else?
- What maximum false positive rate (% of flagged items that are non-issues) is acceptable before your team loses engagement?
- What maximum false negative rate (missed violations) would be tolerable during the pilot?
- How quickly must critical issues be resolved during the pilot to maintain trust?
- What escalation path should we use if a public exposure or regulator inquiry occurs during the pilot?
- How would you like performance and incident reporting delivered during the pilot?
Next Steps: What a 90‑Day Pilot Actually Looks Like
- What would make you say 'start the pilot today'—clear ROI, low operational lift, audit evidence, or leadership pressure?
- Which non-negotiable items must be in place before kickoff (select all that apply)?
- How soon do you need a pilot to start to address the most pressing regulatory or reputational risks?
- What communication cadence and format do you prefer during the 90‑day pilot?
- Which post-pilot deliverables would best convince leadership to scale (choose up to three)?
- What questions have we not asked that matter to you right now?
-
Solution Experience
Walk through outcome delivery using the customer’s scenarios—how disclosures, visual social scans, rule updates, and audit trails prevent public exposures and regulatory findings.
Experience Meetings
- Current State Confirmation
- Consequence & Risk Quantification
- Define Future State & Success Signals
- Scenario-Based Solution Experience (Live Walkthrough)
- Validation, Acceptance Criteria & Next Steps (Sign-off Workshop)
- Welcome & Objectives
- Product to draft a risk-prioritization list that maps detection types to mitigation value for pilot selection.
- Future State Readout (one sentence)
- Finalize a one-sentence future state that all participants can reference during the experience.
- Agree on a minimum set of measurable success signals with numeric thresholds for pilot acceptance.
- Confirm pilot scope (which sport, which athlete cohort, timeframe) and the evidence package required for validation.
- Ensure every success signal maps to a single, demonstrable capability to avoid feature wandering.
- Product to produce a one-page Future State + KPI mapping document and share within 48 hours.
- Customer to confirm pilot sport, athlete cohort, and target acceptance thresholds within 3 business days.
- Compliance and Legal to list required evidence formats and any regulatory sign-off steps.
- Brief Re-check of Preconditions
- Prove the future state for each prioritized scenario with concrete detection-to-audit evidence.
- Tie every demonstrated step back to the customer's stated problems and quantify the improvement for each KPI.
- Obtain explicit validation or constructive objections from stakeholder owners for each scenario.
- Agree on immediate configuration tasks required to replicate the proofs in the pilot environment.
- Product to configure the validated detection rules in the pilot environment and seed with scenario data.
- Compliance to review and approve the audit-trail export format (pdf/csv/log) for regulator acceptance.
- Customer to confirm any changes to escalation paths based on the scenario outcomes.
- Schedule a 1-week follow-up to review initial pilot detection performance on the validated scenarios.
- Recap of Future State & Demonstrated Proofs
- Obtain formal sign-off on pilot acceptance criteria and required evidence package.
- Assign clear owners for all pilot tasks (data feeds, rule configuration, athlete notification, reporting).
- Set the pilot timeline and the first reporting checkpoint for KPI review.
- Document and accept remediation plans for any residual risks that could affect pilot validity.
- Customer and Product to sign and record the agreed pilot acceptance checklist and timeline.
- Technical team to enable data feeds and confirm athlete/admin access prior to pilot start date.
- Compliance to prepare a one-page evidence submission template for end-of-pilot validation.
- Schedule the pilot launch meeting and the first KPI review at the agreed checkpoint (e.g., 30 days).
- Agree verbatim on the one-sentence current state that will drive the experience.
- Catalog specific failure modes to be used as scenarios in later sessions (e.g., booster collectives, visual-only deals).
- Confirm data access availability and designate compliance and technical owners for follow-up.
- Identify any missing pre-work items and schedule immediate remediation.
- Customer to deliver anonymized incident packets (screenshots, timestamps, affected athlete IDs) within 48 hours.
- Customer to provide read-only access or exports of current disclosure spreadsheets and social feed samples.
- Assign a single technical point-of-contact for data feed validation and a compliance owner for scenario validation.
- Re-state Current State & Failure Modes
- Make the consequence explicit with quantifiable impact metrics tied to institutional risk.
- Agree on baseline KPIs that the Solution Experience will use to prove value.
- Prioritize 2–4 risk scenarios that must be demonstrably mitigated in the pilot.
- Identify legal/regulatory thresholds (e.g., acceptable audit-trail formats) required for validation.
- Compliance team to provide baseline KPIs (current disclosure rate, detection coverage, mean time-to-detect) by end of week.
- Legal/GC to document any regulatory acceptance criteria or recent audit language relevant to oversight documentation.
- Incident Impact Review
- Review Pilot Acceptance Checklist
- Map Outcomes to Capabilities
- Scenario 1: Undisclosed Sponsor Post (Diagnosis)
- Readback: One-Sentence Current State
- Regulatory & Audit Exposure Mapping
- Evidence Review: Recent Incidents
- Roles, Timeline & Communication Plan
- Scenario 1: Proof — Detection to Disclosure Workflow
- Define 3–5 Success Signals & Thresholds
- Scenario 1: Tieback & Validation
- Outstanding Risks & Remediation Plans
- Inventory: Tools, Spreadsheets, and Feeds
- Pilot Objectives & Scope
- Baseline Metrics & KPIs
- Formal Sign-off & Next Steps
- Validation Criteria & Evidence Types
- Prioritize Risks for the Pilot
-
Solution Scope
Specify modules (disclosure workflows, rule engine, social monitoring, athlete education, reporting), pilot sport, responsibilities, and acceptance criteria.
Scope Configuration
- Deploy Athlete Disclosure Intake Form
- Activate Deal Review Workflow Automation
- Activate State-by-State Rule Engine
- Enable Social Media Visual Content Monitoring
- Launch Athlete Education Course Modules
- Provision E-Signature for NIL Contracts
- Generate Audit-Trail Export Package
- Deploy Booster Collective Transaction Monitoring
- Configure Conference Reporting Exports
- Integrate Roster Sync with SIS
- Enable Role-Based Access Controls and Permissions
- Activate NCAA and State Update Alert Feed
Scope Questions
Deploy Athlete Disclosure Intake Form
- Do you currently use any digital disclosure/intake form today?
- Which required fields must the intake capture (role, deal value, counterparty, dates, platform evidence, location)?
- Should the intake support attachments (images, screenshots, contracts)?
- What authentication method should athletes use to submit disclosures?
- Do you require conditional fields (e.g., agent fields only if agent involved)?
- Should the form be available mobile-first or desktop-only?
- Estimated average monthly disclosure submissions during pilot?
Activate Deal Review Workflow Automation
- Which review roles should be included in the workflow (compliance director, reviewer, legal, AD)?
- How many approval stages do you require before a disclosure is accepted?
- Do you need automated routing based on rules (e.g., value thresholds, sport, agent involvement)?
- What SLA should the workflow enforce for each review stage?
- Should reviewers be able to request edits from athletes with an in-app loop?
- Do you want escalation rules for overdue reviews or high-risk flags?
- Are there monetary or benefit thresholds that require legal review? If yes, specify.
Activate State-by-State Rule Engine
- Which states must be active in the pilot rule set?
- Do you require sport-specific rule overrides (e.g., football vs. non-revenue sports)?
- Do you want institution-specific policy overrides layered on top of state/NCAA rules?
- What acceptance threshold for rule accuracy do you require during pilot (for go/no-go)?
- What SLA do you require for regulatory updates (engine update cadence)?
- Which rule types are most important to enforce (compensation, agent registration, disclosure timing, booster involvement)?
- Who will be the policy owner(s) at the institution to validate rule mappings?
Enable Social Media Visual Content Monitoring
- Which social platforms should be monitored in pilot (Instagram, TikTok, Twitter/X, Facebook, Snapchat)?
- Do you require visual (image/video) content scanning in addition to text/hashtag scanning?
- What detection sensitivity do you prefer initially (high sensitivity with more false positives vs. high precision)?
- How frequently should athlete social feeds be scanned?
- Do you want alerts routed into the deal review workflow or a separate intake queue?
- Are there athlete accounts we should exclude from monitoring (club/private accounts)?
- Languages or regions to prioritize for visual/text recognition?
Launch Athlete Education Course Modules
- Which topics should be included in the pilot education modules (disclosure process, state rules, booster guidance, agent relationships)?
- Should courses be mandatory for athletes in the pilot sport?
- What delivery format do you prefer (micro-lessons, video + quiz, live webinar)?
- Do you require certificate/attestation tracking upon completion?
- How often should refresh training be required (quarterly, annually, on-policy-change)?
- Should athlete completion status feed into roster/clearance systems?
- Any accessibility or language requirements for course content?
Provision E-Signature for NIL Contracts
- Do you plan to use e-signatures for agent agreements, brand deals, or both?
- Do you have a preferred e-sign provider?
- Do contracts require witness or countersignature workflows?
- What signer identity verification level is required?
- Should fully executed contracts auto-attach to athlete profiles and audit exports?
- Retention policy for signed agreements (years)?
Generate Audit-Trail Export Package
- Which export formats are required by your auditors or conference (PDF, CSV, JSON)?
- What time window should exports cover (rolling 90 days, full pilot period, custom)?
- Do you require user-level activity logs (who viewed/edited/disputed a disclosure)?
- Should exports be scheduled automatically or generated on-demand?
- Who are the recipients of audit exports (internal, conference, legal)?
- Any redaction or PII masking requirements for exports?
Deploy Booster Collective Transaction Monitoring
- Are booster collectives known to operate at your institution currently?
- What data sources are available to detect booster transactions (donor lists, public filings, payment feeds)?
- Do you require transaction-level thresholds to trigger alerts (amount, frequency)?
- Should suspected booster transactions create a case in the review workflow?
- Are privacy or legal limitations on accessing booster data a concern?
- Do you want monitoring for informal benefits (meals, travel) or only monetary transfers?
Configure Conference Reporting Exports
- Which conference(s) require reporting during pilot?
- What fields and format does each conference expect in exports?
- How often must reports be delivered to the conference (monthly, quarterly, ad-hoc)?
- Should reports be auto-submitted to conference portals or provided to your compliance contact?
- Do conferences require a specific audit trail or supporting documentation with each export?
- Who will validate conference report acceptance criteria on your side?
Integrate Roster Sync with SIS
- Which SIS/roster system do you use?
-
Mutual Commit
Agree commercial and legal terms, pilot length, data access, SLAs for regulatory updates, and go/no-go acceptance criteria.
Agreement Modules
- Non-Disclosure Agreement (NDA)
- Master Services Agreement (MSA)
- Statement of Work (SOW)
- Pilot Addendum
- Service Level Agreement (SLA)
- Commercial Terms & Payment Schedule
- Data Processing Agreement (DPA)
- Data Access & Integration Agreement
- Security & Compliance Addendum
- Intellectual Property & Licensing
- Acceptance Criteria & Go/No-Go Checklist
- Change Order & Scope Management
- Termination & Exit Plan
- Regulatory Liability & Indemnity Schedule
-
Deployment
Operationalize rollout with readiness checks, enablement, and outcome validation.
-
Pre-Deployment Readiness
Confirm data feeds, athlete/admin access, integrations, configuration owners, and regulatory feed subscriptions are in place before execution.
Readiness Questions
Starting Point — Tell Me About Your Program
- How would you describe the current maturity of your NIL compliance program?
- Who is primarily responsible day-to-day for tracking disclosures and reviews?
- Roughly how many active athlete deals do you track per year (estimate)?
- Which tools or methods are you currently using to manage NIL activity?
- When you think about the last time an NIL issue caused stress, what stands out—what happened and how did it feel?
- What event most recently triggered a change in your approach to NIL oversight (e.g., public exposure, conference inquiry, law change)?
If One Undisclosed Deal Appeared Tomorrow…
- When an undisclosed deal surfaces publicly, what usually surprises you most about how it unfolded?
- How long does it typically take from when you suspect a missing disclosure to when you can confirm and document it?
- Tell me about a recent example where an undisclosed relationship became a compliance issue—who found it, what evidence mattered, and what was the outcome?
- When these incidents happen, which consequence worries you most?
- How confident are you today that your existing records would satisfy a conference or NCAA review?
Where Your Spreadsheets Secretly Break
- Do you believe your current manual processes are missing patterns that an automated system would catch?
- Which parts of the disclosure workflow are most manual or error-prone for your team?
- Approximately how many staff-hours per week are spent on manual NIL tracking, reconciliation, and reporting?
- Where do most errors show up—missing metadata, inconsistent naming, missed social posts, or something else?
- If spreadsheets are creating blind spots, which blind spot worries you most and why?
Who Really Decides — and Who Gets Blamed?
- If institutional oversight failed and a regulator questioned your program, who internally would bear the brunt of responsibility?
- List the stakeholders who must sign off on policy changes, vendor data access, or a pilot (select all that apply).
- How aligned are those stakeholders today on priorities like speed of disclosure review versus thorough legal review?
- Describe any political or cultural dynamics—booster influence, coach pressure, athlete privacy concerns—that have shaped how NIL oversight is handled here.
- When decisions are made about escalation, who is the final decision-maker and how is that communicated?
What Would Regulatory 'Good' Actually Look Like Here?
- If a regulator audited you tomorrow, what single gap would you most fear they'd highlight?
- Which of these measurable success signals would have the biggest impact on your risk posture?
- What targets would you consider a clear win for a pilot (select realistic ranges)?
- How often would you want automated regulatory updates and why (frequency and rationale)?
- What evidence or artifacts do you need to feel comfortable that the institution could defend its oversight in a review?
What's Stopping a Faster, Safer Pilot?
- What's the single biggest friction that typically prevents pilots from launching or succeeding here?
- Which legal or commercial items still need resolution before a pilot (select all that apply)?
- How long does your legal/contract review process normally take for vendor pilots?
- What approvals or signatures are absolute blockers if not obtained (name roles or committees)?
- If we shaved two weeks off the setup timeline, what would that enable for your department this quarter?
Data & Integration Reality Check
- How confident are you that the data feeds you rely on (roster, contracts, payments, social handles) are accurate and accessible?
- Which of these data feeds can you provide for a pilot without IT changes?
- Who owns each integration or feed on your side (list roles and contact points)?
- Have you experienced missing or delayed feeds in the past 12 months? If yes, how often and what caused them?
- Are there regulatory data subscriptions (state law feeds, conference bulletins) you must subscribe to before a pilot?
Athlete Behavior & Education — The Human Wildcard
- How realistic is it to expect full, timely athlete disclosure without a targeted education and incentive program?
- What formats are you currently using to educate athletes about NIL obligations?
- What percentage of athletes typically complete required education within a season?
- Describe common athlete objections or blind spots that lead to missed disclosures (e.g., misunderstanding visuals, booster deals, privacy concerns).
- Have you used incentives, penalties, or gamification to improve disclosure rates? What worked or failed?
Pilot Design — What Success Actually Requires
- Could a two-month pilot truly validate your readiness for a full rollout—or are there outcomes only visible long-term?
- Which sport would you pick for a representative pilot and why (capture risk profile and visibility)?
- Select the KPIs you’d require from the pilot to consider it successful (choose top 3).
- Who will own pilot day-to-day responsibilities on your side (identify roles and backup owners)?
- What specific acceptance criteria would make you say 'go' or 'no-go' at pilot close?
- What would constitute a fatal flaw during the pilot (single item that would stop rollout)?
Next Steps & Commitments — Who Will Own This?
- What’s the most likely reason this project would stall after initial enthusiasm?
- Which approvals need to be secured to begin Pre-Deployment Readiness (data access, athlete consent, legal sign-off, IT security)?
- Who would be the configuration and integration owner on your side and who is their backup?
- What is your ideal target date to start a pilot (month/quarter) and what internal dependencies must be resolved first?
- Which readiness items below must be in place before execution (select all that apply)?
- If we committed to a short joint-workshop next week, what would you most want to resolve during that session?
-
Deployment Enablement
Schedule configuration, athlete education rollout, pilot launch tasks, and assign owners with clear sequencing and escalation paths.
-
Validation Checklist
Verify pilot KPIs (disclosure rate, detection coverage, rule accuracy), document issues, and confirm remediation plans prior to full rollout.
Validation Questions
Start Here: What Brought You In Today?
- What immediate event or concern prompted you to explore NIL compliance tooling today?
- Briefly describe the most recent example of a disclosure or monitoring issue you had (what happened, who saw it, and what the near-term consequence was).
- How frequently do incidents like that occur at your institution?
- How urgent is resolving this—what's your target timeframe for a meaningful pilot or mitigation (choose the closest)?
- Who on your team will primarily own follow-up conversations and pilot coordination (role/title)?
If Left Unchecked, How Bad Could This Get?
- Imagine a high-profile undisclosed deal goes viral—what institutional consequences keep you awake at night?
- How many undisclosed or questionably disclosed athlete deals do you suspect exist right now (order-of-magnitude)?
- When similar exposures have happened elsewhere, what were the ripple effects you noted (staff time, policy changes, compliance burden)?
- How long has this level of risk been building in your program?
- What would be the single clearest signal that you’d categorize the situation as ‘out of control’?
What Are You Quietly Tolerating?
- What manual processes or spreadsheets are you still relying on for disclosures and why haven’t they been replaced?
- Which of the following current gaps cause the most daily friction for your team?
- Quantify the compliance team’s current capacity—how many full-time equivalents (FTEs) support disclosures and monitoring?
- How do these tolerated problems make the team feel—frustrated, embarrassed, resigned, defensive, or something else?
- Can you share a specific example where a manual process directly failed to catch an issue? What happened next?
Who’s Deciding—and Who’s Being Blamed?
- Who are the decision-makers and approvers for NIL compliance changes (list roles: compliance director, GC, ADs, conference officer, others)?
- Where have you experienced misalignment between legal, compliance, and athletics on disclosure expectations?
- Which stakeholder’s buy-in would be hardest to secure and why?
- Who outside your department (e.g., boosters, agents, camp directors) impacts disclosures or deal flows, and how cooperative are they?
- If an external regulator asked for proof of oversight, who would be responsible for preparing that evidence today?
What Does 'Safe' Look Like in 90 Days?
- If we ran a 90-day pilot, which primary success signal would make you say it succeeded?
- Which KPI thresholds would feel materially successful to you (provide numbers where possible)?
- How tolerant are you of false positives from social monitoring in a pilot (how much extra triage is acceptable)?
- What reporting cadence and format would you need to feel confident during the pilot (weekly dashboard, biweekly review, monthly exec summary)?
- Are there specific sports, rosters, or athlete segments you want included or excluded in the pilot (e.g., revenue sport, high-profile athletes)?
What Would Make You Say 'No'—Deal Breakers?
- Which contractual or operational limitations would immediately prevent you from moving forward?
- What minimum data access and integrations must be available for a pilot to be meaningful (roster feed, social handles, booster lists, payment records)?
- What security/privacy certifications or controls are mandatory for your institution (e.g., FERPA considerations, institutional security review)?
- How flexible is your procurement team on contract length, pilot-to-production conversion, and renewal terms?
- What timeline or milestone would you require before legal/commercial teams sign off on a pilot?
Who Will Run the Pilot—And Do They Have Bandwidth?
- Who will be the day-to-day pilot owner and who is the executive sponsor (role/title)?
- Do you have an internal configuration owner and IT contact available for a 4–6 week setup window?
- What internal systems should the pilot integrate with and how accessible are those feeds (easy, requires approvals, restricted)?
- What training and education will athletes and staff require during the pilot (live sessions, recorded modules, quick reference guides)?
- What internal blockers (IT approvals, data governance, coach resistance) could delay pilot start and how long would each typically take to resolve?
What Would Success Change for You—Beyond the Pilot?
- If the pilot met your success signals, how would day-to-day operations look different in 6 months?
- How do you envision scaling beyond the pilot sport—phased by sport, full-dept rollout, or mixed approach?
- What governance or policy changes would you plan to put in place once the platform is trusted?
- Who else—outside compliance—would need to be convinced to adopt the platform long-term (list roles and likely objections)?
- What ongoing support and update cadence would you expect from a vendor to keep pace with fast-moving NIL rules?
Are You Ready to Decide—and What’s Next?
- Where are you in the decision process today (just exploring, gathering quotes, ready for pilot, budget approved)?
- Who else needs to be involved in the next meeting for this to move forward (legal, IT, AD, conference contact)?
- What would you like the vendor to deliver as the next step from this discovery (technical scoping, pilot proposal, legal terms outline, demo tailored to sport)?
- What are the top three things we should fix first if we run a pilot with you?
- Is there anything else you want us to know that would materially affect the pilot or evaluation (political dynamics, upcoming events, sensitive athlete situations)?
-
-
Success
Review pilot outcomes against success signals, capture lessons, and maintain a shared channel for issues and enhancements.
Success Reviews
- Pilot Outcomes Review — Success Signal Validation
- Lessons Learned & Root Cause Analysis
- Enhancement Prioritization & Roadmap Decision
- Regulatory & Audit Acceptance Review
- Operational Handoff & Shared Enhancements Channel Setup
Issues & Enhancements
- Agree owners and timelines for providing any additional regulatory evidence.
- Update pilot SOPs and athlete education materials to reflect lessons learned.
- Backlog Review & Context
- Finalize a prioritized enhancement roadmap with committed timelines and owners.
- Define clear acceptance criteria for each roadmap item tied to success signals.
- Agree interim risk mitigations for high-priority regulatory items.
- Publish the prioritized roadmap with owners, dates, and acceptance criteria to the shared channel.
- Create engineering tickets for top-priority enhancements with SLAs for delivery.
- Document interim controls and communicate them to compliance and legal teams.
- Regulatory Requirements Recap
- Obtain formal regulatory acceptance or a clear list of outstanding items required for sign-off.
- Ensure the audit trail artifacts meet institutional and conference evidentiary standards.
- Introductions & Meeting Objectives
- Deliver an audit-packet (redacted as needed) to GC and conference contacts for archive.
- Track outstanding regulatory evidence items with owners and due dates.
- Obtain written confirmation of acceptance or conditional acceptance to attach to the project file.
- Handoff Checklist & Owner Assignments
- Establish a single shared channel for issues and enhancements with clear governance.
- Define and agree SLAs, escalation paths, and operational owners for ongoing support.
- Set the training schedule and recurring measurement cadence to ensure sustained success.
- Create the shared channel and invite governance members; publish channel rules and triage flow.
- Document SLAs and escalation matrix and circulate to stakeholders.
- Schedule the first monthly success review and operational training sessions.
- Confirm which pilot success signals are satisfied with evidence-backed agreement from customer and seller.
- Surface and quantify the operational and regulatory consequences of unmet signals.
- Agree on immediate remediation tasks and owners for any gaps preventing success signal attainment.
- Deliver a validated KPI report with raw data links and measurement methodology within 3 business days.
- List unmet signals with root-cause notes and assign owners for remediation.
- Schedule a follow-up validation checkpoint after remediation work is completed.
- Incident Timeline Review
- Identify root causes for the pilot's top incidents and document reproducible lessons.
- Produce a prioritized set of corrective actions with clear owners and due dates.
- Capture and preserve practices that proved effective for inclusion in standard operating procedures.
- Produce RCA documents for each major incident and attach sample evidence.
- Create a prioritized corrective-action register with owners and target dates.
- Impact vs Effort Scoring
- Issue Triage & SLA Definitions
- Audit Trail Walkthrough
- One-sentence Current State Recap
- Top-3 Failure RCA Deep Dive
- What Worked Well
- KPI Dashboard Walkthrough
- Shared Channel Setup & Governance
- Regulatory Urgency & Compliance Mapping
- Legal/Conference Feedback
- Agree Roadmap & Timelines
- Audit Trail & Evidence Review
- Breakout: Fix Options & Impact
- Training & Measurement Cadence
- Risk Acceptance & Remediation Plan
- Next Steps & Launch
- Consequence Assessment
- Risk Mitigation & Contingency Planning
- Synthesis & Prioritization
- Formal Sign-off or Conditional Acceptance
- Consensus & Validation
- Next Steps & Ownership