When outsourcing social media marketing, specify in the contract and asset inventory that accounts, pages, advertising assets, and business data controlled by the company are owned or controlled by the company, while the service provider may operate them only within the scope of its authorization. Upon expiry or termination, permissions, materials, and exportable data must be returned as listed. If platform rules restrict transfers, specify how actual control will be maintained rather than simply stating that “the account belongs to the company.”
A common risk is that an account is registered by a service provider’s employee and linked to the provider’s email address and phone number, while the company has view-only access. If the employee leaves or the engagement ends, the company may still be unable to recover the account, continue running campaigns, or view historical records—even if the contract states that the account belongs to the company. When procuring these services, clarify ownership, administrator permissions, and handover costs together.
“Social media accounts” often involve more than one login. Before procurement, ask the service provider to list each asset by platform and purpose, and identify its current administrators, registration details, creating entity, and current status. The inventory should cover at least the following categories:
The inventory should be attached to the contract and record each asset’s name, identifier, administrator, authorization method, and delivery status. It should also specify how newly added assets will be recorded. It is best to list the company’s existing assets separately from those created on its behalf by the service provider, to avoid discovering during handover that a page or ad account is outside the scope of services.

Where possible, the company should create accounts using a company email address and phone number that it can continue to manage, and retain the highest administrative permissions allowed by the platform. The service provider should use its own separate account and operate under granted authorization, rather than routinely sharing the company’s primary account password. The parties should specify who may add, modify, or remove administrators, as well as the approval process for changing linked contact details and security verification methods.
On some platforms, personal login accounts are subject to platform rules and cannot simply be treated as transferable assets. In such cases, distinguish personal login accounts from resources such as company pages and ad accounts: an administrator designated by the company should retain control of the relevant business assets, while the service provider’s personnel collaborate through authorized access. Before signing, verify the roles and transfer methods actually supported by the platform.
The contract should separately specify the rights or ownership applicable to content deliverables, as well as the scope and timing of delivery. Whether copy, design source files, and video project files are included in the fees must be stated separately. For third-party materials such as fonts, images, and music, specify the scope and term of the license; do not make a blanket promise that all materials may be used permanently and without restriction.
Data terms should specify the fields, formats, and time periods for deliverables—for example, inquiry source, contact details, collection time, and processing status. Some platform or system data may not be fully exportable and may also be subject to privacy rules and authorization restrictions. Before procurement, ask the service provider to explain what can be exported, what can only be viewed on the original platform, and how long data will be retained after the engagement ends.
Building accounts in-house and authorizing the service provider to operate them generally makes it easier to retain control, but the company must designate an administrator to handle security verification, approvals, and internal personnel changes. Having the service provider create accounts may suit a company that temporarily lacks the capability to configure them. However, confirm the registering entity, linked contact details, and transfer conditions in advance, and arrange for a company administrator to be authorized promptly after creation.
When using the service provider’s own marketing system, distinguish between the right to use the system and the company’s business assets. The system software and its general-purpose features may not belong to the company, but the company should confirm how it can obtain its account configurations, content, and exportable data. For automated publishing, forms, or tracking features that depend on the system to function, ask whether they will stop working when the subscription ends and whether they will need to be reconfigured.
Do not compare quotes based only on monthly operating fees. Ask the service provider to itemize account setup, permission changes, historical data exports, source files for creative materials, migration assistance, and post-termination support. Confirm whether there is a minimum service term, an early termination fee, or charges for additional work. For costs that cannot yet be determined, agree on the pricing method and an advance approval process to avoid last-minute negotiations during handover.
The contract should not simply state that the service provider will “assist with the handover when the engagement ends.” It should specify the triggering conditions, responsible parties, completion deadlines, delivery method, and acceptance criteria. It should also explain how early termination, contract expiry, and the departure of the service provider’s personnel will be handled. Acceptance can be carried out item by item against the asset inventory:
If platform reviews, account restrictions, or third-party authorizations prevent handover by the agreed deadline, specify how the parties must notify and assist each other and how extensions will be handled, distinguishing issues within the service provider’s control from platform-imposed restrictions. For breaches such as refusing to cooperate, deleting assets without authorization, or using data beyond the authorized scope, the contract may specify remedies and the allocation of liability.
Before procurement approval, have the business owner and the service provider jointly review existing assets: who can add administrators, which email address or phone number is needed to recover the account, who pays advertising costs, and where the data is stored. For assets not yet controlled by the company, first confirm whether additional authorization or recreation is feasible, then decide whether to include them in the outsourcing scope.
Where personal information such as inquiry contacts and direct messages is involved, also specify the service provider’s processing purposes, authorized personnel, retention period, subcontracting restrictions, and return or deletion procedures after termination, and verify the applicable platform rules and data requirements. This ensures that account ownership is not merely contractual wording, but is reflected in day-to-day use and actual handover.
Related Articles
Related Products


