A copyright audit gives you a practical way to identify who owns each asset in your content library, what permissions apply, where the asset may be used, and which records are missing. Use this repeatable checklist before launching a campaign, republishing older work, signing a sponsorship, or responding to a copyright complaint.
Overview
A content rights audit is an organized review of the creative assets your business or channel uses. Those assets may include photographs, illustrations, video, music, written material, logos, fonts, stock files, user submissions, commissioned work, public-domain material, and AI-assisted output.
The goal is not merely to ask, “Do we have this file?” It is to answer four separate questions:
- Ownership: Who owns the copyright or other relevant rights?
- Permission: What written license, release, assignment, or other authorization supports the use?
- Scope: Where, for how long, and in what formats may the asset be used?
- Evidence: Can someone on your team find the records if a platform, client, partner, or rights holder asks?
Copyright protection may exist automatically when an eligible work is created, but automatic protection does not establish that your organization owns every asset in its library. Contracts, contributor arrangements, platform terms, licenses, and local law can affect the analysis. Treat this checklist as a workflow tool, not a substitute for advice from a qualified copyright lawyer when ownership or enforcement is disputed.
Start with a spreadsheet, database, or rights-management tool. Give every asset a unique reference number and preserve the original file separately from edited or exported versions. For a deeper ownership review, use the copyright chain of title checklist.
Checklist by scenario
Different acquisition paths create different risks. Record the status that best describes each asset, then investigate any entry marked “unknown,” “expired,” or “restricted.”
| Asset status | What to verify | Records to keep |
|---|---|---|
| Created by you or your team | Creator identity, creation date, contribution of each person, and whether an employment or contractor agreement changes ownership. | Source files, drafts, project records, contracts, and copyright registration details if applicable. |
| Commissioned or freelance work | Whether the agreement transfers ownership or grants a license; permitted media, territory, duration, exclusivity, and approval rights. | Signed agreement, invoices, delivery records, correspondence, and final approved files. |
| Licensed stock, music, fonts, or software | License type, permitted audience, commercial-use terms, attribution, modification rights, seat limits, and expiration or renewal conditions. | License certificate, receipt, account record, terms in effect at purchase, and renewal reminders. |
| User-submitted or community content | Submission terms, permission to reproduce or modify the work, consent for identifiable people, and any restrictions imposed by the contributor. | Submission timestamp, applicable terms, permission message, moderation record, and contributor details. |
| Public-domain material | Source, author, date, jurisdiction, and the reasoning behind the public-domain conclusion. A public-domain status may differ by country. | Source citation, status research, downloaded copy, and notes about adaptations or added elements. |
| AI-assisted or AI-generated material | Human contributions, tool terms, prompts or inputs where relevant, training or output restrictions, and whether third-party material was incorporated. | Tool name, account terms, creation records, human edits, source assets, and review notes. |
For each row in your library, add these tracking fields: asset ID, description, creator, owner, source, acquisition date, status, license or contract link, permitted uses, territory, term, attribution requirement, approval requirement, renewal date, publication locations, and review owner.
If the asset is commissioned, do not assume that payment alone transfers copyright. Check the written agreement carefully. If the asset is licensed, do not assume that a license for one channel covers advertising, merchandise, client work, paid promotion, or future formats. The copyright license agreement guide can help you identify the terms that need to be recorded.
What to double-check
1. Separate ownership from permission
You may own one part of a project while relying on permission for another. A video could contain your footage, a licensed song, a commissioned graphic, and a participant's image. Audit every meaningful component rather than labeling the entire project “owned.”
2. Match the license to the actual use
Compare the permission with your planned use across websites, newsletters, social platforms, paid advertising, print, events, products, client presentations, and internal training. Note whether the license is personal or commercial, exclusive or nonexclusive, worldwide or limited by territory, and temporary or perpetual. Also check attribution and modification requirements.
3. Review people, trademarks, and privacy issues
Copyright clearance does not necessarily resolve rights of publicity, privacy, trademark, confidentiality, or defamation concerns. A photograph may be cleared for copyright purposes while still requiring a model release or additional review for a particular campaign.
4. Verify public-domain and fair-use assumptions
“Found online” does not mean public domain. Confirm the source and the legal basis for using material labeled public domain. Similarly, fair use is a context-dependent legal doctrine, not a blanket permission or a reliable result from a simple fair use checker. Review the purpose, amount, nature, and market effect of the use, and seek legal advice for material risks. See the fair use versus permission guide for a structured review.
5. Preserve evidence
Keep contracts, permissions, receipts, screenshots of terms, source URLs, publication dates, correspondence, and original files in a controlled location. Record when a license was reviewed and who approved the use. If a dispute arises, organized evidence is more useful than a general belief that the asset was cleared.
For a suspected unauthorized use of your work, preserve the evidence before contacting anyone: capture the relevant page, URL, date, account information, and comparison between the original and allegedly copied material. The copyright infringement evidence checklist provides a practical starting point.
Common mistakes
- Relying on memory: A team member may remember receiving permission, but the organization may not be able to prove the terms later.
- Confusing attribution with permission: Crediting a photographer, musician, or author does not automatically authorize copying or commercial use.
- Using one clearance for every format: A license for editorial publication may not cover advertising, merchandise, paid media, or client redistribution.
- Ignoring older content: Archive pages, reposts, thumbnails, and scheduled posts can continue using an expired or restricted asset.
- Overlooking edits: Cropping, remixing, translating, synchronizing, or combining materials may require permission beyond the original use.
- Failing to document AI involvement: Keep track of human-created source material, meaningful edits, and the terms that applied when an AI tool was used. Review the AI-generated content rights guide.
- Deleting the evidence after publication: Store clearance records for as long as the content remains available and for a reasonable period afterward, subject to your retention policy.
When to revisit
Run a full audit at a regular interval that fits the size and risk of your library, and perform a targeted review whenever an important input changes. At minimum, revisit the checklist:
- Before seasonal planning cycles, major launches, sponsorships, or paid campaigns.
- Before republishing archival content or moving it to a new platform, country, format, or product.
- When a license, contract, subscription, or contributor relationship expires or changes.
- When your team changes storage systems, publishing tools, contractors, or approval workflows.
- When a platform updates its terms, content rules, rights-management process, or dispute procedure.
- After receiving a copyright claim, infringement allegation, takedown notice, or counter-notice.
- When adopting a new AI, stock-media, music, design, or publishing tool.
End every audit with three lists: assets cleared for continued use, assets requiring a corrective action, and assets that should be paused or removed until reviewed. Assign an owner and deadline to each open item. If you need to register original work, consult the copyright registration checklist. If your content has been reported or removed, document the notice before deciding whether a response or counter-notice is appropriate.
A small, current rights register is more useful than a large archive no one trusts. Review the highest-value and highest-risk assets first, preserve the supporting records, and make the checklist part of your publishing workflow rather than a one-time cleanup exercise.