Strategy
Part of Planning a creator media kit as a claim register rather than a sales collage
Creator media kits: controlled HTML, accessible downloads or direct delivery
Compare controlled HTML, accessible downloads and direct delivery for one England media-kit job using common evidence, correction, access and exit tests.
Choose a channel by testing the same approved creator media kit against the same buyer job. Controlled HTML, accessible downloads and permissioned direct delivery carry different copying, correction and access risks.
What to take away
- No single channel suits every media kit, so approve a mixed route as separate copies.
- Controlled HTML allows central correction but cached views and hosting dependencies need checking.
- Downloads give a stable issue record, yet accessibility and stale copies need active handling.
- Direct delivery suits an expected authorised buyer, but promotional messages need separate review.
- Every route needs a claim and rights manifest before a qualified reviewer assesses the pack.
Common unit and method
The comparison was researched on 6 September 2026. Its unit is one approved commercial pack for one creator, made available to one authorised English buyer during one stated validity period.
Included fields are version control, recipient access, claim evidence, asset rights, commercial recognition, accessibility, enquiry data, security, correction, export and exit. Social feeds, generic web hosting, design software, discovery platforms, UGC marketplaces, agencies and paid promotion are excluded. There was no hands-on test, supplier funding or affiliate conflict. Routes are non-ranked.
Controlled HTML
- Version unit
- One live page and change log
- Correction
- Central page can change, but cached views need checking
- Access
- Public, restricted or authenticated as configured
- Accessibility evidence
- Test rendered page, form and responsive states
- Exit proof
- Export content, claims, rights and enquiry records
- Example tool or host
- Cloudflare Pages or UK host Krystal Hosting
Accessible download
- Version unit
- One named file and issue date
- Correction
- Each issued copy may remain stale
- Access
- Depends on page and file controls
- Accessibility evidence
- Test structure, reading order, links and alternative format
- Exit proof
- Preserve source plus withdrawal register
- Example tool or host
- Tagged PDF checked in Adobe Acrobat Pro or PAC 2024, with Silktide for web checks
Permissioned direct delivery
- Version unit
- One message, recipient and attached or linked version
- Correction
- Recipient and every attachment location need a correction path
- Access
- Depends on verified address, forwarding and message system
- Accessibility evidence
- Test message, attachment or linked journey together
- Exit proof
- Preserve authorised send record and correction evidence
- Example tool or host
- Verified send via UK provider EmailOctopus or Dotdigital
Exact cost and speed depend on supplier, edition, contract and configured workflow. The worked example below gives typical planning bands. Use one complete delivery event as the consistent measurement unit, with staff time and specialist review recorded separately.
Worked example
Take one England creator pack: an illustrator's wholesale media kit for a fictional autumn range.
- Controlled HTMLpublish on Cloudflare Pages or UK host Krystal Hosting. A correction and cache purge takes 30 to 60 minutes. A paid host typically costs GBP 15 to GBP 20 per month.
- Accessible downloadexport a tagged PDF and check it in Adobe Acrobat Pro or PAC 2024. Remediation takes 2 to 6 hours. Acrobat Pro is typically about GBP 20 per month; PAC 2024 is free.
- Direct deliverysend a verified email through EmailOctopus or Dotdigital to one authorised buyer. A small list often starts free or at low tens of pounds per month. One send takes 15 to 30 minutes to verify and prepare.
For a mixed route, use controlled HTML for current evidence and a tagged PDF as the issued record, then send the link by verified email.
Choose mixed when the buyer needs both a stable issue record and later corrections, or when one channel fails an essential test that another passes. If all routes pass, use the simplest single channel that meets the buyer's brief.
Apply the evidence controls
HTML can support current evidence links and corrections, but it also adds domain, hosting, analytics and administrator dependencies. NCSC guidance on using online services safely covers separate accounts, admin protection, backups and recovery. It does not certify a host or prove that a page was withdrawn from caches.
Downloads create a stable issue record, yet accessibility and staleness need active handling. GOV.UK's publishing accessible documents guidance recommends structured headings, table headers, meaningful links and accessibility checks. It favours HTML where possible. The guidance governs public-sector practice and is a design reference here, not a private-sector assurance.
Direct delivery may suit an expected, authorised buyer. If the message is promotional, its recipient and purpose require separate review. The ICO's business-to-business marketing guidance distinguishes subscriber types, explains that UK GDPR can apply to personal business-contact data and is currently marked under review following DUAA changes.
All three routes require a claim and rights manifest. CAP Code section 3 supports evidence and clear qualification for objective marketing claims. GOV.UK explains that a copyright licence may be limited by use, place and time. Qualified reviewers must assess the actual pack and planned copies.
Select a route only after a fictional pack passes correction, permission, accessibility, account recovery and exit tests. Leave the buyer's weights and thresholds blank. If a route fails an essential test that cannot be traded off against another route, keep the current controlled process or hold publication.
Before you act
- Run the three routes against one buyer brief.
- Record version control, access, evidence and rights fields.
- Check accessibility on the rendered page, file or message.
- Confirm correction and exit paths for each copy.
- Have a qualified reviewer assess claims and rights.
- Hold publication if any essential test fails.
Common questions
How should a creator choose between the three routes?
Start with the buyer's job. Use controlled HTML when correction matters, a tagged download when a stable issue record matters, and verified direct delivery when one authorised buyer needs a specific copy. Use a mixed route if one channel cannot meet both needs.
What does the NCSC guidance cover for controlled HTML?
It covers account separation, admin protection, backups and recovery for online services. It does not certify a host or prove cache withdrawal. Treat it as a security checklist, not an assurance badge.
When does direct delivery need separate review?
When the message is promotional or the recipient is not an expected authorised buyer. The ICO guidance distinguishes subscriber types and notes UK GDPR can apply to personal business-contact data. Check the current ICO position because it is marked under review after DUAA changes.
