Keep Embargoed Material Out of the Wrong Review Link
Updated ·7 min read

Keep Embargoed Material Out of the Wrong Review Link

One review link for everyone turns an embargo into a memory test. Write the terms down, split core and restricted review, and close the routes copies take out of the link.

By Shruti Sharma, Founder and COO, QuoteIt

Short answer

Keep embargoed material out of a shared review by setting access before anyone comments. Write the terms down in operational language, send most reviewers a core version with the restricted passage replaced by a marker, and give the full draft only to named people who need it. A warning inside the document controls nothing.

TL;DR

  • →Record the embargo terms, audience and decision owner in the review request.
  • →Create separate review paths when people need different parts of the material.
  • →Treat forwarding, exports and attachments as part of the distribution plan.

The announcement goes out at 7:00 tomorrow. The draft holds the public news, a partner quote still under approval and one paragraph under embargo. The account lead shares a single review link with everyone who commented on last week’s release. From that moment the embargo depends on thirty people remembering it.

Set the access before the review starts. Write the terms down in operational language, send general reviewers a core version with the restricted passage replaced by a marker, and give the full draft only to named people who need it. A red comment or a file name that says EMBARGOED controls nothing.

An embargo rests on agreement more than enforcement. A Reuters Institute fellowship paper on news embargoes describes sources giving journalists news that should not be published until a certain date, and found that the sanctions sources threaten for a broken embargo are rarely carried out1. The control a communications team actually holds is the decision about who receives the material and in what form, which makes the review link part of the embargo, alongside the handoff note that travels with the draft.

How do you write down an embargo so reviewers follow it?

Write the embargo as six answers: what is restricted, who set the condition, who may receive it, through which channel, until what date and time in which time zone, and what happens if it changes.

Keep the note short. If terms came from a journalist or partner, keep the actual agreement or confirmation accessible to the communications owner. Do not infer agreement because a draft says “embargoed.” Put the terms into the review request itself, the way an approval email names the version and the decision, so nobody has to reconstruct them from a thread.

Also distinguish embargo from other restrictions. A confidential internal source may be usable for factual review but not for an external briefing. A partner quotation may be shareable with the partner but not with every internal reviewer. Different restrictions can require different access groups even when the copy will eventually appear in the same release.

Should everyone review the full embargoed draft?

No. Most reviewers need only the public narrative, so they get a core version, and the full draft travels on a restricted path to the few people who need it.

01

Create a core version

Give general reviewers the parts they need to assess the public narrative. Remove or replace restricted passages with a clear marker if their absence affects context. Do not leave a hidden comment that reveals the embargoed news.

02

Create a restricted review path

Share the full or sensitive version only with named people who have a reason to see it. Security teams call this least privilege, which NIST defines as limiting each user’s access to the minimum needed for their assigned tasks2. State the terms in the request and ask reviewers to use that path rather than forwarding a downloaded copy. Confirm access before the deadline, not after a comment appears from an unexpected person.

03

Keep decisions connected

A separated passage still needs a way to return its approved wording to the final release. Record which version contains the decision, who made it and any conditions. A secure split should not create a copy-and-paste mystery at publication time. QuoteIt records each approval against the exact version it covered, which is the link this step depends on.

What does a two-path embargo review look like?

A two-path review sends the broad group a core draft with the restricted passage replaced by a marker, and sends the full draft with the agreed terms to a short list of named people.

Imagine a company announcing a joint service with a regional partner. The partner has asked that its name and launch date remain restricted until a coordinated announcement time. Product and legal reviewers need the full draft. A broad internal marketing group only needs to review the customer explanation. These are invented circumstances, but the access decision is common.

The account lead sends the broad group a core draft with the partner passage replaced by “[restricted partner detail under review].” The restricted group receives a second link and a note with the agreed release time and approved recipients. The final-release owner, named in advance as part of deciding who approves a public statement, receives a checklist: partner quote approved, embargo confirmation retained, correct public version selected, and scheduled channels checked. This makes the boundary visible without relying on a warning buried in the body copy. The same paper notes that government agencies releasing data have tended to tighten security against early leaks rather than abandon embargoes, which is the same instinct applied at a larger scale1.

Mostly through copies: attachments, exported PDFs, pasted text, slides, meeting notes, calendar descriptions and file names that reveal the subject.

Check each of them before the review goes out. Ask whether a visible file name reveals the restricted subject. Do not create a false sense of security by telling reviewers “do not forward” while giving them a file that is easy to redistribute without context.

If material is shared incorrectly, preserve the facts of what happened, alert the responsible owner and follow the organization’s established response process. If a wrong version has already reached the public, work through a correction plan for a statement already sent. Do not quietly change access and pretend the event did not occur. The response may depend on the actual terms and parties involved, so it is not a decision a copy editor should invent alone.

What should happen when the embargo lifts?

Confirm the condition has actually lifted, then check the final copy, the channel, the audience list and the time zone before anything publishes.

If the embargo changes, update the editorial decision log and the people holding drafts. An old scheduled post or attachment can defeat careful review hours later.

The access note belongs beside the review links and names who may see each version, why they need it and when the boundary changes. An unanswered field means the review path is still incomplete; a warning in the document cannot fill it.


Is a news embargo legally binding?

Usually not on its own. An embargo rests on agreement between a source and a journalist, and research on embargoes finds that the sanctions sources threaten are rarely carried out. The control you actually hold is who receives the material and in what form.

Can I label a document embargoed and share it widely?

A label tells careful readers what to do. It does not stop forwarding, exporting or copying, so share the full draft only with people who need it and send everyone else a version without the restricted passage.

Does Regulation FD apply to embargoed press briefings?

The SEC said Regulation FD does not apply to disclosures to the media. It does apply when a US issuer gives material nonpublic information to market professionals or to holders who may trade on it, so a draft that reaches an analyst can fall under different rules. Ask counsel.

What should I do if embargoed material goes to the wrong person?

Record what was shared, with whom and when, tell the responsible owner and follow the organization’s response process. Do not quietly change access and carry on as if nothing happened.

Who should see the full embargoed draft?

Named people whose review needs the restricted passage, typically product, legal and the release owner. Everyone else reviews the core version.

Sources

Numbers in the text point here. Each link opens the original page.

  1. 1News Embargoes - Under threat, but not extinctReuters Institute for the Study of Journalism, University of Oxford
  2. 2least privilege (glossary)NIST Computer Security Resource Center
  3. 3Selective Disclosure and Insider Trading (final rule)US Securities and Exchange Commission

Written by

Shruti Sharma, Founder and COO, QuoteIt

Shruti Sharma co-founded QuoteIt and runs its operations, to fix the part of PR work that comes after the draft: who signs off, on which version, and what the client actually approved. QuoteIt ties each approval to the exact wording it covers, keeps the client's sign-off separate from final release, and records who decided what and when, so a statement can be handed over, corrected or reused without reopening the mail trail.

How these posts are researched

Run your next restricted review in QuoteIt. Each approval is recorded against the exact version it covered, so the wording a restricted reviewer approved is the wording that reaches the release.

Join the Pilot