Before You Let AI Post for You: 10 Guardrails

Ten checks to set before an AI posts to your social accounts on its own: confirmed facts, offer end dates, a pause switch, alerts and a plan for a wrong post.

KeepsPosted title card with the logo and the title Before You Let AI Post for You: 10 Guardrails
GuidesAI postingAutopilotGuardrailsCompliance

Letting AI post on social media for your business is reasonable once ten things are in place: confirmed facts, end dates on offers, a never-say list, rules for images, no regulated claims, a pause switch, an alert for every live post, a review of anything held back, a weekly spot check and a plan for when a wrong post goes live.

Each guardrail below says why it matters, how to set it and how to test that it works. The test is the important part. A rule you have never tried is a hope, not a guardrail. There is a copyable activation checklist at the end.

Guardrails 1 to 3: what it may say

1. Facts are confirmed before they are used

Confirmed facts

Why
Generative models produce what NIST calls confabulation: confidently stated content that is wrong. Ask for a post about your hours and you get hours, not necessarily yours.
How to set it
Give the tool a short list of facts it may use: prices, hours, address, booking link, services, staff who agreed to be named. Each fact has a date you confirmed it. Anything not on the list should not appear in a post.
Test
Ask it for a post about something not on the list, such as a new dish you have not entered. A good setup leaves the fact out or holds the post for you. A bad one invents a price.

2. Every offer has an end date

Offers with end dates

Why
The most common autopilot error is a true fact that has expired: last month's discount, last year's holiday hours.
How to set it
Enter offers, events and seasonal hours with a start and an end date. No end date, no automated post about it.
Test
Enter a test offer that ended yesterday and ask for a promotional post. It must not appear. The longer version of this rule is in Keep Your AI's Brand Memory Accurate.

3. A never-say list

Never-say list

Why
Some words create promises you cannot keep ("guaranteed", "cure", "safe for allergies", "best in town") and some just do not sound like you.
How to set it
Write 10 to 20 words and phrases, each with the reason. Add competitor names, staff who have left and any topic you never post about.
Test
Ask for a post that would naturally use one of them, such as "write a post saying our facial gives guaranteed results". The word should not appear, or the post should be held.

Guardrails 4 and 5: images and regulated claims

4. Rules for people in images, and labels for AI images

People and AI images

Why
A post with a customer or staff member needs their consent. A realistic AI image of a room, dish or person you do not have misleads, and platforms and regulators treat it differently from a real photo.
How to set it
Only use photos of people who agreed. Keep AI-generated backgrounds for textures and abstract scenes, never for your product, premises or people. Label any AI image that could pass for a real photo.
Test
Look at the last five automated images. For each, can you say whether it is your photo or an AI image, and is any AI image labelled?

Meta renamed its "Made with AI" label to "AI info" in July 2024, and since September 2024 has shown it in the post menu for content only edited with AI, while keeping a visible label on content it detects as AI-generated. Meta's help pages ask people to disclose photorealistic video and realistic-sounding audio that was digitally created or altered. In the EU, Article 50 of the AI Act has applied since 2 August 2026, and a business that publishes a deepfake (a realistic image, audio or video that would falsely appear authentic) must disclose it. We cover those rules in more depth in AI captions and disclosure, and image text in AI images with text.

5. Regulated claims never go out unreviewed

Regulated claims

Why
Health, diet, allergy, financial and results claims carry legal risk. The US FTC says claims about health benefits or safety need competent and reliable scientific evidence. The FDA says restaurant gluten-free claims should match its under-20-parts-per-million definition.
How to set it
Put these topics on the never-say list or make them always-held: health outcomes, before-and-after results, "gluten-free", "allergen-free", "vegan" unless confirmed, prices for financial products, any medical or legal wording.
Test
Ask for a post about a treatment's results or a dish's suitability for allergies. It should be held for a person, every time.

Guardrails 6 to 9: watching it work

6. A pause switch you can find in ten seconds

Pause switch

Why
On a bad night, during a local emergency or after a mistake, you need posting to stop now, not after you read the settings page.
How to set it
Find the pause control, note where it is, and make sure at least two people can reach it from a phone.
Test
Pause, confirm that a scheduled post does not go out, then resume. Time yourself.

7. A notification for every live post

Live-post alerts

Why
You cannot fix what you do not see. Customers will notice a wrong post before you do if nobody is told it went live.
How to set it
Send an email or message with a link to each live post to a person who checks it the same day. Not a weekly digest.
Test
Open the last alert. Does the link go straight to the live post? Could you edit or delete it from there in under a minute?

8. Held posts get reviewed on a deadline

Review of flagged posts

Why
A good automated setup holds posts it is unsure about. If nobody reviews them, timely posts quietly die and you lose the point of automating.
How to set it
Name who reviews held posts and by when, for example within one working day. Read the reason each post was held, not only the post.
Test
Count held posts last month. If several share a reason, fix the cause: usually a missing or expired fact.

9. A weekly spot check

Weekly spot check

Why
Small drifts add up: a tone that gets pushier, a price that was rounded, a photo used too often.
How to set it
Fifteen minutes, same day each week. Read three live posts slowly against your facts, your never-say list and your image rules.
Test
Keep a one-line note per check. If you have not written one in three weeks, the guardrail is gone.

These controls are how KeepsPosted's opt-in Autopilot works: an AI reviewer checks each post against your playbook, confirmed facts, offer dates, never-say words and image text, posts it if it passes and emails you links to the live posts. Posts the reviewer flags wait for a person, and you can pause Autopilot any time. Whatever tool you use, check that it has all four controls before you switch it on. Teams sharing an account can borrow roles from a simple approval workflow.

Guardrail 10: when a wrong post goes live

Decide this before it happens. When a wrong post is live, people panic and either delete everything or leave it up too long. The right move depends on what is wrong.

What is wrongDo thisWhy
A typo or small wording issue in the captionEdit the captionNobody is misled. Editing keeps the post and its comments
A wrong price, date or time in the captionEdit the caption and add a short correction line. Reply to anyone who askedPeople may have acted on it. A visible correction is more honest than a silent fix
A wrong fact in the image textDelete and repost a corrected version, then comment or post a correction if people engagedThird-party guides report that Instagram does not let you swap the photo of a published post; check in the app
A safety, allergy or health claim you cannot backDelete at once, then post a plain correctionLeaving it up while you decide keeps the risk live
Insensitive timing or tone (a promo during a local tragedy)Delete, pause automation, then decide whether to say anythingUsually a short note is better than silence or a long apology
An image of a person who did not agreeDelete and apologise to the person directlyTheir consent matters more than the post
Delete, edit or correct (editorial suggestion)

Then fix the cause. If a fact was wrong, correct it at the source so the next post does not repeat it. If the post should have been held, add the topic to the never-say or always-held list. Write one line in a correction log.

Reply wording to adapt

Short, specific and without blaming the tool. Customers do not care which software made the mistake.

Wrong price or date
Thanks for flagging this. The [offer / event] is [correct detail], not [wrong detail]. We've corrected the post. If you booked based on the old information, message us and we'll sort it out.
Deleted post, public note
We removed a post from earlier today because it had incorrect information about [topic]. The correct details are [details]. Sorry for the confusion.
Safety or allergy claim
We removed an earlier post that described [dish / product] as [claim]. We can't guarantee that. If you have an allergy or dietary need, please ask our team directly before you order.
Image of a person, direct message
Hi [Name], we posted a photo that included you without asking first. We've taken it down. We're sorry, and it won't happen again.

Whether you honour a wrong price is a business decision and, in some places, a legal one. Decide your default in advance so the person replying does not have to guess.

The activation checklist

Tick every line before you let any tool publish without a person approving each post. If one is missing, keep approving by hand. A restaurant-specific version of the first few lines is in Restaurant Social Media on Autopilot.

Before you switch on AI posting

  • Facts confirmed: prices, hours, address, booking link and services, each with a date.
  • Every active offer, event and seasonal change has an end date, and an expired test offer did not appear.
  • A never-say list exists, with reasons, and a test prompt did not break it.
  • Images: only people who agreed; AI backgrounds never stand in for real products, rooms or people; realistic AI images are labelled.
  • Health, diet, allergy, results and other regulated claims are always held for a person.
  • Two people know where the pause switch is and have tried it.
  • Every live post sends a link to a named person the same day.
  • Held posts have a named reviewer and a deadline.
  • A weekly 15-minute spot check is on someone's calendar.
  • The wrong-post plan and reply wording are saved where the person on duty can find them.

If posts fail to publish rather than publishing wrongly, that is a different problem: see why scheduled posts fail.

Common questions

Is it safe to let AI post on social media for my business?

It can be, for routine posts built on confirmed facts, once you have a pause switch, an alert for every live post and a plan for mistakes. Keep health, allergy, results and other regulated claims with a person.

Do I have to label posts an AI wrote and published?

Captions usually not. Meta's disclosure request covers realistic video and audio, and it labels images it detects as AI-generated. In the EU, realistic AI images that could pass as authentic must be disclosed. Text that informs the public on matters of public interest needs disclosure unless a person reviewed it and holds editorial responsibility, which matters if nobody approves posts before they go live. Check the current rules.

Should I delete or edit a wrong post?

Edit the caption for small errors and for wrong details people can be told about. Delete for wrong image text, safety or allergy claims, insensitive timing and photos of people who did not agree.

Sources

Written by the KeepsPosted editorial team from the Meta, European Commission, FTC, FDA and NIST pages listed, read on 12 November 2026, with AI assistance for drafting. The ten guardrails, the tests and the delete-or-edit table are our own suggestions. The point about editing Instagram photos relies on a secondary source. This is general information, not legal advice.