Custodian of records: the footer line nobody explains

Scroll to the bottom of almost any adult site and you'll find the same dense little paragraph: "18 U.S.C. § 2257 Record-Keeping Requirements Compliance Statement," followed by a name and an address. Almost nobody reads it. Plenty of creators who post it couldn't tell you what it means. But that paragraph names a real person with a real legal job — the custodian of records — and if you self-produce, that person is you.

Before anything else: I'm not a lawyer. I spent years before this career writing and reviewing contracts in a different industry, and today I'm the custodian of records for my own catalogue — which means I've had to understand this role from the operator's seat. But this post explains a concept; it is not compliance advice, and 2257 has genuinely contested edges that only a lawyer who knows your situation should rule on.

I've already written a full walkthrough of the 2257 record-keeping requirements for solo creators — what records you keep, for whom, organized how. This post zooms in on one piece of that system: the named human being responsible for it all.

What is a custodian of records?

The federal statute everyone's footer cites — 18 U.S.C. § 2257 — requires producers of sexually explicit content to create and maintain records proving every performer was an adult: copies of government-issued photo ID, legal names, every alias the performer has worked under. That's the record-keeping half, and it's the half most explainers cover.

The custodian of records is the other half: the person answerable for those records. Not a filing cabinet, not a spreadsheet, not a vibe of general compliance — a named individual whose job is to maintain the records, keep them organized the way the regulations describe, and produce them if a federal inspector ever asks to see them. The statute wants someone specific to knock for. That's the custodian.

It's worth sitting with how unusual that is. Most legal obligations attach to a business in the abstract. This one attaches to a person with a name and an address, published in public, on every page the content touches.

What does the 2257 statement on your site actually declare?

The compliance statement — the footer paragraph, or the notice on a clip, or the page a platform makes you fill out — is a public declaration of two things: who the custodian of records is, and where the records are kept. That's the core of it. The exact required wording and placement live in the federal regulations that implement the statute, and the details there are precise enough that I'd treat them as ask-a-lawyer territory rather than paraphrase them from memory. (Again: not a lawyer. I can tell you what the statement is for; I won't draft yours.)

But the function is simple once you see it. The statement exists so that an inspector looking at a piece of content can answer, without detective work: if I needed to verify the performers in this were adults, whose door do I knock on, and where? Every design decision in the statement flows from that question.

This is also why "I'll just copy the footer text from another site" is a worse idea than it looks. The statement isn't boilerplate decoration — it's a factual declaration about your records and your custodian. Copying someone else's means publishing a false one.

Who's the custodian when you're a one-person operation?

You are. There's no minimum company size where the role kicks in, and no exemption because the "organization" is one person with a ring light. If you produce the content, somebody has to be the custodian of the records for it, and when the whole operation is you, the org chart is short.

Naming yourself has a consequence that catches new creators off guard: the statement declares where the records are physically kept, and that location becomes public information attached to your content. For a creator working under a persona — which is most of us — that creates obvious tension. The whole point of the stage name is that fans don't get a map to your front door, and a compliance statement listing your home address hands them one.

People handle this in a few ways. Some keep records at a business address that isn't their residence — an office, a commercial mailbox with a street address, an address tied to an LLC or similar entity. Some route the role through a business structure so the entity's address, not their apartment, is what's published. Whether any particular setup satisfies the regulations — what counts as a valid records location, whether a given mailbox service qualifies, how an entity changes the analysis — is exactly the kind of specific legal question I won't answer, because I'm not qualified to. What I can tell you from running businesses before this one is the general principle: separating your business's public address from your home is ordinary, boring business hygiene, and this is one more reason to do it early. Get a lawyer to bless the specifics of your version.

What does "available for inspection" actually mean?

This is the phrase that spooks people, so let's take the drama out of it. "Available for inspection" means that if an authorized federal inspector shows up at the location named in your statement, during the kinds of business hours the regulations contemplate, you can actually produce the records — organized, complete, and matching the content they cover.

It does not mean agents are roaming the country auditing solo creators' hard drives, and I'm not going to pretend otherwise — I have never been inspected, and I don't know any inspection war stories worth retelling. The honest framing is that inspection is the enforcement mechanism the whole system is built around, the way an audit is for taxes. You don't keep clean books because an audit is likely this year; you keep them because the entire design of the obligation assumes you could open them on request. Same posture here: the standard to hold yourself to is "could I produce these records if asked," not "will I be asked this month."

What that means practically: records that exist, in the format the regulations describe, at the place your statement says they are. If your statement names an address where the records aren't actually kept, the statement is wrong even if the records are pristine. The two halves have to agree.

What changes when collaborators are in the content?

When another performer appears in content you produce, you're the producer of that content — which means your records have to cover them, not just you. Their ID, their legal name, their aliases, tied to the specific content they appear in. "They're verified on the platform" doesn't put a copy of their documentation in your files, and your statement points at your files.

This is one of the reasons I treat collaboration paperwork as a single bundle collected on the day — ID documentation, model release, 2257 records together, before anyone presses record. I walked through the full set in my first-collab paperwork checklist, and the custodian angle is the why behind half of it: every performer in your catalogue is someone whose records you, as custodian, would need to produce.

The mirror image is also true. When you appear in content someone else produces, their custodian needs your records — which is why a legitimate producer asks for your ID before a shoot, and why a "producer" who doesn't ask is waving a red flag about everything else in their operation. How the obligations divide in messier arrangements — co-produced content, content traded between creators, both parties posting the same scene — has real nuance, and I'd put the edge cases in front of a lawyer rather than guess. Not a lawyer; this paragraph especially is concept, not counsel.

What happens to the records when you quit?

Here's the part almost nobody prices in: the records don't evaporate when the account does. Deleting your pages, retiring the persona, and walking away ends the posting. It does not end the record-keeping obligation for content you already produced. The regulations contemplate retention periods that continue after a producer stops producing — including after a business shuts down — and the specific durations and transition rules are, you guessed it, a question for a lawyer, not for me.

The principle to internalize is just this: custodianship follows the content's existence, not your enthusiasm for the career. Content you produced and distributed is content somebody may still need to verify performers' ages for, years later. Part of being your own custodian is having an exit plan for the records — where they'll live, who's responsible — that survives the day you stop logging in. Boring, but so is every obligation that outlasts the fun part of a business, and this isn't my first business.

Isn't this just a footer formality?

The two myths I see most often, taken in turn.

"It's just a footer formality." No. The statement is a public factual declaration with a federal statute behind it, and the custodian is a real role with real duties — maintain the records, keep them where the statement says, produce them on inspection. Treating the paragraph as decorative text to paste in and forget gets the relationship exactly backwards: the footer is the output of a working records system, not a substitute for one.

"The platform is my custodian, so I'm covered." This is the more seductive one, because platforms do verify your ID, and big platforms do maintain records and name custodians for the content they host. But the platform's custodianship covers the platform's role and the platform's copy of the records. For content you produce, your obligations as the producer are yours — the platform collecting your ID for its files doesn't stock your files, and it certainly doesn't hold your collaborators' records for the content you shot in your own bedroom. Where exactly the line sits between a platform's responsibilities and an independent producer's — especially across different platforms' terms and the regulations' producer categories — is genuinely contested territory, and it's the single part of this topic I'd most insist you take to a lawyer rather than to a forum thread. I'm not a lawyer, and anyone giving you a confident free answer on that edge isn't being careful with your risk.

Where to start if this is all new

If you self-produce and the footer paragraph on your own site is something you copied without understanding, the fix is not panic — it's an afternoon. Understand the role (this post), understand the records (the solo-creator 2257 walkthrough), and put a real statement on your content. I built a free 2257 statement generator, along with the rest of my paperwork tools, to make the document part take minutes instead of a weekend — and then have a lawyer in your jurisdiction review what you've set up, because a template plus a blog post is a starting point, not a compliance opinion.

The custodian of records is the least glamorous job title I've ever held, in this business or any before it. It's also mine, on the record, in the footer. If you produce your own content, it's yours too — and you should be able to explain it better than the sites that taught you to paste it.

— Sly