What ASA tech ad rulings mean for SaaS marketing

What to take away

How the ASA assesses B2B software and tech claims

The Advertising Standards Authority regulates advertising in the UK through the CAP Code, written by the Committee of Advertising Practice. The rules apply to business-to-business copy as well as consumer ads, which surprises teams who assume a trade audience is exempt.

The codes that govern this are set out in the ASA's own reference material on advertising codes. Misleadingness is covered by CAP Code rules 3.1 and 3.3, and the duty to hold evidence is rule 3.7.

The test is the likely effect on the audience, not the advertiser's intention. If a claim is capable of misleading, the ASA will usually uphold a complaint even where the wording is technically defensible. Average readers do not parse footnotes.

Three questions decide most cases. Is the claim objectively verifiable? Does the evidence date from the period the ad ran? Would a reasonable IT buyer, reading the ad once, take away a stronger message than the evidence supports?

SaaS copy tends to fail on the third question. A benchmark figure drawn from a friendly beta cohort reads, in a banner ad, as a claim about every customer. The gap between the two is where rulings are made.

The ASA also looks at prominence. A qualification buried in small print does not correct a headline claim, and disclaimers that contradict the main message are treated as ineffective. For broader UK rules on what copy may say, see this guide to SAAS marketing rules and ethics.

Where B2B fits

B2B ads are assessed under the same misleadingness rules, though the audience's assumed knowledge is higher. Technical buyers are expected to understand standard industry terminology. They are not expected to reverse-engineer an unstated methodology.

What triggers an investigation

Most cases begin with a competitor complaint, a trade body, or an ASA monitoring sweep. The ASA can also act on its own initiative, so an ad nobody has complained about is not automatically safe.

Named ASA rulings on technology advertising

The ASA publishes every upheld and not upheld ruling, and the archive is the most useful free training material a UK SaaS marketer has. The full set is searchable in the published ASA rulings, and it is worth an afternoon before you write a competitive landing page.

Every case below is a consumer technology or telecoms ruling rather than a software case. They belong in a guide for SaaS teams because the ASA applies the same misleadingness tests to business-to-business software advertising, and the gap between what an ad states and what it implies is where software copy most often fails.

Samsung Electronics (UK) Ltd, 2016. Ads for the Galaxy S7 and S7 Edge showed the handsets being used in a swimming pool. The ASA upheld complaints, because the IP68 rating covers fresh water immersion on defined terms, not chlorinated or salt water. Samsung was told not to imply the phones could be used in those conditions.

Apple, 2022, water resistance. Complaints about iPhone water-resistance advertising turned on whether an ordinary viewer would understand the limits of the protection. The ASA upheld the complaint, and its finding rested on the implied claim, not on the technical capability of the handset.

BT and Virgin Media, broadband speed. Rulings against both advertisers established that an "up to" figure presented as typical is misleading when only a minority of customers achieve it. CAP later changed the rules so that ads must quote average speeds, with effect from 2018, which is why UK broadband copy now carries a range.

Each ruling is published in the ASA archive linked above, searchable by advertiser name and year.

Read together, these cases show the ASA treating certification and capability as facts, and then asking what the ad implied those facts proved. Software copy about uptime, encryption or market position runs through the same test.

Which evidence the ASA accepted and rejected

Evidence quality decides outcomes. The ASA is not a court, but it applies a consistent standard: independent, contemporaneous, methodologically disclosed data beats anything produced for the campaign.

In the Samsung case the certification was not in dispute: IP68 exists and the handsets held it. What failed was the jump from "rated for fresh water immersion" to an implied "safe in any water".

A demonstration, a screenshot or a named customer all carry an implied "this is typical". That implication is what gets upheld against, not the underlying specification.

The same split appears in speed claims. The measured figure can be accurate while the ad's use of it misleads, which is exactly how the BT and Virgin Media complaints were decided.

If you are building your own numbers, treat the underlying research as a project in itself. This piece on SAAS marketing benchmark research covers what a defensible dataset needs before it can carry a claim.

What good evidence looks like

A dated report, a named methodology, a sample you can describe in one sentence, and a claim worded no more strongly than the data allows. If any of those is missing, soften the claim rather than the evidence.

Wording comparative claims without overreaching

The CAP Code permits comparative claims under rules 3.33 to 3.35, including comparisons with named competitors, provided the comparison is fair, verifiable and does not discredit the competitor unfairly. Comparisons must be on material features, like for like, and based on evidence available at the time the ad ran.

Wording does most of the work. "Cheaper than X" invites a total-cost question. "Lower list price per seat than X's standard tier, as at September 2026" invites a footnote and survives scrutiny. The second is longer and duller, which is why it works.

Avoid unqualified superlatives. "The fastest", "the most secure" and "the only platform that" all require evidence covering the whole market, which almost no vendor has. Narrow the claim instead: fastest for a named workload, in a named test, on a named date.

Where you compare against a competitor, keep the comparison current. A claim that was accurate at launch becomes misleading when the rival changes its pricing or ships the feature you said it lacked. Set a review date on every comparative asset.

Comparative advertising also sits inside wider competition and consumer law, which the Competition and Markets Authority enforces. The Digital Markets, Competition and Consumers Act 2024 tightened the consumer protection side of that regime, and its provisions reach pricing and drip-fee practices that SaaS pricing pages often get wrong.

The interaction with ad copy is covered in this analysis of SAAS marketing advertising rules.

Naming a competitor

You may name a rival. You may not imply a broader deficiency than your evidence shows, and you may not use a competitor's trademark in a way that suggests endorsement. For when a head-to-head page is worth running at all, see this guide to SAAS marketing product comparison.

Substantiating performance, speed and security claims

Performance claims are the most testing category in software advertising because they are the easiest to make and the hardest to prove. A single number on a pricing page can carry an implied promise about every customer's experience.

Start by asking what the number describes. A p95 latency figure from a synthetic test in one region is not a statement about a customer's production workload. Say which it is, in the ad, not in a linked methodology page.

Security claims need certification or nothing. "ISO 27001 certified" is verifiable and dated. "Bank-grade security" is not a defined standard, so it gives a buyer nothing to check. If you hold SOC 2 Type II, name it and name the period it covers.

Uptime claims should state the measurement window and whether the figure is a target or a historical result. A service level agreement commitment is not the same as achieved uptime, and presenting one as the other is misleading.

Where you make claims about data handling, UK GDPR and the Data Protection Act 2018 set the underlying obligations, and the Information Commissioner's Office enforces them. An ad claim that overstates your compliance posture creates regulatory exposure beyond the ASA.

A worked example

Suppose your product processes invoices faster than a manual process. A weak claim is "10x faster than manual processing". A defensible version is: "In our September 2026 test of 500 supplier invoices, median processing time was 40 seconds per invoice, against a median of 7 minutes for manual entry by the same team." Same selling point, bounded and checkable.

Speed claims in demos

Demo videos and interactive tours are ads too. If a demo is scripted or uses pre-loaded data, say so, or the implied claim about live performance will not hold.

Using Copy Advice before a campaign goes live

Copy Advice is the ASA's free, confidential pre-publication service. You send draft copy, they tell you whether it is likely to breach the codes. It is not a guarantee against a ruling, but it is the cheapest risk reduction available to a UK SaaS team.

Turnaround is typically a few working days, so build it into the campaign calendar rather than treating it as a last check. It suits high-risk assets: comparative headlines, performance statistics, security statements and anything naming a competitor.

The service works best with context. Send the claim, the evidence behind it, and where the ad will appear. Advice given on a headline without the supporting data is necessarily hedged, and hedged advice is hard to act on.

For lower-risk questions, the ASA's AdviceOnline library covers common issues in straightforward terms, including technology and data claims, and it is faster than waiting for a response. Use it to draft, then use Copy Advice to confirm.

Copy Advice does not bind the ASA if a complaint later arrives, and it does not cover every regulator. Where a claim touches financial services, the Financial Conduct Authority has its own financial promotion rules, and a software product sold into lending or payments may fall inside them.

What to send

After the advice arrives

Log what was advised and what you changed. If the campaign is later challenged, a documented response to Copy Advice is strong evidence of good faith, even where the ASA disagrees on a point.

Sanctions and the risk of being named non-compliant

The ASA's main sanction is publication. An upheld ruling appears on the ASA site with the advertiser's name, the ad, the complaint and the reasoning, and it stays there. Search results for your brand will carry it.

Before that stage, the ASA asks the advertiser to amend or withdraw the ad. Most cases end there. Where an advertiser refuses or repeats the breach, the sanctions escalate, and the ASA sets out the full range in its published sanctions guidance.

Escalation can include paid search advertising against the advertiser's own brand terms, so that people searching for the company see the ruling. The ASA can also withdraw trading privileges, such as access to Royal Mail bulk mail discounts, and refer the advertiser to Trading Standards for enforcement.

Repeat offenders are named in the ASA's non-compliant online advertisers list, which is published and updated. For a SaaS business selling to enterprise buyers, that listing is a procurement problem, not just a marketing one.

Being named also affects the sales cycle. Buyers in regulated sectors run supplier checks, and a published ruling against a security or compliance claim will surface in due diligence. The cost is rarely the ad; it is the deal.

Complaints from competitors

Competitors can and do complain. If a rival's claim is causing you to lose deals, the ruling archive shows how comparable complaints were framed and what evidence the ASA sought. Escalation is a commercial decision, not only a regulatory one.

Reducing the risk cheaply

Most rulings are avoidable at the drafting stage. For how buyers themselves assess vendors, and why review content matters, see this piece on SAAS marketing reviews.

Common questions