What changed
FACT: The FTC began enforcing the TAKE IT DOWN Act in May 2026, requiring covered platforms to remove nonconsensual intimate imagery within a 48-hour SLA on a valid victim request, and launched TakeItDown.ftc.gov as a federal complaint channel (FTC press release). HYPOTHESIS (from a Reddit thread, not primary source): Meta made public Instagram photos generatable into AI images of a specific person by default. HYPOTHESIS: Context.dev offers one-call structured extraction that could power cross-site match detection.
Why now
FACT: Enforcement is fresh (2026-05), which is the genuine 'why now' — platforms now have a hard, dated legal obligation and victims have a federal channel with teeth. The regulatory clock is the only durable timing signal here.
Converging signals
Three signals meet: a new consent-default exposure (platform), a newly-enforced removal statute with an SLA (regulation), and cheap structured cross-site extraction (dev). The convergence is real but the forced buyer created by the statute is the PLATFORM (the party compelled to remove), not the paying customer the product targets (the victim).
Customer pain
Real and acute for the victim segment — NCII and synthetic-likeness abuse cause severe, urgent harm, and minors are the highest-urgency case. But acute pain is not the same as willingness to pay a solo vendor when a free, government-blessed path exists.
Who pays
Proposed: individual creators/public figures (subscription), reputation-management and family-law firms (B2B reseller), schools/parent orgs. The most reachable paying buyer is the B2B professional (a firm already billing for reputation work), NOT the consumer — consumers in acute distress default to the free channels.
Solved today
FACT: StopNCII.org (hash-based, free, cross-platform, run with the Revenge Porn Helpline and adopted by Meta and others) and the FTC's own TakeItDown.ftc.gov already provide free detection-hashing and takedown submission. PimEyes, Loti, Ceartas and reputation-management firms offer paid likeness monitoring today.
Why current solutions are bad
The free tools are reactive (victim must find the image first) and don't track the statutory SLA or auto-escalate to an FTC complaint packet. That gap — SLA tracking + escalation dossier — is the only defensible sliver, and it favors a B2B tool for professionals over a consumer app.
Proposed product
Narrow to the defensible sliver: a white-label 'SLA + escalation' tool for reputation-management and family-law firms that ingests a confirmed match (from StopNCII hashing or the client's own report), fires the takedown into each platform's channel, tracks the 48-hour clock, and auto-assembles an FTC-complaint evidence packet on non-compliance. Do NOT build a consumer app that stores intimate/minor imagery.
MVP version
A firm-facing dashboard that takes a case (URLs + evidence, no image storage — store hashes/URLs and case metadata only), submits statutory removal requests to each platform's designated channel, runs a 48h countdown, and generates a filled TakeItDown.ftc.gov complaint packet if the deadline lapses.
30-day build
Interview 8-10 reputation-management and family-law practitioners on their current NCII workflow and what they bill; map each covered platform's actual removal-request channel and required fields; confirm what evidence the FTC packet needs. Decide go/no-go on whether firms will pay for SLA tooling vs. doing it manually.
60-day build
Build the case-tracker + platform submission templates + FTC packet generator for 3-5 platforms. Deliberately exclude any storage of the imagery itself to cap liability. Run the KILL TEST on consenting public figures to measure whether auto-filed requests are honored or ignored/rate-limited.
90-day revenue plan
Sell as a per-seat or per-case tool to 5-10 firms at $100-300/mo. First revenue plausible but not certain within 180 days; consumer subscription path is NOT recommended.
Distribution path
B2B: reputation-management and family-law practitioner communities, bar-association family-law sections, existing NCII-help nonprofits as referral partners. The r/smallbusiness thread audience is the wrong (consumer, low-willingness-to-pay) channel.
Pricing hypothesis
$100-300/mo per seat or $50-150/case for firms. Consumer $10-20/mo is not viable against free StopNCII/TakeItDown.
Technical difficulty
High on the one thing that matters: reliable detection/matching of synthetic likeness across platforms with precision high enough to avoid rate-limiting or platform deprioritization (the stated MUST-BE-TRUE). Structured-extraction APIs don't solve face-match precision. Mitigate by NOT doing autonomous detection in v1 — start from confirmed cases and win on workflow, not detection.
Legal / regulatory risk
Severe. Handling NCII means potentially touching illegal content; the minor segment means potential CSAM exposure and mandatory-reporting obligations. Even holding URLs/evidence for minors carries heavy duty-of-care and data-handling risk. This is a real heavy-compliance burden the founder himself must carry, not a moat.
Platform dependency
High. The product polls/submits to platforms that can rate-limit, ignore, or deprioritize auto-filed requests, and can change channels at will. Unlike a government-portal filing tool, the counterparties here are private platforms that control the submission surface.
Founder fit
Moderate-low. It's a compliance monitor (his preferred shape) and rides a fresh regulation, but it is VICTIM-SIDE not filer-side, is consumer/PII-heavy in its default framing, sits in a crowded likeness-monitoring market, and lacks the government-portal forced-buyer economics that are his proven edge. The B2B-tool pivot improves fit but doesn't reach his best-fit pattern.
Breakout potential
Moderate if the SLA-tracking-for-firms wedge is real and replicates as similar state deepfake/NCII laws pass, giving a 50-market expansion path. Low as a consumer app.
Final recommendation
LEAN KILL as pitched (consumer likeness-monitor + auto-takedown). REVISIT only as a narrow B2B 'SLA-tracking + FTC-escalation-packet' tool for reputation-management/family-law firms that never stores the imagery — validate in 30 days whether those firms will pay for workflow tooling. Do not build the consumer app or the minor-focused segment.
Next action
Run 8-10 discovery calls with reputation-management and family-law practitioners: do they currently track the 48h SLA manually, what do they bill for NCII removal, and would they pay per-seat/per-case for an SLA-tracker + FTC-packet generator? If no, kill.