A method comprising inspecting a traffic flow associated with a device; identifying a requested access within the traffic flow; determining, based on a set of access rules, whether the requested access is within a service profile, the service profile defining a first data service, a first service usage associated with the first data service being accounted for separately from a second service usage associated with at least a second data service available to the device, the service profile identifying a particular network end-point, a particular end-user-device application, a particular content type, or a combination of these; and if the requested access is within the service profile, creating or modifying a record, the record for assisting in providing an accounting of at least a portion of the first service usage to a paying entity responsible for subsidizing or paying for the at least a portion of the first service usage.