{"page":"/blog/soc-2-ad-tech","modified":"2026-11-10","license":"https://creativecommons.org/licenses/by/4.0/","columns":["Category","Bidder (DSP)","SSP or exchange","Data platform (CDP, DMP)","Clean room"],"rows":[["Security","Access to bidding configs and API keys; change management for models","Access to floor rules and partner endpoints","Role-based access to audience tables","Who can run queries; approval of new query templates"],["Availability","Capacity and failover for peak bid traffic","Timeout handling and redundancy","Backup and restore of audience data","Uptime of the query environment"],["Processing integrity","Auction logic, spend caps and fee calculation","Auction rules, deal priority, payout accuracy","Matching and deduplication logic","Aggregation thresholds applied before results leave"],["Confidentiality","Separation of each advertiser's first-party data","Separation of buyer and seller data","Tenant isolation","No row-level data leaves the room"],["Privacy","Use of consent signals in targeting","Passing consent strings to buyers","Notice, consent and deletion requests","Purpose limits on each collaboration"]],"sourceUrls":[[],[],[],[],[]]}