Tpps

Index Exchange

Badge: ⚠️ Caution

This work is licensed under CC BY-SA 4.0

Index Exchange

FeldWert
Group / Parent ServiceNative Advertising
Badge⚠️ Caution
Service TypeParent service
Sub-service / Relationship Note[not documented]
Infrastructure Only?No
Contact (DPO / Privacy)privacy@indexexchange.com
Assessment Date06/08/2026
Versionv2 (06/08/2026) | v1: 22/06/2026

Badge & Risk Assessment
  • Badge: ⚠️ Caution
  • Red Flags:
    • RF1 — Own advertising / cross-service profiling
    • RF2 — High-risk third-country exposure without meaningful mitigation
  • Risk Indicators:
    • Cross-publisher ad profiling; high-risk international transfers
Reasoning & Sources

Key Facts: Index Exchange is an SSP that processes cross-publisher audience signals for programmatic advertising. Canadian company; data processed in North America (RF2). Index Exchange Europe entity; SCCs.

Framework Note (v2.2): FRAMEWORK NOTE (v2.2): RF2 (high-risk third-country exposure) is recorded here as a significant risk factor and lowers the domain E score. Under the revised framework, RF2 alone does not trigger Caution — the Caution badge for this service is driven by RF1 / RF3 / RF4 (as noted above). The US transfer risk (where applicable) is covered by DPF participation and/or SCCs, which GDPR treats as a compliant transfer mechanism.

Quellen:

  • Index Exchange Privacy Policy (indexexchange.com/privacy)
  • Index Exchange DPA.
Processing Purposes (Consenter)
  • Receive personalised marketing offers
  • Customise online ads (non-TCF)
Notification & Objection Status
  • TPP Notified?: Not yet notified
  • Decision Contested?: [not documented]

Review Required

No review required.

Shape Consenter Together

Consenter is built on an open and participatory process that grows through community collaboration. Whether you share feedback, improve the documentation, or contribute to the Risk Configuration Guides or Technical Integration Guides, your expertise helps make Consenter more privacy-friendly, interoperable, and useful for everyone—including your own users and services: Get finally your benefits and control the risks when sharing personal data.

Last updated on

On this page