Programmatic media buying: assess an agency's trading desk

What to take away

Define the trading desk before you compare agencies

A programmatic media buying agency UK brief often mixes three different things: planning, buying and technology. Ask which entity holds the demand-side platform seat, who pays the data platform, and who can export reports.

Some agencies run a disclosed trading desk. Others resell a seat on a demand-side platform, or buy through a managed service. Each route changes your access to UK inventory, data and audits.

The label matters less than the contract. If the agency cannot show whether it acts as principal or agent, treat the proposal as incomplete.

Compare trading desk arrangements on control

Assess control across an agency-run trading desk, a resold DSP seat, a managed service and an advertiser-owned seat. For each, check who holds the platform seat, who controls data and what evidence you can export. An agency-run desk puts trading with the agency, so ask for platform access and exports; with a resold seat, check the reseller's contract and transfer terms; with a managed service, specify the logs and disclosures the service must provide; with an advertiser-owned seat, define the agency's access and permissions.

If you must prove where an impression ran, a seat you hold may be easier to audit than a fully managed service. Ask for the same evidence from every model.

Ask the questions that expose the buying route

Ask for answers in writing. A verbal assurance is not a data right.

Make platform and supplier names part of the answer. DSP examples include Google Display & Video 360 (DV360), The Trade Desk and Amazon DSP; SSP examples include Magnite, PubMatic and Index Exchange; verification providers include Integral Ad Science (IAS) and DoubleVerify. Ask which actually handle your campaign, who contracts with each and whether the names match the sample logs. These are examples, not recommendations.

For a testable supply-path request, name IAB Tech Lab's ads.txt and sellers.json standards, plus the OpenRTB SupplyChain object (schain) where applicable. Request the relevant records with the sample log file so you can check the seller and intermediary path, rather than relying on a general promise of transparency.

Ask whether the agency references ISBA's Programmatic Supply Chain Transparency Study and can provide relevant evidence of TAG or JICWEBS certification, or an ABC audit. Verify the scope with the issuing body; IAB UK and IAB Tech Lab are industry and standards bodies, not proof by themselves that a desk has passed an audit.

Consent and UK data protection are buying criteria

Programmatic buying depends on personal data. Under the UK GDPR, you need a lawful basis for processing and a clear consent route where consent is the basis; ask the agency to identify the relevant Article 6 basis for each operation and show its assessment. The ICO's Update report into adtech and real time bidding is a named reference for scrutiny of UK adtech practices. Where cookies or similar technologies store or access information on a device, the Privacy and Electronic Communications Regulations 2003 (PECR) and the ICO's guidance on cookies and similar technologies are relevant consent references.

Ask how consent signals travel from your consent management platform (CMP)—for example, OneTrust or Cookiebot—to bidders, and whether the implementation uses the IAB Transparency and Consent Framework (TCF). Check suppression rules for withdrawn consent and ask for evidence, such as a test trace. The ICO says legitimate interests may support direct marketing where PECR does not require consent, provided the use is proportionate, has minimal privacy impact and would not surprise people or be likely to prompt objection; see the ICO's direct-marketing position.

The CAP Code also applies to the creative, so ask who checks copy, landing pages and age-gating before an ad runs.

Check the entity and the money trail

Check the agency's registered name and filing history at Companies House before you rely on a trading name or a group brand. The contracting entity is the one you can pursue.

Separate fees from media, data, verification and technology. A percentage of media can hide a margin inside inventory.

If the agency buys as principal, ask for a principal disclosure and a resale price clause. If it buys as agent, ask for the audit right and the reconciliation date.

Use a like-for-like grid when you compare media buying agency proposals, because a cheap media rate can sit on top of an expensive data or verification fee.

Set a test, a review and a stop rule

Before launch, agree a 30-day test with named checks: supply-path disclosure, consent evidence, fee reconciliation and log-level data. Without a stop rule, it is only a pilot.

A programme that cannot show the inventory source is unauditable. Buyers should price that uncertainty into the appointment.

At review, ask whether the agency met the access terms, not just the delivery numbers. The useful question is what you could prove from the platform yourself.

Set the review date in the contract, not in a slide. The same clause should give you a data export, a defined notice period, plus a named contact and a review owner.

If reporting hides the buying route, treat that as a fault, not a formatting quirk; the media measurement faults piece sets out how to challenge a report before you act on it.

Common questions

What is a programmatic trading desk?

A trading desk is a team or service that buys digital inventory through demand-side platforms for advertisers. It may sit inside an agency, a holding group or a separate company.

Should I choose an agency with its own trading desk?

Not automatically. An owned desk can give closer control, but an independent trader or your own seat may offer better data access. Test the terms, not the label.

How do we check consent in programmatic buying?

Map the consent signal from your consent management platform to each bidder, then ask for evidence that withdrawn consent suppresses future bids. Use the ICO guidance as the baseline.

What should trigger a review or exit?

Missed supply-path disclosure, missing log files, unexplained fees or consent failures. Put those triggers in the contract with a notice period and data export right.