How do I ensure my buying of unsold inventory with a programmatic inventory source is compliant?

To stay compliant when buying unsold inventory through a programmatic source, treat it as both a commercial and legal/privacy compliance problem. The exact requirements depend on your country/region, the inventory type, and whether the source is a publisher, exchange, or reseller.

Here’s a practical checklist:

1) Verify the inventory source is authorized

Make sure the seller or intermediary has the right to sell the inventory:

• Ask for direct supply-path documentation or seller authorization.
• Confirm the inventory is truly unsold / remnant / open auction / private marketplace as represented.
• Avoid sources that can’t explain where the inventory came from or who the publisher is.

2) Review contractual terms

Your insertion order, DSP agreement, or supply agreement should cover:

• Who owns the inventory
• Fraud / invalid traffic responsibility
• Brand safety and content exclusions
• Make-good / refunds for non-delivery or misrepresentation
• Data usage rights and restrictions
• Geo, device, and audience targeting permissions
• Resale / sub-syndication permissions

3) Check privacy and data-consent compliance

If targeting or measuring users:

• Ensure the supply supports the required consent signals where applicable.
• Use only data that you have a lawful basis to use.
• Confirm compliance with relevant frameworks:
  • GDPR / UK GDPR
  • ePrivacy
  • CCPA/CPRA
  • Other local privacy laws in the markets you buy in
• Don’t pass or use identifiers unless allowed by the consent and contractual terms.

4) Confirm ad tech policy alignment

Depending on your platforms, ensure the source supports:

• IAB TCF or other consent frameworks, if needed
• ads.txt / app-ads.txt for authorized sellers
• sellers.json
• SupplyChain Object (schain) transparency
• MRC-accredited IVT/fraud controls, if available

5) Screen for brand safety and content suitability

Unsold inventory can still appear on:

• controversial or unsafe content
• MFA (made-for-advertising) sites
• low-quality pages with poor user experience

Use:

• contextual filters
• site/app blocklists and allowlists
• category exclusions
• third-party brand safety vendors
• pre-bid and post-bid fraud/quality verification

6) Keep records for auditability

Maintain:

• seller onboarding due diligence
• contracts and terms
• screenshots or logs of inventory claims
• campaign settings
• consent logs / privacy notices
• invoices and delivery records
• any dispute or refund communications

7) Test with a small spend first

Before scaling:

• run a pilot
• inspect placement reports
• validate domain/app-level inventory
• check for IVT, viewability, and conversion quality
• compare what was promised vs. what was delivered

8) Get legal/compliance review for edge cases

Have counsel review if you are buying:

• children’s content
• health, finance, or political advertising
• cross-border inventory
• sensitive audiences or regulated categories
• audio, CTV, or app inventory with different rules

Quick red flags

Be cautious if the source:

• won’t disclose the seller or publisher
• can’t provide ads.txt / sellers.json / schain support
• makes unrealistic quality or audience claims
• offers inventory far below market without explanation
• resells inventory through multiple unknown layers
• refuses to discuss consent or data usage

Best next step

Create a supplier due diligence checklist and require every programmatic source to pass it before activation.

If you want, I can help you build a one-page compliance checklist or a supplier onboarding questionnaire for programmatic unsold inventory.