Digital advertising infrastructure: how the market actually clears

1. The stack: who does what?

An advertiser supplies the objective, budget and creative; an agency or trading desk may manage the campaign. An advertiser ad server hosts creative and reconciles delivery. A demand-side platform, or DSP, evaluates opportunities across sellers and bids. A supply-side platform, or SSP, helps publishers package inventory, apply rules and reach buyers. An exchange supplies auction and transaction functions. A publisher ad server manages direct and programmatic demand and makes the final selection.

The European Commission’s 2025 Google ad-tech decision describes four publisher-ad-server jobs: run directly sold campaigns, enable programmatic sales, make the final selection and monitor performance. It treated publisher ad servers, SSPs and open-web buying tools as separate markets. That legal taxonomy is not universal, but it identifies the important control points. European Commission decision AT.40670.

2. What happens when one impression is sold?

1. The page, app or video player describes a slot: format, size, context, device, consent signals and eligible deals.
2. A header-bidding wrapper or server may ask several SSPs for bids before the primary ad-server call.
3. Each SSP requests bids from connected DSPs, usually using OpenRTB.
4. Each DSP predicts an outcome, observes budget and pacing constraints, and decides whether and how much to bid.
5. The publisher ad server compares eligible responses with direct, sponsorship and guaranteed campaigns.
6. The winning creative renders; impression, viewability, click and conversion events are reconciled later.

IAB Tech Lab’s OpenRTB 2.6 is the main open protocol for bid requests and responses. It supports display, native, audio, video, connected-TV ad pods, deal IDs, privacy signals and supply-chain information. It standardises the message, not the secret decision logic inside each bidder or exchange.

3. Why “the ad auction” is misleading

The same impression can pass through nested auctions. Several DSPs bid into an SSP; the SSP sends one result to a header wrapper; the header winner enters the publisher ad server; the ad server compares it with direct campaigns and another exchange. A DSP may receive duplicate versions through several paths with different fees, signals and latency.

Most open programmatic auctions are first-price: the winner pays its bid, subject to fees and terms. Buyers therefore use bid shading—bidding below estimated value based on the chance of winning. Floors may be fixed, deal-specific or algorithmically adjusted.

A higher gross bid need not give the publisher more money. Google Ad Manager says it selects the highest net bid and can adjust expected value for the probability that an ad serves and becomes billable. Its Target CPM can dynamically vary floors. Google Ad Manager auction model.

4. Why header bidding emerged

The older waterfall called demand sources one after another using historical averages. A buyer willing to pay more for one particular impression might never be asked. Header bidding solicits several buyers before the primary ad server and passes their bids into its decision, improving price discovery and publisher control.

Prebid’s documentation describes the sequence: call selected partners, collect responses under a timeout, pass price and key values to the ad server, then let the ad server choose among those bids and direct commitments.

Google Open Bidding and Amazon Publisher Services are proprietary server-side alternatives. Operator claims about “unified” or “transparent” auctions are useful descriptions, but independent logs and tests remain essential.

5. What determines what a DSP will bid?

The prediction may use context, device, geography, time, creative, campaign history, publisher quality, frequency, first-party data and permitted identity signals. The objective might be a viewable impression, video completion, acquisition, sale or lifetime value. Budgets and pacing stop the highest-value advertiser from bidding without limit.

This is also a high-throughput computing problem. PubMatic says it coordinated more than 100 billion real-time auctions and nearly one trillion bids per day in 2025. The disclosure illustrates why network proximity, request filtering and owned infrastructure can affect margins. PubMatic 2025 Form 10-K.

6. Follow the money carefully

DSPs commonly charge a platform fee on advertiser spend and may add data or service fees. SSPs retain a fee before paying publishers. But companies report media flows differently: some revenue is net, some transactions are gross, and definitions vary by channel.

The Trade Desk defines 2025 gross spend of $13.395 billion as inventory, data and services plus its platform fee. Magnite warns that peers may calculate Contribution ex-TAC differently; its 2025 CTV Contribution ex-TAC was $304.2 million, up 17%. Use filings, not a single industry “take rate.” The Trade Desk 2025 Form 10-K; Magnite 2025 Form 10-K.

7. Duplicate paths, SPO and curation

Header bidding can send one impression to a DSP through several SSPs. Duplicate requests consume infrastructure and may differ in fee, identity, floor or priority. Supply-path optimisation (SPO) concentrates buyer spend through paths judged more direct, transparent or effective. PubMatic said SPO represented about 55% of its 2025 activity—evidence that path choice is now a commercial product. PubMatic 2025 Form 10-K.

Curation packages inventory, audience, context or quality rules into an easier-to-buy deal. It can reduce search cost and create differentiated supply; it can also add another fee and decision-maker. Ask whether the curator contributes proprietary signal or merely resells an existing path.

8. Fraud, quality and transparency

A paid impression can be invisible, non-human, misrepresented, adjacent to unsuitable content or carry malicious creative. Verification vendors classify viewability, invalid traffic and brand suitability, but discrepancies between systems can create billing disputes.

Ads.txt lets publishers list authorised sellers. Sellers.json and the OpenRTB SupplyChain object help buyers identify the direct seller and paid intermediaries. These standards make counterfeiting and hidden paths easier to detect only when records are correct and buyers enforce them.

IAB Tech Lab proposed SupplyChain 1.1 in June 2026 to reveal parties that take control of a request even if they are not paid nodes. At this research cut-off it remained a proposed upgrade. The Media Rating Council separately maintains standards for invalid traffic, viewability and measurement.

9. Identity, consent and measurement

Identity supports reach, frequency, audience matching, optimisation and attribution, but it is only one layer. Browser restrictions fragment third-party cookies; mobile systems restrict advertising identifiers; CTV identity is split across devices, households and logged-in services. Context, publisher and advertiser first-party data, clean rooms, server-side events, experiments and aggregate models coexist.

Consent strings are messages, not permission by themselves. The IAB Global Privacy Protocol carries jurisdiction-specific signals; every recipient must still interpret and honour them appropriately.

Attribution is not causality. Logs can associate exposure with conversion; an incrementality experiment estimates what the advert changed. Logged-in platforms with commercial outcomes can have stronger feedback than the open web, while leaving buyers more dependent on platform-produced measurement. See the separate third-party cookies deep dive.

10. CTV and retail media redraw the stack

Connected TV brings premium video, ad pods, household identity and direct commitments into programmatic systems. It also fragments supply across device makers, streaming services, SSPs and ad servers. OpenRTB 2.6 added CTV and ad-pod support; VAST carries video creative instructions.

Retail media brings retailer search, browsing and transaction signals close to advertising. Onsite sponsored listings resemble search auctions; offsite campaigns activate retailer audiences through DSPs, publishers and clean rooms. Amazon spans commerce signals, owned media, a DSP, ad server and publisher integrations. That can improve outcome prediction, but attributed purchases are not automatically incremental.

The IAB/PwC 2025 US report estimates programmatic revenue excluding search at $162.4 billion, versus $18.0 billion for non-programmatic placements excluding search. These are US publisher/platform revenues, not global advertiser spend.

11. Vertical integration: efficiency and conflict

Owning several layers can remove hops, improve fraud control and coordinate bidding and measurement. It can also let a firm representing buyers and sellers operate the exchange and influence the ad server that makes the final choice.

In April 2025 a US district court found Google liable for monopolising publisher-ad-server and ad-exchange markets and unlawfully tying the two, while rejecting the advertiser-tools claim. Remedies proposals were litigated in late 2025; the DOJ case record did not list a final ad-tech remedy at the research cut-off.

Separately, the European Commission fined Google €2.95 billion in September 2025 after finding abusive favouring of its own display ad-tech services. Google can challenge the decision. The right test is not whether integration exists, but whether rivals receive equivalent access, the final decision can be audited, fees are visible and customers can switch without losing essential demand or workflow.

12. Company map and investor checklist