Yahoo DSP

Built on a foundation of trust
Over 30 years of doing this right: Built Secure. Certified Compliant.

Yahoo's Information Security Policy spans the entire enterprise, mapped to NIST and administered by the Paranoids. The same controls that protect every Yahoo property protect every campaign running on DSP.




Identity & access
Role-based access control on the principles of need-to-know and least privilege, enforced under a zero-trust paradigm across every device on the network. You control who's in.
Data protection
A proprietary cryptographic architecture safeguards the confidentiality, integrity and availability of data, encrypted in transit and at rest. Your 1P data stays segregated and access-monitored.
Data privacy
Privacy controls mapped to applicable regulatory regimes and contractual obligations, with protections embodied where appropriate. We're navigating the compliance shifts so you don't have to.
Compliance & certifications
Information Security Policy mapped to the NIST Cybersecurity Framework through a Unified Control Framework of mandatory controls, independently audited and reviewed annually by Yahoo's Paranoids.
Brand safety
Pre-bid controls and verified-partner data signals across every supply path, backed by vendor risk assessments. MFA-free certified by Jounce Media. Your brand, protected before the bid.
Incident response
An in-house Security Operations Center on glass 24/7 and a dedicated IR team for detection, containment and eradication, with business continuity tested across global hot sites.
30+
years of enterprise security infrastructure
625M
Yahoo user profiles protected & privacy-first
Yahoo, internal data, 2024
24/7
Continuous monitoring & incident response