Share secure signals with bidders (Beta)

Publishers can share secure signals on RTB requests with the third-party bidders they choose. These signals can be created through a signal collection script or adapter provided by a bidder or third party that the publisher chooses to work with.

The publisher is ultimately responsible for what information their chosen signals contain. The signals must be obfuscated before sending them to Google. Secure signals will only be shared at the publisher’s explicit instruction and only with bidders the publisher has allowed to receive the signals. At no point will information contained in the signals be visible or readable by Google or its platforms.

Examples of obfuscated data: 

• Encrypting, hashing, or otherwise transforming data to a non-human readable format.
• Any information that doesn’t include a self-describing component and is not recognizable as PII or structured data.

Examples of data that hasn't been obfuscated: 

• PII in the clear. Examples: phone number, email address
• Structured data that makes otherwise “non-plain text” information understandable. Examples: .json, .xml that provides an explanation of the data it contains

Web signal deploy option	Google actions	Publisher actions
Publisher deploy	None	Publisher is fully responsible. To load the vendor’s script.  For any integrations required for the script’s operation.
Google deploy	Google will load the vendor’s script from a location provided by the vendor.  Google does not: Validate the script in any way. Perform any additional integrations.	The publisher is responsible for any additional integrations required for the script’s operation.
Prebid UserID module	Google passes output of a Prebid UserID module(s) per configuration in the Ad Manager UI.	Prebid UserID module integration is fully up to the publisher.

 

Secure signals are subject to the Google Ad Manager Partner Guidelines. When you turn on secure signals, you acknowledge that you've reviewed and accepted the Ads Data Processing Terms.

---

In this article:

• Allow secure signal sharing
• Select allowed secure signals
• Select bidders to share secure signals
• How Google processes secure signals

---

Allow secure signal sharing

Complete the following steps to allow secure signal sharing:

1. Sign in to Google Ad Manager.
2. Click Admin, then Global settings, and then Ad exchange account settings.
3. In the "Secure signal sharing" section, click the toggle on  to allow secure signal sharing. To disable secure signal sharing, click the toggle off .
4. Click Save.

Share contact information (Optional)

You can select a contact to receive notices from Google about the Ads Data Processing Terms and EU General Data Protection Regulation. 

1. Select the type of contact: Primary contact, EU representative, or Data Protection Officer. 
2. Provide the following contact information:
   1. Enter the contact’s name.
   2. Enter the contact’s email address.
   3. (Optional) Enter the contact’s phone number and address.
3. Click Save.

Contact information is shared with Google and not directly with bidders.

Select allowed secure signals

Complete the following steps to select the secure signals to share with bidders: ​​​

1. Sign in to Google Ad Manager.
2. Click Inventory,  then  Secure signals. A table shows the secure signals you can share. 
3. To share a secure signal, under "Enable a secure signal," turn-on the toggle .
4. For Google to deploy the signal collection script for you, select Google deploy under "Signal collection deployment."
5. Alternatively, for an existing Prebid UserID module to deploy the signal collection script, select Prebid UserID module ^(Beta)  under "Signal collection deployment."
6. Under "Secure signals settings," select Share to share secure signals on non-personalized (NPA) ad requests.
7. Click Save.

If you're using a Content Security Policy (CSP), ensure the signals you select are allowed by the publisher. Google will load the vendor script from a URL provided by the vendor. If the script requires any further integration for its correct operation, it is the publisher's responsibility. You should contact the vendor for additional information.

If you select the "Publisher deploy" option, you must deploy the signal collection script on your own. You should also contact the signal provider(s) directly to understand additional requirements or if issues arise.

Select bidders to share secure signals

To allow secure signals to be shared with a specific bidder:

1. Sign in to Google Ad Manager.
2. Click Delivery, then Bidders.
3. Select Authorized buyers or Open Bidding.
4. Click the name of the bidder.
5. For Open Bidding, click Settings. 
6. Turn on the Allow secure signal sharing toggle .
7. Click Save. 

The bidder can now receive the secure signals you share with them. Bidders can choose whether they want to receive a signal when it's available.

How Google processes secure signals

When Google processes secure signals for Ad Manager it operates as a data processor under the General Data Protection Regulation and as a service provider under the California Privacy Rights Act, Virginia’s Consumer Data Protection Act, the Colorado Privacy Act, Connecticut’s Act Concerning Data Privacy and Online Monitoring, and the Utah Consumer Privacy Act. As such, Google processes secure signals on your behalf.

Security certifications

ISO 27001

ISO 27001 is one of the most widely recognized, internationally accepted independent security standards. Google has earned ISO 27001 certification for the systems, applications, people, technology, processes and data centers serving a number of Google products, including Google Ad Manager.

About GDPR

Keeping users’ information safe and secure is among our highest priorities at Google. Over the years, we've worked closely with Data Protection Authorities in Europe and have implemented strong privacy protections that reflect their guidance. We are committed to complying with the General Data Protection Regulation (GDPR) and will collaborate with partners throughout this process.

For the use of secure signals from publishers, we are offering the Google Ads Data Processing Terms, which you may review and accept in Ad Manager.

How to accept the Ads Data Processing Terms

When you turn on secure signal sharing, you acknowledge that secure signals is a processor feature and is subject to the Ads Data Processing Terms. Turning on secure signal sharing means that you have reviewed and agree to be bound by the Ads Data Processing Terms.