A business is an organization, or a single person, that supplies goods or services in exchange for payment and carries the financial risk of doing so. The definition is deliberately wide, covering a sole trader repairing boilers under a personal name and a listed corporation employing two hundred thousand people. What separates a business from a hobby or a charity is the intention to trade for consideration, plus the legal and tax exposure that follows.

In advertising the word carries a second, narrower load. Every ad account resolves to a named legal entity, as does every line in an ads.txt file, every record in a sellers.json file and every advertiser disclosure served under European transparency law. Defences against fraud, impersonation and scam advertising rest on the assumption that the business behind a transaction can be identified, documented and, if necessary, suspended. A term from company law is therefore an operational field in the programmatic stack.

Why businesses exist as entities

Economist Ronald Coase set out the standard explanation in 1937 in "The Nature of the Firm". Coordinating production through market contracts costs money. When those transaction costs exceed the cost of directing work internally, activity is pulled inside a firm. The legal apparatus arrived earlier. The Dutch East India Company, chartered on March 20, 1602, is generally treated as the first publicly traded joint-stock company, pooling capital from many investors under a single trading entity. The United Kingdom's Limited Liability Act of 1855 established that shareholders risked only their subscribed capital, separating the owner's fortunes from the firm's. The limited liability company, a hybrid offering corporate protection with partnership tax treatment, arrived when Wyoming passed the first LLC statute in 1977.

Pooled capital, separate legal personality and limited liability produce the entity types encountered in advertising documentation: sole proprietorship, partnership, limited liability company, private and public corporation. Verification programs ask which applies because each generates different paperwork.

How size is defined, and why the definitions disagree

There is no single global threshold for a small business, which routinely causes confusion in cross-border reporting.

The European Commission adopted Recommendation 2003/361/EC on May 6, 2003, effective January 1, 2005. A medium-sized enterprise employs fewer than 250 people with annual turnover of no more than 50 million euros or a balance sheet total of no more than 43 million euros. A small enterprise employs fewer than 50 people with turnover or balance sheet of 10 million euros or less; a micro enterprise fewer than 10 people and 2 million euros or less. Headcount binds, the financial test allows either measure, and staff and financials of partner and linked enterprises are aggregated. The Commission counts more than 23 million such enterprises in the bloc, around 99 percent of all businesses.

The United States works from industry rather than a single ceiling. The Small Business Administration, created by the Small Business Act of 1953, sets size standards under 13 CFR Part 121, expressed as an employee count or as average annual receipts and assigned to each North American Industry Classification System code. Most manufacturers with 500 employees or fewer qualify as small, as do most non-manufacturing firms below roughly 7.5 million dollars in average annual receipts, with numerous exceptions. The SBA Office of Advocacy counted 36.2 million small businesses in its 2025 profile, 99.9 percent of United States businesses, employing 62.3 million people or 45.9 percent of the private workforce.

A 400-employee firm is therefore small in Washington and large in Brussels, and media plans, platform tier definitions and vendor case studies rarely say which standard they used.

Industry classification runs separately. NAICS replaced the Standard Industrial Classification in 1997 across North America, assigning codes across 20 broad sectors on a five-year revision cycle. Advertising platforms do not use it directly, running proprietary vertical taxonomies for policy enforcement, benchmarks and targeting, while firmographic data sold into demand-side platforms maps back to registry or credit-bureau classifications. Intuit's small business segments arrived on The Trade Desk in November 2025.

Business identity inside the advertising stack

On the buy side, identity is established through verification. Google introduced identity checks for political advertisers in 2018 and, on April 23, 2020, extended the requirement to all advertisers, according to a blog post by John Canfield, then director of product management for ads integrity. Advertisers submit personal identification, incorporation documents or comparable evidence of who they are and where they operate.

A second layer, business operations verification, examines what the advertiser actually does. Google documented the process covering business model, registration details, product offerings and value-chain relationships, with agencies, service providers and domain owners disclosed and supported by contracts. Selected advertisers get a 30-day deadline before account pausing. Google updated the guidance in December 2023, expanded the options to cover trade names and doing-business-as designations, and later added an optional affiliation step for agencies acting for a client entity. It has also restated the consequences of false submissions, including restricted serving.

Meta has a stated timetable. In its scam-prevention announcement, the company said it aims for verified advertisers to account for 90 percent of its ads revenue by the end of 2026, up from roughly 70 percent, with the remainder attributed to low-risk businesses.

On the sell side, two IAB Tech Lab files answer the same question. Ads.txt, placed at the root of a publisher domain, lists the systems authorized to sell that inventory, each line carrying the seller domain, the account identifier, a DIRECT or RESELLER relationship and an optional certification authority identifier. Sellers.json, published on July 31, 2019, runs the other way: an exchange declares the entities it represents, each record carrying a seller identifier, business name, domain and a seller type of PUBLISHER, INTERMEDIARY or BOTH. Google added support in AdSense and AdMob in 2022, noting that the pairing lets buyers see the business entity benefiting materially from a transaction. Publishers may elect confidential status, suppressing the name.

Regulation adds a third layer. Article 26 of the European Union's Digital Services Act requires platforms to disclose advertiser identity, and the payer's identity where different, alongside targeting parameters. IAB Tech Lab published a specification for carrying those signals, and IAB Europe reached version 1.2 of its implementation guidelines on December 4, 2025, adding disclosure text in 24 languages. Article 30, applicable since February 17, 2024, imposes know-your-business-customer duties on marketplaces: name, address, telephone number, email, identification document, payment account details, trade register entry and a compliance self-certification, verified against reliable sources, shown on listings and retained for six months after the relationship ends.

Why the term matters to marketers

Business size increasingly determines which market a marketer operates in. PPC Land has documented a structural splitbetween the agency-mediated enterprise layer most forecasts measure and a faster-growing self-serve layer largely invisible to holding-company data, one not defined purely by headcount. Platform results reflect it. Snap reported that small and medium-sized businesses grew North American spend by more than 30 percent year over year in the first quarter of 2026 and accounted for more than 30 percent of global advertising revenue, the seventh consecutive quarter in which the segment led growth. Magnite acquired streamr.ai on September 9, 2025 to lower the creative and setup costs blocking smaller advertisers from connected television.

Disambiguation

Business and company are not interchangeable. A company is one legal vehicle for conducting a business; a business can be run without one, and one company can operate several.

Business and brand describe different objects. A brand is a market-facing identity; a business owns it. Google's trade name and DBA verification exists because the two often differ on paper.

Business and establishment diverge in local search. A Google Business Profile represents a location or service area, not a legal entity, which is why multi-location operators manage many profiles under one company. Google tightened link policies in September 2025 to require location-specific destinations.

Business and enterprise function as platform tiers rather than legal categories, with thresholds set by vendors, not statute.

Limitations and disputes

The core criticism is that the term resists precision where precision is required. Financial thresholds in the EU definition have not been revised since 2003 despite inflation, a point raised repeatedly during the Commission's own review consultation. Employee-based standards treat a ten-person direct-to-consumer brand spending millions on Meta as small, which is legally accurate and commercially misleading.

Verification carries its own disputes. Selection criteria are opaque, deadlines are short relative to document-retrieval times in some jurisdictions, and agencies managing client accounts sit awkwardly in a framework built around one accountable entity. Confidential status in sellers.json preserves an escape hatch from the transparency the file was designed to deliver.

Policy is contested. Internet for Growth, a coalition of small businesses and creators, brought members to Capitol Hill on May 12 and 13, 2026 to argue that privacy legislation and state digital advertising taxes raise costs for small operators. Its commissioned polling, conducted by Echelon Insights among 1,030 likely voters between September 5 and 7, 2025 with a margin of error of 3.4 percentage points, reported that 94 percent of voters consider digital tools essential to small business survival and 78 percent oppose new taxes on digital advertising. Those figures are advocacy research and should be read as such.

Recent developments

Identity has become an eligibility condition rather than a formality. Google extended its limited ad serving policy across all Google Ads products, with verification status, branding clarity and account history feeding one assessment that caps impressions for accounts judged unqualified, phased through 2028. Meta will require ad spend disclosure from February 2027 under developer policy. An offers metric was added quietly to Google Business Profile help documentation on March 25, 2026.

Timeline

  • March 20, 1602: The Dutch East India Company is chartered, widely cited as the first publicly traded joint-stock company.
  • 1855: The United Kingdom's Limited Liability Act establishes limited shareholder liability.
  • 1937: Ronald Coase publishes "The Nature of the Firm".
  • 1953: The Small Business Act creates the United States Small Business Administration and its size standards.
  • 1977: Wyoming enacts the first limited liability company statute.
  • 1997: NAICS replaces the Standard Industrial Classification across North America.
  • May 6, 2003: The European Commission adopts Recommendation 2003/361/EC, effective January 1, 2005.
  • 2017: IAB Tech Lab releases ads.txt.
  • 2018: Google introduces identity verification for political advertisers.
  • July 31, 2019: IAB Tech Lab publishes sellers.json.
  • April 23, 2020: Google extends advertiser identity verification to all advertisers.
  • October 19, 2022: The Digital Services Act is adopted.
  • February 17, 2024: DSA Article 30 trader traceability becomes applicable.
  • December 4, 2025: IAB Europe publishes version 1.2 of its DSA transparency guidelines.

Summary

Who. Every advertiser, publisher, exchange and marketplace operator in the digital advertising chain, plus the regulators and standards bodies that require them to be identifiable: the European Commission, the SBA, IAB Tech Lab and IAB Europe.

What. A business is an organization or individual supplying goods or services for payment and bearing the risk of doing so. In advertising it also functions as a verified identity attached to accounts, supply-chain files and public disclosures.

When. The legal architecture dates from 1602 to 1977. The classification systems date from 1953, 1997 and 2003. The advertising identity layer was built between 2017 and 2026, through ads.txt, sellers.json, platform verification programs and the Digital Services Act.

Where. In company registries and tax systems; in ad account settings and verification queues; in ads.txt and sellers.json files at the domain root; and in DSA disclosure panels served across the European Union.

Why. Because advertising transactions clear between parties who never meet. Establishing which business is buying, which is selling and which benefits materially from the money is the mechanism by which fraud, impersonation and scam advertising are detected, and the mechanism by which regulators assign responsibility.