IAB Spain this week published the first technical guide dedicated entirely to supply-side platforms in the Spanish programmatic advertising market, a 54-page document developed by its Programmatic Commission that maps the full operational and legal architecture of SSPs - from waterfall mechanics and header bidding integration to identity management, curated deals, and agentic AI. The announcement was made on April 15, 2026, as part of the organisation's ongoing standards and education programme.

The guide arrives with a pointed data point at its centre. According to the ANA Programmatic Transparency Benchmark 2025 cited in the document, only 41% of total programmatic investment can be classified as TrueAdSpend - meaning spend that reaches genuine, measurable, viewable impressions free of invalid traffic and made-for-advertising inventory. Transaction costs alone, covering DSP platform fees, data costs, and SSP platform costs, consume 26.1% of every dollar invested. A further 32.9% disappears into media productivity losses: invalid traffic, non-measurable impressions, non-viewable placements, and MFA environments. The benchmark shows improvement from 2023, when TrueAdSpend stood at 36%, and ad spend productivity grew 14% between the two study periods. Yet the new TrueCPM Index still places the optimisation gap at 37.8%, indicating substantial structural inefficiency persists.

Spain's programmatic market provides the backdrop. According to IAB Spain's Estudio de Inversión Publicitaria en Medios Digitales, total programmatic investment in Spain reached 1,688.7 million euros in 2025. The guide frames SSPs as the layer most capable of addressing inefficiency at scale, because their proximity to the publisher means interventions - pricing rules, curation logic, identity enrichment - apply closer to the inventory source than any downstream technology can achieve.

What the guide says SSPs actually do

The document defines a Supply Side Platform as a technology platform used by publishers and media companies to manage, optimise, and sell advertising inventory in an automated, programmatic fashion. The definition extends beyond the transactional. According to the guide, SSPs operate across four strategic pillars: making advertising more agnostic and open by reducing dependence on closed ecosystems; adding value to publisher inventory through minimum price rules, viewability settings, and contextual data enrichment; providing DSPs with structured information about inventory and users via Bid Requests; and managing regulatory compliance through integration with the IAB Europe Transparency and Consent Framework.

Functionally, SSPs support three transaction types: Programmatic Guaranteed, Private Marketplace, and Open Exchange. They manage deal creation, Seat ID mapping, Bid Request dispatch, Bid Response processing, and reporting. Targeting capabilities span content, geography, day-parting, device, audience segment, and contextual segment. The guide notes that key metrics reported include eCPM, fill rate, revenue by demand source, and bid data.

The waterfall and why it broke

A substantial portion of the guide addresses the historical waterfall architecture and its transition to hybrid models. The waterfall - or cascada - is defined as the mechanism by which an ad server evaluates demand sources sequentially, activating each line item in priority order until a valid response is returned. Campaigns occupy three structural layers: sponsorships purchasing 100% of available inventory for a fixed period; standard guaranteed campaigns with committed delivery volumes distributed via pacing; and non-guaranteed campaigns, including programmatic, that compete for leftover inventory using CPM logic.

According to the guide, the classic waterfall generates two measurable limitations: latency from multiple sequential calls, and a lack of real competition because only one source sees each impression at any given moment. Header bidding, which emerged in the 2010s as an open-source solution, resolved both by launching parallel bid requests to multiple demand partners before the ad server makes its final decision. The result is that publishers learn, impression by impression, the maximum price each partner is willing to pay. The ad server no longer operates blindly. It has richer signal when deciding whether to honour a guaranteed reservation or route an impression to a higher-paying programmatic source.

Most publishers now operate hybrid architectures in which both approaches coexist. Direct campaigns with guaranteed delivery sit at high priority levels. Programmatic Guaranteed deals are negotiated like direct campaigns but executed through programmatic channels. Preferred Deals offer a buyer priority access at a fixed price without volume commitment. Open Auction RTB represents the lowest priority layer, where multiple buyers compete simultaneously through integrations with SSPs.

Technical integration mechanics

The guide maps the main integration methods available to publishers in detail. A JavaScript tag - the simplest option - is a code fragment inserted into a publisher's page that calls the SSP or ad server after the page loads. It covers both display and video in web environments and is easy to implement, but does not enable real auctions or competitive bidding between SSPs.

VAST (Video Ad Serving Template), maintained as an IAB standard, defines an XML document structure enabling communication between ad serving systems and video players. The guide distinguishes between three often-confused concepts: the VAST standard itself (the rule set); the VAST Tag (the URL endpoint that returns a VAST-compliant document); and the VAST Document (the specific XML file containing ad instructions). A VAST document specifies the video file location, available qualities, ad duration, measurement events such as quartile tracking and click events, and playback instructions. The Wrapper mechanism allows chaining - one VAST document can redirect to another, enabling multiple parties to participate in a single delivery chain, though multiple redirects increase latency.

OpenRTB, maintained by IAB Tech Lab, is the JSON-based protocol that standardises communication between SSPs and DSPs. According to the guide, a Bid Request from an SSP carries a unique impression ID, site or app details, available formats, device data, the minimum accepted price, the full supply chain, and privacy signals. The DSP responds with a bid price, campaign ID, creative ID, creative URL or VAST, tracking pixels, and the advertiser's domain. IAB Tech Lab published standardised auction definitions in January 2026 establishing common vocabulary across the ecosystem. OpenRTB 3.0 was released in 2020 with a cleaner architecture and the AdCOM object model, but industry adoption remains limited, with most platforms still operating on versions 2.5 and 2.6.

Prebid is described as the dominant open-source wrapper for header bidding implementation. The guide distinguishes two deployment modes: Prebid.js, which executes auctions client-side in the browser with maximum transparency but potential latency if the number of demand partners is high; and Prebid Server, which shifts auction processing to remote servers, reducing browser load but introducing an additional network hop and potential identifier synchronisation challenges. Many publishers run hybrid configurations combining both. IAB Tech Lab in August 2025 challenged Prebid changes that eliminated cross-exchange transaction ID visibility, a dispute the guide contextualises within broader ecosystem governance tension.

Amazon TAM (Transparent Ad Marketplace) and Google Open Bidding are also covered as server-side alternatives to Prebid.js. TAM integrates with Prebid.js and allows Amazon DSP to compete alongside other demand partners for publisher inventory. Open Bidding executes auctions on Google's servers via Google Ad Manager, reducing technical complexity but offering less flexibility than Prebid configurations. The guide notes that most major SSPs offer proprietary wrappers compatible with Prebid, or enhanced Prebid-based solutions.

Identity in a post-cookie environment

Chapter four addresses identity management within Prebid, framing it as one of the framework's most consequential structural evolutions. The progressive restriction of third-party cookies by browsers created a critical challenge for addressability, measurement, and monetisation on the open web. Prebid responded by developing the User ID Module - a modular component that allows publishers to integrate, configure, and orchestrate multiple identity sub-modules through a single configuration object.

The technical flow operates in six steps. When a user visits a page, the User ID Module checks whether TCF consent has been granted for Purpose 1 - storing and accessing information on a device. Only if consent exists do the configured sub-modules activate. Each sub-module retrieves or generates an identifier, storing it in first-party cookies or HTML5 local storage. If a valid identifier already exists locally and has not expired, no external call is made, reducing latency. The resulting identifiers are packaged into the Bid Request under the bidRequest.userIdAsEids field, following the OpenRTB EIDS standard, and made available to all connected bidder adapters.

According to the guide, Prebid manages three categories of identifier: first-party IDs derived from publisher data such as hashed emails from registered users; shared industry IDs like SharedID, the open-source evolution of PubCommonID developed by the Prebid community; and commercial identity graph solutions from specialised technology vendors. For publishers, improved identity signal translates to higher eCPMs, better fill rates, and reduced no-bid rates from DSPs. For buyers, enriched Bid Requests with standardised identifiers enable deterministic or modelled audience targeting and justify higher CPMs.

Privacy integration is explicit throughout. The module enforces a hard stop if TCF Purpose 1 consent is absent. Publishers can also activate an opt-out mechanism via the _pbjs_id_optout cookie. Vendor exceptions allow certain identity providers not registered in the IAB Europe TCF to operate under publisher-managed consent, provided the vendor handles its own consent governance.

Working media and supply path optimisation

Chapter six examines the economics of the programmatic chain. The guide defines working media as the proportion of advertising budget that actually reaches publishers after deducting technology costs, intermediary margins, and operational overheads. According to the document, a direct SSP connection without resellers can deliver 70-80% of an advertiser's euro to the publisher. Indirect paths involving multiple intermediaries typically deliver 40-50%. Agencies and advertisers who map and optimise their supply paths can increase publisher delivery from 55% to 70-75%.

The ANA 2025 benchmark cited in the guide shows that the number of activated domains and apps has more than doubled since 2023, yet 90.3% of impressions concentrate on just 3,000 sites. Operational fragmentation increases intermediation without adding efficiency. The document frames Supply Path Optimisation (SPO) as the primary structural tool for improvement: consolidating partners, shortening routes, validating supply chains via ads.txt, app-ads.txt, sellers.json, and the SupplyChain (schain) object. IAB Tech Lab's Deals API, released for public comment in December 2025, is one initiative aimed at reducing manual deal configuration friction that contributes to chain complexity. Industry analysis from October 2024 showed SSP-based curation can preserve match rates because data applied at the SSP layer undergoes signal degradation only once, rather than at each downstream handoff.

Curated deals and the structured open marketplace

Curated deals receive a dedicated chapter. The format allows agencies and intermediaries to package pre-qualified inventory using signals available in the Bid Request - publisher, domain, device type, environment, geolocation - and enrich it with third-party audience or contextual data applied at the SSP layer. The result is described as a "bespoke open marketplace" where buyers access inventory that has been filtered and structured, but transactions still occur with the competitive logic of open exchange bidding.

Unlike Preferred Deals, which sit at a prioritised position within the publisher's ad server hierarchy, curated deals compete at open priority - within the open auction, but across a pre-selected inventory set. They support both dynamic floor prices aligned to publisher signals and fixed pricing. The guide argues curated deals reconcile two properties that previously appeared in tension: the scale of the open exchange and the inventory control of private marketplaces. By concentrating the DSP's KPI-optimisation search within a pre-filtered environment, curated deals reduce unnecessary bid requests to irrelevant inventory, contributing what the guide calls "technological sustainability" by limiting unnecessary request circulation.

Chapters addressing legal risk are among the guide's most detailed. The document identifies a gap between programmatic ecosystem complexity and the technical comprehension of those responsible for governing, supervising, or auditing it from commercial, legal, or compliance perspectives. This gap produces effects across three layers: technology implementation, contract management, and regulatory compliance.

At the technology layer, unknown parameter transmission can expose publishers - sending granular device information, untruncated IP addresses, or incorrect consent signals. Activating profiling-based optimisation features when users have not consented to profiling constitutes a specific risk flagged in the document. Loss of consent signal traceability when TCF strings are not correctly propagated to SSPs, DSPs, or other partners is identified as a further exposure.

Contractually, the guide identifies outdated agreements referencing obsolete regulations, poorly defined data protection roles among editor, SSP, adserver, and DSP participants, and the structural difficulty of maintaining comprehensive contractual chains across an ecosystem where participants rotate dynamically. The applicable regulatory framework listed in the document spans EU Regulation 2016/679 (GDPR), the 2002 e-Privacy Directive, Spain's LOPDGDD (Ley Orgánica 3/2018), and the LSSI (Ley 34/2002).

Contracting with US-based providers receives specific treatment. The guide notes that the majority of programmatic technology providers are headquartered in the United States, where data protection follows a sectorial, state-level model without a federal equivalent to GDPR. California's CPRA is identified as the most influential standard for commercial advertising operations, with distinct obligations around opt-out management and the classification of parties as third-party or service provider. The guide flags that many US technology providers simultaneously supply services and use data for their own analytics or advertising purposes, complicating stable classification as service providers and generating CPRA compliance risk if opt-outs are not properly managed.

The guide also addresses the "Pay or Okay" model - offering users a choice between consenting to personalised advertising or paying for access - noting that no uniform EU framework exists yet and that debates over its compatibility with consent freedom principles remain unresolved.

Future directions: agentic AI and the green supply path

The final chapter covers five structural trends the guide identifies for SSPs in coming years. Intelligent orchestration positions the SSP as a unified integrator of identity signals, inventory quality, supply routes, and measurement standards, rather than a tool focused solely on monetisation and fill rate. IAB Spain's 2026 digital roadmap identified agentic AI as the dominant force reshaping Spanish advertising, and the SSP guide extends that framing to the supply side specifically.

Agentic AI within SSPs is described as systems capable of analysing demand patterns, dynamically adjusting floor prices, prioritising more efficient supply routes, detecting anomalies in real time, and proposing optimal inventory or deal configurations without constant manual intervention. Index Exchange CEO Andrew Casale outlined a similar architectural shift in February 2026, describing decisioning moving from downstream optimisation to upstream execution at the impression itself through containerised models running directly on exchange infrastructure.

Curation automation is described as an evolution from static Private Marketplace structures toward dynamic processes that build personalised advertising products in real time, aligned with performance, branding, or attention objectives. The Green Supply Path concept frames supply path optimisation as an environmental as well as economic objective: shorter, cleaner purchase routes reduce energy consumption per served impression. The guide notes that the SSP, as the central structuring point for supply, is key to this transition. IAB Spain's January 2026 CTV parameters guide also referenced sustainability as an emerging operational consideration.

Marketplaces are projected to transition from traditional PMPs offering preferential access to structured environments where efficiency, predictability, trust, and transparency replace mass scale as the primary pillars of competitive monetisation.

The guide was produced by IAB Spain's Programmatic Commission with contributions from 16 organisations: Adevinta (Sonia Medina), Adissey (Carmen del Rey), ECIJA (Joaquin Cives and Natalia Antunez), Exteriorplus (Juan Luis Jimenez), Freewheel (Giuliana Caputo), Global (Begona Dieguez), IAS (Benito Marin), Legal Army (Jesus Gomes), Ogury, PRISA Media (Brice Fevrier), Pulsa (Alfredo Castineira), Sibbo (Juan Lopez), StackAdapt (Luisa Lara), The Channel Store (Victor Solis), UTIQ (Alvaro Guadalajara), and Webedia (Inaki Garcia).

Timeline

Summary

Who: IAB Spain, through its Programmatic Commission, with contributions from 16 organisations including Adevinta, Freewheel, IAS, PRISA Media, StackAdapt, UTIQ, and Webedia.

What: The first technical guide on Supply Side Platforms (SSPs) in Spanish programmatic advertising, a 54-page document covering SSP architecture, waterfall and hybrid monetisation models, OpenRTB and Prebid integration, identity management, working media economics, curated deals, legal compliance, and future trends including agentic AI and the Green Supply Path.

When: Published on April 15, 2026, by IAB Spain's Programmatic Commission as part of the organisation's technical standards and education programme.

Where: Published in Spain and targeted at the Spanish digital advertising market, though the technical content applies to the broader European and global programmatic ecosystem. The ANA benchmarking data referenced is drawn from US programmatic spending.

Why: The guide addresses a structural knowledge gap in the Spanish programmatic market, where programmatic investment reached 1,688.7 million euros in 2025 yet only 41% of that spend meets quality standards per the ANA 2025 benchmark. By documenting SSP mechanics, legal obligations, and optimisation strategies in one reference document, IAB Spain aims to support publishers, agencies, and technology providers in improving supply path efficiency, reducing intermediation costs, and managing regulatory compliance under GDPR, the e-Privacy Directive, and Spain's LOPDGDD.

Share this article
The link has been copied!