Cookies are gone. IDFA is crippled. And CTV, the fastest-growing chunk of ad budgets, runs almost entirely on connected devices that never had third-party cookies to begin with. So how does Google propose to match your customer list against a living room TV without moving anyone’s data anywhere? That’s the pitch behind Confidential Publisher Match, and every programmatic buyer allocating CTV budget in 2026 needs to understand exactly what it does, and doesn’t, promise.
What Confidential Publisher Match Actually Is
Confidential Publisher Match is Google’s clean-room-adjacent matching mechanism, built for Display & Video 360, that lets advertisers match their first-party customer data against publisher-held identity signals without either party seeing the other’s raw data. It leans on confidential computing, encrypted enclaves that process data while it’s still encrypted, so neither Google, the brand, nor the publisher gets a readable copy of the counterpart’s list.
Think of it as a matchmaking service where nobody exchanges phone numbers. The advertiser uploads a hashed customer file. The publisher’s identity graph, often built on emails, logged-in signals, or device graphs tied to smart TV operating systems, sits on the other side. The match happens inside a secure enclave, and only the overlap (a count, a segment, an activation instruction) comes back out.
For CTV specifically, this matters because most premium inventory (Hulu-adjacent apps, YouTube TV, connected smart TV operating systems) sits behind authenticated logins, not cookies. Publishers guard those login graphs fiercely, and rightly so, because regulators are watching. Confidential Publisher Match is Google’s answer to “how do I target my CRM list on a Samsung TV without anyone breaking GDPR or CCPA.”
The core value proposition isn’t better targeting accuracy. It’s targeting accuracy without a data-sharing agreement that puts your legal team through six months of review.
Why This Is Landing Now, Not Two Years Ago
CTV ad spend keeps climbing even as linear TV bleeds share, and eMarketer’s connected TV forecasts have repeatedly shown double-digit growth in US CTV ad investment year over year. Brands want that inventory. But CTV identity has always been messier than mobile or web, because there’s no universal device ID, no cookie, and increasingly, no willingness from publishers to hand raw viewer data to a demand-side platform.
Google’s confidential computing push isn’t happening in a vacuum either. Apple’s App Tracking Transparency gutted mobile measurement years ago. Privacy Sandbox killed third-party cookies on Chrome. Regulators in the EU and UK keep tightening consent requirements, and the ICO has made clear that data minimization isn’t optional guidance, it’s enforcement priority. Publishers watched all of this happen and decided: we’re not handing our authenticated user graphs to anyone without a technical guarantee that data stays put.
Confidential Publisher Match is that guarantee, at least on paper. Whether the paper matches the practice is exactly what technical buyers need to interrogate before signing off on budget.
How the Matching Actually Works, Step by Step
- Data preparation: The advertiser hashes first-party identifiers (email, phone, or a Google-assigned identifier) before anything leaves their environment.
- Enclave ingestion: Both the advertiser’s hashed list and the publisher’s identity signals get processed inside a Trusted Execution Environment, isolated compute that even the infrastructure operator can’t peek into.
- Match computation: The overlap is computed inside the enclave. No raw list, from either side, is ever exposed in readable form outside that environment.
- Activation: The matched segment gets pushed into a campaign in DV360 as an audience list, ready for bidding, without the advertiser ever seeing which specific households matched.
- Reporting: Aggregated, typically noise-injected reporting comes back, showing reach and frequency without individual-level exposure.
That last point trips people up. You don’t get a list of matched households. You get a targetable segment and aggregate performance data. If your team is used to granular, row-level attribution from walled-off data lakes, this is a mental shift. You’re trading visibility for access.
The Buyer’s Real Question: Is It Actually Privacy-Safe?
“Privacy-safe” gets thrown around loosely in adtech, and buyers should be skeptical by default. Ask three things before you take the label at face value.
First: does the confidential computing environment have independent security attestation, or is it Google’s own assurance? Trusted Execution Environments from major cloud vendors typically carry third-party audits, but ask your Google rep for the specific attestation documentation, not just marketing collateral.
Second: what happens to the hashed match keys after the campaign ends? Retention policy matters as much as the matching mechanism itself. A privacy-safe match that retains derived audience data indefinitely isn’t really privacy-safe, it’s privacy-safe at the moment of processing only.
Third: does this actually satisfy your specific regulatory obligations, or just general “best practice” claims? GDPR’s legal basis requirements, CCPA’s opt-out mechanics, and sector-specific rules (healthcare, financial services) all have different bars. Confidential computing helps with data minimization, but it doesn’t automatically satisfy consent requirements. Your legal team still needs to confirm the lawful basis for the underlying first-party data you’re matching in the first place.
Where It Fits Against the Rest of the CTV Identity Stack
Google isn’t alone in trying to solve CTV identity without cookies. LiveRamp’s authenticated traffic solutions, Experian’s identity graphs, and various publisher-side clean rooms are all competing for the same use case. We’ve broken down how these approaches stack up in our comparison of CTV identity resolution vendors, and the short version is: no single vendor covers every publisher relationship you’ll need.
Confidential Publisher Match is strong where Google has direct publisher partnerships and DV360 integration depth. It’s weaker outside that ecosystem. If a chunk of your CTV budget runs through The Trade Desk or an independent publisher direct-deal, you’ll need a parallel identity strategy, not a single unified one.
That fragmentation is itself a risk worth naming. Every additional identity vendor in your stack is another data processing agreement, another audit surface, another point of failure if a publisher changes its data policy mid-contract. We’ve covered this vetting challenge in more depth in our piece on privacy-first identity resolution for CTV households, and the operational overhead is real, not theoretical.
Don’t evaluate Confidential Publisher Match in isolation. Evaluate it as one component of a fragmented, multi-vendor CTV identity stack you’ll be managing for years, not quarters.
What This Means for ROI and Measurement
Here’s the uncomfortable part nobody in a sales deck wants to dwell on: privacy-safe matching, by design, gives you less granular data than the pre-cookie era offered. That’s a feature for compliance, a friction point for attribution.
If your team relies on marketing mix modeling to fill the gaps, that’s the right instinct. Aggregate, privacy-safe CTV performance data pairs well with MMM approaches precisely because MMM doesn’t need individual-level exposure data to work. We’ve compared several MMM platforms suited for this exact scenario in our MMM tools comparison, and mid-market teams especially should be pairing privacy-safe activation with modeled measurement rather than expecting deterministic attribution to survive.
Also worth stress-testing: any ROAS claim Google or its reps hand you based on Confidential Publisher Match-activated campaigns. We’ve written previously about how to pressure-test vendor-supplied performance numbers in our breakdown of Google’s ROAS claims, and the same skepticism applies here. Ask for methodology, not just the headline number.
Practical Steps Before You Greenlight a Test
- Request the specific list of publishers currently supporting Confidential Publisher Match integration. Coverage is uneven and changes frequently.
- Get your legal and privacy teams to review data retention terms for matched segments, not just the matching mechanism itself.
- Run a small-budget pilot against a control group activated through a different identity method, so you have a real performance baseline.
- Confirm how your data governance platform logs and audits this activity. If you’re managing multiple AI and identity vendors, this is a good moment to check for redundancy, our tool sprawl audit framework is built for exactly this kind of review.
- Cross-reference with broader governance standards. Our comparison of AI data governance across major platforms is a useful benchmark for evaluating whether Google’s approach here is genuinely differentiated or simply repackaged.
None of this is exotic due diligence. It’s the same rigor you’d apply to any vendor claiming a novel compliance solution, per the FTC’s ongoing guidance on data broker practices and advertising transparency. Confidential Publisher Match is genuinely interesting technology. It is not, on its own, a compliance strategy.
Next step: before your next CTV budget cycle, request Google’s attestation documentation for Confidential Publisher Match directly, run it past your privacy counsel, and pilot it against a control segment before committing incremental spend at scale.
Frequently Asked Questions
What is Confidential Publisher Match used for?
It’s used to match an advertiser’s first-party customer data against a CTV publisher’s identity signals for ad targeting, without either party exposing raw, readable data to the other, typically activated through Display & Video 360.
Does Confidential Publisher Match require third-party cookies?
No. It’s built specifically for environments like connected TV where cookies never existed, relying instead on hashed identifiers and confidential computing to perform the match.
Is Confidential Publisher Match GDPR or CCPA compliant by default?
Not automatically. The confidential computing architecture supports data minimization principles, but the underlying first-party data still needs a valid legal basis for processing, and buyers should confirm this with legal counsel rather than assuming the tool alone satisfies regulatory requirements.
How does this differ from a traditional data clean room?
Traditional clean rooms often involve both parties uploading data into a shared, access-controlled environment. Confidential Publisher Match uses Trusted Execution Environments, isolated hardware-level enclaves, so that processing happens without either party’s data becoming readable at any point, including to the infrastructure operator.
Which publishers currently support it?
Publisher coverage is limited to those with direct integration agreements with Google and changes over time. Buyers should request an up-to-date publisher list before planning campaigns around this capability.
Can I get row-level match data back for attribution?
No. The design intentionally returns aggregate, often noise-injected, reporting rather than individual-level match data, which means teams relying on granular attribution should pair this with modeled measurement approaches like marketing mix modeling.
Top Influencer Marketing Agencies
The leading agencies shaping influencer marketing in 2026
Agencies ranked by campaign performance, client diversity, platform expertise, proven ROI, industry recognition, and client satisfaction. Assessed through verified case studies, reviews, and industry consultations.
Moburst
-
2
The Shelf
Boutique Beauty & Lifestyle Influencer AgencyA data-driven boutique agency specializing exclusively in beauty, wellness, and lifestyle influencer campaigns on Instagram and TikTok. Best for brands already focused on the beauty/personal care space that need curated, aesthetic-driven content.Clients: Pepsi, The Honest Company, Hims, Elf Cosmetics, Pure LeafVisit The Shelf → -
3
Audiencly
Niche Gaming & Esports Influencer AgencyA specialized agency focused exclusively on gaming and esports creators on YouTube, Twitch, and TikTok. Ideal if your campaign is 100% gaming-focused — from game launches to hardware and esports events.Clients: Epic Games, NordVPN, Ubisoft, Wargaming, Tencent GamesVisit Audiencly → -
4
Viral Nation
Global Influencer Marketing & Talent AgencyA dual talent management and marketing agency with proprietary brand safety tools and a global creator network spanning nano-influencers to celebrities across all major platforms.Clients: Meta, Activision Blizzard, Energizer, Aston Martin, WalmartVisit Viral Nation → -
5
The Influencer Marketing Factory
TikTok, Instagram & YouTube CampaignsA full-service agency with strong TikTok expertise, offering end-to-end campaign management from influencer discovery through performance reporting with a focus on platform-native content.Clients: Google, Snapchat, Universal Music, Bumble, YelpVisit TIMF → -
6
NeoReach
Enterprise Analytics & Influencer CampaignsAn enterprise-focused agency combining managed campaigns with a powerful self-service data platform for influencer search, audience analytics, and attribution modeling.Clients: Amazon, Airbnb, Netflix, Honda, The New York TimesVisit NeoReach → -
7
Ubiquitous
Creator-First Marketing PlatformA tech-driven platform combining self-service tools with managed campaign options, emphasizing speed and scalability for brands managing multiple influencer relationships.Clients: Lyft, Disney, Target, American Eagle, NetflixVisit Ubiquitous → -
8
Obviously
Scalable Enterprise Influencer CampaignsA tech-enabled agency built for high-volume campaigns, coordinating hundreds of creators simultaneously with end-to-end logistics, content rights management, and product seeding.Clients: Google, Ulta Beauty, Converse, AmazonVisit Obviously →