Ninety-one percent match rate. That’s what the pitch deck says. What it doesn’t say is 91% of what — cookied traffic, hashed emails, or a denominator quietly stacked in the vendor’s favor. Identity resolution vendors have learned that a big match-rate number closes deals, and few buyers ask how it was calculated. That’s a problem, because attribution built on inflated identity graphs collapses the moment finance asks why paid media ROAS doesn’t match bank deposits.
This isn’t an anti-vendor rant. Identity resolution is genuinely hard, and the good providers deserve credit for solving a nasty technical problem. But “trust the number” isn’t a procurement strategy. You need a framework.
Why the 90% Number Is Almost Always Misleading
Here’s the trick most vendors use, intentionally or not: they report match rate against a favorable denominator. Match rate against “known” traffic (people who already gave you an email or logged in) looks wildly different from match rate against total site traffic. A vendor claiming 92% against known users might really be resolving 40-50% of your actual audience. Nobody’s lying, exactly. They’re just answering a question you didn’t ask.
Then there’s the recency problem. A match made from a hashed email seen six months ago isn’t the same confidence level as one confirmed this week. Vendors that report blended historical match rates make stale matches look as good as fresh ones, which matters enormously once you’re trying to attribute a purchase that happened yesterday.
A match rate without a stated denominator, time window, and confidence tier isn’t a metric — it’s a marketing claim dressed up as a technical spec.
The other issue: probabilistic versus deterministic matching gets blurred constantly. Deterministic matches (same hashed email, same login ID across systems) are rock solid. Probabilistic matches (device fingerprint plus behavioral signals plus IP overlap) are educated guesses. Both can be true and useful. But a vendor blending them into one headline number without disclosure is hiding the part that actually determines your risk exposure.
The Due-Diligence Questions That Actually Matter
Skip the marketing deck. Ask these instead, and insist on written answers before signing anything.
- What’s the denominator? Total unique visitors, known users, or opted-in identifiers? Get the exact definition in writing.
- What percentage of matches are deterministic versus probabilistic? A vendor should be able to break this down by channel, not just give you a blended average.
- What’s the match decay curve? Ask how match confidence degrades over 30, 60, and 90 days. If they don’t have this data, they haven’t audited their own product.
- How was the benchmark validated? Third-party audit, internal QA, or client-reported? Internal-only validation is a red flag, not a disqualifier — but it changes how much weight the number deserves.
- What happens at the edges? Ask about performance on Safari/ITP-restricted traffic, in-app browsers (TikTok, Instagram), and connected TV. Match rates vary wildly by environment, and vendors love to average this away.
One brand-side data lead I’ve spoken with put it bluntly: if a vendor can’t produce a cohort-level breakdown within 48 hours of being asked, that’s your answer. The infrastructure to segment match quality either exists or it doesn’t.
Run Your Own Holdout Test — Don’t Trust the Pitch Deck
The single most useful thing you can do in due diligence is run a controlled holdout. Take a known cohort — say, your loyalty program members with verified purchase history — and see what percentage the vendor actually resolves against ground truth you already control. This bypasses the vendor’s self-reported numbers entirely.
A reasonable holdout test looks like this: pull 10,000-50,000 identities with known purchase outcomes, feed anonymized touchpoint data to the vendor, and compare their resolved output against your actual conversion records. Do this over a 30-day window minimum, because short tests favor vendors with strong short-term recency but weak long-term durability.
This is the same discipline that should apply to any attribution tooling decision. If you’ve compared multi-touch versus algorithmic attribution models before, you already know that model choice matters less than data quality feeding the model. Identity resolution is the data quality layer underneath everything else. Get it wrong and no attribution model, however sophisticated, will save you.
What Good Documentation Looks Like
Vendors worth their pricing tier should hand you documentation that includes:
- A match rate broken down by source (first-party CRM, hashed email, mobile ad ID, IP-based probabilistic)
- Confidence scoring methodology, ideally with a published tiering system (high/medium/low confidence bands)
- Data refresh cadence — how often the graph is rebuilt and how stale identifiers get purged
- Privacy compliance mapping against FTC guidance and, if you operate in the UK/EU, ICO data protection standards
- SOC 2 Type II or equivalent audit documentation for the data pipeline itself
If a vendor treats any of this as proprietary and won’t share it under NDA, that’s not confidentiality — that’s avoidance. Legitimate identity resolution companies have gotten comfortable sharing methodology because sophisticated buyers demand it now. eMarketer’s ongoing coverage of the post-cookie transition has repeatedly noted that buyer sophistication is rising faster than vendor transparency, which tells you where the leverage sits if you push.
Compliance Isn’t Optional Anymore
Identity resolution sits directly on top of consent management, and regulators are paying attention. A 90% match rate built on probabilistic device fingerprinting without clear consent trails is a liability, not an asset, especially as state privacy laws expand and enforcement actions target data brokers specifically. If your legal team hasn’t reviewed how the vendor sources its hashed identifiers, pause the rollout.
This is where attribution governance becomes a board-level conversation, not just a martech procurement checkbox. We’ve covered why identity-based attribution governance needs executive sign-off before deployment, and the same logic applies doubly to vendors making aggressive match-rate claims. The bigger the claimed match rate, the more aggressive the underlying data sourcing tends to be, and the more scrutiny it deserves.
Zero-trust principles are creeping into martech stacks for good reason. If you haven’t audited who inside your organization (and which third-party systems) can access resolved identity data once it’s matched, that’s a gap worth closing before you scale usage. Our piece on zero-trust access controls for attribution data walks through the access-governance side of this problem, which pairs directly with vendor due diligence.
How This Plays Out Against Attribution Platforms
Identity resolution doesn’t live in a vacuum — it feeds directly into whatever attribution or MMM layer sits above it. If you’re comparing platforms like the ones covered in our LayerFive, Rockerbox, and Northbeam comparison, understand that each platform’s reported accuracy is only as good as the identity graph underneath it. A platform with excellent modeling but a weak identity partner will still misattribute revenue. Ask attribution vendors directly which identity resolution provider (or in-house method) they use, and apply this same due-diligence framework to that dependency.
Similarly, email and lifecycle platforms making identity claims deserve the same scrutiny. When we broke down Wunderkind, Cordial, and Klaviyo’s identity resolution approaches, the differentiator wasn’t headline match rate — it was how transparently each vendor explained their methodology and how their numbers held up under actual campaign conditions, not lab conditions.
The vendors worth paying premium prices for are the ones who get uncomfortable talking about their limitations, not the ones with the shiniest match-rate slide.
Building the Scorecard
Pull this into a simple weighted scorecard before your next vendor evaluation. Score each vendor 1-5 across: denominator transparency, deterministic/probabilistic breakdown, decay curve documentation, third-party audit availability, compliance documentation depth, and holdout test performance against your own data. Weight the holdout test heaviest, since it’s the only category not dependent on vendor self-reporting.
Run this scorecard across at least two competing vendors simultaneously. Comparative context reveals inflated claims faster than evaluating one vendor in isolation. If Vendor A claims 94% and Vendor B claims 78% but B’s number holds up in your holdout test while A’s collapses to 60%, you’ve just saved yourself a very expensive year of misattributed spend.
Next step: before renewing or signing any identity resolution contract, run the 30-day holdout test against your own verified conversion data — not the vendor’s benchmark — and make the contract contingent on the results matching what was pitched.
Frequently Asked Questions
What is a realistic identity resolution match rate for most brands?
Against total site traffic (not just known users), a realistic deterministic match rate typically falls between 35% and 65%, depending on industry and first-party data maturity. Anything above that usually involves significant probabilistic matching, which carries lower confidence per match.
How do I know if a vendor’s match rate is inflated?
Ask for the exact denominator, request a breakdown of deterministic versus probabilistic matches, and run an independent holdout test against your own verified conversion data. If the vendor resists any of these requests, treat the headline number with skepticism.
Is probabilistic matching reliable enough for attribution decisions?
It can be useful for directional insight and incremental testing, but it shouldn’t carry the same weight as deterministic matches in budget-reallocation decisions. Blend both, but always know which one is driving a given attribution conclusion.
What compliance documentation should identity resolution vendors provide?
At minimum: SOC 2 Type II audit results, a clear consent-sourcing explanation for hashed identifiers, and documented alignment with relevant privacy frameworks referenced by regulators like the FTC and, for UK/EU operations, the ICO.
How often should match rate claims be re-validated?
Quarterly, at minimum. Identity graphs decay, consent pools shift, and browser/platform policy changes (like in-app browser restrictions) can materially move match rates within a single quarter.
Visible FAQ (duplicate removed per instructions is not needed — see JSON-LD below)
Top Influencer Marketing Agencies
The leading agencies shaping influencer marketing in 2026
Agencies ranked by campaign performance, client diversity, platform expertise, proven ROI, industry recognition, and client satisfaction. Assessed through verified case studies, reviews, and industry consultations.
Moburst
-
2
The Shelf
Boutique Beauty & Lifestyle Influencer AgencyA data-driven boutique agency specializing exclusively in beauty, wellness, and lifestyle influencer campaigns on Instagram and TikTok. Best for brands already focused on the beauty/personal care space that need curated, aesthetic-driven content.Clients: Pepsi, The Honest Company, Hims, Elf Cosmetics, Pure LeafVisit The Shelf → -
3
Audiencly
Niche Gaming & Esports Influencer AgencyA specialized agency focused exclusively on gaming and esports creators on YouTube, Twitch, and TikTok. Ideal if your campaign is 100% gaming-focused — from game launches to hardware and esports events.Clients: Epic Games, NordVPN, Ubisoft, Wargaming, Tencent GamesVisit Audiencly → -
4
Viral Nation
Global Influencer Marketing & Talent AgencyA dual talent management and marketing agency with proprietary brand safety tools and a global creator network spanning nano-influencers to celebrities across all major platforms.Clients: Meta, Activision Blizzard, Energizer, Aston Martin, WalmartVisit Viral Nation → -
5
The Influencer Marketing Factory
TikTok, Instagram & YouTube CampaignsA full-service agency with strong TikTok expertise, offering end-to-end campaign management from influencer discovery through performance reporting with a focus on platform-native content.Clients: Google, Snapchat, Universal Music, Bumble, YelpVisit TIMF → -
6
NeoReach
Enterprise Analytics & Influencer CampaignsAn enterprise-focused agency combining managed campaigns with a powerful self-service data platform for influencer search, audience analytics, and attribution modeling.Clients: Amazon, Airbnb, Netflix, Honda, The New York TimesVisit NeoReach → -
7
Ubiquitous
Creator-First Marketing PlatformA tech-driven platform combining self-service tools with managed campaign options, emphasizing speed and scalability for brands managing multiple influencer relationships.Clients: Lyft, Disney, Target, American Eagle, NetflixVisit Ubiquitous → -
8
Obviously
Scalable Enterprise Influencer CampaignsA tech-enabled agency built for high-volume campaigns, coordinating hundreds of creators simultaneously with end-to-end logistics, content rights management, and product seeding.Clients: Google, Ulta Beauty, Converse, AmazonVisit Obviously →