9 Oct 2026 · 5 min read

How do programmatic buyers audit what was agreed in a deal?

How do programmatic buyers audit what was agreed in a deal?

Programmatic buyers audit what was agreed in a deal by retrieving the deal record from the infrastructure where it was committed and comparing it against delivery data. The quality of the audit depends entirely on the quality of the deal record: an audit against a single-side record that may have been modified is not a genuine audit. A genuine audit requires a deal record that was committed at agreement, held by a neutral party, and immutable afterwards. Most current programmatic infrastructure does not meet this standard.

Programmatic buyers audit what was agreed in a deal by retrieving the terms recorded at the time of commitment and comparing them against what was delivered. In practice, the audit most buyers perform is a comparison between their DSP's deal record and their ad server's delivery report. This is not a complete audit because the DSP's record is one party's account of the deal, which may or may not match the publisher's account.

A complete audit requires an authoritative record of what was committed, held by a party with no interest in either outcome. That record is the starting point, not a supporting document.

At a glance

Audit trail: A complete log of every decision the agent made, with the inputs used and the mandate rule applied, enabling retrospective review of agent behaviour at any point in the campaign.

Bilateral deal record: A deal record held by the neutral marketplace and queryable by both the buying agent and publishing agent — the reference point for auditing what was agreed.

Delivery audit: A comparison of the committed deal record with delivery data, confirming whether price, publisher environment, audience, and completion rate matched what was agreed.

Compliance monitoring: The ongoing process of comparing delivery data against the committed deal record during a campaign, rather than only at campaign end.

What does a deal audit actually examine?

A complete programmatic deal audit examines three things. First, what was committed: the deal terms at the moment of agreement, specifically the pricing terms, inventory parameters, targeting constraints, volume commitments and brand safety requirements. Second, what was delivered: the ad server and verification data for impressions delivered against the deal during the campaign period. Third, the match between commitment and delivery: where delivery conformed to committed terms, where it deviated, by how much, and what resolution (if any) was applied.

The first element is the most often imperfect. When buyers and publishers maintain separate records with no bilateral verification, "what was committed" is a negotiated position rather than an objective fact. The audit starts with an uncertain foundation, and the conclusions are correspondingly uncertain.

What infrastructure enables a complete deal audit?

A complete deal audit requires infrastructure that holds a neutral, bilaterally verifiable record of the committed terms. This means: a deal record committed at the moment of agreement by both parties, held by a neutral third party, accessible to both buyer and publisher from the same source, and structured in a machine-readable format that audit processes can query programmatically.

SSP and DSP deal management modules are useful for tracking deals within a platform but do not provide the neutrality condition. They hold one party's record. An audit conducted against one party's record confirms what that party recorded, not what both parties agreed.

Independent marketplace infrastructure that holds bilateral deal records changes the audit from "what does our system say we agreed" to "what does the deal record say both parties committed to." The former is a record review; the latter is an audit.

What does an audit look like in an agent-buying programme?

In an agent-buying programme, audits that require human retrieval and comparison of records are inadequate at scale. An audit process designed for a human reviewing 20 deals per quarter cannot scale to an agent programme generating hundreds of deals per quarter.

A programmatic audit queries the deal record directly, compares committed terms against delivery data from the ad server and verification technology, generates a compliance report for each deal, and flags exceptions for human review. The exception rate is the operative metric: a well-governed agent programme has a low exception rate because deal terms are precise and delivery governance is tight.

The buying agent can run this process continuously during delivery rather than after campaign end. Continuous compliance monitoring, where the buying agent compares delivery against deal terms in near real-time, is the audit model that fits agent buying volumes. Post-campaign audit remains useful as a periodic completeness check, but it is not the primary governance mechanism.

What records should buyers retain from agent-negotiated deals?

Buyers should retain, for each agent-negotiated deal, a copy of the signed deal record at the moment of commitment, the delivery report from the ad server and verification technology, the compliance comparison run during delivery, and any flags raised and their resolution. These four documents constitute the audit trail.

If the buyer cannot produce a copy of the signed deal record as it existed at commitment (rather than the current version of the deal on their platform), the audit trail is incomplete. A record that may have been modified after commitment does not establish what was committed.

Frequently asked questions

What are the risks of using AI agents for media buying?

The primary risks are mandate drift, specification risk, and infrastructure failure. Mandate drift is when the agent makes decisions outside its authorised parameters. Specification risk is when the mandate is ambiguous. Infrastructure failure is when the deal record or audit system does not function as expected.

Can AI agents be trusted to manage advertising budgets?

AI agents can be trusted within a well-specified mandate with appropriate audit infrastructure. The key requirement is that every agent decision is logged with the inputs used and the mandate rule applied, so a human reviewer can confirm the agent acted within its authorisation.

Which programmatic advertising platforms provide transparent deal records?

Platforms that implement AAMP and hold deal records bilaterally provide transparent records accessible to both sides. The record is held by the neutral marketplace, not by either the buyer or publisher, and any modification is logged.

Further reading

AAMP — IAB Tech Lab Agentic Advertising Management Protocols

Concourse — Agentic Advertising Platform

A2A Protocol — Agent-to-Agent Communication Specification

IAB Tech Lab — Advertising Standards

Alkimi — Agentic Advertising Marketplace

All articles

Speak to the team