The Trade Desk · Trust Center

Trade Desk Trust Center

Trust center

The Trade Desk maintains a public trust center documenting SSAE18 SOC 2 Type 2, SSAE18 SOC 1, Sarbanes-Oxley (SOX) Section 404, and PCI DSS SAQ A (self-attestation) compliance.

AdvertisingProgrammatic AdvertisingDemand-Side PlatformDSPAdTechConnected TVCTVIdentityUnified ID 2.0UID2OpenPathKokaiKoa AIGalileoSinceraOpen InternetReal-Time BiddingOpen Measurement
Trust center: https://www.thetradedesk.com/trust

Certifications & Compliance

SSAE18 SOC 2 Type 2SSAE18 SOC 1Sarbanes-Oxley (SOX) Section 404PCI DSS SAQ A (self-attestation)

Source

Trust Center

Raw ↑
generated: '2026-08-13'
method: searched
probe: true
url: https://www.thetradedesk.com/trust
source: https://www.thetradedesk.com/trust/security
sections:
- name: Trust Center
  url: https://www.thetradedesk.com/trust
- name: Security posture
  url: https://www.thetradedesk.com/trust/security
- name: Security bulletins
  url: https://www.thetradedesk.com/trust/security-bulletins
- name: Report a vulnerability
  url: https://www.thetradedesk.com/trust/report-a-vulnerability
certifications:
- SSAE18 SOC 2 Type 2
- SSAE18 SOC 1
- Sarbanes-Oxley (SOX) Section 404
- PCI DSS SAQ A (self-attestation)
frameworks_aligned:
- ISO/IEC 27001
- ISO/IEC 27002:2015
- NIST 800-53
- NIST SP 800-88
certification_notes:
- 'SOC 2: "annually audited against AICPA''s SSAE18 SOC 2 standard by an independent auditing firm."'
- SOC 1 is audited annually alongside SOX requirements; SOX 404 applies as a NASDAQ-listed company (TTD).
- PCI DSS is a self-attestation questionnaire version A — the company notes it does not directly process
  credit card data.
- ISO/IEC 27001 is stated as the BASIS of the information security program, not as a certification. Recorded
  as aligned, not certified.
program_scope: Infrastructure, personnel, data handling, access management, incident response and business
  continuity across a hybrid-cloud, multi-tenant architecture with logical tenant separation, continuous
  monitoring, annual third-party penetration testing and formal change management.
privacy:
- name: Data Processing Agreement
  url: https://www.thetradedesk.com/legal/dpa-data-processing-agreement
- name: Privacy policy
  url: https://www.thetradedesk.com/legal/privacy
- name: California privacy disclosures
  url: https://www.thetradedesk.com/legal/california-privacy-disclosures
- name: Modern slavery and human trafficking statement
  url: https://www.thetradedesk.com/legal/modern-slavery-and-human-trafficking-statement
- name: UK tax strategy statement
  url: https://www.thetradedesk.com/legal/uk-tax-strategy-statement
evidence:
- source: https://www.thetradedesk.com/trust
  http_status: 200
  fetched: '2026-08-13'
- source: https://www.thetradedesk.com/trust/security
  http_status: 200
  fetched: '2026-08-13'
  keywords:
  - SOC 2
  - SOC 1
  - SOX
  - PCI-DSS
  - ISO/IEC 27001
  - NIST 800-53
  - penetration testing

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This security artifact
curl "https://apis.io/api/v1/security/trade-desk-trust-center"
All security posture
curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.