A vendor is a company that delivers digital advertising on a publisher’s website or other digital content (e.g. apps), though it is acting as neither a publisher nor a consent management platform (CMP). The vendor accesses end user device information and/or processes personal data of the user visiting the publisher’s content.

Under the General Data Protection Regulation (GDPR) a vendor can be considered as a controller, processor or both.