Agency programmatic governance: who decides, who checks and what gets reported
Part of Programmatic media planning
The short answer
Agency programmatic governance is the set of rules that decides who may approve site lists, exceptions and changes, how often buying is audited, how client specific rules sit on top of the agency standard, and what is reported to clients. It turns individual judgment into a repeatable process, so every account is run the same defensible way.
Key takeaways
- Governance covers the process around buying decisions; brand safety and MFA policies cover the content rules those decisions apply.
- Approval rights should be written per decision and mirrored in platform access, so nobody can change what they are not allowed to approve.
- Audits run on a calendar: every launch, weekly, monthly, quarterly and yearly, each with a different scope.
- Client rules sit on top of the agency standard; where they conflict, the stricter rule applies unless the client signs an exception.
- Clients should receive a short governance report, not just a performance report.
What does programmatic governance mean at an agency?
Definition
- Programmatic governance
- The agency's written rules for who makes, approves, checks and reports each programmatic buying decision, applied the same way across every client account.
An agency may already have content rules: a brand safety policy for what ads must never appear beside, and rules for made-for-advertising sites. Governance is the layer above them. It answers process questions the content rules leave open: who may approve a list, who may grant an exception, how a mistake is escalated, how often someone checks that the rules were followed, and what the client is told.
Without governance, quality depends on which planner and buyer an account happens to have. With it, a new team member can pick up an account and know where the approved list lives, who signed it and when it was last audited. The planning steps for each campaign are covered in the programmatic media planning guide; governance is what makes those steps happen the same way every time.
What are the parts of an agency governance framework?
A workable framework has six parts. Each one should fit on a page, name an owner and be reviewed on a set date. If any part exists only as habit, it will be the part that fails when a senior person leaves.
| Part | What it decides | Owner | Written as |
|---|---|---|---|
| Agency standard | The minimum rules every account follows, whatever the client | Head of programmatic | A short standard, versioned and dated |
| Client rules | What each client adds on top: tolerances, named sites, markets | Account lead with the client | A client rule sheet signed by the client |
| Approval rights | Who may approve lists, exceptions, deals and changes | Head of programmatic | A decision rights table, mirrored in platform access |
| Audit cadence | What is checked, by whom, how often | Quality or operations lead | A calendar with named reviewers |
| Escalation | What happens when something goes wrong, and how fast | Head of programmatic | Severity levels with response times |
| Client reporting | What each client hears about governance and when | Account lead | A standing section in each client report |
Who should approve site lists and exceptions?
Write approval rights per decision, not per job title, because titles differ between offices. The principle is simple: the person who prepares a decision does not approve it, and the more a decision departs from the standard, the more senior the approver.
| Decision | Prepared by | Approved by | Informed |
|---|---|---|---|
| A new site list version within the standard | Planner | Senior planner or account lead | Buyer |
| A client exception to the agency standard | Account lead | Head of programmatic and the client, in writing | Planner and buyer |
| Adding a domain to a shared exclusion list | Any planner or buyer | Quality lead | All account leads using the list |
| Removing a domain from a shared exclusion list | Quality lead | Head of programmatic | All account leads using the list |
| A new deal or a change to deal terms | Buyer | Account lead | Planner |
| Platform user access | Operations lead | Head of programmatic | Account lead |
Approval rights only hold if the platforms enforce them. In Google Ads, access levels (opens in a new tab) range from Email only and Billing to Read only, Standard, which can edit campaigns, and Admin, which can also give account access and change access levels. Map each role in the approval table to the lowest platform level that lets the person do the job, and review the user list on the audit calendar.
How often should an agency audit its programmatic buying?
Audits work best as a calendar with a different scope at each interval. Frequent checks are narrow and quick; rare ones are broad. The calendar below assumes a mid sized agency with several programmatic clients. Smaller teams can merge the monthly and quarterly checks, but should not skip the launch and weekly ones.
| Interval | Scope | Reviewer |
|---|---|---|
| Every launch | The build matches the approved plan and list version | A buyer who did not build the campaign |
| Weekly | Served placements against the approved list on each live account | Planner on the account |
| Monthly | Shared exclusion lists, platform user access and a sample of change history | Quality or operations lead |
| Quarterly | Each client's rule sheet, exceptions still in force and a sample of supply paths | Head of programmatic with each account lead |
| Yearly | The agency standard itself, plus the certifications and standards it relies on | Agency leadership |
Platform records have limits, so audits should export what they need. Google Ads change history (opens in a new tab) lists changes from the past two years, with the email of the person who made each change in the interface, and Google notes that some changes may not be listed. An agency that may need to answer a question about a campaign older than that should save its own record at each monthly audit.
The yearly review is where outside references come in. TAG (opens in a new tab) runs Certified Against Fraud, Certified Against Malvertising, Brand Safety Certified and Certified For Transparency programs, which an agency can ask its partners about. On January 29, 2026 the Media Rating Council issued final Digital Advertising Auction Transparency Standards (opens in a new tab), covering disclosure and reporting for digital ad auctions across display, text, video and audio formats.
How do client specific rules fit an agency standard?
The agency standard is a floor. Client rules add to it: a lower tolerance for a sensitive category, named publishers to avoid, markets or languages, or a requirement to buy only through deals. The industry's own guidance expects this. When the ANA and other trade groups defined made-for-advertising sites in 2023, the ANA's release (opens in a new tab) said advertisers should determine, independently, whether MFA sites fit their brand suitability standards and clarify their tolerance for such inventory.
Four rules for combining client and agency rules
- Apply the stricter rule. Where a client rule and the agency standard differ, the stricter one governs, unless the client has signed an exception.
- Write exceptions narrowly. An exception names the rule, the sites or settings affected, the reason, the approver and an end date.
- Keep client lists apart. A shared agency exclusion list carries the standard; client specific blocks go in that client's own list, so one client's choices do not limit another's reach.
- Check where each list can live. Google's help pages disagreed when checked in October 2026: one says a manager account can have up to 3 exclusion lists and each client account up to 20 (opens in a new tab), another that placement exclusion lists can only be created in manager accounts (opens in a new tab). Confirm the options in the account.
What should trigger an escalation, and how fast?
Each level needs a response time and an owner. A level 2 issue, such as a few impressions on a site outside the approved list through a broad line item, is fixed by the buyer within a working day and noted in the weekly report. A level 3 issue, such as delivery on a site the client named as excluded, pauses the affected line items and reaches the client the same day. Written levels stop teams from either hiding small issues or panicking over them.
What should an agency report to clients about governance?
A governance section for each client report
- The list versions live during the period, with approval dates and approvers.
- Exceptions in force, each with its end date, and any that expired.
- The results of the period's audits, including checks that found nothing.
- Every escalation at level 2 or above, with what was done and when.
- Changes to the agency standard or the client's rule sheet, and why.
- Who had edit access to the client's buying accounts at the last access review.
Keep it short and the same shape every time. A client who sees the same six items each quarter learns to read them in a minute, and notices when one changes. Reporting the audits that found nothing matters as much as the ones that did: it shows the checks are running.
What does the framework look like at one agency?
Fictional example
A New Orleans agency with two very different clients
A fictional independent agency in New Orleans buys programmatic display for a children's clothing retailer with stores across Louisiana and Mississippi, and for a seafood restaurant group. Its agency standard sets the floor; the clothing retailer's rule sheet adds a lower tolerance for crime and tragedy coverage and a deals only rule for news sites.
At the monthly audit, the operations lead finds that a buyer who moved off the clothing account still has Standard access to it, and removes it. The quarterly review finds an exception for one local news site that expired in September but is still on the list; the planner removes it in the next version, approved by the account lead.
In November, the restaurant group's weekly check shows a few impressions on a site outside the approved list through a new line item. That is level 2: the buyer fixes it the same afternoon. Both clients' quarterly reports carry the same six item governance section, with these findings listed.
How does PlacementGraph fit an agency's approval rules?
Frequently asked questions
Should governance rules be written into the client contract?
The principles can be, such as who approves lists, how exceptions are signed and what the client is told. Keep the detailed rule sheet as a separate document referenced by the contract, so it can be updated each quarter without reopening the agreement.
Who owns governance at a small agency?
At a small agency it can sit with one senior person who also plans or buys. The framework still works if that person does not approve their own work: a second person, even part time, reviews lists and launch builds. Small agencies can merge the monthly and quarterly audits, but should keep every approval in writing.
Does agency governance apply when the client buys in house?
Only to the parts the agency touches. If the agency plans and the client's team buys, agree which side owns each approval and audit, and put that split in writing. Otherwise each side assumes the other is checking, and nobody is.
What records should an agency keep when a client relationship ends?
The approved list versions, exceptions, audit results and escalations for the life of the account, plus exported platform change histories. Hand the client what the contract says they own, remove agency users from the client's accounts, and record the date access ended.
Sources
- About access levels in your Google Ads account (opens in a new tab)Google Ads Help
- About change history (opens in a new tab)Google Ads Help
- Certifications (opens in a new tab)TAG (Trustworthy Accountability Group)
- Digital Advertising Auction Transparency Standards, final (January 29, 2026) (opens in a new tab)Media Rating Council
- Leading Trade Groups Define "Made For Advertising" Websites (opens in a new tab)ANA, September 26, 2023
- Use placement exclusion lists across your accounts (opens in a new tab)Google Ads Help
- How to use brand suitability features in Performance Max (opens in a new tab)Google Ads Help
Researched and written by PlacementGraph Research. Read how we research, source and update these pages. Corrections: diana@placementgraph.com.