Index Exchange is a global digital advertising exchange (a supply-side ad platform, or SSP) operated by Index Exchange Inc., a private company headquartered in Toronto, Ontario, Canada. Its Exchange Platform Privacy Policy states it processes digital identifiers — cookie IDs and device advertising IDs such as Apple's IDFA and Android's AAID — collected on publisher websites/apps to deliver ads, and that it cannot determine a visitor's name, email, or other directly identifying information from the data it processes. The policy discloses that this data is shared with Buyers (ad-buying platforms) and with Identity Partners that independently build aggregated audience segments, and separately notes that other parties' tags, pixels and cookies may operate alongside Index Exchange's own for measurement and fraud prevention. Data security is described only in general terms (a 'comprehensive security program' with technical, administrative and physical measures); no named-firm audit, transparency report with counts, or regulator/breach action was found in this research.