A managed Amazon DSP account can give a brand programmatic access without building an internal trading team. It can also create a quiet dependency. The advertiser may pay for the media and supply the customer data, but still rely on the provider for account access, audience activation, report exports and historical records.
The problem usually appears when someone asks for a new analyst login, a raw cost report or a partner transition. “The client owns the data” sounds reassuring, but it does not explain who can export it, how long it remains available or which assets can move.
Quick answer: Paying for a managed Amazon DSP campaign does not automatically give the advertiser control of every account asset. The contract should separately define source-data rights, audience use, platform permissions, report access, cost visibility, retention and exit support. Require named admins, recurring exports and a tested handover package before launch.
Naming note: Amazon now describes the combined ads console and Amazon DSP buying surface as Amazon Ads Agent. This article uses “Amazon DSP” because it remains the established programmatic product term and the target search language. Confirm the current account structure, user controls and reporting workflow for the advertiser's market and seat.
This is an operational governance guide, not legal advice. Data protection roles, ownership language and regulatory duties depend on the contract, data and jurisdictions. Ask qualified counsel to review final terms.
Amazon DSP data ownership is not one right
Ownership is a bundle of legal and operational rights. A useful agreement separates at least 6 layers.
Layer | What it covers | Evidence to require |
|---|---|---|
Legal rights | Permitted use, processing, sharing, retention and deletion | Contract, data-processing terms and privacy schedule |
Account control | Advertiser entity, admins, users, billing and linked services | Account diagram and permission matrix |
Audience control | Source files, onboarded lists, exclusions, platform segments and custom audiences | Audience register with owner, source and expiry |
Reporting access | Performance, supply, cost, reach, conversion and change history | Sample reports, field list and delivery schedule |
Asset control | Campaigns, creatives, tags, events, deals and analysis logic | Asset inventory and role assignments |
Portability | What can be exported, transferred or recreated at exit | Exit clause, formats, deadlines and named owner |
One sentence saying “all client data belongs to the client” is not enough. It may cover legal title to a CRM file while saying nothing about platform-generated audiences, Amazon Marketing Cloud queries, cost fields or campaign history.
What assets exist in a managed Amazon DSP relationship?
Asset | Typical source | Main governance question | Portability risk |
|---|---|---|---|
Advertiser source data | CRM, CDP, site, app or offline systems | Who approved the use, purpose and refresh? | Provider retains a copy or uses it beyond the brief |
Advertiser Audiences | Onboarded first-party data or eligible events | Who can create, edit, activate and delete them? | Audience must be rebuilt in a different account |
Amazon audiences | Amazon shopping, browsing, streaming and other eligible signals | Which account and campaign may use them? | Segments are licensed platform capabilities, not exported customer lists |
AMC custom audiences | Amazon Marketing Cloud query logic and eligible signals | Who controls the instance, query, refresh and activation? | Logic, instance access or activation link may not follow the provider |
Campaign structure | Provider strategy and platform setup | Can the advertiser view and export live settings? | Settings and history need manual recreation |
Reports and dashboards | Amazon reports, API, AMC and provider tools | Which fields, cadence and history are available? | Dashboard access ends with the service agreement |
Conversion events and tags | Site, app, commerce or offline measurement | Who owns definitions, deployment and change rights? | New provider cannot reproduce attribution or event history |
Creative and deal objects | Brand files, platform objects and publisher relationships | Which files and deal rights are transferable? | Master files survive, but platform objects or deal IDs do not |
Who owns advertiser first-party data?
The advertiser should retain control of the source data it supplies. The managed provider should receive only the rights needed to perform the agreed service. Put the permitted purpose, environment, market, security controls, retention and deletion process in writing.
For every audience feed, document:
the source system and business owner;
the inclusion, exclusion and suppression rules;
the approved advertising purpose and markets;
the refresh cadence and expiry window;
the identifiers and transfer method;
the provider's permitted actions;
the deletion and confirmation process;
the treatment of opt-outs and revoked permissions.
Do not give a provider a general right to reuse client data for another advertiser, internal benchmarking or unrelated product development unless that use is understood, lawful and explicitly approved. Review Amazon's current privacy notice and applicable policy terms alongside the provider agreement.
Who owns audiences created inside Amazon DSP?
Separate 3 audience families.
Advertiser Audiences
These audiences originate from the advertiser's eligible data or events. The advertiser should control the business rules and approved use. Operational access still depends on the account, permissions and onboarding route. Ask whether the segment can remain active, be recreated or be deleted if the provider changes.
Amazon audiences
Amazon audience segments are platform capabilities. Buying access does not turn them into an advertiser-owned customer file. The advertiser can use eligible segments under current platform terms, but should not expect to download the underlying people or signals.
Amazon Marketing Cloud audiences
An AMC audience combines query logic, eligible Amazon signals and, where permitted, advertiser inputs. Governance needs to cover both the logic and the environment. Ask who administers the AMC instance, stores the SQL or template, approves changes, schedules refreshes and links the audience to activation.
Amazon has documented custom audience creation and activation from AMC. That capability does not answer the commercial ownership question between an advertiser and its provider. The contract still needs to define access and continuity.
The Amazon DSP audience strategy guide explains how these audience layers support prospecting, suppression and retention. This article focuses on who controls them.
Can a managed provider keep your audience logic?
The answer depends on what the contract says and how the work was created. A provider may bring pre-existing templates, taxonomies or methods. The advertiser may bring customer rules, product definitions and proprietary segments. Campaign-specific work can combine both.
Use 3 labels in the statement of work:
Advertiser materials: source data, customer definitions, brand files and business rules supplied by the client.
Provider background materials: reusable tools, generic templates and methods created before the engagement.
Engagement outputs: audience maps, queries, exclusion logic, reports and documentation created for the account.
Then state which engagement outputs the advertiser can keep, export or receive in readable form. Avoid discovering at exit that the provider considers every query and taxonomy confidential.
Who controls reports in a managed Amazon DSP account?
A dashboard is a presentation layer. It is not the same as direct account visibility, scheduled platform reports, API access or AMC outputs.
Reporting layer | What it answers | Minimum governance requirement |
|---|---|---|
Executive dashboard | What happened against the main KPIs? | Metric definitions, refresh time and source systems |
Platform report | How did campaigns, line items, creatives and supply deliver? | Named dimensions, metrics, attribution window and recurring export |
Cost report | What was working media, platform cost and provider charge? | Visible cost fields, currency, fees and invoice reconciliation |
AMC analysis | How did exposures, paths, audiences and outcomes interact? | Instance access, query ownership, version control and output retention |
Change log | Who changed budget, bid, targeting or creative, and why? | Named operator, timestamp, reason and approval record |
Exit archive | What must be available after the service ends? | Final exports, file formats, delivery location and retention period |
Ask for a sample report before signing. Check whether it includes campaign and line-item names, dates, inventory, device, geography, audience, creative, reach, frequency, conversions and cost fields needed for independent analysis.
Raw data, aggregated data and dashboards are not interchangeable
“Full reporting” can mean a monthly PDF with 10 numbers. Define the level of detail.
Aggregated dashboard: useful for decisions, but limited for audit and migration.
Scheduled report: repeatable rows and columns that can be stored outside the provider's dashboard.
API or data feed: automated access for internal reporting, subject to current permissions and technical support.
AMC output: privacy-safe aggregate results from approved queries, not a list of identifiable Amazon users.
Amazon has introduced AMC API access and other reporting capabilities over time. Availability does not guarantee that the advertiser receives credentials or provider support. Name the required route in the agreement.
Who can see media cost and fees?
Ownership questions often hide a commercial question: can the advertiser see what entered the auction and what was added as platform, data or service cost?
Require a report and invoice example that separates:
working media or supply cost;
platform or technology cost;
audience and data charges;
verification and ad-serving costs;
creative or measurement costs;
agency management fee or markup;
tax, currency and payment terms.
The Amazon DSP pricing guide explains the full cost stack. The governance point is simple: the advertiser should know which fields it can inspect, which values appear only on an invoice and who can reconcile them.
Account permissions: visibility is not control
A provider may say the advertiser has access while retaining every administrative right. Ask for a permission matrix by named user, not a general promise.
Action | Advertiser | Managed provider | Evidence |
|---|---|---|---|
View campaigns and reports | At least nominated users | Yes | Test login before launch |
Add or remove advertiser users | Named approval or joint control | Named admins | Permission and escalation matrix |
Create or change audiences | Approval for first-party and sensitive logic | Execution under agreed process | Audience change log |
Change budgets and bids | Approval thresholds | Daily operation within mandate | Written authorization limits |
Export reports | Direct or automated receipt | Operational access | Scheduled export test |
Connect third-party applications | Approval and security review | No unilateral connection | Application register |
Close or transition the account | Contractual decision right | Documented support duty | Exit plan and timeline |
Amazon has published controls to manage third-party applications with account access. Review connected tools regularly. Remove unused integrations and credentials when staff or vendors change.
The contract checklist before launch
Name the account structure. Record the contracting entity, advertiser entity, market and administrator.
Define platform access. List each advertiser user, role, visible fields and approval right.
Classify every audience. Separate advertiser data, Amazon segments, AMC audiences and provider materials.
Limit permitted use. State purpose, market, service, retention and deletion duties.
Specify reporting. List required reports, dimensions, metrics, attribution windows, cadence and formats.
Expose the cost stack. Define media, platform, data, measurement, creative and management charges.
Assign measurement assets. Name owners for events, tags, offline files, AMC instances and queries.
Set change authority. Document who can change budgets, targeting, audiences, integrations and attribution rules.
Protect continuity. Require recurring exports and off-platform storage during the engagement.
Write the exit clause. State notice, handover scope, formats, deadlines, assistance and deletion confirmation.
20 questions to ask a managed Amazon DSP provider
Which legal entity contracts for the platform and media?
Where will our advertiser sit, and can our team log in?
Who controls administrator permissions?
Which platform, cost and billing fields can we see?
Can we export campaign and line-item settings?
Which reports arrive automatically, in what format and how often?
How much historical reporting remains available after termination?
Where are recurring exports stored outside the provider dashboard?
Who owns the source data we supply?
Can the provider reuse our data or audience logic for another client?
Who can create, edit, share, activate and delete Advertiser Audiences?
Who administers the AMC instance and stores query logic?
Can we receive engagement-specific AMC queries and documentation?
Who owns conversion definitions, tags and offline-event processes?
Which connected applications and third parties receive access?
Who approves new vendors, data flows and audience uses?
Which creative files, platform objects and deal IDs can transfer?
What exactly is delivered during a partner transition?
How quickly must the provider complete the handover?
How is deletion confirmed after the retention period?
What should be in an Amazon DSP exit package?
Do not wait for termination to design the archive. Build it throughout the relationship.
Account, advertiser and user-permission map.
Campaign, line-item, targeting, budget, bid and frequency settings.
Creative register, master files, approvals and destination URLs.
Audience register with source, logic, exclusions, lookback and refresh schedule.
Conversion-event dictionary, tag details and attribution settings.
Recurring performance, supply, reach, frequency, conversion and cost exports.
AMC instance details, engagement-specific queries and saved output definitions.
Publisher deal register, contact owners and transfer constraints.
Change log, optimization history and open issues.
Final invoice reconciliation and deletion confirmation.
Some platform assets may need to be recreated rather than transferred. The exit package should say which, who will rebuild them, what dependencies apply and how continuity will be tested.
Governance should continue after the contract is signed
Run a quarterly governance review alongside performance reporting.
Review area | Quarterly check | Owner |
|---|---|---|
Users and applications | Remove inactive people, vendors and integrations | Advertiser security and account admin |
Audiences | Validate source, consent, purpose, refresh, expiry and suppression | Advertiser data owner and media lead |
Reports | Test recurring exports, field completeness and off-platform storage | Analytics lead |
Costs | Reconcile report fields, invoices, fees and currency | Finance and media lead |
Measurement | Review events, attribution windows, queries and data gaps | Analytics and provider |
Exit readiness | Update the asset register and test one sample handover | Account owner |
The Amazon DSP campaign audit checklist covers delivery and setup controls. Add this governance review so performance does not hide account risk.
Red flags in a managed Amazon DSP proposal
“Full ownership” appears with no asset list or permission matrix.
The advertiser cannot receive a direct login or tested report export.
Only an all-in CPM is shown, with no media and fee separation.
The provider refuses to share audience definitions or conversion logic.
AMC access is promised without naming the instance, admins or query rights.
Reporting ends when the provider dashboard is disabled.
The contract gives the provider broad reuse rights over client data.
No one owns deletion, user removal or third-party application cleanup.
The exit clause says “reasonable assistance” with no timeline or deliverables.
Historical exports begin only after notice is given.
How Ad Geeks structures managed Amazon DSP governance
Ad Geeks can combine managed activation with a documented control model. The setup can include an account map, named permissions, audience register, measurement dictionary, recurring report exports, cost reconciliation and an exit-ready asset inventory.
The goal is simple: the advertiser should understand what it supplied, what the platform generated, what the managed team built and what remains available if the operating model changes.
We can audit the proposed structure, reporting, audiences, permissions and handover terms.
Frequently asked questions
Does the advertiser own data uploaded to Amazon DSP?
The advertiser should retain rights to its source data, subject to contracts, privacy law and platform terms. The provider agreement should limit use to the agreed service and define security, retention, deletion and approved subprocessors.
Can I export an Amazon audience?
Do not expect an identifiable list of people behind an Amazon audience. Amazon segments are platform capabilities used for eligible activation. Advertiser-supplied audience rules and approved aggregate reporting should be documented separately.
Who owns an AMC custom audience?
Ownership is not one field. The advertiser may own supplied data and campaign-specific requirements, while access to Amazon signals and activation remains governed by Amazon. The contract should define instance access, query rights, refresh logic and exit support.
Is a dashboard enough reporting access?
No. A dashboard can support decisions, but it may not preserve the fields needed for audit, finance or migration. Require recurring platform exports, metric definitions and off-platform storage.
Should a brand have a direct Amazon DSP login?
Direct visibility is a strong control when the operating model supports it. If a direct login is unavailable, the contract should provide equivalent evidence through scheduled reports, permission records, change logs and tested exports.
Can campaign history move to a new provider?
Some history may remain tied to the original account or advertiser structure. Plan for exports and documentation even when platform objects cannot transfer. The new provider may need to recreate settings, audiences or deals.
How long should a provider keep reports after termination?
Set a specific period that fits legal, finance and operational needs. Do not rely on “standard retention.” Require final delivery before access ends and deletion confirmation after the agreed period.
What is the most important contract clause?
The exit clause connects every other right. It should name the deliverables, formats, timing, assistance, access period, cost and deletion process. Without it, ownership promises may be difficult to use.











