QA mode · Tier:PUBLIC(override via ?tier=paid | premium)
← All Vendors
personalization

Tofu

Personalization platform with cross-domain sync and pre-consent activation.

3 IOCs observed2 detections50% pre-consent2 sites
70
Vendor Risk Score
Tier: GRAY
Observation Coverage

BLACKOUT observes runtime behavior in the browser. This dossier reflects browser-side execution, which is one of five vendor data-egress classes. Server-to-server transfers, backend integrations, and offline data flows are outside this observation boundary.

BLACKOUT observes runtime behavior and cites the regulations that address that behavior pattern. Legal determinations are the customer's counsel's call.

How This Briefing Works

This dossier opens with key findings, then maps the gap between what Tofu discloses and what BLACKOUT observed at runtime. From there: what it means for your organization, what to do about it, and the detection evidence underneath. BLACKOUT observes runtime browser behavior and cites the regulations that address each pattern — legal determinations are your counsel's call.

Key Findings

At a Glance

Detections
2

across 2 sites

Pre-Consent Rate
50%

vendor fires before consent

Disclosure Gaps
1

Summary

Briefing

Tofu operates as a web personalization platform exhibiting cross-domain synchronization and consent bypass patterns. Broker impact stems from cross-domain coordination enabling visitor behavior correlation. Counselor impact derives from personalization engine initialization ahead of consent collection.

Customer Impact

What This Means For You

Revenue teams using Tofu face consent liability when personalization tracking begins before user authorization. Cross-domain sync creates visitor journey correlation that persists beyond opt-out requests. Personalization targeting data may expose competitive intelligence.

Collapse Engine

Risk Channel Breakdown

Oracle
Truth Collapse
15

Distorts attribution data

Broker
Control Collapse
40

Cross-domain sync links personalization state across properties, enabling visitor journey correlation for demand signal extraction.

Reaper
Safety Collapse
0

Expands attack surface

Counselor
Legitimacy Collapse
55

Personalization engine initializes and tracks visitor behavior before host site consent mechanisms activate.

BTI Codes

Threat Indicators

Runtime-observed (BTI-C)

BTI-C08
Cross-Domain Sync

Identity stitching

BTI-C09
Consent Bypass

Ignoring CMP signals

2
BTI Consequences Identified

Per-code narrative explanations of what each detected behavior means for your organization

Available in VIDB Subscription

Per-code evidence with full attribution chain, severity rankings, and consequence narratives See pricing →

Disclosure Gaps

Claims vs. Reality

1
Gaps Observed

BLACKOUT analyzed Tofu's public claims against observed runtime behavior and identified 1 contradiction.

Available in VIDB Subscription

Full claim-vs-reality gap analysis with claim text, observed behavior, severity, regulatory citations (GDPR, CCPA, ePrivacy), and evidence pointers per gap See pricing →

Recommended Actions

What To Do

Recommended Actions
6

3 for current users · 3 for evaluators

Negotiation Leverage
3

contractual leverage points

Available in VIDB Subscription

Role-specific actions (security / legal / marketing / procurement), full negotiation brief with contractual language, and BTI-code-specific consequences See pricing →

Ecosystem

Supply Chain & Pairings

Subprocessor Disclosure Gap
1undisclosed

Claims 0, observed 1

Available in VIDB Subscription

Full supply-chain mapping (loads / loaded-by lists with vendor identities) and the undisclosed-subprocessor list with observation evidence See pricing →

Profile: tofuFirst Seen: 2026-01-22Last Updated: 2026-02-28