QA mode · Tier:PUBLIC(override via ?tier=paid | premium)
← All Vendors
dsp

Yoc

YOC operates mobile advertising infrastructure while deploying defeat devices, behavioral biometrics, session recording, cross-domain sync, consent bypass, and fingerprinting across advertising campaigns. The platform positions itself as mobile-first DSP while enabling comprehensive visitor surveillance that extends well beyond standard mobile ad delivery functionality.

75 IOCs observed1 detections100% pre-consent1 sites
80
Vendor Risk Score
Tier: HOSTILE
Observation Coverage

BLACKOUT observes runtime behavior in the browser. This dossier reflects browser-side execution, which is one of five vendor data-egress classes. Server-to-server transfers, backend integrations, and offline data flows are outside this observation boundary.

BLACKOUT observes runtime behavior and cites the regulations that address that behavior pattern. Legal determinations are the customer's counsel's call.

How This Briefing Works

This dossier opens with key findings, then maps the gap between what Yoc discloses and what BLACKOUT observed at runtime. From there: what it means for your organization, what to do about it, and the detection evidence underneath. BLACKOUT observes runtime browser behavior and cites the regulations that address each pattern — legal determinations are your counsel's call.

Key Findings

At a Glance

Detections
1

across 1 sites

Pre-Consent Rate
100%

vendor fires before consent

Disclosure Gaps
1

Summary

Briefing

Mobile DSP vendor detected deploying defeat device (BTI-C01), behavioral biometrics (BTI-C06), session recording (BTI-C07), cross-domain sync (BTI-C08), consent bypass (BTI-C09), and fingerprinting (BTI-C10). Signal corruption at 40 reflects significant measurement interference through mobile advertising instrumentation. CAC subsidization at 100 indicates complete competitive intelligence transfer through cross-customer mobile campaign monitoring. Legal tail risk at 100 driven by maximum surveillance deployment through mobile advertising platform.

Customer Impact

What This Means For You

Marketing teams lose cross-device attribution clarity when mobile advertising distorts visitor tracking. Analytics teams face measurement corruption from mobile-specific behavioral layering. Legal teams inherit maximum liability exposure when mobile platform deploys consent bypass. Revenue operations teams subsidize complete competitor intelligence through shared mobile advertising infrastructure.

Collapse Engine

Risk Channel Breakdown

Oracle
Truth Collapse
40

Mobile advertising instrumentation corrupts website analytics by injecting device-specific behavioral signals that distort engagement metrics and create attribution conflicts when mobile ad delivery mechanisms interfere with cross-device measurement workflows.

Broker
Control Collapse
100

Cross-customer mobile campaign monitoring transfers complete competitive intelligence as YOC observes which mobile advertising strategies competitors deploy, device targeting patterns across industries, and mobile engagement behavior across shared customer base.

Reaper
Safety Collapse
0

Expands attack surface

Counselor
Legitimacy Collapse
100

Mobile advertising platform deploying comprehensive surveillance and consent bypass creates maximum liability exposure when mobile-first infrastructure violates privacy expectations and regulatory frameworks governing mobile behavioral advertising.

BTI Codes

Threat Indicators

Runtime-observed (BTI-C)

BTI-C01
Defeat Device

Evasion infrastructure, auditor bypass

BTI-C06
Behavioral Biometrics

Keystroke/mouse tracking

BTI-C07
Session Recording

Full session replay

BTI-C08
Cross-Domain Sync

Identity stitching

BTI-C09
Consent Bypass

Ignoring CMP signals

BTI-C10
Fingerprinting

Device identification

6
BTI Consequences Identified

Per-code narrative explanations of what each detected behavior means for your organization

Available in VIDB Subscription

Per-code evidence with full attribution chain, severity rankings, and consequence narratives See pricing →

Disclosure Gaps

Claims vs. Reality

1
Gaps Observed

BLACKOUT analyzed Yoc's public claims against observed runtime behavior and identified 1 contradiction.

Available in VIDB Subscription

Full claim-vs-reality gap analysis with claim text, observed behavior, severity, regulatory citations (GDPR, CCPA, ePrivacy), and evidence pointers per gap See pricing →

Recommended Actions

What To Do

Recommended Actions
7

4 for current users · 3 for evaluators

Negotiation Leverage
5

contractual leverage points

Available in VIDB Subscription

Role-specific actions (security / legal / marketing / procurement), full negotiation brief with contractual language, and BTI-code-specific consequences See pricing →

Ecosystem

Supply Chain & Pairings

Available in VIDB Subscription

Full supply-chain mapping (loads / loaded-by lists with vendor identities) and the undisclosed-subprocessor list with observation evidence See pricing →

Profile: yocFirst Seen: 2026-01-22Last Updated: 2026-01-22