• Badge: ⚠️ Caution
• Red Flags:
  • RF1 — Own advertising / cross-service profiling
  • RF2 — High-risk third-country exposure without meaningful mitigation CORRECTED HISTORY: AppNexus was the original brand (founded 2007). AT&T acquired AppNexus in June 2018 and rebranded it as Xandr. Microsoft acquired Xandr in June 2022. Microsoft rebranded the DSP as "Microsoft Invest" in 2023. Microsoft announced shutdown of Microsoft Invest effective 28 February 2026. The adnxs.com domain was AppNexus's cookie/tracking domain; controllers still seeing adnxs.com requests should note this is part of the Microsoft Advertising (Xandr) stack.
• Risk Indicators:
  • [nicht dokumentiert]

Framework Note (v2.2): FRAMEWORK NOTE (v2.2): RF2 (high-risk third-country exposure) is recorded here as a significant risk factor and lowers the domain E score. Under the revised framework, RF2 alone does not trigger Caution — the Caution badge for this service is driven by RF1 / RF3 / RF4 (as noted above). The US transfer risk (where applicable) is covered by DPF participation and/or SCCs, which GDPR treats as a compliant transfer mechanism.

Quellen:

• See Xandr entry. Microsoft Advertising announcement (May 2025)
• Xandr Wikipedia article.

• Receive personalised marketing offers
• Customise online ads (non-TCF)

• TPP Notified?: Not yet notified
• Decision Contested?: [nicht dokumentiert]