İçeriğe atla
CERTIFICATION IN PROGRESS, TARGET Q2 2027

Turkey's First IAB TCF v2.3 Compliant Homegrown CMP

cerez.io aims to be the first homegrown Consent Management Platform from Turkey to open into the programmatic advertising ecosystem, meeting the technical requirements of the IAB Europe Transparency & Consent Framework v2.3. Daily GVL sync, bit-perfect TC String, Publisher Restrictions and 12 EU languages come as standard.

Apply to the Pilot Program See Publisher Plans certification in progress · pilot program open
Key Concepts

What is IAB TCF v2.3 and why does it matter?

The Transparency & Consent Framework lets every party in the programmatic advertising ecosystem (publisher, SSP, DSP, data company) share user consent through a standard protocol. Publishers using a non-certified CMP lose revenue.

TC String

TC String: the digital consent envelope.

Which vendor a user granted consent to, and for which purpose, is queried through the __tcfapi interface as a compressed bit string. Without an IAB-certified CMP, this string arrives with a "non-registered" warning, and large SSPs, Google Ad Manager first among them, process ads in restricted "limited ads" mode.

  • Bit-perfect TC String encoder: all fields, including Version, Created, ConsentLanguage, PurposesConsent, are spec-compliant
  • Service-specific scope: meets GDPR, ePrivacy and KVKK requirements together
  • Cookie size under 500 bytes (Range Encoded) · ready for the death of third-party cookies
See the certification roadmap
The Revenue Loss Reality

How much does a non-certified CMP cost a publisher?

Large SSPs/DSPs such as Google Ad Manager, Criteo and AppNexus process TC String signals from non-certified CMPs in a restricted way. This directly affects your programmatic CPM.

With a non-certified CMP

SSPs switch to "limited ads" mode.

  • Programmatic CPM drops 20-40%, fill rate is suppressed
  • A site with 1M monthly pageviews faces an annual revenue gap of 500K-2M TL
  • Blocked access to the EU market (German and Dutch diaspora media)
  • The burden of proof in a GDPR + ePrivacy audit becomes harder

The "Non-registered CMP" warning is visible to vendors, and personalized ads capacity cannot be fully realized.

cerez.io With TCF v2.3

A TCF compliant CMP protects and grows revenue.

  • Vendors fully recognize the TC String, personalized ads are unlocked
  • Fill rate and CPM restrictions disappear
  • EU market: visible with an official CMP ID on iabeurope.eu/cmp-list
  • KVKK + GDPR + ePrivacy proof records come from a single dashboard

Let us be clear: cerez.io's certification is still in progress. The certificate is targeted for Q2 2027. Technical compliance is active in production right now.

Technical Infrastructure

TCF v2.3 solution package: what gets done, and how?

All components of the IAB Tech Lab spec have been implemented. The four layers below form the technical foundation of the certification application.

TCF · MOD

Bit-Perfect TC String Encoder

The Core String bit layout of the IAB Tech Lab spec (Version 6-bit, Created 36-bit, CmpId 12-bit, ConsentLanguage 12-bit, PurposesConsent 24-bit) is fully compliant in both the PHP and JavaScript ports. Round-trip test PASS. Cookie size under 500 bytes, Range Encoded.

TC String v2 Round-trip Test PHP + JS Port
TCF · MOD

GVL Daily Sync and Diff Log

The IAB Global Vendor List v3 is synchronized automatically every day at 03:30 UTC. Newly added or removed vendors are written to the diff log, and a 72-hour stale alarm runs. IAB certification requirement: "CMP MUST sync GVL at least daily".

Daily Sync Diff Log 72h Stale Alarm
TCF · MOD

Service-Specific Scope and 12 EU Languages

A service-specific scope that meets the intersection of GDPR, ePrivacy and KVKK. Support for TR, EN, DE, FR, ES, IT, NL, PL, SV, DA, FI, PT; 11 IAB purposes translated into Turkish, including 2 special features opt-in.

12 Languages GDPR + KVKK ePrivacy
TCF · MOD

Publisher Restrictions and Stacks

Publishers can set vendor- and purpose-level restrictions: NotAllowed, RequireConsent or RequireLegitimateInterest. 45 IAB predefined stacks (groups of 5-7 purposes) are managed with a single click from the admin panel.

Publisher Restrictions 45 IAB Stack Admin Panel

Technical compliance was documented as 53/57 items PASS in the self-assessment. The certification application is planned for Q1 2027; once a CMP ID is assigned, we will appear on iabeurope.eu/cmp-list. Current status: the pilot publisher program is open.

Transparent Process

Certification roadmap: 4 phases.

Every step, from the alpha stage to entry into the official IAB Europe list, is shared openly and honestly.

Full Technical Compliance

Completed

All components of the IAB Tech Lab spec have been implemented: bit-perfect TC String, daily GVL sync, Publisher Restrictions, service-specific scope, 12 EU languages, OOB consent detection. Active in production.

Testing and Validation

Completed

The IAB Europe TCF Validator test page is active. SDK telemetry (banner_rendered, tcstring_generated, api_call) runs in production. The pilot publisher program is open; 10 publishers are targeted.

IAB Europe Application (Q1 2027)

Planned

Submission of the CMP Registration Form (cerez.io Tic. Ltd. Şti.), Self-Assessment PDF (53/57 PASS), legal review and IAB Europe assessment (4-8 weeks). Estimated cost €15K-30K.

Certification and Launch (Q2 2027)

Targeted

A CMP ID is assigned and we are added to the official iabeurope.eu/cmp-list. A 50% annual discount for existing pilot customers, a public announcement and a presentation at IAB Türkiye events.

0
Programmatic CPM drop with a non-certified CMP (maximum)
0
Vendors registered in the GVL fully recognize the TC String
0
EU languages; multilingual banner and widget including TR
0 days
Average migration time from your current CMP to cerez.io
Comparison

cerez.io vs. foreign CMPs.

A direct comparison on price, Turkish support and data residency.

OneTrust
$50K-100K/year
USA / United Kingdom
  • IAB Certified
  • Very high cost
  • English-only support
  • Overseas data center
  • No KVKK expert
Cookiebot
€5K-20K/year
Denmark
  • IAB Certified
  • Reasonable price
  • Limited Turkish support
  • EU data center
  • No KVKK expertise
Homegrown Alternative cerez.io
6K-24K/year
Turkey · cerez.io
  • Certificate targeted for Q2 2027
  • 1/10 the price, transparent TRY/EUR
  • Turkish team, Turkish support
  • Turkey data center, KVKK data residency
  • KVKK Article 9 compliant, expert team
Apply to the Pilot
Frequently Asked Questions

Frequently asked about TCF certification.

What is IAB Europe TCF v2.3 and why is it needed?
The Transparency & Consent Framework lets every party in programmatic advertising share user consent through a standard protocol. The 50-100 ad vendors on your site query consent through the __tcfapi JS interface. Non-certified CMPs trigger a "non-registered" warning; certified CMPs are fully recognized and ad revenue is not restricted.
Is cerez.io certified right now?
No, not yet. The certification process is actively moving forward: Phases A and B are complete (full technical compliance and test validation), Phase C (the IAB application) is planned for Q1 2027, and Phase D (CMP ID assignment and official launch) is targeted for Q2 2027. The pilot publisher program is open during this period; we offer participants a 50% discount after certification.
What is the GVL, and why is daily synchronization required?
The Global Vendor List is a JSON file containing IAB Europe's approved ad vendors. IAB updates it every day at 03:00 UTC: vendors are added, removed, or purposes change. The IAB certification requirement is defined as "CMP MUST sync GVL at least daily". On cerez.io, an automatic 03:30 UTC sync, diff log and 72-hour stale alarm run as standard.
How long does migration from your current CMP to cerez.io take?
On average 2-5 business days. Our team takes your current CMP configuration (vendor whitelist, purpose mapping, custom CSS) and moves it to cerez.io. It runs side by side in a test environment; once you approve, the production switch is made. Consent logs are preserved during migration.
How can I apply to the pilot program?
Send your publisher details (number of domains, monthly pageviews, current CMP, programmatic stack) through the contact form. Our team gets back to you within 1 business day. Pilot scope: a 30-day free Pro plan, migration support and a 50% annual discount after certification. In return, we expect SDK telemetry data to be shared for 30 days. Apply now
Can a Turkish company use a certified CMP to serve the EU market?
Yes. IAB Europe CMP certification is country-independent; a company established in Turkey can serve publishers in Germany, France and Spain as a certified CMP. As cerez.io Tic. Ltd. Şti. we are applying to IAB Europe in Brussels. Once a CMP ID is assigned, we will appear on the official list.
Technical Resources

Integration and validation tools.

IAB Validator Test

TC String validation with the SDK live test page.

Open Test Page
GVL JSON Endpoint

GVL JSON feed for the getVendorList() call.

View the GVL
IAB CMP List

IAB Europe's official certified CMP list.

iabeurope.eu/cmp-list

Move your publishing operation to an IAB-compliant CMP.

A 30-day free pilot, migration support included, no contract. Certification is still in progress; we offer pilot participants a 50% annual discount after certification.

Phone: +90 540 059 40 40  ·  Email: sales@cerez.io


⚡ YASAL ZORUNLULUK 2025/10 Cumhurbaşkanlığı Genelgesi: Kamu, belediye, banka, üniversite, hastane, okullar için 21 Haziran 2026'ya WCAG 2.2 A zorunlu · Ceza: 5.000–25.000 TL/tespit
Detay →