IAB TCF 2.3 Vendor List: How to Configure Vendors in Your CMP
What Is the IAB Global Vendor List?
The Global Vendor List (GVL) is a registry maintained by IAB Europe containing every ad-tech vendor registered under the Transparency and Consent Framework. As of 2026, it includes 1,200+ vendors. Each vendor entry specifies which data processing purposes and features it requires.
TCF 2.3 Purposes
- Purpose 1: Store and/or access information on a device
- Purpose 2: Select basic ads
- Purpose 3: Create a personalised ads profile
- Purpose 4: Select personalised ads
- Purpose 7: Measure ad performance
- Purpose 9: Understand audiences through statistics
- Purpose 10: Develop and improve products
Special Purposes (1-2) and Features (1-3) are also defined. Special purposes do not require consent.
Consent vs Legitimate Interest
Vendors can request each purpose under consent or legitimate interest. Users can object to legitimate interest processing. Your CMP must present both options correctly.
Configuring Vendors in Your CMP
- Identify which vendors your site uses (Google, Meta, Criteo, etc.)
- Match them to GVL vendor IDs
- Configure your CMP to present only relevant vendors
- Set purpose-level defaults (consent required vs legitimate interest)
- Test TC string generation and vendor signal passing
FlexyConsent TCF Configuration
FlexyConsent auto-populates from the GVL. Add vendors by ID, configure purpose mappings, and the TC string is generated automatically. Full TCF 2.3 compliance with Google certification.