Full-Time
Contracts Counsel
Pixalate
51-200 employees
SaaS platform for ad fraud analytics
Compensation Overview
$145k - $210k/yr
McLean, VA, USA + 1 more
More locations: New York, NY, USA
Remote
Remote within the DC or NY metro area.
JD
 Legal & Compliance (1) |
|---|
Get referred to Pixalate
See people who can refer or advise you
- Juris Doctor degree and admission to at least one United States state bar.
- Four to seven years of relevant legal experience focused on commercial or technology transactions, in a law firm or in-house setting.
- Experience drafting and negotiating complex technology contracts, including SaaS, data licensing, API, and platform agreements.
- Understanding of data privacy law, including GDPR and CCPA/CPRA, and how privacy requirements intersect with commercial agreements.
- Strong written and oral communication skills with the ability to explain complex legal concepts to non-legal stakeholders.
- Ability to manage multiple priorities in a fast-moving environment.
- Proficiency with contract lifecycle management tools and legal technology platforms.
- Ability to work independently and collaboratively with cross-functional teams.
- Draft, review, and negotiate commercial agreements, including SaaS agreements, data licensing deals, master services agreements, statements of work, nondisclosure agreements, and vendor or supplier contracts.
- Serve as the primary legal point of contact for Sales and Business Development on contract-related matters.
- Develop and maintain standard contract templates, playbooks, and fallback positions to streamline the contracting process.
- Advise internal stakeholders on contract terms, risk allocation, liability exposure, intellectual property ownership, and data privacy obligations.
- Manage the end-to-end contract lifecycle, including tracking, execution, renewals, and amendments, using contract management tools.
- Coordinate with outside counsel on specialized matters, intellectual property, litigation support, and regulatory inquiries.
- Partner with Finance and Revenue Operations to ensure deal structures align with revenue recognition requirements.
- Support corporate governance activities, including board resolutions, entity maintenance, and compliance initiatives.
- Stay current on legal developments in adtech, data privacy, artificial intelligence regulation, and digital advertising.
- Identify opportunities to improve and scale legal processes across the organization.
- Experience in the adtech, martech, digital media, or data intelligence space.
- Experience with programmatic advertising, real-time bidding, supply path optimization, or connected television platforms.
- Familiarity with MRC standards, IAB frameworks, or digital advertising industry self-regulatory bodies.
- Experience supporting enterprise SaaS sales cycles and working directly with revenue-generating teams.
- Exposure to intellectual property licensing, open-source compliance, or AI/ML data use agreements.
Pixalate provides fraud protection, privacy, and compliance analytics for the digital advertising industry, helping publishers, ad networks, and brands protect ad spend from invalid traffic across CTV, mobile apps, and websites. Its SaaS platform delivers real-time analytics, blocklists, and reporting to monitor traffic quality and identify where fraud occurs. It differentiates itself with cross-channel coverage and an MRC accreditation for sophisticated invalid traffic detection, offering credible, actionable insights. The goal is to help advertisers spend wisely by preventing fraud and maintaining brand safety.
Company Size
51-200
Company Stage
Growth Equity (Venture Capital)
Total Funding
$27.5M
Headquarters
Palo Alto, California
Founded
2012
Get referred to Pixalate
See people who can refer or advise you
Simplify's Take
What believers are saying
- Pixalate’s August 2026 IPv6 launch addresses rapidly expanding cloud infrastructure fraud paths.
- BIGO Ads expanded its January 2026 partnership, validating Pixalate’s mobile traffic-quality product.
- July 2026 OpenEPG adoption strengthens Pixalate’s data moat in streaming TV measurement.
What critics are saying
- Google, Roku, and Apple can tighten store metadata, weakening Pixalate’s blocklist coverage.
- Integral Ad Science and DoubleVerify sell broader verification suites, pressuring Pixalate’s pricing in 2026.
- If advertisers standardize on platform-native fraud tools, Pixalate’s standalone relevance shrinks sharply.
What makes Pixalate unique
- Pixalate’s August 2026 IPv6 and CTV blocklists span 3,000+ providers and 378,622 apps.
- Pixalate pairs MRC-accredited SIVT detection with pre-bid blocking, not just post-bid reporting.
- OpenEPG launched July 2026, giving first public programmatic streaming benchmarks across shows and devices.
Help us improve and share your feedback! Did you find this helpful?
Benefits
Health Insurance
Dental Insurance
Vision Insurance
Unlimited Paid Time Off
401(k) Retirement Plan
Phone/Internet Stipend
Flexible Work Hours
Remote Work Options
Hybrid Work Options
Growth & Insights and Company News
6 month growth
↑ 2%1 year growth
↑ 2%2 year growth
↑ 9%Pixalate has launched a pre-bid blocklist for connected TV apps to help advertisers identify fraudulent and high-risk publishers. The High Risk Apps blocklist monitors 378,622 CTV app-platform pairs across nine operating systems, including Roku, FireOS, and Apple TV, covering 52,102 unique apps. The tool evaluates apps against nine risk categories, including invalid traffic rates, missing privacy policies, abandoned apps, and apps designed primarily for advertising. It combines persistent invalid traffic signals, app store compliance indicators, app-ads.txt checks, and privacy risk assessments. The blocklist is updated daily and available through AWS RTB Fabric, APIs, FTP, and S3. This approach aligns with Media Rating Council guidance to use lists of known dangerous sources alongside impression-level invalid traffic classifications.
Pixalate expands programmatic Connected TV (CTV) app pre-bid blocklist: flags known dangerous & fraudulent publishers based on historical IVT rates, app-ads.txt, app store tos, & privacy compliance risk ratings of 378,622 apps across 9 CTV app stores. Pre-bid blocklist updated daily and available through AWS RTB Fabric, APIs, FTP, and S3. August 21, 2026 07:00 ET | Source: Pixalate LONDON, Aug. 21, 2026 (GLOBE NEWSWIRE) - Pixalate today introduced the High Risk Apps (HRA) CTV app pre-bid blocklist for the programmatic advertising industry. The blocklist identifies known dangerous and fraudulent CTV apps by combining persistent invalid traffic (IVT) signals, app store compliance indicators, app-ads.txt authorization checks, and privacy risk signals into a unified feed with 9 clear risk reason codes. The blocklist is a daily-updated list of CTV apps - across 9 operating systems including Android, FireOS, Linux, Roku, Samsung, Sony, tvOS (Apple TV), LG webOS, and Windows - that buyers and sellers use to exclude apps from programmatic ad campaigns before a bid is placed. Traditional ad fraud detection started from scratch on every impression, with each bid evaluated in isolation and disconnected from historical signals. The blocklist aligns with Media Rating Council (MRC) guidance to use lists of "known dangerous or fraudulent sources" in addition to impression-level IVT classifications. The blocklist is built on Pixalate's daily monitoring of 378,622 CTV app-platform pairs - spanning hundreds of device and platform variants that map to 9 major CTV app stores including Roku, Fire TV, Samsung, and Apple TV - covering 52,102 unique apps. High Risk CTV Apps Blocklist: 9 Risk Reason Codes The CTV HRA pre-bid blocklist evaluates each app against 9 risk dimensions. | Risk Type* | Code | Description | | High GIVT | highGivt | Apps with General Invalid Traffic rates exceeding 5% over a 3-month rolling window | | High SIVT | highSivt | Apps with Sophisticated Invalid Traffic rates exceeding 15% over a 3-month rolling window | | Missing Privacy Policy | missingPrivacyPolicy | Apps missing privacy policy URLs on the official app store page and website, per Pixalate's analysis | | Abandoned App | abandonedApp | Apps that have not been updated by developers in 3+ years and may be unmaintained, insecure, or non-compliant with current app store requirements | | Missing app-ads.txt | noAdsTxt | Apps generating ad impressions without a valid app-ads.txt file, indicating unauthorized inventory | | Developer Anonymity | developerAnonymity | Apps where the developer has missing or unverifiable contact information | | VPC Bypass Risk | vpcBypass | Child-directed apps transmitting personal data without Verifiable Parental Consent, creating COPPA compliance exposure | | Delisted App | delistedApp | Apps removed from app stores that continue to generate ad traffic | | Made for Advertising | mfaApp | Apps designed primarily to generate ad impressions rather than deliver genuine user value, including apps exhibiting ad stacking and other manipulative ad placement tactics | *Risk Type coverage differs across CTV operating systems based on each platform's level of transparency and metadata availability. Each app is tagged with one or more risk reason codes. When an app is flagged for multiple risk types, all applicable codes are visible. This enables buyers to build selective blocking logic. App-Level Risk vs. Traffic-Level Risk The CTV HRA blocklist separates app-level structural risk from impression-level IVT classification. This aligns with the Media Rating Council's Invalid Traffic Detection and Filtration Interim Update Memo, which distinguishes impression-level IVT measurement from property-level risk reporting. Impressions from apps on the High Risk CTV Apps list are not automatically classified as IVT. IVT is now reported only when impression-level invalid signals are detected. This means IVT reporting reflects impression-level measurement, and app-level risk is reported independently, giving buyers independent control over app-level blocking and impression-level filtering. For SSPs & Exchanges * Ad fraud management: Remove apps where IVT is material, persistent, and inseparable from legitimate traffic. * Selective blocking: Use risk reason codes to apply selective blocking based on risk tolerance and publisher relationships. * Measurement accuracy: Surface app-level risk independently from impression-level IVT reporting to preserve measurement accuracy. For DSPs & Agencies * Pre-bid filtering: Exclude flagged App IDs from campaign targeting. * Compliance: Block apps flagged for Missing Privacy Policy, VPC Bypass Risk, or Delisted Apps to reduce regulatory exposure. * Brand safety: Prevent ad spend from reaching MFA apps, abandoned apps, and developers with unverifiable identities. Data Schema | Column | Type | Description | | appId | STRING | The actual ID that characterizes a CTV app, if available | | bundleId | STRING | The bundle ID associated with the app | | osName | STRING | The Operating System (OS) name that is associated with a given app | | platformName | STRING | The platform where the CTV app is available | | riskType | STRING | Comma-separated list of all applicable risk type codes (e.g., highSivt,abandonedApp,missingPrivacyPolicy) | Availability High Risk CTV Apps blocklist is available as a daily CSV feed delivered through AWS RTB Fabric, APIs, FTP, or S3 bucket through Pixalate's Pre-Bid Blocking Data Feeds. App-level risk indicators are also surfaced in Pixalate's Analytics dashboard, including a boolean indicator that shows if an app is flagged on HRA and a share of voice of traffic on apps flagged via HRA. About Pixalate Pixalate is a global platform specializing in privacy compliance, ad fraud prevention, and digital ad supply chain data intelligence. Founded in 2012 and recognized by UNICEF as a "key innovator" for children's online privacy, Pixalate is trusted by regulators, data researchers, advertisers, publishers, ad tech platforms, and financial analysts across the Connected TV (CTV), mobile app, and website ecosystems. Pixalate is accredited by the MRC for the detection and filtration of Sophisticated Invalid Traffic (SIVT). pixalate.com Disclaimer The content of this press release reflects Pixalate's opinions with respect to factors that Pixalate believes may be useful to the digital media industry. Any data shared is grounded in Pixalate's proprietary technology and analytics, which Pixalate is continuously evaluating and updating. Any references to outside sources should not be construed as endorsements. Pixalate's opinions are just that, opinions, which means that they are neither facts nor guarantees. Pixalate is sharing this information and any associated data not to impugn the standing or reputation of any entity, person or app, but, instead, to report findings and trends pertaining to programmatic advertising activity in the time period studied. Per the MRC, "'Fraud' is not intended to represent fraud as defined in various laws, statutes and ordinances or as conventionally used in U.S. Court or other legal proceedings, but rather a custom definition strictly for advertising measurement purposes. Also per the MRC, "'Invalid Traffic' is defined generally as traffic that does not meet certain ad serving quality or completeness criteria, or otherwise does not represent legitimate ad traffic that should be included in measurement counts. Among the reasons why ad traffic may be deemed invalid is it is a result of non-human traffic (spiders, bots, etc.), or activity designed to produce fraudulent traffic." [email protected]
Pixalate debuts programmatic's first pre-bid IPv6 Data Center Blocklist, extending dual-protocol ad fraud (Invalid Traffic) protection to 3,000+ cloud providers worldwide, including Alibaba & Tencent. Purpose-built for programmatic, the weekly IPv4 and IPv6 CIDR feeds go beyond the AWS/Google/Azure baseline - with new coverage of Alibaba Cloud and Tencent Cloud, including their US-based infrastructure. August 20, 2026 16:45 ET | Source: Pixalate LONDON, Aug. 20, 2026 (GLOBE NEWSWIRE) - Pixalate, an ad fraud and privacy compliance platform, today launched a dedicated IPv6 Data Center Blocklist and expanded its existing IPv4 Data Center Blocklist - two separate weekly feeds that extend pre-bid protection against data center-originated Invalid Traffic (IVT) across both internet protocols. Pixalate's Data Center Blocklists identify IP ranges belonging to hosting and cloud infrastructure, where ad traffic originates from servers rather than people. Advertisers, DSPs, SSPs, and ad platforms apply the lists pre-bid to filter data center traffic before transacting on it. | Feed | Scale | What's New | Cadence | Format | | Data Center Blocklist (IPv4) - expanded | 111,879 CIDR ranges from 3,000+ providers | 15,241 CIDR ranges from 13 operators, including Asia-based operators | Weekly | CSV of CIDR ranges | | Data Center Blocklist (IPv6) - new | 16,292 CIDR ranges from 66 providers at launch | The entire list | Weekly | CSV of CIDR ranges | | / | / | / | / | / | Data Center Traffic Is Invalid Traffic, Per MRC Standards The Media Rating Council (MRC) classifies known invalid data center traffic as General Invalid Traffic (GIVT) - the first category listed in its Invalid Traffic Detection and Filtration Standards. Per the MRC standards, filtration of invalid data center traffic "originating from IPs associated to the three largest known hosting entities: Amazon AWS, Google and Microsoft" is required as a starting point, and vendors "shall supplement these lists with other information, third-party sources or other techniques... to account for smaller data centers that may be a source of IVT." The MRC further requires that data center lists "be maintained by vendors and subject to continuous evaluation and update." Coverage: 3,000+ Providers Across North America, Europe & Asia Providers covered include, but are not limited to: * North America: Amazon Web Services, Microsoft Azure, Google Cloud, Meta, Oracle Cloud, IBM Cloud, DigitalOcean, Linode (Akamai), Vultr, CircleCI * Europe: Hetzner, OVHcloud, Scaleway, Leaseweb, Contabo, netcup * Asia: Alibaba Cloud, Tencent Cloud, Huawei Cloud, Sakura Internet, Zenlayer * DSPs, agencies, and advertising platforms: Block data center IP ranges pre-bid across both protocols, protecting advertiser spend from server-originated impressions at scale. * SSPs and exchanges: Filter data center-originated supply before it reaches demand partners, and document GIVT filtration aligned with MRC processes. Why IPv6 Changes the Data Center Problem IPv6 adoption is approaching half of all internet traffic, per Google's published adoption data. Data center infrastructure is following suit: between August 2025 and August 2026, the number of IPv6 CIDR ranges published by Google Cloud grew 109%, AWS grew 54%, and Microsoft Azure grew 22%, per Pixalate's analysis. IPv6 makes address-level blocking impractical. A single IPv6 range can contain more addresses than the entire IPv4 internet; the whole IPv4 address space holds 2[32] addresses - 4.3 billion. A single standard IPv6 subnet (a /64) holds 2[64] - 4.3 billion times more. Combined, the IPv6 ranges published by Google, AWS, and Microsoft Azure alone now span more than 1.6x10[30] addresses, per Pixalate's analysis. Server-originated traffic from IPv6 infrastructure must be filtered at the range level, using a continuously updated list of data center CIDR ranges. Cloud IP Ranges Grew Up to 40% in the Past Year The number of unique CIDR ranges (IPv4 and IPv6 combined) published by the three largest cloud providers grew between August 2025 and August 2026: Google Cloud (+40%), Amazon Web Services (+24%), and Microsoft Azure (+18%), per Pixalate's analysis. Cloud regions in Virginia added 1,013 CIDR ranges (+31%) year-over-year - 18% of all net-new cloud IP ranges the three providers attributed to specific regions, more than any other location. Texas grew 49% and Iowa 26%; North America accounted for 50% of global growth. As data center IP space expands and fragments, static or infrequently updated blocklists fall out of date. How the Blocklists Are Compiled Pixalate's data science team curates, validates, and continuously re-evaluates every range in the blocklists. Provider-published IP ranges and externally maintained open-source lists serve as inputs, which Pixalate verifies, deduplicates, and monitors before inclusion, alongside data center ranges identified and maintained by Pixalate's own detection. False-positive engineering is central to the methodology: the blocklists exclude mixed-use IP ranges that carry legitimate consumer traffic - such as Apple iCloud Private Relay egress ranges - consistent with MRC guidance to exclude routing artifacts of legitimate users. Availability Both lists are delivered weekly via AWS RTB Fabric, FTP, APIs, and S3. About Pixalate Pixalate is a global platform specializing in privacy compliance, ad fraud prevention, and digital ad supply chain data intelligence. Founded in 2012 and recognized by UNICEF as a "key innovator" for children's online privacy, Pixalate is trusted by regulators, data researchers, advertisers, publishers, ad tech platforms, and financial analysts across the Connected TV (CTV), mobile app, and website ecosystems. Pixalate is accredited by the MRC for the detection and filtration of Sophisticated Invalid Traffic (SIVT). pixalate.com Disclaimer The content of this press release reflects Pixalate's opinions with respect to factors that Pixalate believes may be useful to the digital media industry. Any data shared is grounded in Pixalate's proprietary technology and analytics, which Pixalate is continuously evaluating and updating. Any references to outside sources should not be construed as endorsements. Pixalate's opinions are just that, opinions, which means that they are neither facts nor guarantees. Pixalate is sharing this data not to impugn the standing or reputation of any entity, person or app, but, instead, to report findings and trends pertaining to programmatic advertising activity in the time period studied. Per the MRC, "'Fraud' is not intended to represent fraud as defined in various laws, statutes and ordinances or as conventionally used in U.S. Court or other legal proceedings, but rather a custom definition strictly for advertising measurement purposes. Also per the MRC, "'Invalid Traffic' is defined generally as traffic that does not meet certain ad serving quality or completeness criteria, or otherwise does not represent legitimate ad traffic that should be included in measurement counts. Among the reasons why ad traffic may be deemed invalid is it is a result of non-human traffic (spiders, bots, etc.), or activity designed to produce fraudulent traffic."
Pixalate's June 2026 recap: OpenEPG(TM) Index + How to Identify Bundle ID Fraud in CTV webinar, and more. Jul 4, 2026 9:00:01 AM Discover the latest programmatic research in Pixalate's June 2026 recap. What's included in the June 2026 recap: INTRODUCING | Pixalate OpenEPG(TM) Index EPG | State of Streaming TV Ad Spend - May 2026 WEBINAR | How to Identify Bundle ID Fraud in CTV PIXALATE @ CANNES LIONS 2026 | It's a Wrap INTRODUCING: Pixalate OpenEPG(TM) Index Pixalate recently launched the OpenEPG(TM) Index - the programmatic ad industry's first free, public benchmark of streaming TV in the U.S., ranked by estimated consumer reach and open programmatic ad spend across both small & large screens. OpenEPG(TM) Index State of Streaming TV Ad Spend - May 2026 The May 2026 State of Streaming TV Ad Spend Report is now available, revealing the rise of mobile OTT streaming, an audience legacy panels largely miss. May 2026 Key Highlights (U.S.): * The Mobile Surge: 70% of streaming reach is now on small screens. * Android Dominance: Android devices drove 51% of U.S. streaming TV open programmatic ad spend - more than Roku, Fire TV, Samsung Smart TV, and Apple TV combined. * Sports, News, and Drama Lead on Small Screens: These three categories captured 83% of U.S. mobile OTT open programmatic ad spend. OpenEPG(TM) Index: State of Streaming TV Ad Spend Report Based on the newly launched OpenEPG(TM) Index, this report examines ad spend across shows, channels, genres, U.S. media markets, dayparts, and more. WEBINAR: How to Identify Bundle ID Fraud in CTV Uncover the hidden costs of programmatic CTV fraud and learn how to protect against Bundle ID fraud. If you missed the session - or would like to watch it again - you can access the webinar recording below: Webinar: May 2026 CTV Ad Fraud & Bundle ID Fraud Pixalate @ Cannes Lions 2026 - It's a wrap! A huge thank you to everyone who stopped by to connect with the Pixalate team last week on the Croisette. If you didn't get a chance to meet Pixalate in Cannes, Pixalate is still available to discuss: | Fighting Ad Fraud | Enriching bids with OpenEPG | Invalid Traffic (IVT) Detection | Programmatic Advertising Transparency Set up a meeting now: Schedule a Demo Search blog. You May also like. These Stories on Monthly Recaps
Pixalate has launched the OpenEPG Index, a free monthly ranking of the top 100 streaming TV shows based on open programmatic advertising spend and consumer reach across mobile and connected TV devices. The inaugural May 2026 dataset tracks 5,108 shows across 224 streaming channels in all 210 US media markets. The index reveals that mobile devices command 70% of consumer reach, with sports leading viewership, followed by comedy and dramas like Yahoo Sports Daily, Being Mary Jane and Boomerang. Unlike legacy measurement companies that rely on consumer panels or publisher opt-ins, the index covers 12,875 unique shows across platforms including Roku, Amazon Fire TV, Samsung TV, Apple TV, iOS and Android. Shows are ranked by metrics including consumer reach, programmatic ad spend, genre, device type and US market coverage.