An advertising insertion order, or IO, is the contract that authorizes a publisher, network, or platform to run a specific ad campaign on an advertiser’s behalf. It sets the price, the placement, the flight dates, and the delivery terms before a single impression goes live.
Once signed, the IO becomes the reference document both sides use to confirm the campaign ran as agreed and billed correctly.
For advertisers managing six- and seven-figure monthly ad budgets, the IO is also one of the most overlooked audit tools available. Every discrepancy between what an IO promises and what a platform actually delivers is either a billing error or a missed placement. It might also be a data integrity problem. Each one of these issues has a dollar value attached to it.
In this guide, we break down what belongs in an insertion order, how it differs from a purchase order, and how to audit one line by line.
What Is an Insertion Order (IO) in Advertising?
An insertion order is a formal agreement between an advertiser (or their agency) and a media seller, which could be a publisher, ad network, or platform like Google or Meta. The IO authorizes the seller to place ads under specific, pre-negotiated terms.
The IO functions as the legal and operational record of the deal: what will run, where, when, at what price, and under what conditions.
IOs are most common in direct, negotiated media buys rather than fully automated auction placements, though programmatic guaranteed and preferred deals also use IO-style documentation to lock in terms.
The Interactive Advertising Bureau (IAB), alongside the American Association of Advertising Agencies, maintains standard terms and conditions that many IOs incorporate by reference, which gives both media companies and advertisers a shared legal baseline instead of negotiating every clause from scratch on each deal.
What Information Should an Insertion Order Include?
A complete IO should leave no ambiguity about what was bought or how it will be measured.
At a minimum, it should include:
- The advertiser and agency of record, including billing contact and legal entity name
- The publisher or media company, including the specific site, app, or platform the ad will run on
- Campaign flight dates: start and end dates for the placement
- Ad units and placements: format, size, and location (homepage, category page, specific section)
- Pricing model and rate: CPM, CPC, flat fee, or a hybrid, along with the negotiated rate
- Total budget or impression/click guarantee: the committed spend or delivery volume
- Targeting parameters: audience, geography, device, or dayparting restrictions
- Creative specifications: file formats, dimensions, and creative rotation rules
- Makegood and under-delivery terms: what happens if the seller falls short of guaranteed impressions
- Payment terms: net terms, invoicing cadence, and cancellation policy
- A reference to governing terms and conditions, such as the IAB/4A’s standard terms
Missing or vague entries in any of these fields can create audit blind spots later on. If an IO doesn’t specify a guaranteed impression volume, for example, the advertiser then has no contractual basis to dispute under-delivery when the campaign ends.
The IO vs. a Purchase Order (PO)
Insertion orders and purchase orders both authorize a spend, but they serve different functions and originate from different sides of a transaction.
| Insertion Order (IO) | Purchase Order (PO) | |
|---|---|---|
| Issued by | Advertiser or agency, to the media seller | Buyer’s internal procurement or finance team |
| Purpose | Authorizes and defines a specific media placement | Authorizes internal spend against a budget or vendor |
| Contains | Flight dates, placements, rates, targeting, creative specs | Vendor, cost center, approval chain, budget code |
| Governs | The relationship between advertiser and publisher | The relationship between a company and its internal finance controls |
| Typical use | Media buys: display, video, native, sponsorships | Any vendor purchase, not exclusive to advertising |
In practice, larger advertisers often generate both: an internal PO to authorize the spend against a marketing budget, and an external IO to formalize the terms with the media seller. The PO rarely leaves the advertiser’s own systems, while the IO is a shared document both parties sign and use for reference.
Is an Insertion Order an Invoice?
No. An insertion order is not an invoice. It’s the agreement that precedes billing, not the bill itself. The IO sets expectations for what will be charged; the invoice is what the media seller actually bills after the campaign runs (or during it, for ongoing flights).
This distinction matters when it comes time to audit. The IO is the baseline. The invoice should match it exactly in rate, volume, and flight dates unless both parties agreed to a change order.
Any invoice that deviates from the IO without a documented amendment is a candidate for dispute.
How to Audit an Insertion Order
Most advertisers will file the IO away once it’s signed and only revisit it when a discrepancy surfaces on an invoice. By then, the campaign has often already run its course.
A more effective approach treats the IO as a working audit document from the start, checked against delivery data and billing at defined intervals rather than only at the end of a flight.
Here’s what that looks like:
1. Audit for Incorrect Pricing
Compare the rate on the IO, whether that’s CPM, CPC, or flat fee, against the rate reflected on the invoice or the platform’s billing dashboard.
Rate discrepancies are among the most common IO-related errors, and they’re easy to miss when campaigns run across multiple line items or when a platform applies a blended rate across placements that were negotiated individually.
Check:
- Whether the billed rate matches the negotiated rate exactly, including any volume discounts
- Whether currency and tax treatment match what was agreed
- Whether any “average” or “blended” CPM on an invoice actually reconciles to the individual placement rates on the IO
2. Audit for Missing Details
Cross-reference every required field from the IO against what the platform’s reporting shows actually ran.
Common gaps include:
- Placements that ran on unlisted domains or apps
- Creative that rotated outside the approved set
- Targeting parameters that weren’t applied as specified
This is particularly relevant for programmatic and social placements, where inventory can shift dynamically and out-of-scope delivery is harder to catch without pulling granular, placement-level reporting.
3. Audit for Delivery Issues
Compare guaranteed impressions, clicks, or flight duration against what actually delivered. Under-delivery should trigger a makegood under the IO’s terms, meaning additional impressions at no cost, a credit, or a rate adjustment.
Over-delivery isn’t automatically a win either; check whether the advertiser is being billed only for the guaranteed volume, or for every impression served past it.
Flag any campaign that:
- Ended early or late relative to the IO’s flight dates without documented approval
- Delivered meaningfully below the guaranteed volume with no makegood applied
- Shows a gap between platform-reported impressions and third-party ad server or verification numbers
4. Audit for Billing Errors
Reconcile every invoice line item back to a specific IO.
Duplicate charges, charges for cancelled placements, and fees that weren’t disclosed on the original IO (data fees, viewability fees, and ad serving fees) all show up here. A clean audit trail means every dollar on an invoice traces back to a term on a signed IO, anything that doesn’t should be flagged and disputed before payment.
Billing errors only compound further when a larger share of spend runs through the open programmatic supply chain rather than direct IOs. The ANA’s Programmatic Media Supply Chain Transparency Study found that only 36 cents of every dollar entering a demand-side platform reaches the consumer-facing impression, underscoring why granular, line-item audits matter even on deals that appear straightforward on paper.
Best Practices for Creating and Managing Insertion Orders
- Standardize the IO template across all media partners so every required field is captured consistently, reducing the odds of missing detail.
- Attach the governing terms and conditions, like the IAB/4A’s standard terms, directly to the IO rather than assuming both parties are working from the same version.
- Set a reconciliation cadence, not just an end-of-campaign review. Weekly or biweekly checks against delivery data catch pricing and delivery issues while there’s still time to correct course.
- Centralize IOs and invoices in one system so audits don’t require chasing documents across email threads and multiple platforms.
- Document every change order. If a rate, flight date, or placement changes mid-campaign, get it in writing and attach it to the original IO.
- Track ad spend at the platform level, not just the campaign level, to make IO-to-invoice reconciliation faster. Understanding how to measure and optimize ad spend more broadly makes it easier to spot when an individual IO is underperforming its terms.
The Importance of Insertion Orders in Preventing Ad Fraud
A well-specified, actively audited IO does more than protect against billing mistakes. It’s also a control point against invalid traffic and fraud. Fraudulent activity, from bot traffic to more advanced, sophisticated invalid traffic (SIVT) schemes, often inflates delivery numbers on exactly the metrics an IO is meant to guarantee: impressions, clicks, and completed views.
When the targeting, placement, and volume terms in an IO are vague, it becomes harder to prove that delivery didn’t meet the agreed standard, even when a meaningful share of that delivery came from non-human traffic.
Tighter IO language, like specific placements and defined viewability thresholds, gives advertisers a contractual basis to dispute fraudulent delivery, not just a general suspicion that something looks off.
Pairing that contractual specificity with ongoing click fraud detection closes the loop: the IO defines what “clean” delivery should look like, and fraud monitoring flags when it isn’t.
For advertisers who find fraudulent or invalid delivery after the fact, ad credit recovery options exist to file claims directly with Google and Meta based on billing and invalid traffic evidence. But a well-documented IO makes that claim substantially easier to build.
FAQs
Is an insertion order legally binding?
Yes. Once signed by both the advertiser (or agency) and the media seller, an IO is a binding contract, particularly when it incorporates standard terms and conditions such as those published by the IAB and 4A’s.
Who typically issues the insertion order, the advertiser or the publisher?
The advertiser or its agency typically drafts and issues the IO to the publisher or platform, though the publisher may provide a template or require specific fields for its own systems.
What happens if a campaign under-delivers against the IO?
Under-delivery should trigger the makegood terms specified in the IO. These are most commonly additional impressions at no charge, a credit, or an extended flight date. If the IO doesn’t specify makegood terms, there’s little contractual leverage to enforce one after the fact.
Do insertion orders apply to programmatic advertising?
Traditional IOs are most common in direct and guaranteed deals. Fully open-auction programmatic buys typically run without a per-campaign IO, though programmatic guaranteed and preferred deals use similar documentation to lock in rate and volume.
How often should an IO be audited during a campaign?
For any campaign running longer than a few weeks, a biweekly reconciliation against delivery and billing data catches most pricing and delivery issues early enough to correct them, rather than waiting until final invoicing.
