The top identity graph providers in 2026 split by access. LiveRamp works through its platform and clean room; Acxiom brings its applications to your data. BIGDBM lists daily email-to-MAID files; GSDSI licenses them. FullContact resolves by API or batch. ID5 and UID2 supply shared IDs for ad tech. Pick the access model first, then test match rates.
How to use this article
Read the checklist here, then use the linked hub and product pages for procurement citations.
People searching for identity graph providers usually want names, so this guide starts with eleven. Each provider is described from its own public pages or its partners' announcements, and each sourced fact links to where it came from. GSDSI sells a MAID-to-hashed-email file, so read this as a vendor's guide: neither the list nor its order is a ranking. The biggest difference between these companies is not size. It is how you get access. Some are described as available through the provider's own platform, clean room or your environment. Some are sold as files you load into your own warehouse. Some are APIs that resolve the fragments you send, and one is an open ID standard rather than a company's graph. For how the linkage works, start with Identity Graphs 101.
Top identity graph providers in 2026, compared
Each row below uses the provider's own public pages, a partner's announcement or, where labelled, a marketplace listing the provider supplied. Scale is shown exactly as each provider states it. Where we did not find something, the cell says "Not found on the pages we checked" rather than guessing. GSDSI appears as one option, described only from what our own MAID Feed page publishes.
11 identity graph and MAID-to-hashed-email providers compared (sources compiled October 2, 2026)
Apple IDFA and Google GAID linked to hashed emails, with app activity and interest segments
A licensed file or API in CSV, JSON or Parquet, refreshed daily
Yes, licensed directly to the buyer
Teams that want a MAID-to-HEM file in their own warehouse, tested on a sample first
Read the scale column with care. Experian, Throtle and LiveRamp count individuals, Acxiom counts consumers, and BIGDBM counts records. Experian adds digital identifiers and CTV IDs, and Throtle adds households. TransUnion states a share of U.S. adults. Several figures carry no date, and two listings are written by the sellers themselves. None of these numbers can be ranked against the others, so ask each finalist for a dated figure in the unit you care about, in writing.
Four ways to access an identity graph, and why it matters
Inside a provider's platform or your environment. On the pages we checked, LiveRamp describes access through its platform and clean room, and Acxiom brings its applications to your data, rather than a graph file. We did not find an access model for Experian, TransUnion or Epsilon, so ask them.
As a file. BIGDBM lists email-to-MAID files updated daily, and GSDSI licenses MAID-to-HEM files you load into your own warehouse; Throtle lists a deterministic U.S. graph on Datarade, so ask how it is delivered. You hold the rows, so you also hold the compliance duties that come with them.
By API or batch. FullContact resolves the records you send to a persistent PersonID. Suited to enrichment at the moment of capture.
As a shared ID. ID5 distributes shared identifiers to the ecosystem, and UID2 is a shared ID standard. They make inventory addressable; they are not a dataset you buy.
GSDSI sits in the file group as a licensor. Our MAID Feed links mobile ad IDs to hashed emails, and buyers often pair it with the Core Email File when they need postal and email records alongside device IDs.
How to choose an identity graph provider by job to be done
Onboarding a CRM list to mobile and CTV: a licensed MAID-to-email file (BIGDBM, GSDSI) or a platform onboarder such as LiveRamp. Ask whether you need the rows or only the matched audience. See audience targeting.
Household resolution for measurement: Experian, Acxiom or TransUnion for household-level graphs, joined to exposure data for cross-channel measurement.
Resolving your own records: FullContact, by API or batch.
Cookieless addressability for a publisher or DSP: ID5 or UID2.
Staying inside one holding company's stack: Epsilon for Publicis clients.
Methodology and sources
GSDSI sells a MAID-to-hashed-email file, so we have an interest in this category; the table is a list, not a ranking. The facts were compiled on October 2, 2026 from each provider's own public pages, partner announcements, and, where labelled, marketplace listings written by the seller. Each fact links to the page it came from. Figures are shown as each provider states them and are not converted or averaged. Where sources disagreed, as with ID5's user count, we left the figure out rather than pick one. "Not found on the pages we checked" means exactly that, not that the provider lacks it. The "Best fit" column is our opinion. Providers can email corrections to info@gsdsi.com, and we will update the row with a link to the new source.
The legal context for identity data, as of October 2026
Two points shape how a careful buyer handles a MAID-to-hashed-email file. First, hashing is not anonymization. The FTC's technology blog said so directly in July 2024 in No, hashing still doesn't make your data anonymous. Treat hashed emails and the device IDs linked to them as personal data in contracts, retention rules and deletion handling.
Second, device-linked data has a recent enforcement record. In January 2025 the FTC finalized an order against Gravy Analytics and Venntel that prohibits selling, disclosing or using sensitive location data except in limited national security or law enforcement cases. The FTC announced a proposed settlement with Kochava in May 2026, and a federal judge in Idaho signed an order on June 25, 2026 that bars Kochava and Collective Data Solutions from selling, sharing or disclosing sensitive location data, subject to the order's conditions. Both cases concerned sensitive location data. Ask every provider how consent was captured, how deletion requests reach the files you already hold, and which uses are permitted, then put the answers in the contract. Our guide to data licensing agreement red flags lists the clauses. This section is general information, not legal advice.
What to ask every identity graph provider
Identity graph provider evaluation criteria
Criterion
What to ask
Why it matters
Access model
Do I receive rows, a matched audience, an API response or an ID?
It decides who holds the data and who carries the compliance duties
Deterministic or probabilistic
Which links come from logins or verified records, and which are modelled?
Modelled links raise reach and lower precision
Unit and date of scale
Is the figure people, households, MAIDs or events, and as of when?
Figures in different units cannot be compared
Match rate on my data
What share of my sample matched, and how many links per person?
Coverage claims only matter where they overlap your customers
Freshness and decay
How often are links refreshed, and how fast do stale MAIDs drop out?
GSDSI licenses ~200M+ U.S. MAID-to-HEM pairs and 700M+ international devices across 150+ countries, sourced from consent-verified mobile applications and SDK partners. The file links Apple IDFA and Google GAID to hashed emails, with app activity and interest segments, refreshed daily and delivered as CSV, JSON, Parquet or API. It is a file for your own warehouse, not an onboarding platform or an open ID. If that is what you need, request a sample through the MAID Feed page or the identity graph overview, and run it through the same match test as every other finalist.
Frequently Asked Questions
Who are the top identity graph providers in 2026?
By access model, on the pages we checked: LiveRamp works through its platform and clean room, and Acxiom brings its applications to your data; Experian, TransUnion and Epsilon did not state an access model; BIGDBM lists daily email-to-MAID files, GSDSI licenses MAID-to-HEM files, and Throtle lists a deterministic graph on Datarade; FullContact resolves records by API or batch; ID5 and UID2 are shared IDs for ad tech. The right one depends on how you need access.
What is MAID-to-hashed-email data?
A file that links mobile advertising IDs (Apple IDFA, Google GAID) to hashed email addresses. Marketers use it to onboard CRM lists to mobile and CTV, and to resolve devices to people or households for measurement. See Identity Graphs 101.
Which identity graph providers sell a file rather than a platform?
Among the providers compared here, BIGDBM lists email-to-MAID linkages on Datarade, and GSDSI licenses a MAID-to-HEM file directly. On the pages we checked, LiveRamp works through its platform and clean room, and Acxiom brings its applications to your data, rather than selling a file.
Is a hashed email anonymous?
No. The FTC said in July 2024 that hashing does not make data anonymous. Treat hashed emails and linked device IDs as personal data. This is general information, not legal advice.
Is UID2 an identity graph?
No. UID2 is a shared ID standard used in ad tech, not a dataset you license. Our UID2 vs RampID comparison covers how it works.
How should I test an identity graph provider?
Send every finalist the same sample of your own customer records, then score match rate, MAIDs per person, recency and false links, and repeat a month later to measure decay. Agree the weights before the files arrive.
Where does GSDSI fit among identity graph providers?
In the licensed-file group. GSDSI licenses ~200M+ U.S. MAID-to-HEM pairs and 700M+ international devices across 150+ countries, refreshed daily. Request a sample from the MAID Feed page and test it beside the others.
✓ Opt-Out Request Honored via Global Privacy Control
We use cookies and similar technologies to improve your experience. No marketing cookies are pre-selected. Learn more in our Privacy Policy. Your Privacy Choices.