Blind Routing

Bidirectional privacy: sources never see the brand, partners never see the source.

Blind Routing is the wall between the two external sides of your network. Your traffic providers must never learn which advertiser their leads land on, and your partners must never learn who generated the traffic. d0pe enforces this automatically, mirror-symmetrically, based on the viewer's network scope.

What each side sees

• Internal (owner / manager) — everything; no scrubbing.
• Provider (traffic source) — its own leads and payout, but never the destination brand, the autologin/partner endpoints, or CRM antifraud internals.
• Partner (advertiser) — the leads it received decomposed by campaign, geo, status and time, but never the provider, source click/sub ids, IP, device or routing internals.

Enforced at the boundary, not the UI

The scrub happens where a lead is serialized, so it applies to every surface a restricted viewer can reach — API responses, exports and the self-service portals alike — not just what the interface chooses to render. Combined with role data-scope, a provider or partner literally cannot address a record that isn't theirs.