Performance Max Brand Safety 2026: Controls & Exclusions

Quick Answer

Performance Max is Google's AI-driven campaign type that serves a single set of assets across the entire Google network — Search, Shopping, YouTube, Display, Gmail, Discover and Maps — and because Google's algorithm chooses placements automatically, brand safety becomes a configuration discipline rather than a manual selection task: the advertiser cannot pick each placement, so the controls that govern where ads can and cannot run carry the entire brand-safety burden. The controls operate mostly at the account level and apply across campaigns including Performance Max: content suitability settings and inventory type (expanded, standard or limited) govern how sensitive the YouTube and Display content adjacent to ads may be; account-level placement exclusion lists and excluded content types, digital content labels and sensitive categories let advertisers keep ads off specific channels, apps, sites and content themes; and account-level negative keyword lists, brand exclusions and brand lists narrow where Search and Shopping ads appear. On transparency, Google has expanded Performance Max reporting over time — placement reports now show where ads actually ran and search-terms insights show what queries triggered them — which is what lets advertisers detect unsafe or wasteful placements and feed them back into exclusions. The practical reality for 2026 is that Performance Max is not a black box to be trusted blindly: it is an automated buyer that must be fenced with account-level brand-safety settings and audited with the new placement transparency. The compliant posture is to configure suitability and exclusions before launch, review placement reports continuously, and tighten exclusions as the data reveals where the algorithm wandered. Screen creative and claims with the Keyword Risk Checker, audit the full creative with the AI Compliance Audit, and track platform changes on the Policy Change Tracker.

Scan ad copy for policy triggers — try the free Keyword Risk Checker

Why Automation Makes Brand Safety a Config Task

Performance Max serves one set of assets across the entire Google network — Search, Shopping, YouTube, Display, Gmail, Discover and Maps — with the algorithm choosing placements automatically. Because the advertiser cannot pick each placement, brand safety becomes a configuration discipline rather than a manual selection task.

An advertiser who treats Performance Max as a trusted black box has effectively delegated brand safety to an optimization algorithm whose goal is conversions, not suitability. An advertiser who configures suitability and exclusions deliberately keeps control of the boundaries while the algorithm works within them.

Google Ads documentation describes account-level brand-suitability controls — inventory type, excluded content and placement exclusions — as applying to Performance Max, giving advertisers control over where ads can appear (paraphrased rather than quoted verbatim).

This guide covers content suitability and inventory type, account-level exclusions, the placement transparency Google has added, and what you still cannot control. Screen creative with the Keyword Risk Checker, audit it with the AI Compliance Audit, and track changes on the Policy Change Tracker.

Content Suitability and Inventory Type

Inventory type governs how sensitive the content adjacent to ads — especially on YouTube and Display — may be. It applies at the account level across campaigns including Performance Max, and is the primary lever for adjacent-content sensitivity.

The Inventory Spectrum

Inventory type	Excludes	Reach	Best for
Expanded	Least — broadest monetizing content	Maximum	Scale-focused brands
Standard	Strong profanity, graphic violence (default)	Broad	Most advertisers
Limited	Additional sensitive categories	Reduced	Regulated, family, low-tolerance brands

Layer on excluded content types, digital content labels (maturity tiers) and sensitive-category exclusions such as tragedy and conflict. Leaving these at default expanded-leaning settings maximizes reach at the expense of suitability. Audit the creative itself with the AI Compliance Audit.

Account-Level Placement and Keyword Exclusions

Since Performance Max chooses placements automatically, exclusions are the primary mechanism for keeping ads off conflicting inventory. Maintain them centrally at the account level so one set protects every campaign.

The Exclusion Toolkit

Placement exclusion lists: Name specific YouTube channels, sites, apps and app categories where ads must not appear.
Content-type and sensitive-category exclusions: Block whole themes — tragedy and conflict, sensitive social issues, mature content.
Negative keyword lists: Extended to Performance Max — prevent Search and Shopping ads on irrelevant or off-brand queries.
Brand exclusions and brand lists: Control behavior around competitor and own-brand terms for Search and Shopping.

Build the lists before launch and expand them as placement reports reveal where ads ran, converting an unfenced automated buyer into a constrained one. Identify risky terms to exclude with the Keyword Risk Checker.

Placement Transparency and What Reports Now Show

Google has expanded Performance Max reporting: placement reports show where ads actually ran, and search-terms insights show what queries triggered them. These are the feedback loop for fencing automation.

Using the Reports

Review on a cadence: Identify placements and queries that conflict with the brand or waste spend.
Feed back into exclusions: Add them to account-level placement exclusions and negative keyword lists so the algorithm avoids them.
Verify settings: If reports show adjacency the suitability settings should have prevented, tighten the configuration.

Reporting is necessary but not exhaustive — complement it with third-party verification where the framework requires independent measurement. The brand-safety benefit only materializes if reports are actually reviewed and acted on. Complement with the AI Compliance Audit.

What You Still Cannot Control

Despite expanded controls, a residual gap remains between traditional-campaign precision and Performance Max automation.

The Residual Gap

No per-placement approval: You set constraints, not selections — some inventory the algorithm reaches was never specifically chosen.
Limited channel isolation: You cannot in all cases fully separate or independently control every channel within one campaign.
Bounded reporting: Granularity is improving but not unlimited; some aggregation remains.

Manage the gap with maximal account-level constraints, third-party verification, diligent report review, and a deliberate decision about which objectives belong in Performance Max versus a more granular campaign type. The honest framing: bounded, not absolute, brand-safety control. Keep creative defensible with the Keyword Risk Checker.

A Performance Max Brand-Safety Workflow

Run a continuous loop of fencing and auditing, not a one-time setup.

Five Steps

1. Configure before launch: Set suitability and inventory type; build placement, content-category, negative-keyword and brand exclusion lists at the account level.
2. Clean the creative: Truthful substantiated claims, required disclosures, matching landing pages.
3. Review reports on a cadence: Identify conflicting placements and wasteful queries from placement and search-terms reports.
4. Feed findings into exclusions: Add them to account-level lists; tighten suitability where adjacency leaked through.
5. Match campaign type to stakes: Reserve Performance Max for goals where automation outweighs the residual control gap; layer third-party verification.

Performance Max brand safety is an ongoing discipline of constrain-then-audit. Operationalize the creative checks with the Keyword Risk Checker and the AI Compliance Audit.

Performance Max Brand-Safety Checklist

[ ] Content suitability and inventory type set to brand risk tolerance at account level
[ ] Sensitive content categories and higher digital-content-label tiers excluded
[ ] Placement exclusion lists built for known off-brand channels, sites and apps
[ ] Account-level negative keyword lists in place for Search and Shopping
[ ] Brand exclusions and brand lists configured
[ ] Creative claims truthful, disclosed and landing-page-matched
[ ] Placement reports reviewed on a regular cadence
[ ] Search-terms insights reviewed; irrelevant queries excluded
[ ] Findings fed back into account-level exclusion lists
[ ] Third-party verification applied where the framework requires
[ ] Campaign type matched to each objective's brand-safety stakes

Screen creative with the Keyword Risk Checker, audit it with the AI Compliance Audit, and track control changes on the Policy Change Tracker.

Frequently Asked Questions

Why does Performance Max shift brand safety from manual selection to configuration?

Performance Max shifts brand safety from manual selection to configuration because its defining feature is that Google's algorithm, not the advertiser, decides where ads run across the entire Google network — so the advertiser cannot approve each placement individually and must instead set the rules that constrain the algorithm's choices, which means the brand-safety burden moves from picking placements to fencing the automated buyer. In a traditional campaign type, an advertiser could select specific placements, build managed placement lists, and control with precision where ads appeared. Performance Max takes a single set of assets — text, images, video, feeds — and serves them across Search, Shopping, YouTube, Display, Gmail, Discover and Maps, with the algorithm optimizing toward the advertiser's conversion goal by choosing placements, audiences and formats dynamically. That automation is the source of both its performance and its brand-safety challenge: the system reaches inventory the advertiser never manually selected, including a wide range of YouTube channels, Display sites and apps, and the advertiser has no per-placement approval step. The consequence is that the only way to govern where ads appear is through the settings that apply before and around the automation: content suitability and inventory type for adjacent-content sensitivity, account-level placement and content exclusions for specific channels and themes, negative keywords and brand controls for Search and Shopping context, and the digital-content-label and sensitive-category settings. These are not placement choices; they are constraints on the algorithm's freedom. Because they mostly operate at the account level, they apply across campaigns including Performance Max, which makes account-level brand-safety configuration the foundation of any safe Performance Max program. The practical reframing is that an advertiser who treats Performance Max as a trusted black box — launching with default settings and no exclusions — has effectively delegated brand safety to an optimization algorithm whose goal is conversions, not suitability, while an advertiser who configures suitability and exclusions deliberately retains control over the boundaries even as the algorithm works within them. The discipline, then, is to set the fences first and audit continuously, rather than to select placements one by one. To make sure the creative inside those fences is itself compliant, screen it with the Keyword Risk Checker and audit it with the AI Compliance Audit. The organizing principle is that automation removes per-placement control, so brand safety becomes the discipline of configuring and auditing the constraints on the algorithm.

How do content suitability settings and inventory type work, and how should advertisers set them?

Content suitability settings and inventory type are the Google Ads controls that govern how sensitive the content adjacent to ads — especially on YouTube and Display — may be, typically through an inventory-type choice of expanded, standard or limited, and advertisers should set them at the account level to match the brand's risk tolerance, recognizing that they apply across campaigns including Performance Max and are the primary lever for adjacent-content sensitivity. The inventory-type setting defines a spectrum. Expanded inventory maximizes reach by allowing ads to run against the broadest range of content that meets Google's monetization policies, accepting more adjacency to sensitive themes. Standard inventory is the default middle ground, excluding the most sensitive content — strong profanity, graphic violence and the like — while preserving broad reach, and it suits most advertisers. Limited inventory is the most conservative, excluding additional categories of sensitive content and restricting ads to lower-sensitivity contexts at the cost of reach. Alongside inventory type, advertisers can exclude specific content types and digital content labels — the labels that classify content by audience maturity, analogous to content ratings — so that ads do not run against content above a chosen maturity level, and can exclude sensitive content categories such as tragedy and conflict, sensitive social issues, or mature themes that the brand wishes to avoid. The right configuration follows from the brand and category: a family brand, a regulated vertical, or a brand with low risk tolerance should choose limited inventory and exclude additional sensitive categories and higher content-label tiers, accepting reduced reach for predictability; a brand comfortable with broad contexts and prioritizing scale can use standard or expanded while still excluding the categories most clearly incompatible with it. Because these settings apply at the account level, they form the baseline brand-safety posture for all campaigns, so configuring them deliberately is the first and most consequential step — leaving them at default expanded-leaning settings effectively maximizes reach at the expense of suitability. Advertisers should also revisit them as placement reports reveal where ads actually ran, tightening inventory type or adding category exclusions where the data shows unsuitable adjacency. The settings govern adjacency, not whether the ad is policy-compliant, so they work alongside, not instead of, creative-level compliance. To audit the creative itself before it runs in those contexts, use the AI Compliance Audit, and for the broader brand-safety enforcement landscape see the harmful-content enforcement guide. The organizing principle is that inventory type and content-suitability exclusions set adjacent-content sensitivity at the account level, so they should be configured deliberately to the brand's tolerance.

What account-level exclusions can advertisers apply to Performance Max, and why are they essential?

Advertisers can apply several account-level exclusions that constrain where Performance Max ads run — placement exclusion lists for specific channels, sites and apps; excluded content types and sensitive categories; negative keyword lists; and brand exclusions and brand lists for Search and Shopping — and these are essential because, since Performance Max chooses placements automatically, exclusions are the primary mechanism by which an advertiser keeps ads off inventory and contexts that conflict with the brand. Placement exclusion lists let advertisers name specific YouTube channels, websites, apps and app categories where ads must not appear, and applying these at the account level means they cover Performance Max alongside other campaign types. This is the direct tool for keeping ads off known problematic or off-brand inventory. Excluded content types and sensitive-category exclusions let advertisers block whole themes — for example tragedy and conflict, sensitive social issues, or mature content — so the algorithm avoids those contexts. Negative keyword lists, which Google extended to Performance Max, let advertisers prevent their Search and Shopping ads from showing on queries that are irrelevant or off-brand, and account-level negative keyword lists provide a reusable, centralized exclusion set. Brand exclusions and brand lists give control over brand-related traffic — for instance excluding or including specific brands so that Shopping and Search ads behave appropriately around competitor or own-brand terms. These exclusions are essential rather than optional because the alternative — relying on the algorithm's optimization alone — leaves placement entirely to a system optimizing for conversions, which can wander into cheap, low-quality, or off-brand inventory that technically drives some conversions but damages brand safety and wastes spend. By building exclusion lists before launch and expanding them as placement reports reveal where ads actually ran, advertisers convert Performance Max from an unfenced automated buyer into a constrained one. The most effective practice is to maintain centralized account-level exclusion lists — placements, content types, negative keywords, brands — so that the brand-safety posture is consistent and reusable across campaigns, and to treat the lists as living documents updated from placement data. Because exclusions operate at the account level, a single well-maintained set protects all campaigns, making this the highest-leverage brand-safety investment for advertisers running automation. To identify off-brand or risky terms to exclude, screen with the Keyword Risk Checker, and track platform control changes on the Policy Change Tracker. The organizing principle is that exclusions are the primary brand-safety mechanism for automated campaigns, and centralized account-level lists protect every campaign at once.

What does Performance Max placement transparency now show, and how should advertisers use it?

Performance Max placement transparency has expanded over time, and advertisers now get placement reports showing where ads actually ran across the Google network and search-terms insights showing what queries triggered them — and the right use is to treat these reports as the feedback loop that reveals where the algorithm wandered, then to feed unsafe or wasteful placements back into account-level exclusions. Early Performance Max gave advertisers little visibility into placements, which was a frequent criticism because it made brand-safety verification difficult: advertisers could not easily see whether their ads had run on unsuitable channels or apps. Google responded by adding placement reporting that lists the placements where Performance Max ads were served, along with impression data, so advertisers can review the actual inventory their campaigns reached. It also added search-terms and related insights that shed light on the queries and themes driving Search and Shopping delivery. The value of these reports is diagnostic: they convert the black box into something auditable, letting advertisers detect placements that conflict with the brand — off-brand channels, low-quality apps, content themes the brand avoids — and queries that are irrelevant or wasteful. The correct workflow is to review placement reports on a regular cadence, identify placements and content that should not have run, and add them to account-level placement exclusion lists and content-type exclusions so the algorithm avoids them going forward; similarly, review search-terms insights and add negative keywords for irrelevant or off-brand queries. This closes the loop: the automation makes the initial placement choices, the reports reveal the outcomes, and the exclusions constrain future behavior, progressively tightening brand safety as data accumulates. Advertisers should also use the transparency to verify that the suitability and inventory-type settings are performing as intended — if the reports show adjacency the settings should have prevented, that signals a configuration to tighten. Because the reporting has limits — it may not expose every detail an advertiser wants, and some inventory aggregation remains — advertisers should treat it as necessary but not exhaustive, complementing it with third-party verification where the brand-safety framework requires independent measurement. The key behavioral change is to stop treating Performance Max as set-and-forget: the placement transparency exists precisely so advertisers can audit and correct, and the brand-safety benefit only materializes if the reports are actually reviewed and acted on. To complement platform reporting with a review of your own creative and claims, use the AI Compliance Audit, and monitor reporting and control changes on the Policy Change Tracker. The organizing principle is that placement transparency is the feedback loop for fencing automation, and its value is realized only when advertisers review the reports and update exclusions.

What can advertisers still not control in Performance Max, and how should they manage the gap?

Despite expanded controls, advertisers still cannot exercise per-placement approval in Performance Max, cannot fully separate or independently control every channel within a single campaign, and do not get unlimited granularity in reporting — so a residual gap remains between the control of traditional campaigns and the automation of Performance Max, and advertisers should manage that gap by leaning on account-level constraints, third-party verification, and a deliberate decision about which campaigns belong in Performance Max at all. The core limitation is structural: Performance Max is designed to let Google's algorithm optimize across channels, so advertisers trade granular control for automated performance. They cannot pre-approve each placement, cannot in all cases set channel-specific bids or fully isolate YouTube from Display within the same campaign, and cannot see every micro-detail of delivery. This means the brand-safety controls that do exist — suitability, inventory type, exclusions, negative keywords — are constraints rather than precise selections, and there is always some inventory the algorithm reaches that the advertiser did not specifically choose. Managing the gap takes several forms. First, maximize the account-level constraints: comprehensive placement exclusion lists, conservative inventory type where the brand requires it, broad sensitive-category exclusions, and well-maintained negative keyword lists narrow the algorithm's freedom as much as the system allows. Second, use third-party brand-safety verification where the brand-safety framework demands independent measurement, because it provides assurance and documentation beyond Google's native reporting. Third, review placement reports diligently and act on them, accepting that correction is partly reactive — you discover and exclude unsuitable placements after some delivery, then prevent recurrence. Fourth, make a deliberate channel-strategy decision: for the most brand-sensitive objectives, an advertiser may choose campaign types that offer more granular placement control instead of, or alongside, Performance Max, reserving Performance Max for goals where its automation advantage outweighs the residual brand-safety gap. The honest framing for stakeholders is that Performance Max offers strong performance with bounded, not absolute, brand-safety control, and the responsible posture is to use every available constraint, verify independently, audit continuously, and choose the campaign type to match the brand-safety stakes of each objective. For sensitive or regulated brands especially, this deliberate matching matters. To keep creative and claims defensible regardless of placement, screen with the Keyword Risk Checker and audit with the AI Compliance Audit. The organizing principle is that Performance Max gives bounded not absolute control, so manage the residual gap with maximal constraints, independent verification, diligent auditing, and deliberate campaign-type choice.

What is the practical workflow to run Performance Max with strong brand safety in 2026?

The practical workflow to run Performance Max with strong brand safety in 2026 is to configure account-level suitability and exclusions before launch, verify the creative is itself compliant, review placement and search-terms reports on a regular cadence, feed findings back into exclusions, and decide deliberately which objectives belong in Performance Max — a continuous loop of fencing and auditing rather than a one-time setup. Begin before launch with the account-level foundation: set content suitability and inventory type to match the brand's risk tolerance, build placement exclusion lists covering known off-brand and problematic channels, apps and sites, exclude sensitive content categories and higher digital-content-label tiers the brand avoids, and create account-level negative keyword lists and brand controls for Search and Shopping. Because these apply across campaigns, they establish the brand-safety baseline for Performance Max and everything else. Next, ensure the creative inside those fences is compliant: claims truthful and substantiated, no prohibited content, disclosures where required, and landing pages that match the ad — because brand safety is about both where ads run and what they say. Once live, review the placement reports and search-terms insights on a regular cadence, identifying placements and queries that conflict with the brand or waste spend, and add them to the account-level exclusion and negative-keyword lists so the algorithm avoids them going forward. Use the reports also to verify that suitability and inventory-type settings are performing as intended, tightening them where adjacency they should have prevented appears. Layer third-party verification where the brand-safety framework requires independent measurement. Periodically reassess the channel strategy: for the most brand-sensitive objectives, consider whether a more granular campaign type is warranted, reserving Performance Max for goals where its automation advantage outweighs the residual control gap. Document the configuration, the exclusion lists, the review cadence and the findings so the program is defensible to stakeholders and, where relevant, to regulators. The throughline is that Performance Max brand safety is an ongoing discipline of constrain-then-audit: set comprehensive account-level fences, keep the creative clean, review the transparency reports, and continuously tighten exclusions as the data reveals where the automation went. To operationalize the creative checks, use the Keyword Risk Checker and the AI Compliance Audit, and track control and reporting changes on the Policy Change Tracker. The organizing principle is configure fences before launch, keep creative clean, review transparency reports, feed findings into exclusions, and match campaign type to brand-safety stakes.

Don't miss the next policy change.

Create a free account — track every policy change across 8 platforms, get instant alerts, and access every free compliance tool. Or try our Keyword Risk Checker first.

Create Free Account

Report Keywords — Run AI Compliance Audit

#Google Ads#Performance Max#Brand Safety#YouTube#Placement Exclusions#Content Suitability#Ad Compliance#Advertisers#Agencies#Compliance Guide 2026#Inventory Type

Share This Report

Tweet Share

Google Ads Healthcare and Medicines Compliance in 2026: Certification, LegitScript and Prohibited Categories

Google gates healthcare and medicines advertising behind certification, bans prescription sales without a prescription and opioid painkillers outright, and restricts pharmacies country by country.

Privacy Sandbox Is Gone: What the 2026 Retargeting and Measurement Reality Means for Advertiser Compliance

Google retired Topics, Protected Audience and Attribution Reporting, while third-party cookies stayed but grew unreliable — the 2026 retargeting and measurement reality.

Google Performance Max Auto-Generated Asset Disclosure May 2026: AI Creative Labelling, Asset Approval Cap & Advertiser Workflow

Google Performance Max's May 2026 update tightens auto-generated asset disclosure — AI-created variants now carry visible labels, asset approval caps narrow, and advertiser-side review burden lands.

Platforms

Industries

Knowledge

Blog

Performance Max Brand Safety in 2026: Placement Transparency, Exclusions and Account-Level Controls