Intent data explained: First, second and third party, and what a surge score can and cannot tell you
Intent data is account-level research behavior used to prioritize. How first, second and third party differ, and what a surge score of 70 means.
- Document
- Guide
- Funnel stage
- Visitor
- Published
- Written by
- Take the Market Desk
- Edited by
- Lila Odinaev
Intent data is research behavior tied to a company, not a person, and it works as a prioritization signal rather than proof of a purchase. First party comes from your own site, product and email, second party from a partner's site, and third party from external providers. A Bombora surge compares an account's past 3 weeks on a topic with its prior 12 weeks. In 6sense, 70 or higher counts as surging.
What is intent data?
Intent data is research behavior tied to a company rather than to a person. Demandbase defines it as "behavioral information that indicates an account may be researching topics related to a business problem, product, or solution." The unit is the account. That is why it fits account-based marketing more naturally than lead-level programs.
Treat it as a ranking input. Demandbase calls intent data most useful as a prioritization signal, and says it cannot tell you with certainty that an individual buyer is ready to purchase. It answers one question: which accounts are researching your topics more than usual right now. It does not answer who will sign.
How a surge is measured
A surge score is a comparison against the account's own baseline. Bombora, as described in 6sense's documentation, looks for sustained intent on a given topic in the past 3 weeks, compared to typical levels of intent over the past 12 weeks. Inside 6sense, an account counts as surging when it has a Company Surge Score greater than or equal to 70, and the data is updated each Sunday on a weekly cadence.
It is our own example, not the provider's formula.
Account B has changed more. A surge model ranks B higher because the signal is the change, not the volume. Keep that in mind when a large enterprise with steady research activity never appears on your surge list.
The weekly refresh also matters for routing. If your sales team works a surge list on Monday, the signal behind it reflects activity from before Sunday's update. Build your service level agreement for follow-up around that cadence.
How practitioners use it
On outcomes, over 85% of companies using intent data have achieved business benefits. On spend, 30% of companies investing in intent data plan to increase their spend, while only 10% have plans to reduce their investment.
Each provider sees a different slice of research activity, so each produces a different baseline and a different surge list. For definitions used throughout this piece, see our intent data glossary entry.
First, second and third party intent data compared
The three labels describe who collected the data and who holds the relationship with the buyer. They say nothing about quality on their own. Clearbit defines first-party data as what "you collect from your audience directly, via your own channels." Everything else is someone else's collection that you rent or buy.
First party is your own web, product and email activity. Foundry describes it as information collected from your owned digital properties. It warns that if you rely on it alone, you only see buyers who land on your website.
Second party is someone else's first-party data that you access through a partnership. Foundry names software review sites like G2 or TrustRadius as the main second-party offerings for B2B marketers. Clearbit files the same G2 data under third party, as data a company collects on its own sites. Ask each vendor which label it uses and why.
Third party and co-op data is gathered by external companies tracking online activity across multiple platforms. Co-op data is a subtype: many organizations pool behavior, and the provider scores it by topic. Bombora describes its pool as publishers, brand websites and data providers contributing research behavior.
| Type | Who collects it | Example signals | What you see | Blind spot (our summary) |
|---|---|---|---|---|
| First party | You, on your site, product and email | Page views, webinar attendance, form fills | Named visitors and accounts already engaging with you | Buyers who never reach your properties |
| Second party | A partner or publisher, on its own property | Product category engagement, vendor engagement on a review site | Lower-funnel research in your category | Early research before a buyer reaches the partner's site |
| Third party | An external provider, across many sites | Industry publication visits, competitor research, searches | Topic interest across a wider market | General category interest that is not buying intent |
| Co-op (a third-party subtype) | Many member sites pooling data, scored by the provider | Topic consumption across member sites | Accounts researching a topic more than usual | Activity on sites outside the co-op |
Foundry is specific about the trade-offs. Second-party data will not reveal top-of-funnel activity. Third-party data does not necessarily indicate buying intent.
A worked example
Take one target account across a month. The co-op flags it as researching a topic in your category. The account then compares your product with a competitor on a review site. Finally, someone from the account visits your pricing page twice.
Each type sees a different stage of the same research. In our reading, a stack that holds all three lets you time retargeting to the co-op signal and send sales in on the first-party one. You also need a lead scoring model that weights the types separately.
How B2B intent data is collected from a publisher co-op
Bombora runs one of the documented publisher co-ops, and its own descriptions lay out the method in three stages: gather content and visits from publishers, map that content to topics, then work out which company each visit came from. What follows is the company's method as published. The checks at the end are our reading.
Stage 1: Publisher relationships and visit volume
It said visit data was consented and written to first-party cookies.
On its current product page, Bombora states that 86% of the data in our Data Co‑op is shared exclusively with Bombora for deriving intent.
Stage 2: Content and metadata mapped to topics
The co-op gives access to the full text of articles and their metadata. Bombora uses that material to derive the Intent topics. Topic assignment is separate from identity: the company states that topics have no reliance on cookies or IP addresses.
The published scale figures vary by source and date:
| Figure | Value as published | Source |
|---|---|---|
| Topics tracked | tens of thousands | Bombora |
| B2B domains tracked | millions | Bombora |
| Business websites in the co-op | 5,000 | Influ2 |
| Topic clusters | more than 12,000 | Influ2 |
Stage 3: Resolving the visit to an account
Identity comes from visitor data, specifically IP address and first-party cookie data. Bombora described three methods used together:
- Consented IP addresses, tied to publisher consent strings.
- A composite built with outside identity vendors, which it called a ‘graph-of-graphs’ approach, naming LiveRamp as one vendor.
- In-house behavioral modeling of activity on IP addresses.
Bombora said that weaker identity would mostly affect topics with very little interest, or companies with very low activity in the Co-op. Influ2 makes a similar point about coverage: some industries or international segments simply don’t generate enough publisher data.
What to check before you load scores
These checks are our reading, not part of the published method:
- Topic fit. Pull the topic list your category maps to and confirm it matches the words your buyers use.
- Coverage on your list. Upload your target accounts and count how many show any activity at all. A thin match rate points to the coverage gap described above.
- Resolution path. Ask which of the three identity methods produced each account match, so you can see how the account was assigned.
For how these scores feed prioritization, see account-based marketing and lead scoring.
What an intent surge score measures
A Company Surge score compares an account with itself. In the definition 6sense publishes, Bombora "looks for sustained intent on a given topic in the past 3 weeks, compared to typical levels of intent over the past 12 weeks" (6sense). The reference point is the account's recent history on that topic. It is not a comparison with peers in the same industry.
The score range in one integration
The 6sense Kickstart Package provides scores "ranging from 70-100" (6sense). An account shows as surging when the most recent week's score is 70 or higher for that account and topic, and that threshold cannot be customized (6sense). The data refreshes each Sunday on a weekly cadence (6sense).
Other tools present the same signal differently. HubSpot shows a research level of High, Medium, Mild or Low on each event instead of a number (HubSpot).
Topic entitlements and selection
A score exists only for topics you have chosen.
| Entitlement in 6sense | Topics |
|---|---|
| Default | 12 |
| Default plus 25 additional | 37 |
| Default plus 50 additional | 62 |
| Unlimited | No selection limit |
Source: 6sense. Topic changes there can take up to 24 hours to appear across the platform. We suggest choosing the 12 default topics from the problems your product solves and the category terms buyers search for, not your brand name, and then leaving them in place long enough to read a trend.
- It clears the 70 line, so the account appears in a surging segment for that topic.
- Consumption on that topic over the past three weeks ran above the account's typical level for the prior 12 weeks.
- It does not tell you who read the content, how many people did, or what stage they are in. Influ2 notes that a high Surge score "doesn't necessarily mean someone is ready to buy" (Influ2).
To turn that into points, see lead scoring and the lead scoring model template.
What intent data cannot tell you
A surge is an account-level observation. It tells you that research activity moved. It does not say who moved it, whether money is attached, when a decision lands, or who else is in the running. Demandbase's own guidance lists what intent should not be treated as proof of, including that a specific individual has decided to buy and that an account has selected your company or product.
Four gaps follow from that.
- Which person is researching. Account-level co-op data does not name contacts. One reviewer summary of Bombora put it plainly: you won’t know anything about the contacts who may be in the market for your product.
- Whether budget exists. Topic consumption carries no signal about funding. A team can read about a category for months with no line item behind it.
- When they will buy. A rising score is not a date. Demandbase cautions against reading intent as proof that an account is ready for immediate sales outreach.
- Which vendors are on the shortlist. Research on a topic does not show whether you, a competitor or nobody is being evaluated.
There is also a volume problem. Even after filtering, the lists can still be hundreds or even thousands of accounts long. In our reading, that is why each gap needs a second signal before a seller gets the account.
Gap-to-signal template
| Gap a surge leaves open | Signal that fills it (our method) | Check before acting (our method) |
|---|---|---|
| Which person | First-party engagement: known contacts on high-value pages, form fills, webinar attendance | At least one named contact in a target role has engaged in the same window |
| Budget | Fit and sales signal: firmographic fit to your ideal customer profile, discovery questions on funding | Account passes fit; budget confirmed by a person, not inferred |
| Timing | First-party recency plus CRM history: open opportunities, renewal dates, past stalled deals | Recent first-party activity on pricing or comparison pages |
| Shortlist | Sales signal: discovery call, self-reported attribution, partner input | A buyer has stated who they are evaluating |
Use it as a gate. A surging account that clears none of the checks stays in nurture or advertising audiences. One that clears the person and fit rows moves to sales development research. Only budget and shortlist confirmation should move it toward a sales qualified lead.
This mirrors how Demandbase frames the job: combine intent with account fit, first-party engagement, CRM data, buying-group information, and other signals before deciding how to act.
Consent and privacy limits on intent data
The co-op model described earlier rests on consent captured by publishers. That consent is the part of intent data most likely to come up in a procurement or security review, so it pays to know what a provider can show you before legal asks.
What consent-based collection looks like
Bombora describes its co-op data as collected where consent strings can be traced and data can be deleted under regulations such as CCPA or GDPR. For identity, the same source says it uses IP address that is consented through the use of the consent strings from the publisher’s Co-op.
In practice that gives you two things to check. One is a record of consent tied to the signal. The other is a working path to remove data when a person asks.
How bidstream-derived data differs
Bidstream data comes from the information passed around during programmatic ad auctions. The person browsing did not agree to share it with an intent vendor. Bombora classes bidstream data as unconsented and says it is in questionable territory and does not meet privacy standards at most enterprise organizations. It also claims that Most Intent providers use third-party cookies and/or fingerprinting to determine identity. Treat both as one vendor's view of its competitors, and ask each provider directly.
In our reading, bidstream is not a fringe source. Bombora lists it among the narrow Intent data sources such as bidstream data, review sites, or publisher-specific consumption some providers rely on.
Privacy questions to put to any provider
Bombora's own evaluation guidance lists privacy and compliance considerations alongside data quality and scale. The table turns that into questions. The right column is our reading of what a usable answer contains.
| Question | What a usable answer includes (our reading) |
|---|---|
| Where does each signal originate? | Named source types, with bidstream use stated yes or no |
| How was consent captured? | The mechanism, such as publisher consent strings |
| Can consent be traced for a given record? | A described process, not a general statement |
| How are deletion requests handled? | Who receives them and how they reach your copy of the data |
| How is identity resolved? | Methods used, including any cookies or fingerprinting |
| What changes if a source loses consent? | How affected data is removed from feeds you already hold |
Send these in writing and keep the replies with your contract file. Your own counsel decides what the answers mean for your obligations. We make no legal judgment here.
One operational step: map where intent data lands in your stack, such as your customer relationship management system and lead scoring models. A deletion request has to reach every copy.
How accurate is intent data, and how to check a sample
Accuracy is not one number a provider can hand you. Forrester lays out an evaluation order. First, teams should start by understanding the scale of relevant signals within their core-fit accounts and offerings. Next, they determine the relative level of accuracy. Last, they look at overlap with sources they already have, to predict the incremental business impact of each new one.
Set up the sample
Intent providers rarely send a static file. The same Forrester post says buyers more often get a limited data feed or short proof-of-concept trial, so the pace of new signals is visible. Keep the scope tight: a narrow keyword focus, clear geographic or industry definitions, and a tight timeframe (weeks, not months). Generic category keywords may obscure differentiation between providers.
Give every provider the same account list and the same topic map. Then pick the segment your team knows best. Forrester's advice is to focus on areas you know best, because that is where you can check a signal against what sales already knows.
Run the three checks
| Check | What to count | Pass question (our reading) |
|---|---|---|
| Scale | Core-fit accounts with a signal on your mapped topics | Enough flagged accounts to change who sales calls |
| Relative accuracy | Flagged accounts your team can confirm from calls, meetings or open deals | Agreement holds in the segment you know best |
| Overlap | Flagged accounts already visible in your first-party data | Enough new accounts to justify the cost |
A worked example with our own numbers. You send 400 core-fit accounts and a narrow topic map for a four-week trial. The provider flags 60. Your website and form data already showed 18 of the 60, so 42 are incremental. Run the same math on each provider and compare the incremental count, not the raw total. Then size the follow-up with the pipeline coverage calculator.
Expect more than one provider
That makes the overlap check the one that decides budget. Ask each provider where its signals come from. Bombora, for example, states that 86% of the data in our Co-op is shared exclusively with Bombora for deriving intent. In our reading, a claim like that is a reason to run the overlap test, not a substitute for it. Your own incremental count is the number to bring to finance.
How to test whether intent data works with an account holdout
A vendor dashboard shows which accounts surged and which of them later became opportunities. It cannot show what those accounts would have done if you had left them alone. Bombora says its Company Surge product lets marketing and sales teams pinpoint the accounts most likely to be in-market. An account holdout tests whether acting on that signal adds pipeline, which is the number your renewal depends on.
In the example, contacted surging accounts converted to opportunities at 7.0%, held-out surging accounts at 4.0% and non-surging accounts at 2.5% within 90 days.
| Item | Value |
|---|---|
| Surging, contacted | 7 % of accounts |
| Surging, held out | 4 % of accounts |
| Not surging | 2.5 % of accounts |
Naive comparison (contacted surging versus not surging): 2.8x. True lift of acting on the signal (contacted versus held out): 1.75x. Source: Take the Market worked example (illustrative inputs)
The method is a standard incrementality test applied to accounts, the same logic we use in incrementality testing for paid media. Every surging account gets randomly assigned to one of two groups. The treated group gets sales outreach and ads. The holdout gets nothing extra from you for the test window.
| Account group (example) | Accounts | Opportunities in 90 days | Opportunity rate |
|---|---|---|---|
| Surging, contacted by sales and ads | 200 | 14 | 7.0% |
| Surging, held out (no outreach) | 200 | 8 | 4.0% |
| Not surging | 1,600 | 40 | 2.5% |
The common mistake is comparing contacted surging accounts with non-surging accounts. That gives 2.8x, and it mixes two effects: surging accounts were already more active, and you also worked them. The holdout isolates the second effect. True lift is 7.0% divided by 4.0%, or 1.75x.
The calculation
from math import sqrt, erf
def two_prop_test(x1, n1, x2, n2, z_crit=1.96):
p1, p2 = x1 / n1, x2 / n2
pooled = (x1 + x2) / (n1 + n2)
se_pooled = sqrt(pooled * (1 - pooled) * (1/n1 + 1/n2))
z = (p1 - p2) / se_pooled
p_value = 2 * (1 - 0.5 * (1 + erf(abs(z) / sqrt(2))))
se_diff = sqrt(p1*(1-p1)/n1 + p2*(1-p2)/n2)
ci = (p1 - p2 - z_crit*se_diff, p1 - p2 + z_crit*se_diff)
return p1 / p2, z, p_value, ci
print(two_prop_test(14, 200, 8, 200))The difference is 3 points, but the 95% confidence interval runs from about minus 1.5 points to plus 7.5 points. At 200 accounts per group, this result could still be noise.
Steps to run it
- Freeze the surge list on day one and assign accounts by hashing the account ID, so nobody hand-picks the treated group.
- Suppress the holdout in sales sequences and ad audiences, and log any accidental touches.
- Count opportunities created in 90 days for both groups, using the same sales qualified lead definition.
- Run the code above and record lift, p-value and the interval.
Go or no-go rule for renewal
- Go: the lower bound of the interval sits above zero, and the extra opportunities, valued at your win rate and deal size, exceed the contract cost.
- Extend: the interval crosses zero, as in this example. Rerun with a larger split before deciding.
- No-go: the upper bound sits near zero after an adequately sized test.
What this page does not cover
This page does not compare, rank or recommend intent data providers, and it does not cover pricing, contract terms or contact-level identification. The privacy section lists questions to put to a provider and is not legal advice: your own counsel decides what the answers mean for your obligations. Nothing here is financial advice.
Related on Take the Market: ABM playbook for one-to-few programs: the account list, the plays, the metrics and a 90-day plan; Demand creation vs demand capture: definitions, the 95-5 rule, budget split and measures; Email deliverability requirements in 2026: the Google, Yahoo and Microsoft sender rules, warm-up and the numbers to wa.
Questions
- What is intent data in B2B marketing?
- Demandbase defines intent data as behavioral information that indicates an account may be researching topics related to a business problem, product or solution. The unit is the account, not the person, which is why it fits account-based marketing more naturally than lead-level programs. Treat it as a ranking input: it shows which accounts are researching your topics more than usual right now, not who will sign.
- What is the difference between first party and third party intent data?
- First-party data is what you collect from your own web, product and email activity, so on its own it only shows buyers who land on your properties. Third-party data is gathered by external companies tracking online activity across multiple platforms, and Foundry notes it does not necessarily indicate buying intent. Second party sits between them: someone else's first-party data, such as a review site, that you access through a partnership. Vendors file the same data under different labels, so ask each one which label it uses and why.
- What does a Bombora Company Surge score mean?
- It compares an account with its own history, not with peers. Bombora looks for sustained intent on a topic over the past 3 weeks against typical levels over the past 12 weeks. In 6sense, the Kickstart Package shows scores from 70 to 100, an account counts as surging at 70 or higher, that threshold cannot be customized, and the data refreshes each Sunday. The score does not tell you who read the content, how many people did, or whether anyone is ready to buy.
- How accurate is intent data?
- Accuracy is not one number a provider can hand you. Forrester's evaluation order is to check the scale of relevant signals in your core-fit accounts, then relative accuracy, then overlap with sources you already hold. In our worked example, a provider flags 60 of 400 accounts in a four-week trial, 18 of which your first-party data already showed, so 42 are incremental. Compare providers on that incremental count, not the raw total.
- Is third party intent data GDPR compliant?
- That depends on how each provider collects consent, and your own counsel decides what a provider's answers mean for your obligations. Bombora describes its co-op data as collected where consent strings can be traced and data can be deleted under regulations such as the General Data Protection Regulation (GDPR). It classes bidstream data from ad auctions as unconsented, which is one vendor's view of its competitors. Send each provider written questions on signal origin, consent capture, traceability, deletion and identity resolution, and keep the replies with your contract file.
- How do I test if intent data increases pipeline?
- Run an account holdout: randomly assign surging accounts, for example by hashing the account ID, to a treated group that gets sales outreach and ads and a holdout that gets nothing extra. In our example, 200 treated accounts produced a 7.0% opportunity rate in 90 days against 4.0% for the holdout, a true lift of 1.75x, not the 2.8x you get by comparing against non-surging accounts. The 95% confidence interval still crossed zero, so the rule is to extend the test with a larger split before deciding on renewal.
Sources
- What Is B2B Intent Data? Types & How to Use It | Demandbase, Demandbase, 2026-08-11.
- FAQ: Using Bombora Company Surge Data in 6sense, support.6sense.com.
- Intent Data Expectations Vs. Reality, What’s Working, And Where Are The Gaps?, Forrester, 2023-10-26.
- What is first-party vs third-party data?, clearbit.com.
- First vs. Third-Party Intent Data Explained | Foundry, Foundry, 2023-04-26.
- Decoding the 7 Types of Intent Data: What You Need to Know, Bombora, 2025-01-25.
- Bombora’s Company Surge® Intent Data continues to deliver despite challenges like remote work and the cookieless future - Bombora, Bombora, 2021-10-28.
- Bombora Company Surge® | The gold standard in B2B Intent data, Bombora, 2026-09-30.
- What Bombora Intent Data Gets Right (+ Where it Falls Short), influ2.com.
- Use Company Surge signals, powered by Bombora, knowledge.hubspot.com, 2026-08-11.
- Key Questions to Ask When Evaluating B2B Intent Data Providers., Bombora, 2024-11-22.
- How To Evaluate Intent Data Providers, Forrester, 2025-07-01.