360Airo

Inference is metered explicitly, which is unusual, and the platform underneath is a conventional cold email stack.

The metering is the notable part. Personalisation credits run at five hundred on the free tier, three thousand on the lower paid plan, ten thousand above it and unlimited at the top. Most vendors in this index bundle generation into a seat price and count something else; this one charges for it directly, so a buyer can see what the model layer is worth to the vendor.

What those credits buy: generated email sequences, personalised introductions, semantic variables inserted into templates, split test variants across four steps, and follow up handling that tracks replies and pauses a sequence once a meeting is booked. The top tier mentions custom models and interface access without defining either.

Beneath it the product is deterministic and familiar: warm up, inbox rotation, sender rotation, verification, domain and authentication record management, a consolidated inbox and a prospect record system. A customer who never spent a personalisation credit would still have a working sending platform, which is the test this axis applies.

The positioning as an autonomous sales agent sits above a sequencer.

Ask what one personalisation credit actually buys.

One automatic behaviour is exactly right and the rest of the governance is thin.

The right one: the platform tracks replies and pauses a sequence once a meeting is booked. Booking is the moment a prospect has converted, and continuing to send after it is the most common and most avoidable failure in automated outreach. Pausing on that specific trigger rather than only on a reply shows someone thought about the workflow.

Around it: sender rotation spreads volume, a sequence quality score gives a signal before launch, split testing runs across up to four variants, and team workspaces segment activity with shared audiences.

What two passes could not locate: any approval step before generated content sends, any audit trail, any permission model beyond user counts, any stated daily action limit on the professional network side, and any statement of what happens when a connected account is restricted.

The absence of network action limits is the notable gap, since seats are sold by the tier and nothing published describes how hard each one is worked.

Ask what daily limits apply to professional network seats.

Inference is metered precisely and described not at all.

The vendor counts personalisation credits to the unit across four tiers, so it clearly tracks model usage internally. Two passes across the pricing page, the feature listings, the home page and independent coverage located no provider, no model name, no version, no statement of what prospect data is transmitted for generation, no training or retention position and no accuracy figure.

The top tier advertises custom models without defining what that means. It could describe fine tuning on a customer's own material, a choice between providers, or a prompt configuration, and those carry very different implications for where customer data travels. A buyer paying for the capability cannot tell which they are getting.

Semantic variables are named as a feature, meaning the system infers substitutions rather than filling fixed fields, and nothing describes what informs them.

Insights are described as evolving with usage data, which implies learning from customer activity, with no boundary stated.

Ask what custom models means at the top tier and which provider runs generation.

A customer satisfaction score of four point nine appears on the pricing page with no visible review base anywhere.

Two passes located no rating on any independent platform. The profile on one major directory carries zero reviews. So the figure is published without any retrievable source, and a buyer cannot establish what it was calculated from or how many customers it represents.

Three testimonials appear on the home page carrying specific claims: meetings tripled, a reply rate moving from five to eighteen percent in two weeks, and generated introductions outperforming most human representatives. None of those retrieved carried a name, a title or a company.

A customer stories page exists in the navigation and was not opened.

Two smaller observations belong here for a reader rechecking. The interface mockup on the home page shows a booked meeting attributed to a contact at a company whose name is the standard placeholder used in software examples. And the copyright line reads 2024 on a site otherwise current through 2026.

The underlying company is identifiable, with a published Florida address and two telephone numbers.

Ask what the four point nine satisfaction figure was measured across.

A published anti spam policy, and a compliance claim no platform can honour.

The policy is real and worth crediting. It sits in the footer as a separate document alongside terms and privacy, and very few vendors in this index publish one at all. Alongside it, verification credits are bundled into every paid tier and a spam checker is published free, both of which reduce the volume of unwanted or undeliverable contact.

The claim is the problem. The vendor's own product description states that it maintains data protection and anti spam compliance through encryption and strict protocols, allowing users to run campaigns across regions without compliance concerns. Compliance in cold outreach turns on where a list came from, whether a lawful basis exists to contact those people, and whether they can opt out. None of that is affected by how a platform encrypts data at rest, and no tool can relieve a sender of obligations that attach to them rather than to their software.

A buyer reading that sentence would reasonably conclude the platform handles a problem it cannot handle.

Two passes also located no unsubscribe mechanism, no suppression list and no consent basis for the enrichment engine.

Ask how unsubscribes are inserted and honoured across sequences.

Three documents published and nothing behind them.

The footer carries terms of service, a privacy policy and an anti spam policy. Two passes located no data processing agreement, no subprocessor list, no retention schedule, no deletion commitment, no residency statement, no rights request process and no named privacy contact.

Encryption is asserted in marketing copy as enterprise grade, with no detail about what is encrypted, at rest or in transit, or under what key management.

The holdings are substantial and include two categories requiring more than this. The platform holds working access to connected mailboxes, up to twenty on the middle tier and unlimited above it, meaning credentials or tokens for a customer's email estate. And it holds access to professional network accounts sold by the seat, each carrying an individual's full network and private correspondence.

Alongside those sit enriched contact records about named individuals, generated message content, campaign history and the consolidated inbox spanning both channels.

A vendor claiming data protection compliance in its own product description would be expected to publish the processing agreement that claim depends on.

Ask for the processing agreement and how mailbox credentials are stored.

An enrichment engine described only as inbuilt, with nothing behind the word verified.

The vendor states that a customer can upload their own data or discover verified contacts and companies using the built in enrichment engine, and that the platform includes tools for discovering verified business contacts. Verification credits are metered separately per tier, at three thousand and ten thousand monthly, which confirms address checking happens at volume.

Two passes located no supplier, no record count, no coverage statement, no collection method, no consent basis, no accuracy figure and no refresh cadence for any of it.

The word verified is doing unsupported work. Verification confirms an address is deliverable; it says nothing about where the record came from or whether the person behind it has any relationship with the sender. Those are different questions and the marketing conflates them.

The distinction matters more here than usual because the vendor separately claims its platform lets customers run campaigns across regions without compliance concerns, and the lawful basis for contacting people in a database depends entirely on how that database was assembled.

Ask where the enrichment engine sources contacts and on what basis.

Professional network seats are a priced line item on every paid tier, and what they automate is prohibited.

Three seats on the lower paid plan, five above it, unlimited at the top. Each connects an account for automated connection requests and automated messaging, and the vendor describes automating the entire prospecting process on that network while maintaining safe usage and professional credibility.

Automated access and third party automation software are prohibited by that platform's user agreement whoever performs them. Selling the capability by the seat, and quantifying how many seats each tier includes, makes it a core commercial line rather than a peripheral feature, and a customer buying the middle tier is paying for five accounts to be worked this way.

What distinguishes this from the worst records in this batch is what is absent. Two passes located no undetectability marketing, no claims about randomised delays defeating detection, and no assertion that the automation is permitted by the network's terms. Another vendor built earlier today makes that last claim explicitly, which is worse.

The email side carries no equivalent exposure and runs through the customer's own connected mailboxes.

Ask what happens to a customer's campaigns when a connected network account is restricted.

Generated messages reach strangers with no model named and no security position published.

On the model side, two passes located no provider, no evaluation, no accuracy figure and no constraint on what generated content may say. Personalisation credits are consumed producing introductions that go to real people, and nothing describes a review step before they send. Insights are described as evolving with usage data, implying the system learns from customer activity, with no boundary stated.

On the security side the position is thinner still. Encryption is claimed in marketing copy as enterprise grade without any detail. Two passes located no access control description, no incident response process, no breach notification commitment, no named security contact, no vulnerability disclosure route, no certification of any kind, no subprocessor list and no status page.

The custody makes that consequential rather than routine. The platform holds working access to a customer's connected mailboxes, up to twenty on the middle tier and unlimited above, plus professional network account access sold by the seat, plus the consolidated correspondence flowing through both.

A compromise would expose a customer's entire outbound estate at once.

Ask what protects stored mailbox and network account credentials.

The selling point is that the writing does not read as machine written, stated by the vendor through a testimonial it chose to publish.

That testimonial claims the generated introductions are better than those most human representatives produce. The point being sold is not that the recipient is told a machine wrote it; the point is that they cannot tell. Personalisation credits meter exactly that capability, and semantic variables exist so substitutions read naturally rather than as filled fields.

On the professional network side, automated connection requests and messages arrive under the customer's own name with nothing indicating that software sent them.

Two passes located no unsubscribe mechanism anywhere on the email side, which removes the one control a recipient normally holds, and no suppression list.

Identity is not falsified. Mail leaves from the customer's own connected mailboxes and network messages from their own account, with no persona, no rented profile and no synthetic sender.

One recipient favourable behaviour exists and deserves crediting: the platform pauses a sequence once a meeting is booked, so somebody who has already agreed to talk stops receiving automated follow ups.

Ask whether an unsubscribe link is inserted into sequence emails by default.

Ten free diagnostic tools, and not one named integration anywhere.

The free tools are the substantive part and they are a real contribution rather than lead bait: an address verifier, a mailbox count calculator, generators for two authentication record types, a deliverability test, an address permutator, a template analyser, a spam checker, a sequence builder and a signature builder. That set covers most of what someone setting up cold email infrastructure needs to check, and publishing them openly is useful whether or not anyone buys the platform.

Domain management inside the product is equally practical: buy domains and configure authentication records without leaving the platform.

The integration position is where this falls down. Record system connections are described as limited on the lower tier, full on the middle one and custom at the top, and two passes located no named record system anywhere on the pricing page or in the feature listings. A buyer cannot tell whether their own system is supported.

Interface access appears only at the top tier, alongside dedicated infrastructure. Two passes located no published documentation, no webhooks and no protocol server.

Ask which record systems are supported and what full integration means.

One infrastructure phrase at the top tier and nothing else.

Dedicated infrastructure appears in the enterprise feature list without definition. It could mean isolated sending addresses, a separate application instance, or a dedicated database, and those are materially different things. Every tier below it is presumably shared, though that is inferred rather than stated.

Two passes across the pricing page, the feature listings, the home page and the footer located no hosting provider, no region, no data centre, no residency commitment, no tenancy or isolation model, no encryption detail beyond a marketing adjective, no backup position, no continuity plan, no uptime commitment and no status page.

The residency question is live rather than theoretical here. The vendor's own product description claims customers can run campaigns across regions without compliance concerns, which is a direct assertion about European operation, and European data protection turns partly on where personal data is processed and whether a transfer mechanism exists. Nothing published addresses either.

The company publishes a Florida address, so United States processing is the reasonable assumption absent any statement.

Ask where data is processed and what dedicated infrastructure includes.

Three legal documents and no security material of any kind.

The footer carries terms of service, a privacy policy and an anti spam policy. Two passes located no certification, no audit report, no examination, no penetration test, no trust portal, no dedicated security page, no access control statement, no incident process, no named security contact, no vulnerability disclosure route, no subprocessor list and no status page.

Encryption appears once, in the vendor's own product description, as enterprise grade, which is an adjective rather than a control. It is also the load bearing element of the compliance claim recorded elsewhere in this record, since the vendor cites encryption as the mechanism by which customers avoid compliance concerns.

What sits behind that is a platform holding working access to a customer's connected mailboxes and professional network accounts, plus the correspondence flowing through both. On the top tier both are unlimited.

A vendor selling to enterprise buyers, with a dedicated account executive at the top tier, will meet supplier assurance questionnaires, and there is currently nothing published to answer one.

Ask whether any independent security assessment exists and where researchers report vulnerabilities.

Four tiers published in detail, and the page contradicts itself on the single most important number.

The tier cards state unlimited email sending on the free, lower and middle plans. The comparison table further down the same page states a daily send limit of one hundred on the lower plan and one thousand on the middle one. Those cannot both be true, and daily sending capacity is the first figure a cold email buyer needs. One hundred messages a day is a modest allowance; unlimited is not a synonym for it.

Setting that aside, the disclosure is otherwise good. Free, ninety nine dollars, two hundred and ninety nine dollars and a custom tier, with annual billing saving up to seventeen percent. Quantities are stated for contacts, mailboxes, users, personalisation credits, network seats and verification credits at every level, and the comparison table adds connected domains and sequence capacity. Terms are plain: no long term contracts, upgrade downgrade or cancel at any time, a fourteen day trial and no card required.

Two further pricing structures exist behind separate tabs, covering an agent product and an agency plan, and neither was captured, so what an agency pays is unrecorded.

Ask what the actual daily sending limit is on each tier.

Programmatic access is reserved for the top tier, which is the wrong place for it.

Interface access appears only in the enterprise feature list, alongside custom models and dedicated infrastructure. Everyone below it, including customers paying two hundred and ninety nine dollars monthly with twenty five thousand contacts and twenty mailboxes, has no stated programmatic route to their own data. Two vendors built earlier in this same sweep include interface and webhook access on their cheapest paid plans specifically so that switching costs stay low.

Two passes located no export mechanism at any tier, no format, no scope statement, no deletion commitment, no retention position after cancellation and no account closure process.

Record system synchronisation exists and would carry campaign activity outward, but no record system is named anywhere, so a buyer cannot confirm their own is supported.

What would accumulate here over a year is substantial: contact records up to twenty five thousand on the middle tier, sequence configurations, generated content, campaign history and the consolidated correspondence from both channels.

The commercial exit is clean, with cancellation available at any time and no long term contract.

Ask whether data can be exported below the enterprise tier.

The deliverability stack is the strongest part of this product and the free tools extend it beyond customers.

Inside the platform: warm up from the lower paid tier upward, inbox rotation with an advanced variant above it, sender rotation, and monitoring covering sender health, warm up activity, inbox placement and overall deliverability performance. Address verification is metered per tier at three and ten thousand credits monthly. A sequence quality score gives a signal before a campaign launches rather than after it fails.

Domain management is genuinely practical: a customer can buy domains and configure authentication records directly in the platform, which removes the step where most cold email setups go wrong.

The free tool set reinforces it. Generators for two authentication record types, a deliverability test, a spam checker, a template analyser and a mailbox count calculator are published without charge, and that last one addresses the sizing question a new sender usually gets wrong.

Two gaps. Warm up is absent from the free tier, so the entry plan sends without it. And the contradiction between advertised unlimited sending and a stated hundred per day limit makes the practical capacity unclear.

Ask what the mailbox calculator recommends and how warm up ramps.

Three commercial structures behind separate tabs, which is real segmentation, and thin content behind the labels.

The pricing page offers sales outreach, an agent product marked new, and an agency plan as three distinct tabs. Selling agencies a different structure from direct teams is a genuine distinction, since an agency's constraint is client count rather than seat count, and it suggests the vendor understands the difference.

The tier ladder covers a free individual plan, a small team plan at three users, a growing team plan at five, and an unlimited enterprise tier with a dedicated account executive.

Three audience segments are named covering early stage companies, smaller businesses and enterprises.

What undercuts it is that the segment links all resolve to the same general features page rather than to segment specific material, so a buyer identifying as an agency or an enterprise finds the same content. Two of the three pricing tabs were not captured, so what those structures actually cost is unrecorded.

Two passes located no geography, no industry vertical, no named customer and no coverage statement for the enrichment engine.

Ask what the agency plan costs and how it is structured.