LeadPilot

Founded in 2019, which places the company several years ahead of the generative model wave, and the product's shape shows it. The engine is a nightly search of national company registers against operator defined segments, followed by contact resolution, sequencing through a connected mailbox and follow up before a lead goes cold, none of which requires a model.

The model layer sits on top and the pricing page marks it as recent, labelling personalised emails, targeting and the email editor as new across every tier. Apply the removal test and what remains is a complete and sellable register driven prospecting platform with segments, sequences, record synchronisation and dashboards. Graded at the middle band on vintage rather than on marketing volume, which is the same reading this index has applied to every established platform that added a model programme to a working product.

The platform runs unattended by design. A segment is activated once and the system then searches the registers every night for new matching companies, resolves contact details, generates the message and sends it, and follows up before a lead cools. Two real ceilings constrain it and both deserve crediting. Active segments are capped by tier at one on the free plan and five on every paid plan, so the breadth of what can run is bounded.

More importantly the lead allowance is a hard numeric cap on how many people can be contacted at all, published per tier in two denominations, which is a volume ceiling most vendors in this category do not have at any price. The automatic deletion and suppression on any reply is also a containment behaviour rather than a marketing feature.

Off the upper band because none of that is oversight at the point of action: no approval step exists before a generated message goes out, no review queue, no per message audit record is described, and no escalation path is published.

Four model branded surfaces are named across the navigation and the pricing table, covering personalised email, targeting, an email editor and a business to business chat assistant, and the privacy policy describes the application itself as one that finds and contacts leads automatically using artificial intelligence. Beyond the label nothing is disclosed.

No model, provider, version, hosting location or processing boundary appears anywhere on the pages read, and nothing describes how a generated message is produced, what context is supplied to produce it, or whether any human review sits between generation and sending.

The gap that matters most for this particular vendor is the interaction between the model layer and the contact records, since the policy commits to temporary storage and deletion on reply and says nothing about whether generated content or the context used to generate it falls under the same commitment.

Six customer logos appear on the pricing page and all six are recognisable companies in the vendor's home market, including a large financial advisory group, which is a meaningfully different signal from an unattributable logo wall. A customers page carries at least one narrative describing a relationship that began as a trial and ran for two years, and a team page names the leadership.

Against that, the page was not read for attribution this pass and no named individual, title or quantified result was confirmed from it. The one quantified claim published, that salespeople free up ten hours a week on average, carries no sample, method or period.

A third party financial directory reports roughly one million dollars of annual revenue from a nine person bootstrapped team, and that same source states plainly that it has not spoken to management and that the figure is an estimate, so it is recorded as an estimate rather than as evidence. No case study and no presence on a major software review platform was located.

The mechanical controls are the strongest in this category and they protect the recipient rather than the sender. An email response of any kind triggers deletion of the stored record and suppression of future contact from that customer, which is a stronger instrument than an unsubscribe link because it fires on any reply rather than requiring the recipient to find and use the right words. A public opt out page sits in the footer of every page.

A permanent global exclusion from every customer's future searching is available on request. The European data protection regulation is named repeatedly, the legitimate interest basis is articulated with its purpose rather than merely labelled, customers are described as controllers under a signed processing agreement, and the vendor invites reports of customers breaching those obligations. Off the top band on one clear overclaim and one omission.

The platform page answers whether cold email is permitted with an assurance that using the product means the customer complies with all laws and regulations, which no supplier can warrant and which the vendor's own policy contradicts by placing controller obligations on that customer. And no separate acceptable use or anti spam policy was located, with nothing addressing electronic marketing consent rules that differ by member state.

The strongest privacy posture of any data vendor in this index, and the reason is structural before it is substantive. The policy is divided into three sections by whose data is being described, and one of them is written in the second person to the people in the database rather than to the paying customer. That section then does what almost no prospecting vendor does. It enumerates exactly what is held about such a person, listing five fields by name.

It states the lawful basis and articulates the purpose behind it rather than asserting a label. It says the storage is temporary. It commits that after an email response of any kind, regardless of content, all stored personal information is deleted and any future contact from that customer is prevented, which is an automatic deletion trigger requiring no request.

It grants a right to refuse future processing that removes the person from every customer's future searching permanently rather than from one account. A public opt out page is linked from the footer of every page. The policy also invites reports that a customer is breaching its own controller obligations. A data protection officer is named with a dedicated address, and the supervisory authority route is stated.

Two real gaps keep this short of flawless and are recorded rather than ignored: the clause covering transfers outside the union names no mechanism and rests on an assurance that transfers comply with applicable law, and no sub processor is named anywhere despite processing agreements being referenced.

The best provenance story in this category and it rests on a source type nobody else here uses. The foundation is stated as each national authority's own company register, with the Swedish and Finnish registers named and the companies registration office named among them, which is an official public source with a defined legal status rather than an unattributed aggregate. The vendor treats this as its differentiator and says so directly.

On top of that sits a supplement described as a search engine that finds contact details for decision makers, which the privacy policy expands into finding information on public internet sources through algorithms or through programming interfaces provided by third parties. The five fields collected about a person are enumerated by name. Storage is described as temporary.

Off the top band because the supplement is where the personal data actually comes from and it is the half left unnamed: no third party supplier is identified, no licence position covers the register data's reuse and redistribution, and no accuracy or refresh figure is published beyond a claim of unparalleled accuracy.

Structurally low exposure and the reason is the sourcing model rather than better disclosure. The foundation is official national company registers rather than a platform whose terms prohibit extraction, and sending runs through the customer's own connected mailbox.

Nothing on the pages read offers a browser extension, a scraper, profile extraction, social account automation, multiple identity sending, proxy infrastructure, rotation or any language about avoiding detection, and none of those mechanisms appears anywhere in the product description. Off the top band on two open items.

The supplement that finds decision maker contact details is described only as a search engine and as third party programming interfaces, with no conformance position for either. And the enumerated collection includes a person's social media username, which implies a lookup against a social platform that is nowhere described.

No training position, cross tenant boundary commitment or model provider appears anywhere. Two lines in the privacy policy sit adjacent to the question without answering it: customer personal data is used to improve future use of the services, and computerised decisions about new functions and solutions is listed among the purposes justifying retention.

Neither states whether content passing through the platform trains or tunes anything, and neither distinguishes the customer's data from the contact records. One structural mitigation genuinely limits the exposure and is credited rather than assumed: the contact records are committed to be held temporarily and to be deleted outright after any reply, so the corpus available to learn from is bounded by design in a way that most prospecting databases are not. That is an architectural constraint rather than a stated policy, and the stated policy is still missing.

Nothing synthetic operates beyond generated email copy, which is universal in this category, and messages leave through the operator's own connected mailbox under their own name, so nothing is passed off as something it is not. What earns the upper band is the recipient's actual position, which is better here than almost anywhere in this index. A reply of any kind deletes the stored record and blocks that sender permanently, without the recipient having to ask.

A public opt out page is reachable from every page of the site. A permanent exclusion from all future searching by every customer is available on request. The policy states plainly that no personal information is publicly available through the service.

Off the top band because none of that is disclosure at the moment of contact: nothing tells the recipient that the message was generated by a model, nothing explains in the message how they were found, there is no proactive notice when a person first enters the database, and the European transparency obligation covering systems that interact with people is nowhere addressed.

Connection to a system of record ships on every tier including the free one, which is better placement than most vendors manage, and the help material describes uploading an existing register from that system and letting the platform work it, implying movement in both directions. A dedicated integrations page exists in the navigation and was not read this pass, so it is recorded as unexamined rather than absent.

What is missing from everything that was read is any specific integration named at all: no system of record, mail suite or automation connector appears by name on the platform, pricing, help or policy pages. No programmatic access, developer documentation, webhook surface, marketplace or agent protocol server was located either. A connection promised generically on every tier without naming what it connects to is a claim a buyer cannot evaluate.

The transfer position is disclosed and empty, which is the specific failure this band describes. The policy states that the services are available globally, that personal data may be transferred to countries outside the union, and that the vendor ensures such transfers are made in accordance with applicable data protection law. No mechanism is named, no safeguard is identified, no country is listed and no hosting provider, region or data centre appears anywhere.

That gap is more conspicuous here than it would be for most vendors, because the entire commercial proposition rests on Nordic register data sold to Nordic buyers under a European regulatory frame, and because the same policy is otherwise unusually precise about who holds what and for how long. No residency option is offered or sold.

The policy names controls in general terms and declines to overclaim, stating that appropriate technical and organisational measures are in place, that these include encryption alongside access and storage policies, that employees who review personal data do so under confidentiality agreements and that such review is avoided as far as possible, and that no system is ever completely secure. Naming confidentiality obligations on internal review is a detail few vendors bother with.

What is absent is any independent verification: no certification of any kind is claimed, and there is no trust centre, audit report or period, penetration test, dedicated security page, vulnerability disclosure route or status page. Assertion without attestation is the definition of the middle band, and the platform holds an authorised connection to each customer's mailbox alongside the contact records.

A buyer can budget this purchase completely and choose between commitment shapes with both numbers in front of them, which is the test. Four tiers are published, a free forever plan plus three paid, and each paid tier carries two euro figures side by side for the two billing shapes: forty nine against one hundred and forty nine, one hundred and thirty nine against three hundred and ninety nine, and one hundred and sixty nine against four hundred and ninety nine, per user per month.

The unit that actually governs value is published against every tier in both denominations, as leads per user per month and leads per user per year, running fifty, four hundred and six hundred monthly against six hundred, four thousand eight hundred and seven thousand two hundred annually. Cancellation notice is stated concretely at fifteen days, the free tier requires no card, and registration is self serve.

The per lead economics fall as the tier rises, from roughly one euro on the entry plan to under thirty cents on the top one, which is the inverse of the flat rate observed on another vendor this session. Two items are recorded as under described rather than unpriced, since nothing here carries a charge: the top tier is differentiated partly by more countries without naming which, and by a technology filter that is never explained, so the step between the two upper tiers is harder to evaluate than the price difference suggests.

The post termination half is answered better than most and the extraction half is not answered at all. On leaving, the policy grants deletion or anonymisation on request and then does something uncommon by enumerating the exceptions and the reason for each, covering unresolved payment or dispute matters, statutory legal, tax, auditing and accounting retention, and fraud prevention and platform security.

Cancellation notice is stated concretely at fifteen days, so there is a defined exit window rather than an open ended commitment. Against that, no export function is named anywhere on the pages read, no file format or schema is specified, no deletion timeline number is given, and no programmatic route out was located. Connection to a system of record ships on every tier and is a real indirect route, but no system is named and the integrations page was not read this pass. Held at the middle band on the same reading applied to another vendor built earlier in this session, where a strong surrounding posture did not substitute for a stated export path.

Sending runs through the customer's own connected mailbox rather than shared vendor infrastructure, so reputation consequences stay with the party making the sending decisions. Two features constrain volume and hygiene without being framed as deliverability controls: the hard lead allowance per tier caps how many people can be contacted at all, and the automatic suppression of anyone who replies prevents the most common source of complaints, which is continuing to contact someone who has already answered.

Split testing and campaign dashboards exist. Beyond those, the axis is unaddressed. Nothing is published on authentication guidance, warmup, sending pacing or intervals, bounce handling, complaint rate thresholds, blocklist monitoring or list hygiene, and no deliverability material of any kind appears in the navigation or the help centre entries that were read.

The stated segment carries a genuine geographic boundary, which is the kind of disqualifying condition this axis exists to reward and which most vendors avoid stating. The differentiator is claimed as being the only platform using Swedish and Finnish company data, the interface ships in Swedish, Norwegian, Finnish and English, the operating entity is Swedish with its company registration number published in the cookie notice on every page, and all six customer logos are recognisable companies from that market.

A buyer outside the Nordic region can tell within a sentence that this is not built for them. Size is given numeric shape by the tier allowances rather than by adjectives, running from fifty leads a year on the free plan to seven thousand two hundred on the top one.

Off the top band because the top tier is differentiated by more countries without naming which ones, so the actual coverage boundary blurs exactly where a buyer would need it to be sharpest, and because no upper size ceiling or unsuitable use case is stated.