ReachBoost

One capability is claimed and it is claimed thinly: an advanced personalisation engine said to adapt outreach dynamically with relevant details, alongside a general description of the product as intelligent automation. No page read describes what the engine does, what it reads, or how the adaptation works. Apply the removal test and the whole product remains, since connection requests, follow ups, direct messages, sequencing and multiple account management are conventional automation. The convention places a competent product with a modest claim here rather than lower.

Several connected accounts run under one subscription, described as suiting sales teams and recruiters managing outreach across different profiles, and sequences chain connection requests, follow ups and direct messages without a human in the loop between steps. No page read yields a daily cap, a pacing rule, a working hours restriction, an approval step before a message sends, a role or permission model, or any audit record. The done with you onboarding is the only oversight described and it is a service the vendor performs at setup rather than a control the platform enforces afterwards.

A personalisation engine is marketed as advanced and dynamic and no provider, model, family, version, method or input is named for it anywhere on the pages read. Nothing indicates whether the personalisation is generated by a model at all or assembled from merge fields against profile data, which is a distinction a buyer would want and the site does not draw.

Every page requested returns navigation and footer chrome to a machine reader, so no customer name, logo, testimonial, case study or quantified result could be retrieved from the homepage, the product page, the pricing page or the blog index. Whether that content exists for a human visitor cannot be established from here, and that is itself the finding: a vendor whose entire body content is invisible to a fetcher has no evidence surface at all as far as any machine reader is concerned.

Two things were retrievable and neither is customer proof. A company origin post names three founders by first name with their respective backgrounds in software sales, engineering and marketing, which is more candour about who is behind the product than most vendors this size offer. And a second live copy of the site sits on the site builder's own subdomain, indexed alongside the production domain.

One genuine statement exists and it sits in the privacy policy rather than in any product material: the customer remains responsible for ensuring they have a lawful basis to process personal data through the platform. That is the obligation placed where it legally sits, stated plainly.

Around it there is nothing: no statute, regime or regulator is named on any product page, no consent standard is described for the outreach the tool exists to send, and no suppression list or opt out mechanic appears anywhere. One distinction is worth drawing because the policy invites confusion.

The unsubscribe right published there covers the vendor's own newsletters and marketing to its customers, not the messages those customers send to strangers through the product, and nothing addresses the second case.

The privacy policy does the one thing that matters most in this regime and that almost nothing else in this index does: it separates the two roles the vendor plays and says which applies when. For account management, billing, website analytics, support and its own marketing the vendor states it is the controller; when a customer processes network data, conversations, campaigns or client information through the platform it states it is the processor acting on the customer's behalf, and that the customer remains responsible for the lawful basis.

Around that sit named lawful bases, a subject request address, an explicit right to complain to a supervisory authority, an unsubscribe route, an age floor of eighteen, and the operating entity named with its full registered address in a member state.

Holding it off the top band, no retention period, sub processor list, transfer mechanism or residency statement was retrievable, and no processing addendum is offered as a separate signable document for the customer whose processor this vendor says it is.

The vendor sells no contact data and compiles no database. Targets come from the customer's own searches on the professional network, and the published education covers search technique on that network's premium search product rather than any external source. That is a clean baseline and it follows from the business model rather than from a stated provenance position, which is why this sits in the middle rather than higher. No enrichment source, field set or accuracy claim appears anywhere.

This is automation of a professional network that prohibits it, supporting several connected accounts under one subscription and marketed to agencies running outreach for multiple clients, and no conformance position appears on any page read. Two things keep it in the middle rather than lower and both matter.

Multiple account support is framed as one agency operating distinct client profiles, which is an ordinary agency structure, rather than as rotation to push volume past a single account's limits, and nothing on any retrievable page advertises evading detection, renting identities or exceeding platform thresholds.

Advanced security is claimed as a product attribute with no explanation of what it secures against, and given how much of this site is unreadable to a machine, the absence of an evasion posture is genuinely unestablished rather than confirmed.

Nothing retrievable addresses retention, training, cross customer boundaries or where any processing runs for the personalisation engine. The privacy policy states that personal data is protected without describing any control, and the platform holds authenticated sessions to named individuals' professional network accounts along with the conversations conducted through them.

The controller and processor split published in that policy establishes who is answerable for the data, which is more than most vendors here manage, and it says nothing about what the vendor's own systems do with it.

Messages assembled by a personalisation engine are sent from a real individual's professional account and the marketing frames the goal as messages that actually feel human, in contrast to generic copy and paste. The intent there reads as quality rather than concealment, which is the distinction between this band and the one below, but the effect on the recipient is the same: a person receives what appears to be an individually written approach from a named professional and has no way to know how it was produced.

No artificial content marking, no disclosure at first contact and no position on the European marking obligation appears anywhere, at a vendor established inside the region that obligation applies in.

Programmatic documentation appears in the primary navigation, which is more than several vendors of this size offer, and an affiliate programme runs alongside it. Beyond those two links nothing was retrievable: no system of record integration, no automation platform connector, no marketplace, no webhook description, no protocol server and no developer reference content. For an outreach tool, no named route exists by which the conversations it generates reach the pipeline a customer forecasts from.

Hosting provider, country, region, data centre and residency option are absent from every page read. What is published is better than the category norm on the adjacent question of jurisdiction: the operating company is named, its registered address in a European member state appears in the privacy policy, a second office address and a national telephone number sit in the footer of every page, and the corporate form is a European one. That establishes which regulator has jurisdiction and which law applies, and it does not establish where any data sits or whether a customer has any say in it.

Advanced security is named as a product attribute on the product page and nothing anywhere explains what it consists of. No certification, audit report, attestation, penetration test, control set, encryption statement, trust centre, status page or vulnerability disclosure route was retrievable, and the privacy policy states that data is protected without describing a single measure. The standing convention applies: asserting security without enumerating it is weaker than it looks.

Set against a platform that holds live authenticated sessions to its customers' professional network accounts, an unevidenced assurance is thin. What keeps this out of the bottom band is that an identified legal entity with a published registered address in a regulated jurisdiction is answerable for it.

A pricing page sits in the navigation and returns no figure, tier, seat rate or allowance to a machine reader. What could be retrieved elsewhere is a discount structure without the prices it applies to: reductions for annual commitment and for teams of five or more licences, a code unlocked after a first campaign launches, and a direction to contact sales for the detail. The terms supply two commercial facts most vendors leave implicit, and both belong on the record.

Billing is monthly by automatic collection and the subscription can be terminated at any moment and restarted immediately, which is genuine flexibility. And the vendor reserves the right to change the fee at any time, with notice and a right to leave, while stating plainly that when a discount expires no reminder or warning will be sent. That last clause is a disclosure against the vendor's own interest and it is the kind of thing this axis exists to surface.

The commercial exit is clean and stated in the terms: the subscription lasts until the customer or the vendor terminates it, termination is available at any given moment, and it can be renewed immediately afterwards. The data exit is undescribed. No export function, file format, post termination right, deletion timeline or retention period appears on any page read, at a platform holding campaign history and the conversation record of every connected account.

One statutory lever exists and is published, being a subject request address and a stated right to complain to a supervisory authority, which is a legal route rather than a product capability and applies to individuals rather than to the account holder's business data.

The channel is a professional network and the discipline that governs it is pacing, caps and account health rather than authentication and inbox placement. No daily cap, ramp schedule, warm up period, working hours restriction, acceptance rate monitor, anomaly pause or degradation response was retrievable on any page read, at a tool that runs sequences across several connected accounts at once.

The comparison that makes the gap legible is inside this same session: another vendor in this category publishes its cap enforcement, its ramp behaviour, its monitoring cadence and its automatic pause, and states it will refuse to exceed a cap even on request.

Three buyer types are named consistently across the pages that returned content, being founders, agencies and sales teams, with recruiters added on the product page, and agency use is described as a designed case with several client campaigns run from one account. A licence threshold of five or more marks where team pricing begins. The site publishes in two languages, English and Dutch, and the company is located by a published address rather than left anonymous. Against that, no customer count, no named customer in any sector, no region or country coverage beyond the two site languages, no industry data, no seat band and no statement of who should not buy.