Reply.io
Twelve year old multichannel sales engagement platform, founder led since 2014, serving more than three thousand companies with sequences across email, LinkedIn, WhatsApp, text and calls, a contact database of over one billion records with its live data supplier named on the homepage, and Jason, an agent that runs outbound in autopilot, copilot or approval mode. The commercial surface publishes the full ladder across four product lines: email volume plans from forty nine dollars monthly, an all channel plan at eighty nine, agent plans from five hundred a month priced on active contacts, agency plans per client, and per account channel add ons.
The platform is the index's clearest case of a split identity. The governance layer is among the deepest recorded, a trust page carrying a commitment not to train shared models on customer data, a dedicated artificial intelligence policy document, named privacy regimes, international transfer frameworks and a vulnerability disclosure route, alongside an agent interface with scoped permission keys, per tool safety annotations and documented confirmation gates.
The conduct layer sells the opposite: a LinkedIn automation product operating customer accounts action by action, purchased Google and Microsoft mailboxes available pre warmed, a peer network warmup, and a homepage statistic advertising infinite mailboxes rotated per campaign under an unpublished fair usage policy.
Capability Axes
The intelligence layer is heavy and specific, an agent with named autopilot, copilot and approval modes, research agents whose scope the user configures, generated sequences, response handling, personalization variables, and user selectable models, but the platform predates all of it and stands without it: remove the intelligence and a complete twelve year old sequencer with a billion record database and sending infrastructure remains. Under the removal test that is the definition of the second band, load bearing but not constitutive. The claims are credible, shipped in production with named modes rather than gestured at.
The first top band on this axis in the index, and the apparatus earns it. The agent runs in three named modes, autopilot, copilot and a shipped approval mode announced in product updates, and agencies choose between fully autonomous and approval operation per client.
The programmatic surface is where it becomes exceptional: one scoped permission key with granular scopes such as contacts read and sequences operate, per tool safety annotations that agent clients can gate on automatically, and documented procedures including dry runs, verification steps and confirmation gates installable as skills.
A mobile application exists specifically to review and approve generated replies and monitor mailbox and account health, and the trust page states operational oversight of how intelligence features are integrated. The oversight machinery is documented at the level of individual permissions and gates rather than asserted.
Model selection is exposed to the user in product, announced in the vendor's own updates, which discloses providers by construction, the trust page acknowledges that features rely on authorized third party intelligence providers with inputs processed solely to support the features used, a dedicated artificial intelligence features terms document exists at its own route, and the research agent's information gathering is user configurable, you decide what it should find and use. Off the top band: the providers are not named on the pages read, and no method or evaluation documentation was located.
A dozen named individuals with roles and companies carry quantified results, twenty to thirty percent monthly growth at a named agency with a linked case study, seven hours saved weekly per seller and half of closed deals following campaigns at a named travel company, fifteen thousand dollars in a first quarter at a named firm, reply rates above sixty percent at two named companies, and a customer stories library sits behind them, alongside nearly fifteen hundred reviews at a strong average on the major directory.
Off the top band: every percentage is self reported without method, the same homepage states the review count as fourteen hundred eighty in one section and twelve hundred plus in another, and headline claims of ninety eight percent delivery and tenfold opportunities carry no attribution.
The governance documents are better than the marketing behaves. The trust page names the European regime, its United Kingdom counterpart, the California statutes and the Canadian anti spam law, an acceptable use policy exists at its own route, and responsibility transfer is stated plainly, the customer must ensure lawful use.
Against that, the selling surface runs the other way: automated text messaging at scale is a priced add on with no consent framing anywhere read, and the blog publishes a piece teaching readers how to get bulk email addresses for free framed as a hack, address harvesting content on the same domain as the compliance commitments. The posture exists on a page marked to be from search engines while the growth content is indexed.
The trust page carries real substance: customer data ownership stated outright, a commitment that data is not sold, participation in the transatlantic data privacy framework with a link to the program registry where it can be checked, standard contractual clauses and the United Kingdom and Swiss mechanisms enumerated for transfers, a public data processing agreement route, retention and deletion practices acknowledged, and dedicated privacy contact routes.
Off the top band: the subprocessor list is available only on request rather than published, the policies themselves were not opened, and the trust page carrying all of this is marked to be excluded from search indexes.
The upstream supplier of the billion record live database is named and linked on the homepage itself, real time data powered by a named provider, the first named source provenance disclosure recorded in this session and exactly what this axis asks vendors to do.
Off the top band: one named supplier does not account for the whole database, no licensing terms or consent chain description is published, and the surrounding product surface includes an email finder extension and website visitor identification whose data sources are not similarly attributed.
The exposure is sold as a named product line at a printed price. LinkedIn automation at sixty nine dollars per account per month performs connection requests, messages, professional mail, attachments, voice messages, liking posts, following profiles and endorsing skills on the customer's behalf, agent plans include multiple accounts, and the agency product runs automation across many client accounts under one roof, all of it operating a platform whose terms prohibit automation, stated in the vendor's own feature lists.
The email side compounds it: the platform resells Google and Microsoft mailboxes, available pre warmed, specifically for rotation at volume, a use those providers' terms do not contemplate. The settled standard applies from the vendor's own words.
A dedicated responsible artificial intelligence section on the trust page makes commitments most of the category never writes down: customer data is not used to train generalized models for the benefit of other customers unless expressly agreed in writing, third party model providers process inputs solely to support the features used, generated content may contain inaccuracies and must be reviewed, and a separate artificial intelligence features terms document is maintained at its own route. Off the top band: the written unless clause leaves a negotiated door open, providers and their retention are unnamed, and the commitments live on a page excluded from search indexes.
Two product families cross from nondisclosure into manufactured authenticity, both in the vendor's own feature lists. Generated voice messages are sold on two channels, automated personalized voice messages on calls and artificial voicemails on the professional network described as hyper personalized, synthetic speech delivered in the highest trust format a recipient can receive, presented as a person's voice with no disclosure position anywhere.
Around them, the sending identity itself is rotated across unlimited purchased mailboxes so no recipient level reputation accumulates, and personalization variables are marketed for standing out and staying out of spam. The recipient is the party every one of these mechanisms is designed to be invisible to.
The deepest programmatic surface recorded in this index: a public documented interface with its own documentation site, a live model context protocol server whose tools carry per tool safety annotations, a command line client with installable procedural skills, four documented access layers to one platform, a developer community, an integration partners program, native bidirectional synchronization with the two major systems of record, the two major workflow platforms, browser extensions, a white label program, a public status page, a help centre and a training academy. The agent facing subdomain documents all of it as one surface behind one scoped key. This is the template the top band exists for.
Cloud software on unnamed infrastructure providers, with a public status page as a real operational transparency artifact. The trust page discloses that customer data may be processed in the United States and other countries where the vendor and its providers operate, with the recognized transfer mechanisms enumerated, which is a transfer disclosure rather than a residency offering: no hosting provider, region choice or residency option appears anywhere read.
The trust centre half of this axis is real: a maintained trust page describing encrypted transport, access controls, vulnerability management, backup and recovery, incident response with a notification commitment, a responsible disclosure route with a security contact, additional materials available under nondisclosure, and a public status page.
The certification half is absent: no independent attestation, audit or certification is named anywhere read, unusual for a twelve year old platform, and the trust page itself is marked to be excluded from search indexes, so the transparency exists but is not findable, the published versus retrievable pattern applied to the vendor's own trust surface.
The published ladder is unusually complete across four product lines: email volume plans from forty nine dollars monthly on annual terms with eleven printed contact tiers and the active contact unit defined in a footnote, an all channel plan at eighty nine, agent plans from five hundred monthly priced on active contact volume with annual and monthly figures both printed, agency plans at two hundred ten monthly and five hundred per client, channel add ons at sixty nine and twenty nine dollars per account, a free trial without a card, and a migration discount.
Two load bearing gaps hold it off the top: infinite mailboxes are subject to a fair usage policy that is not published, the unpriced ceiling on the core resource, and the credit and validation add on price values render blank to a machine reader, an interactive slider serving its numbers only to a browser.
Ownership of customer data is stated outright on the trust page, retention and deletion practices are acknowledged with deletion requests honored under applicable law, a data processing agreement is public, and the plan tables name a statistics export to comma separated files.
What is missing is the exit machinery itself: no full record export function, format commitment, post termination window or retention period is specified anywhere read, and the migration tooling and discount the vendor markets all point inward.
The settled rotation position applies in its most industrialized form, cited from the vendor's own homepage, which prints an infinity symbol as a product statistic: infinite mailboxes rotated per campaign, beside ninety eight percent delivery and fourteen days from purchase to first send.
The machinery is complete and openly architected for volume past filters: purchase Google or Microsoft mailboxes new or pre warmed, pre warmed domains arriving with three mailboxes already carrying manufactured sending history, automatic authentication record configuration, a peer to peer warmup network of real inboxes defended as no bots, and copy that says rotate them across sequences to send high volumes safely without overloading any single account.
The tooling underneath is genuinely real, per inbox reputation tracking, validation, authentication setup, which is precisely the pattern the position describes: real discipline instruments in service of a volume architecture, with the sole stated limit an unpublished fair usage policy.
Coverage is stated across multiple dimensions: six named use cases from outbound sales to public relations and link building, dedicated products for agencies with per client pricing, recruitment and startups, a white label program for resellers, more than three thousand companies across ten plus years, a toll free North American sales line, and international transfer machinery implying a global customer base.
The active contact tiers from one thousand to half a million give real scale banding. Off the top band: no geographic or language coverage statement, and no articulation of who the platform is wrong for.
Pricing
Vendor-published figures are labeled as such. Figures labeled “Estimated” are derived from third-party sources and have not been confirmed by the vendor.
No pricing data has been verified for this vendor. Pricing information will be published here once confirmed through vendor disclosure or third-party estimation.