Salesloft

Model driven capability is extensive, named and growing, and it sits on a large deterministic platform that works without it.

The agent layer is substantial: email agents, conversation agents, forecasting driven by models, action prioritisation that decides what a seller should do next, plays that trigger on signal, and chat agents converting website visitors. A dedicated artificial intelligence section and an innovation centre are published as their own destinations, and the corporate boilerplate leads on purpose built models.

What holds this off the top band is the decade of deterministic engineering underneath. Multichannel cadence execution, bi directional record synchronisation, opportunity management, dialing, analytics and reporting all function with no model involved, and they are why the platform was bought long before agents existed. A customer disabling every agent would still have a working sales engagement platform, which is not true of the pure model products elsewhere in this index.

The metering supports the same reading. Pricing is per seat rather than per unit of inference, so the vendor's revenue tracks headcount rather than model usage.

The agents are a genuine and material layer rather than the product itself.

Ask which agent capabilities are included at your tier and which are priced separately, since the packaging is not published.

Governance is treated as a first class product surface rather than a settings screen, which is unusual and is the substance of the grade.

A dedicated governance capability is published with its own page, cross linked from the security documentation, and its stated scope covers platform administration privileges, role permission configuration and integration control. Governance also appears as a top level platform capability alongside security on the pricing page. For an enterprise buyer, the question is not whether permissions exist but whether the vendor treats administrative control as something to document and sell, and this one does.

Autonomy itself is moderate and mostly advisory. Action prioritisation recommends the next best step and a human executes it. Cadences run on rules the customer authors. Conversation analysis observes and coaches. The agent layer introduces more independent execution across email and chat, and its boundaries were not established during this review.

Corporate access controls are documented in detail on the security page, including least access enforcement through a privileged access management platform with role based permissions, approval groups, time limited sessions and multi factor authentication, though those govern vendor staff rather than customer users.

The governance page itself was not opened during this review, so the specific controls are recorded as documented rather than verified.

Ask what an administrator can restrict at agent level and what approval steps exist before an agent sends.

A dedicated artificial intelligence destination and an innovation centre are both published as standing pages, which is more institutional commitment to explaining the model layer than most vendors offer. Neither was opened during this review, so their contents are recorded as existing rather than assessed.

What can be established is an omission that is genuinely conspicuous. The security and compliance page is the most detailed operational disclosure in this index. It names the hosting providers and regions, specifies the encryption algorithm at rest and the protocol in transit, itemises the security stack down to individual tool categories, describes the security team's reporting line and composition, and sets out personnel vetting and third party risk procedures.

That page says nothing whatsoever about models. No provider, no version, no statement on whether customer data reaches a third party model, no position on whether customer content trains anything, and no evaluation of agent output quality.

A company willing to disclose its key rotation arrangements and its after hours escalation policy, and not willing to say which model reads customer email, has made a choice about where transparency stops.

For a platform with email agents and conversation agents operating on customer correspondence, that boundary is the one a buyer should test.

Ask which providers power the agents, whether customer content leaves the platform, and whether anything trains on it.

The corroboration is broad and the headline numbers are the weakest part of it.

What is strong: nine named customers displayed on the pricing page, including a payments company, a global technology manufacturer, a recruitment platform, a delivery marketplace, an industrial conglomerate and a commerce platform. These are checkable enterprises whose procurement functions do not permit casual logo use. More than four thousand teams is stated. The independent review base on the principal enterprise platform runs past four thousand reviews at an average of 4.5, one of the largest in this index, with the majority of reviewers in mid market. A case study library and a published economic impact calculator built on an established analyst methodology are both maintained.

External analyst recognition exists as well, with a Visionary placement in the first quadrant covering revenue action orchestration in December 2025.

The reservation concerns the three headline figures on the pricing page: pipeline prospected up 322 percent, deals advanced 75 percent faster, and 28 percent more deals won with conversation intelligence. The footnote attributes them to customers within the first year of implementation and supplies no sample, period, baseline or methodology. A figure like 322 percent without a baseline is not interpretable.

Ask which customers produced the headline figures and against what baseline.

The vendor supplies no contact data, which removes the sharpest exposure other sending platforms in this index carry. Independent sources consistently confirm that contact records are not included at any tier, so a customer brings their own list and the consent basis for that list sits with them and their data provider rather than being inherited from this vendor.

Sending runs from the customer's own connected mailboxes and dialing from their own numbers, so identity and reputation are theirs.

What is absent is guidance. Two passes across the pricing and security surfaces located no material on consent basis, suppression handling, unsubscribe propagation across cadences, do not call screening, or calling hour restrictions. The privacy compliance section addresses the data protection regulation and the California statutes as processing obligations rather than as rules governing outbound conduct, which is a different question.

The enterprise buyer profile partly explains the omission and does not fully excuse it. A company with a legal function will bring its own compliance posture, but the platform's configuration is what enforces it, and nothing published describes what controls exist to encode calling hours or suppression at platform level.

A published master subscription agreement incorporating processing terms is the relevant contractual artefact and is credited on the privacy axis.

Ask what suppression and calling hour controls are enforced at platform level, and how they propagate across cadences and connected mailboxes.

The most complete privacy architecture recorded in this index, and every element is verifiable from published documents.

The processing terms are incorporated into the master subscription agreement rather than offered separately, so every customer holds a data processing addendum by default with nothing to request or negotiate. That addendum includes standard contractual clauses, so the international transfer mechanism is named rather than left to procurement to raise. Both documents are published and linked, readable before a first sales call.

Certification extends to privacy specifically, not only security. The company states it is certified compliant with the privacy information management standard, which is the extension covering privacy controls rather than the general security framework, and it is rare enough in this category to be a genuine differentiator.

The document set is properly structured. A platform privacy notice is published separately from the website privacy policy, which recognises that data processed inside the product raises different questions from website visitor data, and almost no vendor in this index makes that distinction. A candidate privacy notice and a modern slavery statement are also published.

Third party risk management is documented as a programme: due diligence on every partner involved in service delivery covering security, privacy and compliance, before onboarding and in periodic surveillance reviews, with contractual obligations at least equivalent to customer terms.

The gap is that no subprocessor list itself was located.

Ask for the current subprocessor list.

Not applicable in the supplier sense and rated accordingly rather than penalised. This vendor is not a data provider, operates no contact database, sells no enrichment credits and sources no records from third parties. Independent analysis consistently confirms that contact data is excluded at every tier and must be bought elsewhere, which is presented by competitors as a weakness and is, for this axis, a clean position: a buyer inherits no upstream licence terms, no redistribution restriction and no consent question from this vendor.

The enterprise data platform unifies revenue data across the customer's own connected systems, so its inputs originate with the customer.

Two residual provenance questions arise from capabilities rather than from data supply. Conversation intelligence records and analyses calls in which the second party is a prospect who never contracted with this vendor, and their speech, transcribed and analysed, becomes a retained record. And the chat agents capture website visitor behaviour and conversation from people who arrived at a customer's site.

In both cases the vendor creates derived personal data about third parties rather than purchasing it, which is a different provenance question from a purchased list and is equally unaddressed on the surfaces reviewed.

Ask on what basis recorded prospect speech and derived analysis are retained, and for how long.

The extraction exposure common in this index is absent. Two passes located no scraping utility, no profile harvesting and no contact sourcing, which follows from the vendor not being a data provider at all.

Integration runs through a published partner marketplace on its own subdomain listing certified technology, service and implementation partners, alongside a formal partner programme. That is the sanctioned pattern in its most developed form: named partners operating under a certification scheme rather than undocumented connections.

Two areas were not resolved during this review and a buyer should press on both.

Conversation intelligence records calls and meetings, and nothing establishes whether capture uses a conferencing platform's native recording interface, which triggers that platform's own participant notification, or a joining participant that records, which may not. The two routes carry different obligations and different standing under the platforms' terms.

And several independent pricing analyses reference a social automation add on sold separately, which would imply automated activity on a professional network. No vendor surface reviewed here describes such a capability or the programme it would operate under, so it is recorded as reported by third parties and unverified.

Ask how meeting capture is performed, and whether any professional network automation is offered and under what programme.

The most detailed security programme disclosure in this index, published openly rather than gated behind a portal login.

Encryption is specified precisely rather than asserted: transport over current secure protocols, strong symmetric encryption at rest at the storage layer, layered on top of the infrastructure providers' disk level encryption and further encryption at application and database layers, with keys managed and automatically rotated by the providers' key management services.

The security function is described as an organisation rather than a claim: an information security team reporting to the chief information officer, comprising security engineering, security operations, and governance risk and compliance. The operational stack is itemised by category, covering a web application firewall, dependency scanning, log aggregation, endpoint detection and response, privileged access management, and an event management system with a partner conducting monitoring, triage and analysis around the clock, with automated after hours escalation.

Testing is genuinely independent and continuous: automated code and system scanning, a bug bounty programme delivering ongoing penetration testing by independent researchers, and at least annual assessments by an independent security consulting firm.

Development, personnel and corporate controls are each documented, including mandatory peer review and quality approval before deployment, background checks, and a zero trust corporate model.

The single omission is model data handling, addressed on the disclosure axis.

Ask whether customer content is used in model training or evaluation.

The core sending architecture is authentic. Cadences send from the customer's own connected mailboxes in the seller's own name, and the dialer places calls from the customer's own numbers. A seller writes or approves the message, and a recipient replying reaches the person whose name is on it.

Three capabilities introduce questions that the surfaces reviewed do not answer.

Email agents are a named and marketed capability, and nothing establishes whether they draft for human approval or send independently, nor whether any disclosure accompanies agent generated correspondence. That boundary determines whether the authenticity above still holds.

Conversation intelligence records calls in which the second party never contracted with this vendor. Two party recording consent applies across many jurisdictions, and no recording notification capability or consent guidance was located.

Chat agents converse with website visitors, and whether a visitor is told they are addressing software rather than a person is unstated.

Email and engagement tracking is inherent to the platform and unannounced to recipients, which is the category norm.

None of this involves synthetic voice or identity misrepresentation, which is why the grade sits mid band rather than lower, and the agent boundary is the thing to establish before deployment.

Ask whether email agents send without human approval and what recording notice is available.

An ecosystem in the full sense rather than a connector list, and several components exist that almost nothing else in this index has.

A partner marketplace runs on its own subdomain carrying certified technology, service and implementation partners, backed by a formal partner programme. Certification of implementation partners matters more than integration count for an enterprise buyer, because it means a third party can be engaged to deploy the platform against a standard the vendor maintains.

Bi directional record synchronisation is a headline platform capability rather than a connector, and an enterprise data platform exists specifically to unify revenue data across connected systems. Public interfaces are confirmed on the security documentation, which describes them as a connection path subject to the same transport security as the interface.

The surrounding support infrastructure is unusually complete: a customer community, published product release notes, a training academy on its own subdomain, a help centre, a professional services organisation, and daily office hours at a published time. Daily open sessions are a real ongoing commitment rather than a page.

Mobile applications ship, and the acquired chat platform retains its own login and marketplace presence.

The gap is documentation depth, since no interface reference with endpoints or rate limits was retrieved during this review.

Ask for the interface reference and rate limits against your intended synchronisation volume.

Answered properly, which is rare enough in this index to be the finding.

The hosting providers are named: the platform runs on both major cloud providers rather than one, and the regions are stated as the United States and the European Union. That gives a European buyer an actual answer to the residency question before a sales conversation, rather than an inference from a billing currency.

The acquired chat platform is disclosed separately and precisely as running on a single provider in the United States only, which is an important distinction the vendor could have blurred and did not. A European customer buying the chat capability is being told, in advance, that it sits under a different arrangement from the core platform.

Infrastructure resilience is described concretely: a containerised microservices architecture with high availability services replicating systems and data across geographically diverse data centres, so an interruption to one facility does not take the service down, alongside backups and periodically reviewed continuity and recovery plans. Data centre physical and environmental controls are described.

Encryption keys are managed and automatically rotated by the infrastructure providers' key management services.

Two gaps remain: no published subprocessor list, and no customer managed encryption key option stated.

Ask whether a region can be contractually committed, and whether customer managed keys are available.

This is the reference standard for the axis and every element of the credential test is satisfied explicitly.

The service organisation control examination is described with a verb, a scope, an assessor type, a cadence and a destination: the platform services undergo type two examinations testing security controls against the standards defined by the professional accounting body, conducted by a third party audit firm, annually, with the resulting reports published in a trust portal. Scope is stated as covering the platforms, the hosting environments and related operations, and the acquired chat platform is named as included rather than left ambiguous.

The information security management certification is treated the same way: the entire security programme is aligned to the framework, audited and re certified annually, with the certificate published in the same portal.

A third certification covering privacy information management is also held.

A trust portal runs on its own subdomain holding certifications and attestation reports. A status page runs on another, publishing operating status and historical uptime rather than only current state. A security frequently asked questions page and a governance page are separately maintained.

A bug bounty programme and at least annual independent consulting assessments sit behind the certifications rather than instead of them.

A buyer can name every credential, its assessor type, its cadence and where to obtain the report, which is what this axis exists to measure.

The sharpest contrast on this record, and the grade reflects the page rather than the company's general candour.

The pricing page is headed with a promise of packages designed for results and an invitation to pick a winning plan, and it contains no package, no plan, no tier name, no feature comparison, no figure, no minimum seat count and no contract term. The only pricing content is a line directing other pricing questions to a contact form and a request for a fifteen minute call. The navigation entry describing that page promises a buyer will discover the packages and what is included, which the page does not deliver.

The consequence is measurable in the third party record. Pricing guides published within weeks of one another in 2026 disagree on whether the product has two tiers or three, and quote per seat estimates spanning roughly sixty to two hundred dollars. Independent sources consistently report annual billing with no monthly option, a minimum of around ten seats, a dialer sold as a separate add on, implementation fees quoted separately, and annual renewal uplifts commonly in the eight to twelve percent range.

That last item is the most consequential and the most invisible. A compounding annual increase materially changes multi year cost, is reported consistently by independent buyers, and appears on no vendor surface.

The security documentation on the same site is exhaustive, so this is a deliberate commercial posture rather than an inability to publish detail.

Ask for the tier list, the dialer price, implementation scope and the renewal uplift clause in writing.

Two elements work in the buyer's favour and the specifics are undocumented.

The master subscription agreement is published and linked, so termination, suspension and post termination provisions can be read before signing rather than negotiated blind. For a quote only vendor that is a meaningful disclosure, because the contract is the one document that governs exit and most enterprise vendors in this index do not publish theirs.

Public interfaces exist and are confirmed in the security documentation, giving a technically capable customer a programmatic extraction route independent of any export feature. Backup and continuity arrangements are described, though those protect availability rather than portability.

What two passes could not locate is any export route, file format, statement of export contents, or retention and deletion position after termination.

The commercial side works against portability. Independent sources consistently report annual contracts with no monthly option, minimum seat commitments, and auto renewal with compounding uplifts, which is term lock in its ordinary form.

What accumulates is substantial and partly irreplaceable: cadence structures refined over years, complete engagement history, call recordings and transcripts, deal history and forecast records. The recordings in particular cannot be reconstructed once access ends.

Ask what an export contains, whether recordings and transcripts are included, and what the deletion timeline is.

The clearest capability gap on this record, and it is established by the vendor's own published surfaces rather than only by competitor claims.

The complete capability list published across the platform navigation and the site footer covers cadence automation, action prioritisation, conversation intelligence, deal management, analytics, forecasting, chat agents, an enterprise data platform, mobile, plays, coaching, automations, channels and a command centre. Not one deliverability function appears anywhere in it. No mailbox warm up, no domain health monitoring, no authentication record guidance, no inbox placement testing, no spam or content checking, no sender reputation monitoring, no sending address rotation and no bounce or complaint handling surface.

Multiple independent analyses state the same absence explicitly. Several are published by competitors and should be weighed accordingly, and here they agree with what the vendor's own capability list shows by omission, which is the stronger evidence.

The significance is proportional to the price. This is a platform whose central function is sending outbound email at enterprise volume, reported by independent buyers at well over a hundred dollars per seat per month, and a customer must buy or build the entire deliverability layer separately.

Sending from the customer's own connected mailboxes limits the damage, since reputation attaches to a domain they already manage.

Ask what deliverability instrumentation exists and what a customer is expected to supply.

Genuine international enterprise coverage, evidenced by infrastructure and physical presence rather than asserted by a language switcher.

Four industries carry dedicated pages: professional services, manufacturing, medical software and devices, and logistics. Six buyer functions are addressed separately, covering revenue operations, sales leadership, sales development, account executives, customer success and marketing, and five use cases run across pipeline creation, opportunity acceleration, productivity, technology optimisation and customer growth. That is a matrix rather than a list, and it maps to how a large organisation actually divides responsibility.

The international position is substantiated three ways. Physical offices operate in Atlanta, London and Mexico, spanning North America, Europe and Latin America. The platform is hosted in both United States and European Union regions, which is what makes European enterprise sales real rather than aspirational, since residency is the question that stops such deals. And the site publishes in four languages.

The named customer set spans payments, enterprise technology, recruitment, delivery, industrial manufacturing, commerce, healthcare technology and document software, which is consistent with the stated industry pages rather than contradicting them.

The independent review base places the majority of reviewers in mid market, so the centre of gravity sits between mid market and enterprise rather than at either extreme.

Ask about support coverage and implementation partners in your specific region.