Salesloop

Two passes located no model driven capability anywhere on the product, service or knowledge base surfaces.

Everything the platform does is deterministic and the vendor describes it that way. Lead lists are built from the professional network's own search filters by job title, industry, location and company size. Message sequences are authored by the customer and personalised through field substitution. Sending runs on a schedule. Unenrolment fires on a detected reply. Address management registers activity to a fixed location. Intent triggers in the managed service fire on published events such as job postings, funding announcements and posting activity, which are observable signals matched by rule rather than inferred.

Unusually for this index, the vendor makes no artificial intelligence claim at all. There is no assistant, no generated copy, no scoring and no agent, and equally no marketing language implying any of those exist. That honesty is worth stating because several records in this cohort advertise capability their feature lists do not contain, and this one does not.

The grade reflects capability rather than candour. In a category where competitors now generate and personalise copy at draft time, a purely rule based tool is a materially thinner product.

Ask whether any message generation or prospect scoring is planned, given the roadmap items listed as forthcoming have not shipped.

Autonomy is the product's central promise and one real control sits inside it.

Running in the cloud rather than as a browser extension means campaigns continue with the user's machine closed, which the vendor states plainly as the differentiator. Messages therefore go out unattended, from the customer's own professional network account, while the customer is doing something else entirely.

Automatic unenrolment on reply is the meaningful safeguard and it addresses this category's most damaging failure. Continuing to send scheduled follow ups to someone who has already answered is the error that makes automation obvious and makes the sender look careless, and detecting the reply and stopping the sequence prevents it without the customer intervening.

Address management registering activity to the user's own location is a second control, aimed at platform detection rather than at message quality.

What is undescribed is the throttle. Two passes located no configurable daily or weekly sending limit, no ramp up schedule for a new account, no working hours restriction and no audit trail showing what was sent from an account and when.

On the managed service the autonomy question changes shape entirely, since a third party is operating the client's account.

Ask what daily limits apply, whether they are configurable, and what record shows activity per account.

Not applicable and rated as scoped rather than penalised.

Two passes established that this product contains no model driven capability at all: no generated copy, no scoring, no classification, no assistant and no agent. There is consequently no model to name, no provider to disclose, no version to state and no training question to answer.

What distinguishes this from a concealment case is that the vendor makes no claim either. Nothing on the site advertises artificial intelligence, implies inference, or borrows the vocabulary. Elsewhere in this index a vendor advertising intelligence its own feature list does not contain has been graded down for the mismatch; here the marketing and the product agree, and the correct reading is that the axis does not apply rather than that disclosure has failed.

A buyer should read this grade as an absence of applicability and should not compare it against a model driven vendor's score on the same axis.

The one adjacent question concerns the managed service, where a human team writes the messaging, so any copy quality claim rests on that team's craft rather than on a system.

Ask whether any generation or scoring capability has been introduced since this review, since the roadmap has been static for some years.

One reference is properly attributed and it is the strongest element here. A named sales director at a named European leasing and factoring group is quoted on the managed service page, describing automated targeting and network building across sectors. A full name, a real title and a substantial identifiable employer is checkable evidence, and it is more than several better funded vendors in this cohort provide.

The managed service publishes an outcome benchmark, stating that on average a client receives ten to fifty meetings for every thousand messages delivered. Publishing a range rather than a single best case is the more honest presentation, and a fivefold spread is wide enough that it cannot support planning: the difference between ten and fifty meetings per thousand is the difference between a failed programme and a good one.

What is absent is everything around it. No customer count, no case study, no methodology, no measurement period, and no substantial independent review base on the major platforms.

The vendor also publishes extensive educational content on its own blog, some of it ranking competitors, which builds authority rather than evidencing outcomes.

Ask what the median rather than the range is, and for a reference client at your team size.

Squarely applicable across two channels and addressed on neither in legal terms.

The software sends automated connection requests and message sequences at volume on a professional network. The managed service additionally sends what the vendor describes as personalised emails to prospects identified through that network, using intent triggers to time them.

Two passes located no consent basis for contacting a prospect, no suppression list, no unsubscribe or opt out mechanism for either channel, no do not contact handling, and no jurisdictional guidance of any kind.

The vendor's location makes the email omission sharper rather than softer. An Irish company operates under the European data protection regulation and the electronic communications rules directly, and sending unsolicited commercial email to individuals under that regime requires a lawful basis the vendor never mentions. A customer buying the managed service is having messages sent on their behalf, in their name, under rules neither party has documented.

The blog does address compliance, and the compliance it addresses is the platform's terms rather than the law: guidance on staying within the network's rules, on ethical automation and on avoiding account restriction.

That distinction matters, because platform compliance protects the account and legal compliance protects the company.

Ask what lawful basis the managed service relies on for email, and how opt outs are recorded and suppressed.

A privacy policy and terms and conditions are published and linked sitewide. Beyond those two documents, two passes located nothing: no data processing agreement, no subprocessor list, no retention period, no stated processing location, no transfer mechanism and no described route for a data subject request.

The holdings make that thin for an operator of this kind. The platform holds continuing access to customer professional network accounts, prospect lists extracted from that network containing names, titles, employers and locations, and complete message histories including prospect replies. The managed service extends this to email addresses sourced for campaigns.

An Irish establishment sits under European supervision directly rather than by claim, which raises rather than lowers the expectation. A vendor processing personal data on prospects at campaign volume, from a European base, would ordinarily publish processing terms as a matter of course, and this one does not.

The person whose data is processed here never contracted with anyone. They appeared in a filtered search, were added to a list, and received messages, and no published document describes what is retained about them or for how long.

Ask for a processing agreement, the retention period on prospect lists and message histories, and where data is processed.

The vendor operates no database and sells no records, and it nonetheless acquires personal data as a core function, which is the distinction this axis is built to catch.

Lead lists are constructed by running the professional network's own search filters and extracting the resulting profiles into the platform as campaign targets, carrying names, job titles, employers, locations and company sizes. That is collection of personal data from a platform that does not license it for the purpose, performed at list scale rather than individually.

The managed service compounds it, since the vendor states it targets prospects with personalised emails, which requires email addresses that the professional network does not expose. Where those addresses come from is unstated: no source, no provider, no verification and no consent basis.

Two passes located no provenance statement of any kind, no licence basis, no accuracy figure and no indemnity.

What partly distinguishes this from a data broker record is that nothing is resold. The extracted data serves one customer's campaign rather than being packaged and sold onward, so the exposure is narrower even though the collection question is identical.

Ask where the managed service sources email addresses, and what is retained after a campaign ends.

This is the defining axis for this vendor, because the entire product is automated activity on one platform that does not permit it.

Connection requests, message sequences and profile based list building all run automatically against a professional network whose user agreement prohibits automated access and third party automation tools. Two passes located no partner programme, no sanctioned interface and no described permission.

The address management feature is the clearest evidence of how the vendor understands its own position. Registering each account's activity to a static address matching the user's own location exists so that cloud originated automation does not present as data centre traffic. That is a detection avoidance measure, and the vendor markets it as protecting the customer's account, which is an accurate description of what it is for.

Two disclosures deserve genuine credit and neither changes the exposure. A trademark notice appears sitewide stating the product is not an official product of the network, the microblogging platform or the search company, and that marks belong to their owners. And, more candidly than any comparable vendor in this index, the same footer states that use of the product is at the customer's own risk.

That sentence is an explicit transfer of account risk to the buyer, published rather than buried. It is honest, and it is also the vendor confirming the risk is real.

Ask what happens commercially if your account is restricted mid campaign.

Two passes located no security page, no trust centre, no encryption statement, no access control description, no monitoring position, no incident history, no responsible disclosure route, no status page and no subprocessor list.

The credential this platform holds makes the silence consequential. Cloud based automation of a professional network account requires continuing authenticated access to that account, held on the vendor's infrastructure so campaigns run while the customer is offline. That access is the customer's professional identity. Whoever holds it can read their inbox, see their network, and send in their name.

Nothing published states how that access is stored, whether it is encrypted at rest, who at the vendor can reach it, how it is revoked, or what happens to it when a subscription lapses.

Third party review material references address security protocols and encrypted passwords, which is a reviewer's paraphrase rather than a vendor commitment and should not be treated as disclosure.

The managed service raises the same question in sharper form, since vendor staff operate client accounts directly as part of the service.

The absence of a status page is a practical gap too, since a customer whose campaigns silently stopped has no way to distinguish a platform outage from an account restriction.

Ask how account access is stored and revoked, and who at the vendor can access a customer account.

The identity on every message is real and almost nothing else about the interaction is what it appears.

Messages leave the customer's own professional network account under their own name and photograph. A recipient sees a connection request or a message from a named individual at a named company and reasonably infers that person looked at their profile and chose to write. In fact a scheduled system sent it to a list built by filter, and the address management feature exists specifically so the activity is indistinguishable from manual use, including to the platform itself.

The managed service takes this materially further. A third party agency identifies the targets, writes the messaging and runs the campaign from the client's personal account. The individual whose name and face appear on the message did not write it, did not read it before it sent, and may not know who received it. The recipient is corresponding with an agency while believing they are corresponding with a named executive.

Automatic unenrolment on reply means a human does then engage, which limits the deception to the opening rather than sustaining it through a conversation.

Two passes located no disclosure position, no configurable notice and no guidance on any of this.

Ask who writes and sends under your name on the managed service, and what your team sees before a message goes out.

Two integrations are named and both serve one coherent purpose. Website visitor identification services connect so that anonymous company visits can be turned into named prospects on the professional network and targeted directly. For a business with meaningful site traffic that is a genuinely useful pairing, and it is the most differentiated thing about this product.

Beyond those, the surface is empty. Two passes located no customer relationship integration, no interface, no webhooks, no automation platform connector, no marketplace listing and no developer documentation. A campaign therefore lives inside the tool, and a reply or a booked meeting does not reach the customer's system of record by any described route.

One finding is worth stating precisely because it is checkable. Email, telephone and microblogging channels have been described as forthcoming on the vendor's own material since 2021, and were still being described that way in content published in 2025. Four years of the same three integrations being imminent is a roadmap signal rather than a feature list.

A knowledge base is maintained on a third party support platform.

The managed service does deliver email outreach, so the capability exists as a service the vendor performs rather than as a product feature the customer operates.

Ask whether the email and telephone channels have shipped, and how replies reach your system of record.

Cloud deployment is the vendor's headline architectural claim and the only thing stated about it.

The positioning is that the product runs in the cloud rather than as a browser extension, so a customer does not leave a machine open for campaigns to execute. That is a real distinction in this category, where extension based competitors require a dedicated always on device, and it is the main reason a buyer would choose this over cheaper alternatives.

Everything else about the deployment is unstated. Two passes located no hosting provider, no region, no country, no residency option, no single tenant arrangement, no customer managed keys and no subprocessor list.

The address management feature does imply geographic infrastructure, since registering an account's activity to a static address matching the user's own location requires exit points in multiple countries. Nothing describes whose infrastructure provides them or where the underlying processing happens.

An Irish establishment makes European hosting plausible and no more than plausible, and the inference does not survive a procurement review.

The data crossing that unstated boundary includes authenticated access to customer professional network accounts and complete prospect message histories.

Ask where the platform is hosted, where account credentials are stored, and whose infrastructure provides the addressing.

Two dedicated passes located no security page, no trust centre, no attestation, no certification, no auditor, no assessment period, no penetration test summary, no completed questionnaire, no subprocessor list, no status page and no responsible disclosure route. There is no credential to apply the test to because none is claimed anywhere, and no badge row either.

The site's entire published governance surface consists of a privacy policy, terms and conditions, and the sitewide trademark and risk notice.

For a vendor of this size the absence of a formal attestation is unremarkable and expected. What is more notable is the absence of any security statement at all, given what the platform holds. A tool that stores authenticated access to customers' professional network accounts, and operates those accounts unattended, is holding the single most sensitive credential in this product category, and publishes nothing about how it protects it.

A responsible disclosure route would cost nothing and does not exist, so a researcher finding a flaw has no channel.

The practical consequence is straightforward. Any buyer with a procurement function will find nothing to submit, and the risk notice in the footer makes clear the vendor's position on where that risk sits.

Ask for any security documentation at all, and for a disclosure contact.

This vendor once did well on this axis and the current state of its pricing surfaces is the finding.

Historically the disclosure was good. Three offerings carried published figures: a single account plan at 49 dollars a month, a team plan at 199 dollars covering six accounts, and a fully managed service from 2,000 dollars. A fourteen day trial required no card, and the pricing page carried an explicit claim of no costs or small print.

Verified on 23 August 2026, the software pricing page returns a not found error. The managed service page remains live, and its pricing component renders as empty template labels reading starting from, typical monthly plan, messages sent and dollars per month, with no values in any of them. The only figure surviving anywhere on the site is a sentence in body copy stating that service pricing starts at 2,000 dollars for up to eight hundred to a thousand messages managed monthly.

A promotional coupon code dated 2021 is still displayed in the footer of every page.

So a buyer arriving today cannot price the software at all, and can price the service only from prose. The figures recorded in this index come from the vendor's own knowledge base and blog material of uncertain currency, and should be confirmed rather than relied upon.

Ask for a current rate card in writing, and confirm whether the software plans are still sold.

Two passes located no export route, no file format, no statement of what an export would contain, no termination provision, no notice period and no post cancellation retention or deletion position.

The broken commercial surface compounds this rather than sitting apart from it. With the pricing page returning a not found error, a prospective buyer cannot establish the contract term either, so neither the commercial nor the technical exit path is discoverable before contact.

What would be stranded is modest in volume and awkward in kind: prospect lists built through filtering, the message sequences a customer wrote and refined, complete conversation histories with prospects, and campaign analytics. The conversations themselves partly survive independently, since they exist in the customer's own professional network inbox rather than only in the platform, which is a genuine mitigation particular to this product type.

What does not survive is the campaign structure and the performance record showing which sequences worked.

One exit consideration runs the other way and belongs here. Account access held by the vendor should be revoked on departure, and nothing states how that happens or how a customer confirms it has.

Ask what an export contains, and how account access is revoked and confirmed on cancellation.

For the professional network channel there is real discipline, and for email there is none.

The network equivalent of deliverability is account standing rather than inbox placement, and the vendor addresses it directly. Static address management registers each account's activity to the user's own location, which is the single most effective measure against the restriction that follows when a platform sees a session originating from a data centre. Cloud execution avoids the extension based alternative that ties a campaign to one machine. Automatic unenrolment on reply prevents the repeated messaging that generates complaints. Older vendor material references proprietary sending technology and stated best practice.

Those are the right controls for the channel and they are the product's main engineering.

The managed service sends email, and nothing anywhere addresses that channel's discipline: no mailbox warm up, no authentication record guidance, no domain health, no bounce or complaint handling, no placement testing and no published delivery figure. A service sending on a client's behalf without describing any of this is asking the client to trust an unexamined sending practice against their own domain reputation.

No published figure supports either channel.

Ask what daily sending limits apply per account, and what domain and authentication setup the managed email service uses.

The intended buyer is described consistently and sits at the small end. Independent analysis and the vendor's own positioning converge on three groups: solo founders and independent operators running targeted outreach to a well defined profile, small teams of roughly three to six representatives managing multiple sending accounts centrally, and companies with meaningful website traffic wanting to convert anonymous visits into named outreach.

That third case is the most coherent and the most differentiated, because the visitor identification integrations exist specifically to serve it, and it gives the product a reason to exist beyond cheaper competitors.

An Irish base gives genuine European presence, and the one named reference is a European financial services group.

Two things weaken the picture. There is a substantial gap between the buyer of a 49 dollar single account plan and the buyer of a 2,000 dollar monthly managed service, and the site addresses both without acknowledging they are different companies with different problems. And with the software pricing page now unavailable while the service page remains live, the centre of gravity appears to have moved toward the service.

No vertical pages, no supported country list and no language statement were located.

Ask whether the self serve software is still actively sold and supported, or whether the managed service is now the business.