Salestools
Salestools sells autonomous sales agents under three named personas: an outbound prospecting agent, an inbound qualification agent, and a research agent for enterprise accounts. The vendor states it pioneered the category in 2018 and that its agents work independently to target, prospect, reply around the clock, handle objections and build outreach across email and the professional network.
The research agent analyses companies from public information, summarising financial statements, locating case studies, inferring pricing models, mapping technology stacks and tracking competitive movement, drawing on a stated hundred plus data sources and a contact database given at over a hundred million records.
Outreach runs across email, professional network, telephone and direct mail, with campaign timing and sequencing adapting to prospect behaviour. Social engagement extends to generating comments on prospects' posts, offered in autopilot or co-pilot modes. Anonymous website visitors are identified through an integrated third party resolution service and contacted directly.
Commercially it runs on platform credits with action level consumption published, and the vendor operates more than a hundred and twenty mailboxes.
The operating entity is Salestools AI Inc. of San Francisco. Buyers should read the recipient disclosure axis on this record before evaluating, as the vendor's own product description states that recipients of agent written messages will not know.
Capability Axes
There is no product here without the agents. Three named personas divide the work: an outbound agent that prospects and writes, an inbound agent that qualifies and routes arriving leads, and a research agent that builds account intelligence. Separating them is a defensible design decision, because outbound prospecting and inbound qualification genuinely require different behaviour and a single general purpose agent does neither well.
The research agent is the most substantively model dependent capability on this record. Summarising financial statements, locating case studies, inferring a company's pricing model from public material, mapping a technology stack and tracking competitive movement are interpretive tasks that no rule engine performs. The vendor positions this explicitly as replacing manual research labour.
Execution is equally model driven. Agents compose each message individually from role, company challenges, recent activity and buying signals, reply and handle objections within minutes, and generate comments on prospects' posts.
The data layer feeds the agents rather than standing alone as a product, and the stated proposition is that one representative performs as ten.
Strip the models out and nothing remains that a customer would buy.
Ask what the research agent returns on a company with thin public information.
This is the most autonomous product graded in this index and the least constrained.
By the vendor's own description the agents work independently around the clock to target, prospect, reply, handle objections and build outreach, booking qualified meetings directly onto a calendar without manual effort. Campaigns adapt their timing, messaging and sequencing based on prospect behaviour. Comments on prospects' posts are generated automatically. Replies to objections arrive within minutes.
So the system chooses the audience, writes the message, sends it, reads the response, decides how to answer, answers, and books the meeting, with no described point at which a person intervenes.
One genuine control signal exists. Social commenting is offered in autopilot or co pilot modes, which implies the customer can require review before a comment posts. That distinction is not extended to email or messaging.
Independent review material reports safeguard controls that validate generated claims against live data before a message sends, which would be a substantive guardrail. It appears in a competitor's review rather than on any vendor surface and is recorded as reported and unverified.
Two passes located no approval workflow, sending ceiling, stop condition, escalation rule or audit trail on the vendor's own pages.
Ask what a human can review before it sends, and what the audit record shows.
Two passes located no model, no provider, no version, no architecture and no evaluation on any vendor surface.
The personification is worth noting as a disclosure pattern rather than merely a branding choice. Presenting the system as three named colleagues with job titles gives a buyer a mental model of capability while communicating nothing technical. A named persona is not an architecture, and the naming actively discourages the question.
The research agent makes the gap material rather than formal. It is described as summarising financial statements, inferring pricing models and analysing technology stacks, and its output feeds directly into messages sent to real prospects under a customer's name. Whether that analysis is accurate, how often it is wrong, and what happens when it is, are unaddressed. A confidently wrong inference about a prospect's pricing model, delivered in a personalised opening line, damages the sender.
Independent review material references controls validating generated claims against real time data before sending, which acknowledges hallucination as a known risk in this product. That acknowledgement comes from a competitor rather than the vendor.
Credit consumption is published for mechanical actions and not for agent reasoning or research.
Ask which provider powers the agents, and what error rate the research agent produces.
The site is dense with numbers and none carries methodology, and two of them sit awkwardly against each other.
Published claims include an eighteen percent response rate against a stated industry average of five to seven, an eighty seven percent connection request rate described as guaranteed, three times more meetings, five times faster pipeline growth, a customer quoted at a four hundred percent response rate increase with sales costs halved, more than a hundred and twenty operational mailboxes, and six hundred thousand euros of annual recurring revenue reached in record time.
The tension is between the last figure and the logos beside it. The vendor names a global conglomerate, a major insurer and a large consultancy as enterprise customers in the same passage that states six hundred thousand euros of recurring revenue. Three genuine enterprise deployments at those organisations would ordinarily exceed that figure between them, so either the relationships are small departmental pilots or the logo usage is looser than the wording implies. A buyer should establish which.
A guarantee is also stated without a remedy. Nothing describes what a customer receives if the eighty seven percent connection rate is not achieved, which makes it a claim rather than a guarantee.
Ask what the named enterprise relationships actually consist of, and what backs the guarantee.
Four outbound channels operate simultaneously against a vendor supplied database, and one capability raises a consent question sharper than anything else in this index.
Outreach runs across email, the professional network, telephone and direct mail, fed by a stated hundred million verified contacts and real time intent data.
The website visitor capability is the distinctive exposure. The vendor states it identifies and engages every anonymous visitor, explicitly including those who leave no information, resolving identities through an integrated third party service and then contacting them. A person who visited a website and deliberately declined to fill in a form has expressed a preference not to be contacted. Identifying them anyway and initiating outreach inverts that, and in several jurisdictions the resolution itself requires a lawful basis before any message is sent.
Two passes located no consent basis, no suppression list, no unsubscribe handling across the four channels, no do not call screening, no calling hour restriction and no jurisdictional guidance.
The revenue figure is denominated in euros, implying European customers and therefore the stricter regime, and no European privacy framework is named anywhere.
Ask on what basis a de anonymised website visitor may be contacted, and how opt outs propagate across four channels.
Two passes located no data processing agreement, no subprocessor list, no retention period, no processing location, no transfer mechanism, no data subject request route and no privacy regime named on any retrieved surface.
The holdings are broad and one category is unusually sensitive. A contact database stated at more than a hundred million records. More than a hundred and twenty operational mailboxes. Professional network account access. Millions of analysed sales interactions. And website visitor identity resolution, which links behavioural data about an individual's browsing to a name, an employer and contact details.
That last category is personal data created rather than collected: the visitor gave nothing, and the platform infers who they are from technical signals. It is the holding that most obviously requires a published lawful basis, and none appears.
The euro denominated revenue figure implies European customers and therefore European data subjects, which raises rather than lowers the expectation of a published processing position.
The visitor resolution runs through a named third party service, which is at least one identifiable processor in the chain, and no formal subprocessor list exists.
Ask for a processing agreement, the lawful basis for visitor identity resolution, and the retention period on resolved identities.
The vendor makes data ownership an explicit differentiator, stating that unlike traditional intelligence tools its solution operates independently by owning the data layer. Owning the layer is a claim about control rather than about origin, and origin is what is missing.
The published scale is a database of more than a hundred million verified contacts, drawn from more than a hundred data sources, with real time intent data alongside. Two passes located no source named, no provider chain, no licence basis, no consent basis, no collection method, no refresh cadence, no definition of what verified means and no indemnity.
One independent directory describes bulk data extraction and scraping from multiple sources as a platform feature, which if accurate describes collection rather than licensing. That characterisation comes from a third party listing rather than the vendor and is recorded as reported.
The visitor identification service is named, which is a partial and genuine provenance disclosure: a buyer knows which company performs identity resolution, even if not how.
Intent data is entirely unexplained. Real time intent implies observation of behaviour across properties the vendor does not own, and nothing describes where those signals come from.
Ask where the hundred million records originate, what verified means, and how intent signals are collected.
Professional network activity here goes further than any other record in this index, and the vendor is explicit about it.
Beyond automated messaging and connection requests, the platform generates comments on prospects' posts, offered in autopilot or co pilot modes. Automated commenting is a step beyond private outreach: it publishes machine written content into a public professional conversation under a real person's name, visible to that person's entire network. It is also precisely the behaviour platforms police hardest, because it degrades the public feed rather than one inbox.
The connection request claim compounds it. An eighty seven percent connection rate described as guaranteed implies operating at volumes and acceptance patterns that require either exceptional targeting or the kind of activity levels that trigger restriction.
Two passes located no partner programme, no sanctioned interface, no described mechanism, no published request or messaging limits and no non affiliation disclaimer.
Independent review material references backend protections framed around account safety, which describes restriction avoidance rather than permission.
The exposure sits entirely with the customer, whose account carries the comments and bears any restriction.
Ask what connection and comment volumes are enforced, and what happens commercially if your account is restricted.
Two passes located no security page, no trust centre, no encryption statement, no access control description, no tenant isolation position, no incident history, no responsible disclosure route and no status page.
The credential concentration here is among the heaviest in this index. More than a hundred and twenty mailboxes operational, professional network account access for every customer representative, a contact database above a hundred million records, resolved website visitor identities, and millions of analysed sales interactions.
That mailbox figure deserves particular attention. Whether those are vendor operated sending mailboxes or connected customer mailboxes, the platform holds authenticated mail access at scale, and nothing states how credentials are stored, who can reach them, or how they are revoked.
Nothing addresses whether the millions of analysed interactions, which are other companies' sales conversations, train models or inform one customer's outreach using another's data.
Independent review material references backend safety measures, described in terms of protecting accounts from platform restriction rather than protecting data from compromise. Those are different problems and only the second belongs on this axis.
Ask whether analysed interactions train models, and how mailbox and network credentials are stored and revoked.
The vendor's own product description settles this axis in a single clause. Describing how the system creates personalised emails and professional network messages on behalf of every sales representative, it adds that none will know.
That is undetectability stated as a selling point, in the vendor's own words, in the copy it supplies to a major review platform. Elsewhere in this index the finding has been a contradiction between a trust page and a home page, or a testimonial a vendor chose to display. Here there is no inference to draw: the sentence says recipients will not know, and it is offered as a benefit.
Everything around it deepens rather than mitigates. Agents reply around the clock and handle objections within minutes, so a prospect who writes back continues corresponding with software rather than reaching a person. Comments appear on prospects' public posts under a representative's name without that representative writing them. And website visitors who deliberately left no details are identified and contacted.
Two passes located no disclosure position, no identification behaviour, no statement of what an agent does when asked directly whether it is a person, and no handover rule.
Ask at what point a human enters the conversation, and what the agent says when a prospect asks whether it is real.
Coverage is adequate and documentation is absent.
The vendor describes connecting to email senders, customer record systems and marketing automation tools to launch campaigns without manual imports, and independent directories describe integration with popular record systems, email platforms and the professional network. Calendar booking writes meetings directly into a customer's diary, which is the integration that matters most for an agent product since a booked meeting is the deliverable.
The visitor identification service is named specifically, which is more useful than a generic integration claim because a buyer can evaluate that provider independently.
Direct mail as a fourth channel implies a fulfilment integration that is nowhere described.
What two passes could not locate is any developer surface: no interface documentation, no endpoint reference, no rate limits, no webhooks, no marketplace listing and no authentication guidance. No specific record system is named on any retrieved vendor page either, so a buyer cannot confirm their own stack is supported without asking.
For a product whose output is meetings and conversations, the write back path into a system of record is the integration to verify.
Ask which record systems are supported natively, and what synchronises back after a reply or a booking.
Two passes located no hosting provider, no region, no country of processing, no residency option, no single tenant arrangement, no customer managed keys and no subprocessor list.
The corporate position is a San Francisco incorporated entity, and the recurring revenue figure is denominated in euros, which indicates European customers and probable European operations alongside the American registration. That combination makes the transfer question concrete for a substantial part of the customer base and it has no published answer.
The data crossing that unstated boundary is unusually broad: a database above a hundred million records, resolved identities of website visitors including European ones, authenticated access to more than a hundred and twenty mailboxes, professional network credentials, and millions of analysed sales interactions belonging to customers.
The visitor resolution provider is named, so at least one processor in the chain is identifiable, and where that provider operates is separately undisclosed.
A European customer subject to a supervisory enquiry about how their website visitors were identified would need to state where the processing occurred, and nothing published supports an answer.
Ask which entity contracts with European customers, where processing occurs, and for the subprocessor list.
Two dedicated passes located no security page, no trust centre, no attestation, no certification, no auditor, no assessment period, no penetration test summary, no completed questionnaire, no subprocessor list, no status page and no responsible disclosure route. No badge row appears either, so nothing is claimed and nothing is overstated.
The absence is harder to reconcile here than on most small vendor records, because this company sells to named enterprises. A global conglomerate, a major insurer and a large consultancy are all displayed as customers, and every one of those organisations operates a formal third party security review as a precondition of purchase. Either those reviews were completed against documentation not published anywhere, or the relationships are not the enterprise deployments the logos imply.
The insurance sector reference is the most pointed, since financial services vendor assessments are among the most demanding and typically require a current attestation report.
A responsible disclosure contact is the cheapest artefact available and does not exist, so a researcher who found a flaw in a platform holding a hundred and twenty mailboxes has no route to report it.
Ask what documentation the named enterprise customers reviewed, and whether any attestation is held or in progress.
Credit mechanics are published at action level, which is the good part, and the pricing surfaces themselves are in an unsettled state.
Consumption is defined per action, at one credit for an email send and two for a lead enrichment, with the vendor noting that different actions consume different amounts. Real time usage monitoring from the dashboard with configurable alerts is described, which matters on a credit model because it lets a customer see spend accruing rather than discovering it. Prices are stated to exclude taxes, levies and duties, which is a genuine disclosure most vendors omit.
A free trial is offered and the vendor states there are no fees. Enterprise plans and startup packages are referenced, and pay per result is described as a pricing model, which would be unusual and buyer favourable if it means what it appears to.
The complication is that two separate pricing pages exist concurrently, one at a standard path and one explicitly labelled as new, both live. That indicates a pricing transition in progress, and a buyer cannot tell which set of figures governs.
Tier figures were not retrievable in this review. Independent review material places entry pricing around nine hundred dollars a month, unconfirmed.
Ask which pricing page is current, and what pay per result actually means.
Two passes located no export route, no file format, no statement of export contents, no termination provision, no notice period and no post cancellation retention or deletion position.
No interface documentation exists as a fallback, so unlike several records in this index there is no described technical route by which a customer could retrieve their own material independently of the vendor.
What accumulates is substantial: research profiles built by the agents across target accounts, complete conversation histories including agent written replies sent under representatives' names, campaign structures, resolved website visitor identities and engagement analytics.
The research output is the least reconstructible part. Deep account intelligence assembled over months, covering financial position, technology stack and competitive movement, is the asset a customer paid for and it exists nowhere else.
Two exit questions specific to this product also go unanswered. The vendor holds professional network credentials and mail access, and nothing describes revocation or how a customer confirms it. And messages sent under a representative's name remain in that person's own network inbox, so conversations partly survive independently, which is a genuine mitigation.
Ask what an export contains, whether research profiles are included, and how account access is revoked.
One infrastructure figure is published and no discipline behind it.
The vendor states more than a hundred and twenty mailboxes operational, which describes sending capacity and implies rotation across many addresses, the standard architecture for volume outbound. It is a statement about scale rather than about control.
Two passes located no mailbox warm up, no domain health monitoring, no sender authentication record guidance, no inbox placement testing, no spam or content checking, no per domain throttling, no bounce or complaint handling and no published delivery, placement or bounce figure on any vendor surface.
The database creates the predictable risk. A hundred million records described as verified, with no definition of verification and no stated pre send validation step, feeding agents that send autonomously around the clock, is the configuration that produces bounce spikes. At that volume the damage lands on whichever domains are sending.
The response rate claims are engagement metrics rather than deliverability metrics, and a high response rate on delivered mail says nothing about how much mail arrives.
Multi channel dilution across email, network, telephone and post reduces reliance on any single channel, which helps in practice without being a described control.
Ask what warm up and authentication the mailboxes run, and what bounce rate the database produces.
Segmentation is by company size rather than by industry, and it is stated across dedicated pages: a startup solution covering founders, small businesses and first agent deployments, scaling teams, and enterprise plans with custom agents and dedicated support. That ladder is coherent and the entry framing is specific about who it is for.
The named customer logos point upmarket, covering a global conglomerate, a major insurer and a large consultancy, while independent assessment places the practical fit with mid sized teams needing straightforward prospecting and suggests advanced users may find it thin. Those two readings are some distance apart and a buyer should weight the independent one.
Geography is partly inferable and nowhere stated. An American incorporation sits alongside euro denominated revenue, indicating European operations, and two passes located no supported country list, no language statement for agent written messages, and no coverage or accuracy claim for the contact database by territory.
Language matters more here than for most records, since agents compose messages autonomously and a model writing outbound in a language it handles poorly fails visibly in front of prospects.
No vertical or industry pages were located.
Ask which languages the agents write in at production quality, and what database coverage looks like in your markets.
Pricing
Vendor-published figures are labeled as such. Figures labeled “Estimated” are derived from third-party sources and have not been confirmed by the vendor.
| Entry Price | Pricing Basis | Data Processing Terms | Implementation | Source |
|---|---|---|---|---|
|
Not confirmed by the vendor; one competitor review reports entry around 900 dollars per month on a credit model
|
Credit based subscription, with platform credits described as the currency of the product and different actions consuming different amounts. Published consumption rates cover one credit per email send and two credits per lead enrichment. Prices are stated to exclude all taxes, levies and duties. A free trial is available, enterprise plans are offered with custom agents and dedicated support, and a startup package is positioned for founders and small businesses deploying a first agent. Pay per result is referenced as a pricing model. Real time usage monitoring with configurable alerts is described. Two pricing pages are live concurrently, one at a standard path and one labelled as new, so the governing tier structure could not be established and no tier figures are recorded here. One independent review published by a competitor places entry pricing at approximately nine hundred dollars per month; that figure is unconfirmed by the vendor and should be treated as an indication only. | Two passes located no data processing agreement, no subprocessor list, no retention period, no processing location, no transfer mechanism, no data subject request route, no security page, no trust centre, no attestation, no certification, no status page and no responsible disclosure route. No privacy regime is named on any retrieved surface. The operating entity is Salestools AI Inc. of San Francisco, while the stated recurring revenue is denominated in euros, indicating European customers and probable European operations alongside the American registration; which entity contracts with European buyers is unstated. The holdings are broad: a contact database stated above one hundred million records, more than one hundred and twenty operational mailboxes, professional network account access, millions of analysed sales interactions belonging to customers, and resolved identities of anonymous website visitors obtained through a named third party resolution service. That last category is personal data created by inference rather than collected from the individual, and no lawful basis for it is published. Named enterprise customers including a major insurer would ordinarily require a current attestation report during vendor review, and none is published. | No implementation, setup or onboarding fee is published. A free trial is offered and referenced across multiple pricing surfaces. Enterprise plans are described as including custom agents and dedicated support, and a startup package is positioned for founders and small businesses deploying a first agent across the professional network and email, which suggests onboarding assistance is bundled at both ends of the range without being priced. The vendor emphasises that no manual work, no hiring of development representatives and no complex setup is required, and that campaigns launch without file imports. Independent review material describes real time credit usage monitoring with configurable alerts available from the dashboard. No contract term, minimum commitment, notice period or cancellation provision was located on any retrieved surface, and with two pricing pages live concurrently a buyer should obtain current terms in writing. | Third Party Estimated |
Credit mechanics are published at action level and the pricing surfaces themselves are unsettled.
Consumption is defined per action, at one credit for an email send and two for a lead enrichment, with the vendor stating that different actions consume different amounts. Real time usage monitoring from the dashboard with configurable alerts is described, which matters on a credit model because it lets a customer watch spend accrue rather than discover it on an invoice. Prices are stated to exclude all taxes, levies and duties, which is a genuine disclosure most vendors omit.
A free trial is offered and the vendor states there are no fees. Enterprise plans and startup packages are referenced, and pay per result appears as a described pricing model, which would be unusual and buyer favourable if it means what it appears to.
The complication is that two separate pricing pages are live concurrently, one at a standard path and one explicitly labelled as new. That indicates a pricing transition in progress and leaves a buyer unable to tell which figures govern. Tier figures were not retrievable in this review.
One independent review, published by a competitor and to be weighed accordingly, places entry pricing around nine hundred dollars a month on a credit model. That figure is unconfirmed against the vendor, which is why the basis here is recorded as third party estimated.