Sales & Marketing Automation · A B2B Services Team

AI Cold Email Outreach Agent for B2B Sales & Marketing Automation

A B2B services team asked us to build cold outreach that runs from a prompt, refuses drafts its safety checks cannot approve, and stays inside every country's spam law.

Want a build like this?

Tell us what you're working on. We'll walk through what a similar build looks like for you.

The Problem Space

Cold Email Is Either Fake or Illegal. Most Tools Pick One and Hope Nobody Notices.

Every business selling to other businesses needs a steady flow of new conversations. The tools for creating those conversations keep landing in one of two ditches. The email either reads like a chatbot wrote it, full of claims a human would never make, or the email is polished but breaks a country's anti-spam law and quietly poisons the sender reputation for months.

Personalisation at scale pulls teams toward AI that writes freely. Compliance pulls teams toward templates that never take a risk. Most tools pick one side and hope the other side does not notice. The client wanted a system that treats truth and compliance as pre-conditions, not options, so we built one for them.

The result is an outreach platform that plans campaigns from a plain-English prompt, refuses to send anything its guardrails cannot approve, respects every country's rules in code, and hands live replies to the sales team's CRM. Below is what changes when a business runs on it, and every safety layer that keeps it out of both ditches.

Fake Compliments
The AI Failure Mode
General-purpose AI writes freely and invents claims. One clearly fabricated line burns the whole email and the sender's reputation with it.
13 Country Laws
The Compliance Wall
Every country has its own cold-email rules. Get the postal address wrong, skip the unsubscribe, send outside working hours, and the mailbox reputation drops in a way no preview shows.
Human Careful
Does Not Scale
A human rep can write 10 careful emails a day. A team of 3 can cover 30. Any number above that needs a system, and the system has to keep every email as careful as the human first one.
Live Replies
Never Reach the CRM
Most cold-email tools fire and forget. Real replies sit in a separate inbox nobody watches, and the follow-up sequence keeps nagging a prospect who already engaged.

"Cold email lives or dies on two things. What it says being true. How it is sent being legal. Most tools nail neither."

The rule the platform runs on

The Impact

What Changes for the Team
the Day They Turn It On

This is not one more sales dashboard. It changes who is on the critical path for new conversations, whether compliance is a stack of PDFs or a switch in the admin, and whether the CRM fills with leads a human actually needs to answer.

One Prompt
Runs the Pipeline
Someone on your team types the campaign in one line and the platform handles everything else. No extra sales team to hire, no daily operator to babysit the queue, no spreadsheet to sort every morning.
Zero Unsafe
Drafts Ever Sent
Every draft passes internal guardrails before it can be queued. Anything the guardrails cannot approve is quarantined, not sent. The team is never surprised by what leaves the mailbox.
13 Regimes
Handled Automatically
The sender knows the recipient's country and applies its rules: working days, holidays, greeting, signoff, unsubscribe wording, postal address. Turn on a country, the whole system respects it.
Live Replies
In the Sales CRM
Real replies land in the sales team's existing CRM as leads, with the whole thread copied over. Queued follow-ups auto-cancel so nobody gets nagged after they engaged.
Before
Someone on your team writes a handful of careful emails a day. Templates cover the rest. Nobody has time to verify what the templates claim. Half the drafts bounce, a few offend a compliance officer somewhere, and the good replies sit in a separate inbox for a week.
After
Your team types one campaign prompt. The platform builds the target list, runs the guardrails, sends inside the recipient's local working hours, and hands live replies to the sales team's CRM. The team writes zero emails.
What It Unlocked
Outbound at scale without hiring an extra sales team, without the compliance risk, and without the drift that comes when the person writing the emails changes. Every email in every country reads the same careful way as the first one anyone wrote.
How It Works

From One Prompt
to a Sent Email

Four steps on the team's side. Everything else is automated. Your team learns the flow once, then never has to think about it again.

01

Auto Search

Type a one-line brief. The platform finds real prospects that match, skips the ones that fail a basic sanity check, and re-tries them later. Nobody hand-builds a target list.

02

Auto Writing

Every draft is written and passed through internal safety checks before it can be queued. Anything the checks cannot approve is set aside for the team to review. Nobody hand-writes each email.

03

Auto Send

Approved drafts leave the mailbox only inside the recipient's local working hours, on their working days, and only if every country and safety check passes. Nobody watches the outbox.

04

Auto Reply and Unsubscribe

Real replies go to the sales CRM as leads. Bounces, out-of-office notes are filed silently. One-click unsubscribes block the whole domain permanently, and queued follow-ups auto-cancel the moment a lead engages.

What Makes It Work

A Generic AI Email Tool
Cannot Do Any of This

Every business owner we speak to has already tried stitching ChatGPT to a mail-merge tool. The result reads better than the old templates for the first week and then starts making things up. The difference is not the model. It is the guardrails, the country layer, and the safety gates around it.

Feature 01

Guardrails the AI Cannot Negotiate

A generic tool lets the AI write what it wants and hopes the reader will not notice. This one runs every draft through internal guardrails before it can be queued. Anything the guardrails cannot approve is quarantined for the team, not sent. The output the mailbox actually sees has already survived the checks.

Draft Path
Written
Drafter produces the email
Checked
Guardrails run before the queue
Approved
Only passing drafts reach the sender
Failed drafts land in quarantine for the team, they never leave the mailbox.
Feature 02

Every Country's Rules Encoded, Not Written in a Policy PDF

A general tool has no idea a business email to a UK address needs a real registered postal address, or that a message to Germany without prior consent is a legal problem. This one reads the recipient's country, checks the anti-spam law, respects the working week and public holidays, and adds the right postal address to the footer before the send goes near an outbox.

One Campaign, Three Countries
US
CAN-SPAM footer, Monday-Friday
UK
PECR + UK-GDPR, Monday-Friday
UAE
Sunday-Thursday, Arabic-safe signoff
Same campaign. Three fully compliant sends. No manual switching.
Feature 03

Pre-Send Gates in Code, Not in a Runbook

A checklist a human runs before sending is a checklist a human forgets on a bad Monday. Every email here passes an automated set of pre-send checks: country switched on, mailbox has budget for the day, local working hours, no public holiday, address not on the suppression list, mailbox not in bounce-shutoff. Any check fails, the email waits.

One Email, Every Gate
Pass
Country on, mailbox has budget
Pass
Local time 10:14am, working day
Wait
Bounce shutoff active on this mailbox
Any single gate fails and the email waits. No manual override needed.
Feature 04

Auto-Shutoff When the Signals Go Bad

One bad list, one dirty import, and a mailbox can be blacklisted for months. The sender watches the bounce rate on a rolling window and shuts sending off automatically the moment the rate crosses a threshold the team sets. The mailbox stays clean, the team gets the reason, and nothing has to be noticed by a human first.

A Rough Patch, Auto-Handled
Ok
Rolling bounce rate under threshold
Watch
Rate creeping up, still under
Stopped
Threshold hit, sending off, reason logged
Sender reputation protected. Human reviews before turning it back on.
Feature 05

Warm-Up That Ramps a Fresh Mailbox on Its Own

A brand-new mailbox that sends 50 cold emails on day one gets marked as suspicious the same afternoon. The platform ramps a fresh mailbox up gradually, spread across the recipient countries proportionally, and only reaches full daily volume once the reputation is warm. The team does not have to pace it by hand.

A Fresh Mailbox, Warmed Automatically
Early
Small daily volume, evenly spread
Mid
Volume climbs, countries balanced
Warmed
Full daily volume, reputation intact
The mailbox is production-ready without a manual pacing spreadsheet.
Feature 06

Handoff to Humans at the Right Moment

A generic tool fires and forgets. This one reads every reply, classifies it as a bounce, an out-of-office reply, an unsubscribe, a negative or an interested one, and only wakes a human for the ones that matter. The real conversation lands in the sales CRM as a lead, and the queued follow-ups for that lead cancel so nobody gets nagged after they engaged.

Where Each Reply Ends Up
Bounce
Block list, no human
Away
Held, will resume after the return date
Interested
Copied to CRM as a lead, follow-ups cancelled
Humans only see the messages a human actually needs to see.
Feature 07

The Monthly Subscription Bill Ends

Most sales teams pay every month for a sales-engagement tool: HubSpot, Outreach, Apollo, Instantly, Salesloft, or one of the newer sequencers. The bill renews on autopilot, and it grows every time a seat is added or the team crosses a plan tier. A custom-built platform ends the recurring bill. The subscription stops being needed. The sales tools your team pays for shrink to the ones they actually use.

Recurring Bills That End
Ends
Monthly sales-engagement subscription
Ends
Per-seat charges as the team grows
Ends
Plan-tier jumps when volume creeps up
Stays
One custom-built platform you own
A recurring monthly bill collapses into one build the business owns.
Under the Hood

A Closer Look at
The Safety Net Under Every Send

Deep Dive 01

The Anti-Hallucination Guardrails

General AI writes whatever completes the sentence best. That is the whole reason it hallucinates. The platform never lets an AI draft go to an outbox on that pattern alone. Every draft passes through internal guardrails that decide whether it is safe to send. Only drafts that survive reach the queue.

Draft Flow
WRITE
The drafter produces a candidate email using approved structure and campaign settings.
CHECK
Guardrails run automatically against the candidate before it can be queued. Failed drafts land in a quarantine tray for the team.
QUEUE
Only approved drafts reach the sender. Nothing the guardrails would not sign off on ever leaves the mailbox.
  • AI drafts never bypass the guardrails
  • Failed drafts land in quarantine, not the outbox
  • The team can review any quarantined draft in the admin
  • What reaches the mailbox has already survived the checks
Deep Dive 02

Compliance That Cannot Be Skipped by a Bad Monday

Anti-spam law is not one law. It is a different law in every country the mailbox sends to. In our system every country's rules are encoded once and read by the whole pipeline, so a compliance change is a config change, not a training slide the sales team is going to forget by Wednesday.

One Source of Truth, Read by Every Layer
PLANNER
Refuses countries that are switched off, even if a prompt asks for them. Germany stays off until consent is on file.
SENDER
Reads the recipient's country and applies working days, holidays, quiet hours, and the correct postal address for that country's footer.
  • 13 country regimes handled from the same settings panel
  • Postal address per country, so every footer is legally clean
  • Working days respect the local week, including Sun-Thu regions
  • Adding a new country is one entry in the country config
Deep Dive 03

One-Click Unsubscribe, Permanent by Domain

An unsubscribe link that opens a landing page and asks a prospect to log in is the same as no unsubscribe. This one is one click, permanent, and applied to the whole domain, not just the address. The suppression list is checked at query time before any send, so an unsubscribed prospect can never be contacted again from any campaign.

A Prospect Clicks Unsubscribe
CLICK
One click, no landing page, no re-authentication. The secure link identifies the recipient without asking them to log in.
RECORD
The address and the whole domain go into the suppression list, permanently. Any queued follow-ups for that lead cancel immediately.
FUTURE
Every future send is checked against the suppression list at query time. A new campaign, a new mailbox, a new country: the block still holds.
  • Compliant with the strictest anti-spam laws, including PECR and CAN-SPAM
  • Suppression is permanent, cross-campaign, cross-mailbox
  • Hard bounces auto-suppress without a human touch
  • The block holds even if someone else tries to re-import the address
Deep Dive 04

Warm-Up Ramp for a Fresh Mailbox

A brand-new mailbox that sends 50 cold emails on day one gets marked as suspicious the same afternoon. The platform ramps a fresh mailbox up gradually and spreads the volume proportionally across the active countries. The team never has to pace it by hand.

A Fresh Mailbox, Warmed Automatically
EARLY
Small daily volume, evenly split across the recipient countries. Nothing looks like a blast.
MID
Volume climbs step by step as the reputation grows. Any country that stops responding scales back.
WARMED
Full daily volume, reputation intact. The mailbox is ready to run at scale without any manual pacing spreadsheet.
  • Ramps a new mailbox to full volume without a human watcher
  • Volume spread across countries proportionally, no one region blasted
  • Adding a new mailbox later goes through the same ramp
  • Sender reputation stays clean from day one
Deep Dive 05

Auto-Shutoff When the Signals Go Bad

One dirty list can put a mailbox on a blacklist for months. The platform watches the rolling bounce rate on the mailbox and shuts sending off automatically the moment the rate crosses a threshold the team sets. The reason is logged, the team can look at it, and sending only comes back on when a human turns it back on.

A Rough Patch, Auto-Handled
OK
Rolling bounce rate under the threshold. Sending continues as normal.
WATCH
Rate creeping up. Warning surfaces on the dashboard, sending still running.
STOPPED
Threshold hit, sending stops. The reason is logged, the team is notified, sending only resumes when a human turns it back on.
  • Rolling window, not lifetime bounce rate
  • Threshold is a setting, not hard-coded
  • Stops the moment the rate trips, no daily-check delay
  • Resume needs a human, not a timer
Deep Dive 06

Recipient-Local Working Hours

A great cold email that lands at 3am local looks the same as spam. Every send reads the recipient's country, computes their local time, and only leaves the mailbox during their working hours on their working days. Public holidays in the recipient's country block the send too.

Same Batch, Three Different Local Moments
US
Sent Tuesday, 10:14am recipient local. Monday-Friday working week, US public holidays blocked.
UK
Same batch, held until 10:14am UK local. Monday-Friday, bank holidays blocked.
UAE
Same batch, held for Sunday-Thursday working week and 10:14am Gulf local. Eid dates blocked.
  • Every send checks the recipient's local time first
  • Working days per country, including Sun-Thu regions
  • Public holidays per country block sends automatically
  • Lunar holidays like Eid, Diwali and Chinese New Year supported
Deep Dive 07

The Reply Classifier and the CRM Handoff

Most cold-email tools fire and forget. This one reads every reply, sorts it into one of five kinds, and only wakes a human for the ones that matter. Real conversations land in the sales CRM as leads. The queued follow-ups for that lead cancel the same moment.

Where Each Reply Ends Up
BOUNCE
Filed silently. Address and domain added to the block list. No human needed.
AWAY
Held until the recipient's return date, then the follow-up resumes on its own.
UNSUB
Added to the permanent block list, cross-campaign and cross-mailbox. Follow-ups cancel.
INTERESTED
Copied to your CRM as a lead with the whole thread. Queued follow-ups auto-cancel so nobody gets nagged.
  • Only real conversations wake a human
  • Full thread lands in the sales CRM as a lead
  • Follow-ups auto-cancel the moment a lead engages
  • Bounces and out-of-office replies filed without a human touch
The Layers

The Pieces
That Make It Work

The platform under the friendly admin is a set of pieces. Each piece has one job, does it well, and hands off cleanly to the next. What breaks in most cold-email tools is the seam between the pieces, so the seams are where the build focused the most care.

01

The Target Picker

Turns the plain-English prompt into a shape the rest of the platform can work with. Refuses countries that are switched off before anyone builds a target list.

02

The Email Writer

Where every draft is produced and every safety check runs against it. Drafts that cannot pass the checks are set aside for the team, not queued.

03

Country Rules

Each country's law, working week, holidays, greeting and postal address written once and read by the whole platform. Adding a country is one entry in the settings.

04

Safety Checks

Instant stop, daily send caps per country, warm-up ramp for fresh mailboxes, auto-shutoff on bounce spikes, fake-address filter, working-hour window. Any check fails, the send waits.

05

Reply Handler

Reads every incoming message, sorts bounces, out-of-office replies, unsubscribes and real conversations. Only real ones wake a human, and they land in your CRM.

06

The Scheduler

Decides what work is due, holds a lock so nothing runs twice, and keeps every heavy job under a memory ceiling. Every other piece does its slice when the scheduler wakes it.

What Ships in the Admin

Every Surface Your Team Actually Uses

The build is not a black box. Every job the platform does is visible in the admin, editable by the team, and safe to open at any time. Below is what the team logs into.

Dashboard
One screen showing live campaigns, today's send counts per country, warm-up status, and any safety events that need a look. Every load starts here.
Overview
Campaigns
Create, pause, or edit a campaign in one screen. See its target list, its drafts in flight, and its live sends. Ownership passes cleanly if the operator changes.
Manage
Campaign Types
A library of reusable campaign shapes: first-touch cold email, event follow-up, dormant-lead re-engagement, partnership prospecting, customer upsell. Each carries its own voice and safety profile.
Library
Leads
Every prospect the platform found, with its status: queued, sent, replied, unsubscribed. Click any lead to see its full thread and campaign path.
People
Emails
A queue of drafts, sends and quarantined items. Preview any draft with its safety-check result. Edit, quarantine or delete before the send window opens.
Queue
Activity Log
A time-ordered record of every job the platform ran: which campaign, which lead, which check passed or failed, and when. Nothing happens off the record.
Audit
Settings
Switch countries on or off, set the daily send cap per country, tune the warm-up ramp, set the bounce shutoff, add postal addresses, and pick working days. One screen, no code.
Control
Unsubscribes and Blocks
Every address, and every domain, the platform will not contact. Feeds from one-click unsubscribes, hard bounces and manual imports. Checked before every send.
Compliance
Reports
Weekly and monthly rollups: sends per country, reply rates, bounce trends, unsubscribes, campaigns compared. Shareable with the team without exporting anything.
Insight
Architecture

The System at a Glance

The team writes prompts. The system does the rest. Each step is small and clear, and any layer can be changed without rewriting the ones on either side. Your data, your mailbox and your CRM stay in your perimeter.

INPUTS
Campaign prompt
Country settings
Your mailbox
Suppression list
TARGETING & DRAFTING
Prompt turns into a campaign. Drafter produces candidate emails. Guardrails approve or quarantine before anything reaches the sender.
COMPLIANCE & SAFETY
Country rules
Pre-send gates
Warm-up ramp
Bounce breaker
OUTPUTS
Sent from your mailbox
Reply classifier
Leads into your CRM
Suppression auto-updated
RUNS ON YOUR FOUNDATION
Your servers Your mailbox Your CRM Your LLM key
What It Connects

The Tools It Fits Into

The platform runs on tools the business already owns. Nothing about it asks a team to abandon a mailbox, migrate a CRM, or pay for a proprietary data cloud. Below are the inputs, layers and destinations.

Your Mailbox
Any standard email account, including Google Workspace, Microsoft 365, or a hosted mailbox with your own domain. The mailbox stays under your control.
Source
Your CRM
Real replies land as leads in the sales team's existing CRM. The platform writes into the tables the CRM already uses, so no separate inbox has to be maintained.
Delivery
Your LLM Key
You pick your own model provider and pay for your own tokens. There is no proprietary AI hidden inside a monthly subscription. Switching providers is one setting.
Your Tools
Postal Address Per Country
Every country needs a real registered address in the footer. The settings panel holds one field per country, and the sender uses the right one for every recipient.
Your Rules
Suppression List
Domains and addresses the team already knows not to contact. Manual imports, auto-adds from hard bounces and one-click unsubscribes all feed the same list.
Your Rules
The Targeting Layer
Turns the campaign prompt into a shape the rest of the pipeline can work with. Refuses countries switched off, checks safety flags before targets are queued.
Platform
The Drafter
Produces every candidate email, then hands it to the guardrails. Anything the guardrails cannot approve is quarantined for the team, never sent.
Platform
The Sender
Runs every approved draft through the compliance and safety layers, then dispatches from your mailbox at the right local moment.
Platform
The Reply Handler
Polls the mailbox, classifies each new message, and routes the real conversations into the CRM. Bounces and out-of-office notes are filed silently.
Delivery
A Real Run

How One Run Actually Flows

Your team sees "type a prompt, walk away, check the CRM later". Underneath, six small steps make the output land right.

1
Someone on your team types a prompt
One line describing the target buyer. The targeting layer checks it against the active-country list, refuses countries that are switched off, and turns it into a campaign row.
2
The scheduler wakes the pipeline
The scheduler picks the campaign that has waited the longest and starts building the target list. Anything that fails a sanity check is skipped and retried on a later cycle.
3
The drafter produces candidates
Each qualified target gets a candidate email. The guardrails run against it before it can be queued. Approved drafts move to the send queue. Failed drafts land in quarantine.
4
Compliance and safety gates check every send
Country switched on, mailbox has budget, local working hours, no public holiday, address not on suppression list, mailbox not in bounce shutoff. Any check fails, the send waits.
5
The sender waits for the right moment
Dispatch only inside the recipient's local working hours, on their working days. Small batch per run. Randomised spacing between messages so the mailbox looks like a real human's.
6
The reply checker routes new conversations
Polls the mailbox, classifies each new message, and hands only the real conversations to the sales CRM. Queued follow-ups for that lead cancel the same moment.
What's Possible

Start With One Campaign,
Then Grow From There

The current platform runs cold email end to end. A real build starts with the same shape, then adds the channels, safety settings and destinations the business actually uses.

Live

Guardrail-Gated Cold Email

The current platform. One-prompt campaigns, 13 country regimes handled in code, live replies into the CRM. Nothing that fails the guardrails ever reaches a mailbox.

Live

Reply Classifier and CRM Handoff

Bounces, out-of-office notes, unsubscribes and real conversations are routed automatically. Only real conversations wake a human.

Live

Auto-Suppression on Bounce Spikes

The mailbox reputation is protected in code, not by a manual watcher. Sending shuts off automatically when the rolling bounce rate crosses the threshold.

Next

LinkedIn as a Second Channel

Same guardrail-gated drafter, applied to LinkedIn messages, so a team can reach the same prospect on the channel where they respond faster.

Next

WhatsApp for the Right Markets

In markets where WhatsApp Business is the primary channel, the same pipeline can drop a message through the Business API. Same drafter, same guardrails, different transport.

Next

Shared Workspace for Small Teams

Today one owner runs a campaign end to end. Next version lets a small team co-own campaigns, split ownership by geography or target audience, and see each other's queue without stepping on sends.

Frequently Asked Questions

Does the AI ever make up things about our prospects?
No. Every draft passes through internal guardrails before it can be queued. Anything the guardrails cannot approve is quarantined for the team to look at, not sent. Nothing reaches the mailbox that has not already survived the checks.
What happens if we hit a rough patch on bounces?
The sender watches the bounce rate on a rolling window and shuts sending off automatically the moment the rate crosses a threshold the team sets. The mailbox stays clean, the reason is logged, and the team can look at it before turning sending back on. No one has to notice manually.
Which countries can we run in from day one?
The current build supports the United States, Canada, the United Kingdom, Ireland, Germany, the Netherlands, Australia, New Zealand, India, Singapore, the United Arab Emirates, Saudi Arabia, and Qatar. Each country carries its own anti-spam law, working week and public-holiday rules. New countries are added by extending one configuration file.
Does it use our own mailbox and our own CRM?
Yes. The platform connects to any standard email account, including Google Workspace and Microsoft 365, and writes real replies into the CRM the sales team already uses. Nothing sensitive leaves your perimeter. There is no proprietary inbox or hidden lead pool to migrate to.
Do prospects get a real, one-click unsubscribe?
Yes, on every email, in every country, without exception. Unsubscribes are one click, permanent, and applied to the whole domain as well as the address. The suppression list is checked at query time before any send, so an unsubscribed prospect can never be contacted again from any campaign.
Can we preview or override a draft before it sends?
Yes. Every draft is visible in the admin queue before the send window opens. A human can edit, quarantine or delete any draft. The team is never surprised by what leaves the mailbox.
Can Entexis build one of these on our own infrastructure and tune it to our buyers?
Yes. This is exactly the shape of build Entexis takes on. We build a custom version for you, tuned to your buyers, running on your own infrastructure. We connect it to your mailbox and CRM, encode your target countries in the compliance layer, and set the writing voice and safety settings to match your business. You keep control of the mailbox, the data and the model provider from day one.
Related Case Studies

More Work That
Moved the Numbers

Need Something Similar
for Sales & Marketing Automation?

We built this for A B2B Services Team. We can build it for you, same rigour, your domain.

No spam. Just a conversation about your project.