Skip to content
Research / guide

What to verify before you buy an AI sales agent

Eight questions to ask any vendor of an AI sales agent, including us, and how to check each answer. With SYNC's own answers, and where it falls short today.

Guide6 min readiSyncSO · Team

The short version.

An AI sales agent researches companies, writes to people and sends in your name. Before you buy one, ask eight questions. Each answer can be tested, not only trusted.

We sell such an agent, so read the list with that in mind. At the end we answer every question for SYNC, including where it falls short. One gap first: on 29 September 2026, 230 of the 570 dossiers SYNC had marked ready rested on a cited signal without a date.[7]

Questions about the research and the writing.

1. Where does the data come from, and how old is it?

Ask for the sources, and separately where email addresses and phone numbers come from. Then open the sources behind three accounts the vendor prepared. A link does not prove that the page says what the claim says. In a study of search engines that answer with citations, only 74.5% of the citations supported the sentence they were attached to.[1] Check two dates as well: when the page was read, and when the event on it happened.

2. What does the agent do when it finds no reason to write?

Ask how many researched accounts get no message, what reason is recorded for each, and to see some of them. An agent that writes to every account it finds has no rule here.

3. Who approves what, by default?

“A person approves” can mean the first message only. Ask what a new account starts on, who can change it, and whether follow-ups need approval too. Research on automation finds that people rely too much on decision aids that are sometimes wrong, experts included, and that training or instructions do not prevent it.[2] So ask what the reviewer sees next to the draft.

Questions about the sending.

4. How many messages can one person receive, and who decides?

Ask for the limit per person and per company, over what period, and whether a user can raise it. When someone says no, is the address closed for you only, or for every customer of the vendor?

5. Whose mailbox and domain carry the risk?

If the agent sends from your mailbox, complaints count against your domain. For mail to personal Gmail accounts, Google asks senders to keep the spam rate reported in its Postmaster Tools below 0.10%.[3] Ask who holds the mailbox connection, and whether the vendor ever sees your password. More in What mailbox providers actually require.

Questions about the vendor.

6. What does the vendor measure, and what does it refuse to publish?

Ask for every figure with its count, its period and the number of customers behind it. An open is counted when an image in the message is downloaded, and Apple says of its mail privacy feature:

“It also prevents senders from seeing if you’ve opened the email message they sent you.”
Apple, Use Mail Privacy Protection on iPhone[4]

Two vendors of sending software publish the same average reply rate, to two decimals, which suggests one source and not two.[5][6]

7. Which costs grow with use?

Ask what uses the allowance, whether a team shares it, what happens at the limit, and whether data, verified addresses and AI are billed on top.

8. What happens to your data when you leave?

Ask how you get an export, how long deletion takes, where the data is stored, and which companies process it for the vendor.

How SYNC answers today.

Checked by us against the product · 29 September 2026
1. Data
SYNC todayCareers pages, the company's own site, LinkedIn, the press and public register pages. Contact details come from a lookup provider. Every signal and every score links to its source, and SYNC keeps the day it read the page.
Where it falls shortIt knows the Netherlands far better than anywhere else. Dates are what the page or the software stated; we have not verified them. A source under every sentence of a draft is not on the review screen yet.
2. No reason
SYNC todayIt waits: 720 of 1,303 dossiers were left alone. Tiers C and D are not worked.[7]
Where it falls shortA cited signal without a date can make a dossier ready: 230 of 570 ready dossiers. No reason is recorded for a company that never got a dossier.
3. Approval
SYNC todaySet per account: every message, the first only, or none. Every new account starts with approval on every message (since 29 September 2026).
Where it falls shortA person can relax it per account; then follow-ups can go out unreviewed.
4. Messages
SYNC todayAt most three messages to one person, and three to one account, in any seven days. Never twice to the same person within 48 hours. A workspace cannot raise this. A “no” closes the address in every workspace.
Where it falls shortUsers hear first and buyers last only inside a contact plan. Blockers are never written to.
5. Mailbox
SYNC todayYour own Outlook or Gmail, under your name. You sign in on Microsoft's or Google's own screen; Composio, our connection provider, holds the connection. SYNC never sees your password.
Where it falls shortYour domain carries the complaints. SYNC sends email only: LinkedIn messages and calls are tasks for you.
6. Measures
SYNC todayWhat our rules refuse, what reviewers change and which accounts are left alone, with counts and limits. See What we cannot measure yet.
Where it falls shortNo reply rates yet. For 145 of 203 messages with a recorded open, the first came within a minute of sending, so opens cannot be trusted as a rate.[7]
7. Costs
SYNC todayFree to start (5 accounts a month), then €99, €249 or €649 a seat a month, before VAT. Research, verified addresses and AI are included. At the limit a run pauses; nothing is lost.
Where it falls shortAllowances never pool across a team, and every step on an account uses allowance. Our record of research costs leaves out search, so we publish no cost per account.
8. Leaving
SYNC todayAsk us, and we export or delete your workspace data. We answer within one month. Workspace data is stored in the EU, in Ireland. Some AI model providers process data outside the EU; the sub-processors page lists each one and where it is.
Where it falls shortThere is no self-service export and no scheduled deletion yet, so we promise no window.

The case for and against the approval step is in What a human approval is worth.

the other side

What speaks against this.

A vendor wrote this list, around questions SYNC was built for. A buyer who needs LinkedIn messages sent, a language beyond Dutch, English, German and French, or strong data outside the Netherlands should ask those questions first. SYNC falls short on all three.

Being strict has a price we cannot measure. Nobody knows what the 720 dossiers left alone would have done with a message. 6sense, a vendor, reports that buyers choose one of the four suppliers on their first shortlist 95% of the time.[8] A seller who waits for a reason may arrive after that list is made.

An approval step is not proof of a careful review. A study of 41 policies that require people to oversee government algorithms warns that such oversight can give “a false sense of security”.[9] It is about government, and we read only the abstract.

Our answers were checked against our code by us, and by nobody outside. Some will change. None says whether you may write to a given person at all. That is a question of law; when we wrote this, a lawyer was reviewing it for us.

method · measured 29 September 2026

The questions come from the concerns buyers raise in public discussions of AI outreach, and from claims our own audit had to correct on this site.

Our figures come from one read-only count that day, across all workspaces together: 1,303 dossiers in five workspaces, by verdict and recorded reason, and 203 messages with a counted open in four workspaces, by the time to the first open. The workspaces include our own and test workspaces. The figures hold no history, and we publish no split by workspace. Each outside source is labelled with how far we checked it.

How we measure →
sources
  1. [1]Liu, N. F., Zhang, T. & Liang, P. (2023). Evaluating Verifiability in Generative Search Engines.read in the originalthe abstract, read on arXiv; about search engines, not sales email
  2. [2]Parasuraman, R. & Manzey, D. H. (2010). Complacency and bias in human use of automation: an attentional integration. Human Factors 52(3), 381–410.abstract only
  3. [3]Google. Email sender guidelines. Gmail Help.read in the originalapplies to mail sent to personal Gmail accounts
  4. [4]Apple. Use Mail Privacy Protection on iPhone. Apple Support.read in the originalread on 30 September 2026
  5. [5]Instantly. Cold Email Benchmark Report 2026.vendor researchInstantly sells email sending software
  6. [6]Woodpecker. Cold Email Statistics.vendor researchrepeats the Instantly figures; not an independent source
  7. [7]iSyncSO. Dossiers by verdict and recorded reason, and recorded opens by time since sending. Measured 29 September 2026.our own measurementsee the method note
  8. [8]6sense (2025). B2B Buyer Experience Report.vendor research6sense sells sales and marketing software
  9. [9]Green, B. (2022). The flaws of policies requiring human oversight of government algorithms. Computer Law & Security Review 45.abstract onlyabout government algorithms

See who should buy from you this quarter.

Leave your work email. SYNC reads your company’s website and sends you a first look: what you sell, who probably buys it, and up to five companies scored A to D, each with its source.

Early beta. No card for the first look. See an exampleAdd your details We use your email to confirm your sign-up and send your first look. Privacy