Cold email for B2B SaaS: a respectful, compliant playbook

Cold email has a bad reputation, and most of it is earned. Everyone's inbox is full of generic pitches from people who scraped a list, blasted a template, and hoped for the best.

But done carefully, cold email is still one of the most direct ways for an early B2B SaaS founder to start conversations with the exact people who have the problem you solve. The difference between spam and outreach is not the channel. It is relevance, volume, honesty, and respect for the recipient.

This guide covers how to do it well: targeting, writing, deliverability, and the compliance basics you need to understand before you send anything.

Understand the rules first

Before writing a single subject line, understand the basic regulatory landscape. A few frameworks come up often for B2B founders:

• CAN-SPAM (United States). Among other things, it requires that you do not use misleading headers or subject lines, that you identify yourself, include a valid physical postal address, provide a clear way to opt out, and honor opt-out requests promptly.
• GDPR (EU and UK versions). Applies when you process personal data of people in the EU or UK, including business email addresses tied to an individual. Cold outreach is typically justified under "legitimate interest", which requires that your outreach be relevant to the person's role, that you minimize the data you hold, tell people where you got their data if asked, and stop immediately when they object.
• Country-specific rules. Some countries, such as Canada under CASL and several EU member states under ePrivacy implementations, are stricter about unsolicited commercial email. Check the rules for the regions you are targeting.

Practical habits that follow from this:

• Every email clearly says who you are and which company you represent.
• Every email includes an easy way to opt out, even a simple "Reply 'no thanks' and I won't follow up."
• Opt-outs are recorded and honored across all future campaigns.
• You keep only the data you need and delete it when it is no longer useful.

Never use purchased lists

Buying a big list of email addresses is the fastest way to ruin your domain's reputation and to land in legal trouble. Purchased lists are often outdated, include spam traps, and contain people who have no relationship with your product's problem.

Instead, build small lists by hand:

• Identify companies that match your ideal customer profile.
• Find the specific person who owns the problem (by role, not just seniority).
• Note a genuine reason this person, specifically, might care.
• Verify addresses before sending to avoid bounces.

If you cannot write one sentence about why a particular person would plausibly want your email, they should not be on your list.

Protect your deliverability

Deliverability is whether your emails land in the inbox at all. A new domain sending lots of cold email is a pattern spam filters watch for.

Practice	Why it matters
Use a separate sending domain	Protects your main domain's reputation for product and transactional emails
Set up SPF, DKIM, and DMARC	Proves your emails are authorized and not spoofed
Warm up gradually	New domains and inboxes need time to build reputation
Keep daily volume small	Lower volume looks human and lets you personalize properly
Verify every address	Bounces damage sender reputation quickly
Send plain text, minimal links	Heavy HTML, images, and tracking links can trigger filters
Monitor replies and complaints	Rising spam complaints are a signal to stop and reassess

Keep volumes genuinely small. For an early-stage founder, a few dozen highly personalized emails per week is plenty to learn from. You are trying to start conversations, not run a numbers game.

Write emails people want to reply to

A good cold email is short, specific, and about the recipient. Here is a structure that works:

1. Relevant opener. Why you are emailing this person specifically.
2. The problem. One sentence naming a problem they likely have.
3. Your angle. One or two sentences on how you help, with something concrete.
4. A low-friction ask. A question, not a demand for a 30-minute call.
5. Signature and opt-out. Your name, company, address, and an easy way to say no.

A hypothetical example

Subject: invoice reconciliation at Acme Studio

Hi Sam,

Saw on your careers page that Acme Studio is hiring a second ops
coordinator, and that the role includes monthly invoice reconciliation.

I'm building a small tool that matches agency invoices to bank
transactions automatically. A few early users run studios
about your size.

Would it be useful if I sent a two-minute walkthrough video?

Alex
Founder, ExampleApp
123 Example Street, Example City

If this isn't relevant, just reply "no" and I won't email again.

Note what it does not include: no fake familiarity, no "quick question" bait, no inflated claims, no attachments, and no pressure.

Subject lines

Keep them short, lowercase-friendly, and accurate. Something that references their company or the specific problem is usually enough. Never use misleading subject lines like a fake "Re:" or "Following up on our call" when there was no call.

Follow up, but know when to stop

Many replies come after a follow-up, because people are busy. But follow-ups can quickly become harassment.

• One or two follow-ups at most, spaced several days apart.
• Add something new each time: a short resource, a relevant example, a different angle.
• Stop immediately on any reply asking you to stop, on a bounce, or if they unsubscribe.
• Never add people to newsletters or marketing lists just because you cold emailed them.

Measure and learn

Track a small set of metrics per campaign:

• Reply rate, and specifically positive reply rate
• Opt-out and complaint rate, which should stay very low
• Bounce rate, a sign of list quality
• Conversations started and trials or demos booked

Treat every reply, including "not interested", as research. What words did they use? What objections came up? That feeds directly into your positioning, your landing page, and your product. See our first 100 users playbook for how outbound fits alongside other early channels.

Pre-send checklist

• Separate sending domain with SPF, DKIM, and DMARC configured
• Inbox warmed up gradually
• Hand-built list with a reason for every recipient
• All addresses verified
• Clear sender identity and physical address in every email
• Simple, honored opt-out mechanism
• Honest, non-misleading subject line
• Small daily volume
• Opt-out list synced across all tools
• Applicable regulations reviewed for your target regions

Wrapping up

Cold email works for B2B SaaS when it is targeted, honest, and small enough to be personal. Respect the recipient, follow the rules, protect your domain, and treat each conversation as a chance to learn. The founders who get results are not the ones sending the most email; they are the ones sending the right email to the right person.

Outbound works even better when prospects can see social proof. Submit your product to an UpstartApps launch week, explore a featured launch for extra visibility, or see who else is launching soon.