Back to Tools
Salesforge logo

Salesforge

Partially Compliant

AI cold outreach platform with built-in mailbox warm-up and deliverability tooling, widely described as Estonian, but publishing no legal entity or country anywhere on its site.

Subject to the US CLOUD Act: a US parent company can be compelled to disclose data it holds, including data stored in the EU.

Paid
Salesforge website screenshot

GDPR Compliance Data

Not independently verified
GDPR Status
Partially Compliant
HQ CountryNot disclosed
OwnershipNot yet verified
Foreign Disclosure ExposureUS CLOUD Act / FISA 702
Data Hosting Location
Unknown
EU Servers Available
Data Processing AgreementNot verified
Sub-processor ListNot verified
Schrems II Risk
Medium Risk
SCCs in Place
Last Verified1 September 2026

How we reached this

hqCountry is recorded as "Not disclosed" deliberately. The privacy policy at salesforge.ai/legal/privacy and the terms of service at salesforge.ai/legal/terms were both read in full on 2026-09-01. Neither names a legal entity, a registration number, a registered address or a country. The strongest statement available is "Personal data is collected on our website by us, a company registered under EU laws", which asserts EU registration without providing an entity to check it against. The LinkedIn source that prompted this listing places Salesforge in Estonia and the market generally describes it that way, but this directory does not record an HQ country it cannot verify from the vendor's own documents; the same treatment was applied to Rybbit. Ownership is therefore UNKNOWN rather than EU_OWNED. Exposure is US_CLOUD_ACT: the terms confirm the use of "third-party service providers (such as Amazon Web Services) in the operation and administration of the service", Stripe handles payments and Cloudflare Turnstile protects the forms, and no hosting region is stated anywhere. No sub-processor list and no DPA were located at a public URL. Also relevant to a buyer: the service obtains access to the customer's connected email account in order to send and to check for replies, which the terms state plainly. Pricing is in US dollars.

About Salesforge

Outbound With the Mailbox Layer Attached

Salesforge bundles the sequencer with the infrastructure that keeps it working, which is the direction this whole category has moved: AI-assisted message generation, multichannel sequences across email and LinkedIn, connected mailboxes over IMAP and SMTP, warm-up, and automatic validation of every address you import so invalid ones are blocked before they bounce.

The Fair Use Policy caps a workspace at 99 connected email accounts and reserves the right to pull an account out of warm-up if it starts damaging the pool's reputation, which is a sensible thing to enforce and an honest thing to publish.

Pricing is published, and stated in US dollars.

Why This Listing Is Rated as It Is

The source that prompted this listing places Salesforge in Estonia, and the wider market generally describes it that way.

We read the privacy policy and the terms of service in full. Neither names a legal entity, a registration number, a registered address, or a country. The strongest statement available is this:

Personal data is collected on our website by us, a company registered under EU laws.

That is a claim of EU registration without an entity to check it against. Compare it with Dolist, whose page carries share capital, RCS number, SIREN, VAT number, APE code and the name of the publication director; or Mailrelay, which publishes its NIF. Those took one page each to verify.

So this listing records the country as not disclosed. It is not an accusation of anything, and Salesforge may well be exactly the Estonian company everyone says it is. It is a statement about what the vendor has published, and for a directory whose entire premise is that European ownership is checked rather than assumed, a vendor that does not name itself cannot be recorded as European. Rybbit is listed the same way for the same reason.

What Else Is Missing, and What Is Known

The terms confirm that Salesforge uses Amazon Web Services in the operation of the service, and that it obtains access to your connected email account in order to send and to check for replies. Stripe handles payments and Cloudflare Turnstile protects the forms. No hosting region is stated anywhere, and no sub-processor list or DPA was located at a public URL.

Between the AWS dependency, the unstated hosting region, and the absence of an identifiable entity, this row reads PARTIAL with exposure US CLOUD Act.

Note the same controller point that applies to PhantomBuster: the prospects you contact through a cold outreach tool are people whose data you control, and your Article 6 and Article 14 obligations toward them are yours regardless of where the vendor is registered.

Where It Fits

Against lemlist and Woodpecker, both of which publish who they are. If the ownership question matters to you, start with those. See sales prospecting.

Key Features

AI-assisted cold email generation and sequencing
Multichannel outreach across email and LinkedIn
Connected mailboxes over custom IMAP and SMTP
Automated mailbox warm-up with reputation protection
Automatic email validation blocking invalid addresses on import
Workspace and sub-account separation for agencies
Up to 99 connected email accounts per workspace
Reply detection and inbox monitoring

Pros & Cons

Sequencer, mailbox management and warm-up in one product rather than three
Automatic validation of imported addresses protects sender reputation by default
Sub-accounts make it workable for an agency running client outreach
Publishes its Fair Use Policy, including the right to remove an account from warm-up
Published pricing, so it can be evaluated without a sales call
Names no legal entity, registration number, address or country in its privacy policy or terms
No hosting region stated anywhere, and the terms confirm AWS is used
No sub-processor list or DPA located at a public URL
Requires access to your connected email account to send and read replies
Priced in US dollars despite claiming EU registration

Salesforge GDPR & data protection: common questions

Is Salesforge GDPR compliant?

Partly. Salesforge meets some of the requirements, with caveats worth reading before you commit.

Where does Salesforge store data?

We could not locate a clear statement of where Salesforge hosts data. Ask the vendor directly, or check their privacy policy and sub-processor list before signing.

Does Salesforge offer a Data Processing Agreement (DPA)?

We could not locate a published DPA for Salesforge. That does not mean one is unavailable. Many vendors provide it on request or inside the account area rather than publishing it. Ask before you sign.

What a DPA has to cover

Is Salesforge a European company?

We have not verified Salesforge's ultimate ownership.

Is Salesforge subject to the US CLOUD Act?

Yes. US authorities can compel disclosure of data held by a US company or its subsidiaries, regardless of the country the servers sit in. EU hosting alone does not remove this, the question is who controls the data, not where the disk is.

Schrems II compliance checklist

Spotted something wrong?

Martech moves fast. Vendors change hosting regions, get acquired, publish a new DPA or rewrite their pricing, and they rarely announce it. We check what we publish and date every compliance review, but some of what you see here will be out of date before we catch it.

If you work at Salesforge and something on this page is wrong, tell us and we will fix it. Readers, same invitation. Pointing us at the page that proves it gets it changed fastest.