
Salesforge
Partially CompliantAI cold outreach platform with built-in mailbox warm-up and deliverability tooling, widely described as Estonian, but publishing no legal entity or country anywhere on its site.
Subject to the US CLOUD Act: a US parent company can be compelled to disclose data it holds, including data stored in the EU.
Paid
GDPR Compliance Data
Not independently verified| GDPR Status | Partially Compliant |
| HQ Country | Not disclosed |
| Ownership | Not yet verified |
| Foreign Disclosure Exposure | US CLOUD Act / FISA 702 |
| Data Hosting Location | Unknown |
| EU Servers Available | |
| Data Processing Agreement | Not verified |
| Sub-processor List | Not verified |
| Schrems II Risk | Medium Risk |
| SCCs in Place | |
| Last Verified | 1 September 2026 |
How we reached this
hqCountry is recorded as "Not disclosed" deliberately. The privacy policy at salesforge.ai/legal/privacy and the terms of service at salesforge.ai/legal/terms were both read in full on 2026-09-01. Neither names a legal entity, a registration number, a registered address or a country. The strongest statement available is "Personal data is collected on our website by us, a company registered under EU laws", which asserts EU registration without providing an entity to check it against. The LinkedIn source that prompted this listing places Salesforge in Estonia and the market generally describes it that way, but this directory does not record an HQ country it cannot verify from the vendor's own documents; the same treatment was applied to Rybbit. Ownership is therefore UNKNOWN rather than EU_OWNED. Exposure is US_CLOUD_ACT: the terms confirm the use of "third-party service providers (such as Amazon Web Services) in the operation and administration of the service", Stripe handles payments and Cloudflare Turnstile protects the forms, and no hosting region is stated anywhere. No sub-processor list and no DPA were located at a public URL. Also relevant to a buyer: the service obtains access to the customer's connected email account in order to send and to check for replies, which the terms state plainly. Pricing is in US dollars.
About Salesforge
Outbound With the Mailbox Layer Attached
Salesforge bundles the sequencer with the infrastructure that keeps it working, which is the direction this whole category has moved: AI-assisted message generation, multichannel sequences across email and LinkedIn, connected mailboxes over IMAP and SMTP, warm-up, and automatic validation of every address you import so invalid ones are blocked before they bounce.
The Fair Use Policy caps a workspace at 99 connected email accounts and reserves the right to pull an account out of warm-up if it starts damaging the pool's reputation, which is a sensible thing to enforce and an honest thing to publish.
Pricing is published, and stated in US dollars.
Why This Listing Is Rated as It Is
The source that prompted this listing places Salesforge in Estonia, and the wider market generally describes it that way.
We read the privacy policy and the terms of service in full. Neither names a legal entity, a registration number, a registered address, or a country. The strongest statement available is this:
Personal data is collected on our website by us, a company registered under EU laws.
That is a claim of EU registration without an entity to check it against. Compare it with Dolist, whose page carries share capital, RCS number, SIREN, VAT number, APE code and the name of the publication director; or Mailrelay, which publishes its NIF. Those took one page each to verify.
So this listing records the country as not disclosed. It is not an accusation of anything, and Salesforge may well be exactly the Estonian company everyone says it is. It is a statement about what the vendor has published, and for a directory whose entire premise is that European ownership is checked rather than assumed, a vendor that does not name itself cannot be recorded as European. Rybbit is listed the same way for the same reason.
What Else Is Missing, and What Is Known
The terms confirm that Salesforge uses Amazon Web Services in the operation of the service, and that it obtains access to your connected email account in order to send and to check for replies. Stripe handles payments and Cloudflare Turnstile protects the forms. No hosting region is stated anywhere, and no sub-processor list or DPA was located at a public URL.
Between the AWS dependency, the unstated hosting region, and the absence of an identifiable entity, this row reads PARTIAL with exposure US CLOUD Act.
Note the same controller point that applies to PhantomBuster: the prospects you contact through a cold outreach tool are people whose data you control, and your Article 6 and Article 14 obligations toward them are yours regardless of where the vendor is registered.
Where It Fits
Against lemlist and Woodpecker, both of which publish who they are. If the ownership question matters to you, start with those. See sales prospecting.
Key Features
Pros & Cons
Salesforge GDPR & data protection: common questions
Is Salesforge GDPR compliant?
Partly. Salesforge meets some of the requirements, with caveats worth reading before you commit.
Where does Salesforge store data?
We could not locate a clear statement of where Salesforge hosts data. Ask the vendor directly, or check their privacy policy and sub-processor list before signing.
Does Salesforge offer a Data Processing Agreement (DPA)?
We could not locate a published DPA for Salesforge. That does not mean one is unavailable. Many vendors provide it on request or inside the account area rather than publishing it. Ask before you sign.
What a DPA has to cover →Is Salesforge a European company?
We have not verified Salesforge's ultimate ownership.
Is Salesforge subject to the US CLOUD Act?
Yes. US authorities can compel disclosure of data held by a US company or its subsidiaries, regardless of the country the servers sit in. EU hosting alone does not remove this, the question is who controls the data, not where the disk is.
Schrems II compliance checklist →Related Tools

Lemlist
French multi-channel sales outreach with AI personalization and a built-in lead database.

Kaspr
LinkedIn-based B2B contact finder with verified phone numbers and emails.

Cognism
B2B sales intelligence with phone-verified contacts and GDPR-compliant EMEA data.
Spotted something wrong?
Martech moves fast. Vendors change hosting regions, get acquired, publish a new DPA or rewrite their pricing, and they rarely announce it. We check what we publish and date every compliance review, but some of what you see here will be out of date before we catch it.
If you work at Salesforge and something on this page is wrong, tell us and we will fix it. Readers, same invitation. Pointing us at the page that proves it gets it changed fastest.