Cold email software security that a sales leader can explain to IT
A cold email tool touches your mailboxes, your prospect lists and your replies. This page explains how ColdReach protects them: how mailboxes connect, how data is encrypted, who can see what in your account, what Enterprise adds for a security review and how deletion works.
OAuth access you can revoke at any time
Google Workspace and Microsoft 365 mailboxes connect by OAuth. You sign in with your provider and grant access, and ColdReach never sees or stores your mailbox password. Your administrator can revoke that access from the Google Workspace or Microsoft 365 admin settings at any time, and you can disconnect a mailbox inside ColdReach in one click.
SMTP and IMAP connections
Mailboxes from other providers connect by SMTP and IMAP. The credentials you enter are encrypted at rest and used only to send your emails and read the replies to them. Removing the mailbox removes its stored credentials.
We send only from your mailboxes
ColdReach never sends from its own mail servers. Every email leaves from a mailbox you connected, under limits you can see, with ramp-up, daily caps and automatic pausing described on our email warmup tool page.
Encryption in transit and at rest
- All traffic between your browser and ColdReach is encrypted in transit.
- Data stored in your account is encrypted at rest, including contacts, emails, replies and mailbox credentials.
- Card details are handled by our payment processor and never stored on our servers.
- Our hosting provider runs the infrastructure with restricted access for the people who operate the service.
Your data stays yours
Contacts, sequences, emails and replies in your account belong to you. You can export them as CSV, and we do not sell or share your data with other customers. Prospect records show their source and last-checked date, as explained on our b2b contact database page.
Roles on Scale
Scale adds roles, so an account owner decides who manages billing and mailboxes, who builds sequences and who works the reply inbox. Scale also includes 10 client workspaces for agencies that keep each client separate.
SSO and audit log on Enterprise
Enterprise adds single sign-on with SAML, so your team signs in through your identity provider and leavers lose access when you remove them there. Enterprise also includes roles and an audit log that records who changed what in the account.
| Plan | Roles | SSO (SAML) | Audit log |
|---|---|---|---|
| Starter | No | No | No |
| Growth | No | No | No |
| Scale | Yes | No | No |
| Enterprise | Yes | Yes | Yes |
What Enterprise customers receive
- A security questionnaire pack that answers the standard questions of a vendor review.
- Priority support with a named contact.
- Invoicing instead of card payment.
- Self-serve checkout at $1,499 a month or $749 a month billed yearly, with no sales call required.
See every plan on cold email software pricing.
Data deletion on request
Account owners can delete contacts, sequences and mailboxes in the app. To delete an account and its data, write to support@coldreach.com from the account owner's address, and we confirm when the deletion is complete. Data subject access and deletion requests from your prospects are supported too, as described on can-spam cold email rules.
Questions
Can ColdReach read my whole mailbox
ColdReach uses mailbox access to send your sequence emails and to read the replies to them, so your reply inbox and AI classification work. You can revoke access at any time.
What happens to my data when I cancel
Your account stays active until the end of your paid period, and you can export your data as CSV before it ends. To have the data deleted, write to support@coldreach.com and we confirm when it is done.
Which plans include SSO
SSO with SAML is included on Enterprise, together with roles and an audit log. Roles alone are included on Scale.
Do you have a security questionnaire pack
Yes. Enterprise customers receive a security questionnaire pack for their vendor review.
Connect your mailboxes with confidence
Create your account, connect a mailbox by OAuth and keep full control over access. More answers are in our cold email faq.