Playbooks

Cold Email to Procurement Teams: A Playbook

How to cold email procurement teams: find the budget owner, answer the questions a buyer will forward, and send within clear legal and mailbox rules.

This playbook starts from one idea. A procurement team runs the process around a purchase. A budget owner holds the need. If your first email goes only to procurement, you are asking people who manage a process to create demand for a product they did not ask for. If it goes to the budget owner, you start where the need lives.

Then write the email so it can be forwarded. A budget owner who is interested may pass your note to the people who run the process. Make that forward easy: say who you are, what you sell, what it does, and how to learn more, in a few plain lines.

This guide does not quote reply rates or meeting rates for procurement outreach, and it does not describe how long procurement reviews take. Those numbers are easy to invent and hard to check, so they are left out. What follows is built from facts about your own data, your sending setup and the rules that apply to your email.

Who buys

Your own history is the best evidence of who buys from you. Outlevo's HubSpot integration reads your companies, deals and owners, and it learns your ideal customer from the deals you actually won and lost. [[1]](#sources) The deal data it reads includes pipeline, stage, amount and closed-lost reason. [[1]](#sources) If you work in Salesforce, Outlevo reads accounts, opportunities and their stages for the same ICP and win/loss analysis. [[2]](#sources) If you keep deals in a spreadsheet, a CSV import takes companies and won or lost deals, with fields such as stage, amount, outcome and loss reason. [[3]](#sources)

Read the closed-lost reasons first. They are your own record of where deals stalled. Look for deals that ended because of price, paperwork or a missing approval, and note which companies they were. Those are the accounts where you will want your first email to answer process questions up front.

Be careful with small samples. Outlevo's win/loss analysis counts companies, not deals, and labels small samples: under 10 won companies is very low confidence. [[4]](#sources) Segments an AI proposes stay labelled experimental until a person approves them. [[4]](#sources) Treat a pattern from a handful of wins as a hypothesis to test, not a rule.

If you have no deal history yet, the free ICP assessment reads up to 5 public pages of your website. It returns facts labelled as verified observations or AI inferences, and up to 5 experimental segment hypotheses. [[5]](#sources) It also asks which countries you sell into. [[6]](#sources) The choice of markets stays with you.

Roles to reach

The sources behind this guide say nothing about procurement job titles or seniority, so this guide names none. What it can say is how to find the right person in your own data.

  • The owner on your side. Outlevo reads HubSpot owners so that hot leads go to the right rep. [[1]](#sources) In Salesforce it reads standard users so that hot leads go to the account owner. [[2]](#sources) Decide who on your team follows up before the first email goes out.
  • The contact on their side. Outlevo's optional HubSpot contact import includes email, name, job title and email opt-out. [[1]](#sources) An admin has to turn contact import on and state a purpose. [[1]](#sources) Use the job-title field to see the roles of the contacts you already hold, and write to roles like those.
  • The person who forwards. You cannot plan for this role by name. You can plan for it by writing a short email that explains itself.

For a different buyer profile, see the guides on cold email to CISOs and cold email to product managers.

Triggers to watch

The sources say little about what prompts a purchase process, so this section stays short and sticks to signals you can observe in your own accounts.

  • A company reading your site. Outlevo's website-visitor script shows which companies visit, which pages they read and whether they fit your ICP. It never identifies a person or sets a cookie. [[7]](#sources) It costs 1 credit per company identified per day, however many pages that company reads. [[7]](#sources) A visit is a reason to review the account, not proof of intent.
  • Competitor signals. Outlevo's competitor tracking shows quoted facts from competitors' public pages, changes, and competitor signals on accounts. [[8]](#sources)

Before you act on any trigger, ask whether you can say where it came from. A Readiness Card gives each qualified account fit, intent and data quality scores, and it needs at least three observations, each with a source and a date. [[9]](#sources) Facts read from a website are kept only when their quote is found on the page, and guesses are labelled as hypotheses. [[9]](#sources) That habit is worth copying by hand if you do not use the tool: write down the source and the date for each fact you plan to use in an email.

Write the email so it can be forwarded

Think of the first email as two documents. The budget owner reads it first. Someone who runs the process may read it second, with less context and more caution.

Keep to one idea. State the problem you solve for a role like the reader's, then what you do about it. Leave out claims you cannot back with a source you could show.

Answer the obvious questions early. Copy what you expect a buyer to ask, using your own history. Your closed-lost reasons and past deal notes show which questions came up before. Put short answers where they fit, and offer the longer ones on request. Typical candidates are what the product does, what data it handles, and where to read the price.

Use facts a reader can check. If you say you handle personal data carefully, say how, in a sentence. As an example of that level of detail, Outlevo's own security page states that every customer table is protected by row-level security and that personal data such as email addresses is encrypted at the field level. [[10]](#sources) A concrete line like that does more than a promise of "enterprise-grade security."

Name the next step and keep it small. Offer a short call or a one-page summary. If you use a booking link, Outlevo can answer an interested reply with your Calendly link, and each booking counts as a meeting booked. [[11]](#sources) On autopilot the answer goes at once. Otherwise it waits in Replies for you to send. [[11]](#sources)

Do not write to the process. Skip lines such as "I'd like to get on your approved vendor list." They ask the reader to start a process before they know whether they want the product.

Read more about how a series of messages is built in the glossary entry on sequence.

Rules that apply to your email

This is not legal advice. It lists what the primary sources say, so you can check them yourself.

  • US. The FTC's CAN-SPAM guide says "The law makes no exception for business-to-business email." [[12]](#sources) Writing to a company inbox does not take you outside the law.
  • UK. The ICO's guidance on PECR says "You can email or text any corporate body (a company, Scottish partnership, limited liability partnership or government body)." [[13]](#sources)
  • GDPR. Article 6(1)(f) allows processing that is "necessary for the purposes of the legitimate interests pursued by the controller or by a third party". [[14]](#sources) Recital 47 says "The processing of personal data for direct marketing purposes may be regarded as carried out for a legitimate interest." [[15]](#sources)
  • Mailbox rules. Google's sender guidelines say "email senders who send more than 5,000 messages per day to Gmail accounts must meet the requirements in this section. Set up SPF and DKIM email authentication for your domain." [[16]](#sources)

Our own suggestion, not a rule quoted above: put a postal address and an opt-out line in every email, and honor every opt-out. Government and public bodies are named in the ICO's wording, which matters if your accounts include them. [[13]](#sources) Check the rules for the places your contacts work with your own counsel.

Set up sending before you write

Set up your sending domain and mailboxes before you write the first email. The glossary entry on deliverability covers the background.

If you send through Smartlead, Outlevo builds each campaign there and Smartlead sends from the mailboxes in your account. [[17]](#sources) Before a campaign sends, every mailbox must be connected and warmed up, and its domain must have SPF, DKIM and DMARC checked in the last 7 days. [[17]](#sources)

If you would rather not touch your main domain, Outlevo's managed mailboxes buy sending domains, create the mailboxes through Zapmail, set up DNS and warm them up. [[18]](#sources) A new mailbox sends nothing until it is warm: at least 14 days, usually about 3 weeks. [[18]](#sources) Builder includes 1 domain and 2 mailboxes, and Growth includes 2 domains and 4 mailboxes. [[18]](#sources) Plan for that wait before your first send date.

Verify addresses before you send

Verify addresses before sending, so you do not write to ones that bounce. In Outlevo, email verification costs 1 credit. [[19]](#sources) The pricing page has the current plans and credit costs.

Standalone tools exist too. ZeroBounce's Pay as You Go starts at $39 for 2,000 validations (read 2026-10-26). [[20]](#sources) Kickbox charges $10 for 1,000 verifications (read 2026-11-04). [[21]](#sources) The ZeroBounce page lists its plans and the date each price was read.

Sample first email (example)

Example only: written for this playbook, not sent to anyone.

Subject: Question about [process the reader owns]
Hi [First name],
I'm writing to you because [role] teams at companies like [Company type] often own the decision on [problem], and I could not tell who owns it at [Their company].
We make [Product], which [one plain sentence on what it does]. A recent change at [Their company] made me think of you: [one fact you read on their site, with where you read it].
If it is useful, I can send a one-page summary with what the product does, what data it handles and where to find the price. It is written so you can forward it to whoever reviews purchases.
If this is not yours, tell me who it should go to and I will stop writing to you.
[Your name]
[Your company] · [Website]
[Postal address and an opt-out line]

Why it is built this way: the opening admits it may be the wrong person, which invites a forward. The fact about their company has a visible source. The offer is a document, not a meeting, so the reader can say yes without committing time. The postal address and opt-out line at the bottom follow the suggestion above, so a forwarded copy still shows who sent it and how to stop further email.

Follow-up and other channels

Keep the second email short and add one new fact. Do not repeat the first. If the first one named a source, the second can name a different one.

On LinkedIn, read the rules first. LinkedIn's User Agreement prohibits using "bots or other unauthorized automated methods to access the Services, add or download contacts, send or redirect messages". [[22]](#sources) Outlevo's LinkedIn integration connects your own account, sends a connection invitation with a note of at most 300 characters, then one message after the person accepts, and a reply stops that lead's emails. [[23]](#sources) Automatic sending comes with Growth and Managed, or with a LinkedIn seat on Builder. Otherwise the invitations and messages are drafted for you to send by hand. [[23]](#sources) Whether automatic sending fits LinkedIn's rule is for you to decide. If you want to stay clear of the question, send the drafted invitations and messages by hand.

Keep a person in control

In our view, outbound to purchasing roles can carry reputation risk, because a forwarded email may travel beyond the person you meant to reach. Set limits before you start. In Outlevo, nothing is sent outside a policy that a person approved. Policies set who can be contacted, on which channels, how often and with what budget. [[24]](#sources) Every external action is checked against the approved policy before it runs and recorded in a ledger. [[24]](#sources) Kill switches pause a campaign, a channel or the whole workspace at once. [[24]](#sources) The comparison of autonomous SDRs and approval-first outbound goes into that trade-off.

A checklist before you send

  1. Name the budget owner for each account, using the closed-won history from your CRM or a CSV.
  2. Check closed-lost reasons for questions that the email should answer.
  3. Write down the source and date of every fact you plan to mention.
  4. Confirm SPF, DKIM and DMARC on the sending domain, and that mailboxes are warm.
  5. Verify the addresses.
  6. Add the opt-out line and postal address suggested above.
  7. Write the email so it still makes sense when forwarded.
  8. Decide who answers replies and how fast.

Next step

Before you write to anyone, get your ICP down on paper from evidence. The free assessment reads your public site and returns what it found, labelled as verified observations or inferences. Use it to decide which accounts, and which budget owners, deserve a first email.

Sources

  1. HubSpot integration
  2. Salesforce integration
  3. CSV and Excel integration
  4. ICP from evidence
  5. Free ICP assessment
  6. Release 2026-10-19
  7. Website visitors integration
  8. Release 2026-10-19
  9. Readiness Cards
  10. Security
  11. Calendly integration
  12. FTC: CAN-SPAM Act compliance guide for business
  13. ICO: Electronic mail marketing (PECR)
  14. GDPR Article 6(1)(f): lawfulness of processing
  15. GDPR Recital 47: legitimate interests of the controller
  16. Google: Email sender guidelines
  17. Smartlead integration
  18. Managed mailboxes integration
  19. Outlevo pricing
  20. ZeroBounce: pricing
  21. Kickbox: pricing
  22. LinkedIn User Agreement (section 8.2, Don’ts)
  23. LinkedIn integration
  24. How Outlevo works

Related

See what Outlevo finds on your own website

Free, no sign-up, about a minute.