02Lists and data
B2B contact lists: sources, fields, verification, rules
A B2B contact list is a set of people at companies, with titles, work emails and phone numbers. Here is how one is built, how to test it, and which rules apply.
AShort answer
A B2B contact list pairs company records with named decision makers, verified work emails and phones. Published prices read on 09/01/2026 ran $13.00 to $435.29 per 1,000 verified emails, median $39.13. US cold email is legal under CAN-SPAM with an opt-out. Mobile numbers add TCPA risk, and California's B2B contact data exemption expired 12/31/2022.
| Median published email price | $39.13 per 1,000 verified emails (18 vendors, read 09/01/2026) |
|---|---|
| Email plus direct dial | $0.12 to $1.03 per record, median $0.44 (9 vendors, annual billing) |
| CAN-SPAM B2B rule | No B2B exception; opt-out honored within 10 business days |
| CAN-SPAM penalty | Up to $53,088 per violating email |
| TCPA damages | $500 per violation, up to 3 times if willful |
| California B2B exemption | Expired 12/31/2022 |
| Core filters | NAICS, employees, revenue, title, location, technology, intent topic |
How the list is built
A B2B contact list starts with companies, then adds people. Company records come from business registry filings and web-sourced company pages. Titles and seniority come from professional profile data. Work emails come from company email patterns, such as first.last at the domain, and each guess is checked against the mail server with an SMTP test. Direct dials and mobiles are matched from carrier line-type data, which labels a number as mobile, landline or VoIP.
Each step adds error. A registry filing can be years old, a profile can lag a job change, and an SMTP test cannot see inside a catch-all domain, which accepts every address. A good vendor tells you which step produced each field.
B2B records go stale because people change jobs and companies close or move. This page does not give an annual decay percentage, because the figures in circulation are vendor claims without a primary study behind them. Treat any decay number a vendor quotes as vendor-reported, and test the list instead.
Filters that matter
| Filter | What it selects | Watch for |
|---|---|---|
| Industry (NAICS code) | Company sector at 2 to 6 digits | Two-digit codes are too broad to be useful |
| Employee band | Headcount range, such as 11 to 50 | Estimates, often modeled |
| Revenue band | Annual revenue range | Mostly modeled for private firms |
| Title and seniority | Owner, C-suite, VP, director, manager | Titles vary; ask for seniority tiers, not only keywords |
| Location | State, metro, ZIP of the office | Headquarters vs the site you want to sell to |
| Technology in use | Software detected on the company site | Detection is inferred and can lag |
| Intent topic | Topics a company researches | Panel-based signals; ask for the lookback window |
What a record contains
A usable record carries four groups of fields. Person: name, title, seniority, department. Company: legal name, domain, NAICS code, employee band, revenue band, address. Contact: work email with a verification status, direct dial, mobile with a line-type flag. Provenance: the date each field was last checked.
Missing fields are normal. Expect a work email on most records and a phone on fewer. Ask for fill rates per field, not a headline record count.
What to check before paying
- Email verification status per record, and the catch-all share. Catch-all addresses cannot be confirmed, so a list that counts them as verified overstates quality.
- A bounce guarantee in writing: the threshold, the credit or refund, and how you report bounces.
- The update date per record, not the date of the file.
- Whether mobiles are personal numbers or company lines. A personal mobile raises TCPA exposure for texts and autodialed calls.
- A sample. Request 500 records in your own industry and size band, send them, and count hard bounces. Look up ten people on their company sites.
- Reuse terms: how many sends, how many seats, and whether you may keep the list.
Price benchmarks
These are published ranges from third parties, not our prices. An index that read 37 vendor pricing pages on 09/01/2026 reported the following under annual billing; 18 vendors published enough to price verified emails and 9 to price email plus direct dial. The index is vendor-reported data.
| Product | Published range | Median |
|---|---|---|
| Verified emails, per 1,000 (18 vendors) | $13.00 to $435.29 | $39.13 |
| Email plus direct dial, per record (9 vendors) | $0.12 to $1.03 | $0.44 per record ($435.29 per 1,000) |
Worked example: 5,000 verified emails at the $39.13 median cost 5 x $39.13 = $195.65. The same 5,000 records with direct dials at $0.12 to $1.03 each cost $600 to $5,150. Subscriptions meter by credits, so the cost per usable contact rises when a share of the list bounces or lacks a phone.
Who uses it and how
SaaS sales teams build lists by title, employee band and technology, then run a sequence. Agencies buy lists per client and rent them by campaign. Staffing firms search by hiring-manager title and industry. Commercial service companies, such as cleaning, security or HVAC contractors, filter by NAICS code and ZIP and call front-office staff. For channel sequences see cold email prospecting, cold calling prospecting and the multi-channel prospecting sequence.
Business owners are also consumers. A contractor list can be matched to the homeowner list for a home address, and a new mover list shows who just relocated. Old B2B leads that went cold are covered under aged leads. For volume context see the homeowner counts.
Compliance notes
| Channel | Rule | Source |
|---|---|---|
| Email, US | CAN-SPAM has "no exception for business-to-business email." Opt-outs honored within 10 business days. Up to $53,088 per violating email. | FTC guide |
| Calls, US | Business-to-business calls are exempt from most of the Telemarketing Sales Rule, except the misrepresentation provisions and sales of nondurable office or cleaning supplies. | 16 CFR 310.6(b)(7) |
| Autodialed calls and texts to mobiles | Prior express consent, and prior express written consent for marketing. The rule keys on the wireless line, not on the job. | 47 CFR 64.1200(a) |
| TCPA damages | $500 per violation, up to 3 times for willful violations. | 47 U.S.C. 227(b)(3) |
| UK email | Corporate bodies can be emailed. Sole traders and some partnerships are treated as individuals and need consent. | ICO PECR guide |
| EU data (UK GDPR uses the same article numbers) | Legitimate interests is one lawful basis. Individuals may object to direct marketing at any time. | GDPR Articles 6(1)(f), 21(2) |
| State privacy laws | California's B2B and employee exemptions expired 12/31/2022. Virginia excludes a person acting in a commercial or employment context. | Cal. AG; Va. Code 59.1-575 |
California treats business contact data as personal information, so a California-facing list needs notices and deletion handling. Other state laws vary and some exemptions carry sunset or amendment risk. Check the current text for each state you target. The CAN-SPAM cold email rules pages go further, the data broker and privacy laws page covers the state rules, and the compliance hub covers calls and texts. Browse all list types.
Next step
Pick your NAICS codes, titles and states, then use get counts to see how many records match before you buy anything.
Questions people ask
Q01Is a B2B email list legal to use in the US?
Yes. CAN-SPAM has no business-to-business exception, so cold B2B email is allowed if you use accurate headers, a physical address, and a working opt-out honored within 10 business days. It is an opt-out regime, not opt-in.
Q02How do I know a B2B email list is accurate?
Ask for the share of addresses verified by a live mail server check, the share that are catch-all domains, the bounce guarantee, and the last update date per record. Then send a 500-record sample and measure your own bounce rate.
Q03Can I call mobile numbers in a B2B list?
The Telemarketing Sales Rule mostly exempts B2B calls, but the TCPA rules for autodialed calls and texts to wireless numbers follow the line type, not the job. Autodialed calls or texts to a personal mobile on a work profile still need consent.
Q04Do GDPR and PECR apply to a US B2B list?
They apply when the contact is in the UK or EU. UK rules let you email companies without consent but treat sole traders as individuals. GDPR still covers named people, so you need a lawful basis and must stop on objection.
Sources
- B2B contact data cost index, vendor pricing pages read 09/01/2026 (vendor-reported, third party)cleanlist.ai
- FTC CAN-SPAM compliance guide for businessftc.gov
- 16 CFR 310.6 Telemarketing Sales Rule exemptionslaw.cornell.edu
- 47 CFR 64.1200 TCPA delivery restrictionslaw.cornell.edu
- 47 U.S.C. 227 private right of actionlaw.cornell.edu
- ICO guide to PECR, electronic mail marketingico.org.uk
- Regulation (EU) 2016/679 (GDPR), Articles 6 and 21, EUR-Lexeur-lex.europa.eu
- GDPR Article 6 lawful bases (secondary text of the regulation)gdpr-info.eu
- GDPR Article 21 right to object (secondary text of the regulation)gdpr-info.eu
- California Attorney General, CCPAoag.ca.gov
- Virginia Code 59.1-575 definitionslaw.lis.virginia.gov
→Free counts
Counts for your area
Zip codes or counties, who you want to reach, and we reply with counts by channel.
Get counts