← Blog

B2B Contact Databases: How to Choose and Use One Safely

How to choose a B2B contact database: what to test, how verification really works, the compliance rules in the US and UK, and where company data fits.

B2B Contact Databases: How to Choose and Use One Safely

Abstract contact data and verification illustration

A B2B contact database is a searchable collection of business people (names, job titles, work emails, phone numbers) tied to the companies they work for. The best one for you is not the biggest. It is the one whose data stays accurate for your target market, lets you check where each record came from, and fits the rules that apply to the people you contact. This guide shows how to test that before you pay, and how to use the data without creating legal or reputational problems.

Milda
Find the right companies to contact
Milda combines verified business contacts with company growth signals, ownership details and financial insights to help teams assess opportunities.
Explore Milda

TL;DR

  • Judge a database on accuracy in your own segment, not on headline contact counts. Test a sample of 100 to 200 records you can already verify.
  • “Verified” is a snapshot, not a permanent state. Contact data goes stale as people change jobs, so verify again close to the moment you send or call.
  • There is no B2B exemption in US email law. CAN-SPAM still requires an opt-out, honest sender details and a postal address in every commercial message.
  • In the UK and EU, business contacts are not free to use either. Sole traders are treated as individuals, and legitimate interests needs a documented assessment.
  • Contacts are only half the picture. Company context (ownership, financials, growth signals) decides who is worth contacting in the first place.

Table of Contents

What a B2B contact database actually contains

Most providers sell some mix of four layers:

  • Person data: name, title, seniority, function, work email, direct dial or mobile number, LinkedIn profile.
  • Company data: industry, size, location, revenue range, technologies used. This is usually called firmographic data.
  • Intent or signal data: funding rounds, hiring surges, leadership changes, expansions.
  • Relationship data: reporting lines, buying committees, parent and subsidiary links.

The first layer is what most buyers think of. The other three decide whether a contact is worth reaching. A list of 5,000 verified emails at companies that cannot buy from you is still a bad list. We go deeper on that in our piece on why firmographic data is only the first filter.

How providers build their data (and why it matters to you)

Every database is assembled from some combination of sources, and the mix explains most of the quality differences you will see:

  1. Public and web sources: company sites, registries, press releases, filings, professional profiles.
  2. Contributed data: users who sync their address books or CRMs to a platform, often in exchange for credits. Coverage is broad, but the original consent trail can be thin.
  3. Direct verification: automated email checks, phone calls and human researchers confirming a record.
  4. Partner and licensed feeds: data bought from other providers. Quality depends on the supplier, and errors can be copied from one provider to another.

Ask any vendor which of these produce the records you will be using, and how old a typical record in your target country and industry is. A vendor that cannot answer that question plainly is telling you something.

Contact data decays faster than most teams plan for

People change roles, companies merge, domains are retired. Practitioners commonly put annual decay in B2B contact data somewhere around a quarter to a third of records. Treat that as a rough planning range, not a law of nature, because decay is much faster in some segments (startups, sales roles) than in others (regulated industries, long-tenured executives).

The practical consequence: a “verified” tag with a date six months old is a hint, not a guarantee. Teams that handle this well do three things:

  • They re-check emails right before a campaign launches, not when the list was bought.
  • They write bounces, opt-outs and job changes back to their CRM so the same bad record is not used twice.
  • They keep a suppression list that outlives any one data subscription.

Our guide to governing CRM data enrichment writeback walks through the steps for keeping enriched fields from overwriting good data with bad.

How to test a B2B contact database before you buy

Vendor accuracy claims are measured on the vendor’s own terms. Independent comparisons published in mid-2026 found no single best provider, because tools specialize: some are strong on email deliverability, others on phone coverage or on a particular region. So run your own test.

A five-step pilot

  1. Build a control sample. Pull 100 to 200 people from your own CRM whose current role you have confirmed in the last 90 days. Include your real target mix: country, company size and industry.
  2. Run the sample through each candidate. Compare title, company and email against what you know. Note records the vendor does not return at all, since coverage gaps matter as much as errors.
  3. Send a small, compliant test batch. Measure hard bounces on a few hundred emails, using a normal sending domain and your usual warm-up practice.
  4. Check freshness. Ask how recently each field was verified, and whether the check happens at export or on a cached schedule.
  5. Check provenance. For a handful of records, ask where the data came from. You want a source you can name, not “our algorithm”.

Criteria that separate databases in practice

Criterion What to look for Red flag
Accuracy in your segment Matches your control sample Only global averages offered
Coverage Your countries, company sizes, functions Strong in US tech, thin elsewhere
Verification method Date-stamped, re-checked at export One-time check, no dates
Source transparency Records link back to underlying sources Unexplained or unsourced fields
Compliance posture Opt-out handling, regional rules documented Vague “fully compliant” claims
Context depth Ownership, financials, signals alongside contacts Contacts only
Delivery App, extension, API, CRM sync Export-only CSVs
Pricing fit Scales with team size and usage Opaque, long lock-ins before a trial

What “verified” does and does not mean

The word is not regulated. One vendor means “the email passed a syntax and server check”. Another means “a person confirmed the role this quarter”. Ask which. An email that technically accepts mail can still belong to someone who left a year ago, and a catch-all domain will accept anything.

A sturdier approach is to verify with a second source. If a database says a person is the head of procurement, confirm it against a company page, a filing or a recent press mention before you build a campaign around that person. We lay out that method in how to find decision makers and verify them with a second source.

The rules: using B2B contact data legally

This section is general information, not legal advice. For anything beyond the basics, ask a lawyer who practices marketing and data protection law in the countries you target.

United States: CAN-SPAM applies to B2B email

A common myth is that business-to-business email is exempt. It is not. The CAN-SPAM Act covers commercial email regardless of whether the recipient is a consumer or a company. Compliance summaries list requirements such as accurate headers, an honest subject line, a valid postal address and an opt-out honored within 10 business days. The same rules also mean you need a working physical address and a clear way to unsubscribe in every commercial message you send. Cold calling and text messages fall under separate rules, so check those before you add phone numbers to a sequence.

Four CAN-SPAM requirements for commercial email

United Kingdom and EU: corporate versus individual subscribers

In the UK, corporate subscribers can generally be emailed without prior consent, but sole traders and some unincorporated partnerships must be treated as individuals, even if they use a business email address. Treating every B2B contact as one category is a frequent mistake. UK PECR and UK GDPR also expect you to honor the right to object and to classify contacts accurately.

When you rely on legitimate interests as your lawful basis under GDPR, the UK regulator says you need to weigh your interests against the impact on people and their reasonable expectations, and offer an easy, free opt-out. In practice that means writing down a legitimate interests assessment before the campaign, not after a complaint. A plain-language overview of email marketing is a good primer for teams new to the channel.

United Kingdom and EU: corporate versus individual subscribers — overview diagram

Purchased lists are the riskiest route

Practitioners in data protection treat bought lists as high risk, because the original consent or notice is hard to verify and the data is often inaccurate. The safer pattern is to build your own first-party data, use a database for research and prioritization, and keep rigorous suppression lists. Other fields have learned this the hard way too: this write-up on email marketing consent in healthcare shows how quickly a sloppy list becomes a compliance problem in a regulated sector.

Before you send anything to a database export, run through this checklist:

  • Is the recipient in a country with stricter rules than yours?
  • Is the contact a corporate role, or possibly a sole trader?
  • Does the message identify you, include a postal address and offer a working opt-out?
  • Are previous opt-outs and bounces suppressed?
  • Can you say, in one sentence, why you are contacting this person about this offer?

Our perspective: contacts are a layer, not the foundation

Most searches for a contact database start with a person-shaped question: who do I email? We think the better first question is which companies deserve your attention, and why now. A contact list can tell you someone’s title. It cannot tell you that the company just changed owners, expanded into a new market or filed new patents in your area.

That is why we built Milda around company intelligence first. The platform covers more than 420 million companies and 50 million verified contacts, with ownership and shareholder structures, financials, risk assessments, trade data, patents, publications and event-driven growth signals in the same record. Our own claim is that this multi-source approach surfaces up to three times more companies than alternatives, because many relevant firms never show up in a database built around email addresses alone. You can see the scope on our data coverage page.

We also believe a record is only as good as your ability to inspect it. A contact should be traceable to underlying sources, and the company around it should tell you whether the outreach makes sense. Teams that start from company fit, then add the right person, send fewer messages and waste less goodwill.

— Vilius Stanciauskas, Founder and CEO

Where company data fits in a contact workflow

A workable sequence for a business development or sales team looks like this:

  1. Define the account universe. Use firmographic filters, then add signals such as new funding, hiring or ownership changes. See our market research use case for how teams map markets this way.
  2. Qualify before you contact. Check financial health, ownership and risk, so you do not spend a sequence on a company that cannot pay or is about to be acquired.
  3. Identify the buying group. Pick two or three roles per account, not one.
  4. Enrich and verify. Add emails or phone numbers, and re-check them at the point of use. The details are in our guides to contact enrichment and lead enrichment.
  5. Write back and suppress. Log outcomes in your CRM, honor opt-outs immediately and avoid re-importing the same stale records.

Qualifying first pays off in time. One of our customers describes 70 hours of work saved in a single lead qualification task, and another team used company-level signals to re-engage 15 cold leads.

Choosing by team type

  • A solo founder or very small team: you need a modest tool, a clean niche and a short list. Start with a pilot sample and a free trial before committing to a long contract.
  • A sales or BD team: prioritize accuracy in your territory, CRM sync and a way to see why an account is worth contacting.
  • Investment, innovation and strategy teams: contacts matter less than ownership, financials, patents and competitor mapping. Look for company depth, and API access if you build your own models.
  • Market analysts and public-sector strategists: coverage breadth and source transparency matter most. A database that favors one region or sector will skew your picture.

Try it on your own market

If you want to see how company intelligence and contacts work together, Milda comes in three forms: Browser Analyst for research while you browse, Strategy Terminal for deeper analysis, and Data Solutions for API and bulk data. Pricing adapts to team size and data usage, and details are on our pricing page. You can also see how the browser extension shows company context on any website, or how our data platform fits into your CRM and workflows. For sales teams, our sales and GTM research use case shows a typical setup.

FAQ

What is a B2B contact database?

It is a searchable collection of business professionals and the companies they work for, usually including titles, work emails and sometimes phone numbers. Sales, marketing, recruiting and research teams use it to find the right people faster. The better ones also include company data such as ownership, financials and growth signals.

How accurate are B2B email databases?

Accuracy varies by provider, region and role, and vendor claims are usually measured under their own conditions. Independent testing tends to show a gap between marketing claims and real results, so run a sample of people you can verify yourself. Re-check emails close to sending, because contact data goes stale as people change jobs.

It depends on where the recipient is and who they are. In the US, CAN-SPAM still applies to B2B email, so you need an opt-out, honest sender details and a postal address. In the UK, corporate subscribers can generally be emailed without prior consent, but sole traders cannot. Speak to a qualified lawyer before running large campaigns across several countries.

What is the difference between verified and unverified contacts?

There is no universal definition. Verified can mean a technical email check, a human confirmation, or a date-stamped re-check. Ask the vendor which method it uses and when the record was last checked, then confirm important contacts with a second source.

Should I buy a list or use a database subscription?

A subscription that lets you search, filter and re-verify is generally safer than a one-off purchased list, since you control the selection and can check freshness. Data protection practitioners advise caution with bought lists because the original consent is hard to verify. Either way, keep your own suppression list.

Sources

See it against your own question

Bring a market, a list or a counterparty you are already working on, and we will run it through the platform on the call.

© 2026 Milda.ai All rights reserved.