What Should Be in a Cold Email Agency Contract

A cold email agency contract should name the deliverable in numbers, define what counts as a qualified meeting, put the sending domains in your name, cap bounce and complaint rates, state a remedy if the agency misses its target, and let you leave on 30 days notice. Most agency agreements cover the first item and skip the rest. Here is every clause worth arguing about before you sign, and the specific wording that protects you.

What should be in a cold email agency contract?

Nine things, and only the first two usually appear without you asking. A cold email agency contract needs a defined scope in numbers (prospects contacted, emails sent, sequences live), a written definition of a qualified meeting, ownership of the sending domains and mailboxes assigned to you, deliverability SLAs with bounce and complaint caps, the source and verification method for the prospect data, a reporting cadence with the metrics named, a shortfall remedy, exit terms with a notice period, and confirmation that the sequence copy and lists are yours at termination.

The reason this matters more in cold email than in most vendor relationships is that the work leaves a permanent mark on assets you cannot easily replace. A bad month of paid ads costs you the ad spend. A bad month of cold email can burn a sending domain's reputation, and domain reputation takes months to rebuild and does not transfer. You are handing a third party the ability to damage something you keep.

Who owns the sending domains when the contract ends?

You should, and it should say so in writing before the first domain is registered. The standard agency setup buys several secondary domains and a few dozen mailboxes per client to spread volume, and many agencies register those in their own name because it is administratively easier. When the engagement ends, those domains stay with the agency, and the months of warmup and clean sending history you paid for stay with them too.

Ask for the domains to be registered in your company's registrar account with the agency given delegated access. It costs the agency almost nothing and it is a fast way to read their intentions. An operator will shrug and do it. An agency that resists is either reselling the same warmed infrastructure across clients, which is a deliverability problem for you, or planning to use the domains as a retention lever.

Get the mailboxes covered by the same clause. Google Workspace or Microsoft 365 seats attached to those domains carry sending history too, and a contract that assigns the domains but leaves the mailboxes with the agency hands you a set of clean domains with none of the reputation. If you want the detail on what that stack costs to run yourself, our cold email infrastructure breakdown prices it layer by layer.

How should the contract define a qualified meeting?

A qualified meeting should require three things at once: the prospect matches your written ICP, the attendee has authority to buy or to bring in the person who does, and they expressed genuine interest rather than agreeing to a call to end the sequence. Put the ICP itself in an annex, with industry, headcount range, geography and job titles, so the definition points at something specific.

Then settle the edge cases in advance, because they are where the money is. Does a no-show count as a booked meeting? The fair answer is that the first no-show counts if the agency attempts to rebook and the prospect declines, and does not count otherwise. Does a meeting with someone outside the ICP annex count? No. Does a rescheduled meeting count twice? No. Can you dispute a meeting, and how long do you have? Fourteen days is reasonable.

This matters most on per-meeting pricing, where agencies charge $200 to $500 per booked meeting, because every loose definition is money. It matters on retainers too, since the meeting count is what everyone will argue about at renewal. Our cold email agency pricing page covers how the models differ and what each one excludes.

What deliverability terms should be in the contract?

Two hard caps and one escalation rule. Cap hard bounces at 2% of sends, which is the threshold most deliverability practitioners treat as the line between an acceptable list and a bad one. Cap spam complaints at 0.3%, which is not an arbitrary number: Google and Yahoo's bulk sender requirements ask senders to stay below 0.3% and to aim for under 0.1%, so a contract written to that figure is written to the standard the mailbox providers actually enforce.

The escalation rule covers what happens when a domain gets flagged. The contract should say the agency pauses sending on the affected domain, tells you within one business day, and either remediates or replaces the domain at its own cost if the cause was its list or its sending pattern. Without that clause, the practical outcome is that you find out weeks later from a report.

Add one more line: no sending from your primary domain, ever. Cold email goes out from secondary domains for exactly this reason, and a clause forbidding it removes any ambiguity. If you want the reasoning in full, the cold email deliverability guide covers warmup, ramp and the volume ceilings that keep placement stable.

Do cold email agencies guarantee meetings?

Some do, and most guarantees are narrower than they sound. A real guarantee has three parts: a number, a written definition of what counts, and a stated remedy if the number is missed. Miss any one of the three and it is a marketing claim rather than a contractual obligation. In practice you will see targets framed as expected appointments per year, completion guarantees that promise your full lead volume gets contacted rather than promising results, and per-meeting pricing where the guarantee is simply that you pay only for what gets booked.

Treat any guaranteed number offered before the agency has seen your ICP and your offer as a warning sign. Reply rates vary enormously between markets, and an agency committing to a figure for a buyer it has not qualified is either padding the definition of qualified or planning to reach the number through volume, which is how domains get burned. A comparison of how the named agencies structure this sits on our cold email agency reviews page.

What happens if a cold email agency does not deliver?

Whatever the contract says, which for most buyers turns out to be nothing. Without a written shortfall remedy you generally have no recourse until the term expires, and that is precisely why agencies prefer three to six month minimums. The remedy clause is the part buyers skim and the part that decides whether a bad engagement costs you one month or two quarters.

Three remedies are worth negotiating for, in order of strength. A partial refund proportional to the shortfall is the strongest and the hardest to get. A free month of service is the common middle ground and is worth having. Weakest is "we continue working until the target is met," which only means something if you can also exit; otherwise it converts a failure into a longer commitment. Pair any of them with a right to terminate for cause if the target is missed two months running.

Also agree what a shortfall is measured against. A target of 10 meetings a month measured monthly is enforceable. The same target "averaged over the engagement" cannot be enforced until the engagement ends, by which point the money is spent.

Data sourcing and compliance clauses

You carry the legal exposure for emails sent on your behalf, so the contract needs to name where the prospect data comes from, how it is verified, and on what basis it is being processed. Ask for the provider by name rather than a general reference to purchased lists, and require verification before send with a stated bounce threshold. A clause requiring the agency to indemnify you for claims arising from its data sourcing is reasonable to ask for and tells you how confident it is in the source.

CAN-SPAM compliance should be assigned explicitly: accurate header and sender information, no deceptive subject lines, a valid physical postal address in every message, and opt-outs honored within 10 business days. Penalties are assessed per email and adjusted for inflation each year, so a single bad campaign is an expensive mistake. If you sell into Europe or Canada, name GDPR and CASL obligations separately, because their consent rules are stricter than the US default. Companies signing several vendor agreements at once often end up tracking these obligations and controls in one place rather than in individual contract PDFs, which is worth doing before the third vendor rather than after. Our guide to whether cold email is legal covers the underlying rules in detail.

Exit terms and what you keep

Push for 30 days notice and resist any 12-month lock-in that has no performance clause attached to it. A long term is defensible when the agency is carrying real setup cost and the contract also gives you a remedy for missed targets. A long term with no remedy is the agency transferring all the risk to you and calling it a partnership.

Then list what you take with you: the sending domains and mailboxes, the sequence copy, the prospect lists and enrichment data, the suppression list, and campaign performance data in an exportable format. The suppression list is the one people forget and the one that causes real damage, because losing it means the next campaign emails people who already asked you to stop, which is both a compliance problem and an easy way to generate complaints.

One practical note on timing. Ask for the handover to complete within 10 business days of termination and make final payment contingent on it. Handover disputes are common and leverage disappears the moment the last invoice is paid.

The takeaway

Most cold email agency contracts are written to protect the agency, which is normal and not sinister. The nine clauses above are the ones that shift the balance back far enough to be fair: numbers in the scope, a definition of qualified that survives an argument, domains in your name, caps on bounces and complaints, named data sources, weekly reporting on meetings, a remedy with teeth, a 30-day exit, and a handover list. None of them are unusual asks, and how an agency reacts to them is genuinely the fastest read on whether it is an operator or a reseller.

If reading this list makes an agency engagement feel like more governance than you want to take on, that is a reasonable conclusion to reach. Running outbound on software keeps the domains, the data and the messaging in your own hands from the start, with none of these clauses to negotiate. Compare the fully loaded cost of both routes in our cold email agency vs in-house SDR vs software breakdown, or try the composer at the top of this page on a real prospect and see what the research-and-write step actually produces.