Product

Cold Email Infrastructure for Agencies

An honest guide to running agency cold email at 50, 100, 300, and 600 mailbox scale — per-client workspace isolation, white-label reporting, volume pricing math, and the 24-hour client onboarding flow we use ourselves.

StackMail Editorial
StackMail editorial team
Updated
14 min read

The agency cold email economics problem

Most lead generation agencies start the same way. A founder takes on three or four clients, manually sets up Google Workspace mailboxes for each, and bills the client at $10-15 per mailbox per month. Margin looks healthy at four clients. Then the agency lands its tenth client, then its twentieth, then its fortieth, and the math quietly inverts.

At 30-50 client setups per month, the bottleneck stops being lead generation and starts being mailbox provisioning. A single cohort of 10 mailboxes at the standard sequencer-bundled vendor costs $89-99/month - so a 40-client agency running an average of 10 mailboxes per client is paying $3,560-$3,960/month in raw infrastructure cost. If the client retainer is $1,500/month and you carry $400/month of mailbox cost per client, you are running on $1,100 of gross margin before headcount, sequencer fees, lead data, or sales tooling. That is not a business; that is a hobby with admin overhead.

The fix is not heroic. The fix is volume pricing on the underlying mailbox - because the underlying mailbox is a Google Workspace seat or a Microsoft 365 seat that costs Google or Microsoft about six dollars wholesale. Everything above six dollars is markup for automation, dashboard, and warmup. Vendors that charge agencies $7-10/mailbox at scale are charging four to six dollars in pure markup. The unit economics of running a 300-mailbox agency on those vendors mean the agency works for the vendor, not the other way around.

StackMail's volume pricing collapses to $2.50/mailbox at 100 mailboxes on annual billing and $2.37/mailbox at 600 mailboxes on annual billing. At 50-mailbox scale, the per-mailbox price is $2.58. That is a 60-75% reduction in infrastructure cost versus sequencer-bundled vendors, and a 5-25% reduction versus the closest specialist competitors. The savings flow directly into agency margin or, if the agency wants to pass them along, into a price advantage at the client RFP table.

The other dimension agencies forget is operational cost. If a vendor charges per-tenant rather than per-mailbox, every new client triggers a fixed setup fee. If a vendor does not support bulk CSV onboarding, every new client costs four to six hours of account-manager time at $75-100/hour - another $400-$600 of soft cost per client onboarded. Volume pricing on the mailbox is necessary but not sufficient; the agency also needs bulk operations, per-workspace isolation, and one-click sequencer export to make the per-client onboarding cost stay below $50.

Per-client workspace isolation - why this matters

The most expensive mistake an agency can make is co-mingling clients inside a single mailbox tenant. The reasoning is simple but worth spelling out: deliverability reputation lives at the level of the IP, the sender domain, and the upstream Google Workspace or Microsoft 365 tenant. If two clients share a tenant, they share a reputation. If client A sends a campaign that gets a wave of spam complaints, client B's mailboxes inherit the reputation hit even though client B did nothing wrong. Open rates drop, bounces spike, and the agency spends two weeks remediating an issue that should have been contained to one client.

The blast radius problem compounds at 30+ clients. A single regulated-vertical client (debt relief, lending, supplements, nutraceuticals) sending a borderline-compliant campaign can take down a tenant shared with 15 other clients. Industry data from the major email-monitoring vendors shows that mixed-vertical tenants experience 2-3x more reputation incidents than vertical-isolated tenants. Agencies that do not isolate by client (or at minimum by vertical) end up running a permanent firefighting operation.

StackMail's workspace primitive maps one-to-one with one client. Every workspace gets its own tenant binding, its own sender IP cohort, its own warmup peer graph, and its own audit log. A complaint storm on client A's workspace stays inside client A's workspace. The agency's other 49 clients see no reputation drift. This is the single most important architectural feature for an agency operating at 100+ mailbox scale, and it is the feature most under-emphasized by sequencer-bundled vendors because their architecture cannot offer it cleanly.

Comparison of shared-tenant agency setups versus isolated per-client workspaces
DimensionShared tenant (typical)Isolated workspace (StackMail)
Sender IP poolAll clients share one pool. One blacklist hit drags everyone.Each client routed to a tenant-bound IP cohort. Blast radius = one client.
Domain authority overlapDomains visibly grouped under one parent registrant.Domains held under per-client workspaces with separate registrant metadata.
Google / Microsoft tenantAll mailboxes inside a single Workspace org.Each client provisioned into its own Workspace or M365 tenant on request.
Warmup networkCross-pollination across all clients - one bad campaign poisons the warmup graph.Warmup peers scoped per workspace. Bad-actor signals stay contained.
Audit + access logsSingle log; no clean per-client export.Per-workspace audit log, exportable for client reporting or RFP responses.

Multi-tenant architecture - how StackMail keeps each client's mailboxes separate

Three layers of isolation exist in the StackMail multi-tenant model. The outermost is the agency account - a single billing entity, a single payment method, a single consolidated invoice. Inside the agency account live workspaces, one per client. Inside each workspace live domains, mailboxes, sender configurations, and the audit log. The architecture is intentionally hierarchical so that an agency operator can navigate from agency-wide cost reporting down to a single mailbox bounce log in three clicks.

At the infrastructure layer, every workspace binds to a Google Workspace tenant or a Microsoft 365 tenant - and crucially, those tenants are not shared. When client A's workspace is provisioned, we create a new Workspace organization for client A under the StackMail reseller agreement with Google. Client B gets a different Workspace organization. The separation is enforced upstream by Google itself; we are not relying on dashboard-level filtering to keep them apart. This is the same model InboxKit and the better Mailforge tier use; it is not the model that sequencer-bundled vendors like Instantly or Smartlead-Forge use, which is why those vendors cannot offer true per-client isolation at the infrastructure level even when their dashboards present a workspace abstraction.

At the warmup layer, peer selection is scoped to the workspace. When mailbox X in client A's workspace warms up, its peer pool is drawn from client A's other mailboxes plus a curated cross-agency pool of healthy senders we maintain. Mailbox X never warms up against client B's mailboxes, which means a poisoned warmup signal in one workspace cannot leak into another. This sounds like a small thing; at 600 mailbox scale it is the difference between a healthy fleet and a slow-bleed reputation issue across the entire agency book.

At the access layer, role-based permissions scope agency users to specific workspaces. An account manager assigned to clients A, B, and C cannot see client D's mailboxes, audit log, or cost line. The agency owner sees everything. Optional client-side read-only access (Pro tier and above) gives the client a view of their own workspace and nothing else. The permission model is enforced server-side, not just hidden in the UI.

Client onboarding workflow - first 24 hours

The 24-hour onboarding flow is what separates an agency that scales from one that stalls. Here is the timeline a typical 100-mailbox client cohort follows from contract signature to warmup ignition. Every step is automated except the contract review at hour zero.

  1. Hour 0

    Workspace creation

    Spin up an isolated workspace inside the StackMail dashboard, tag it with the client identifier, and invite the account manager. The workspace owns its own billing line, its own audit log, and its own export pipe.

  2. Hour 0-1

    Domain procurement

    Bulk-buy 5-15 sending domains via the in-app registrar flow, or upload an existing domain list via CSV. Domains are bought under the workspace and inherit per-client registrant metadata.

  3. Hour 1-2

    DNS automation

    SPF, DKIM, DMARC, and MX records propagate within minutes. We auto-validate against the upstream Google or Microsoft tenant and surface any propagation laggards.

  4. Hour 2-4

    Mailbox provisioning

    30-300 mailboxes are created across the cohort, bound to the workspace's tenant. Display names, signatures, and reply-to addresses populate from a CSV template.

  5. Hour 4-24

    Warmup ignition

    Mailboxes enter the warmup pool with peers scoped to the workspace. The 14-21 day warmup runs in the background while you connect the sequencer.

  6. Hour 4-6

    Sequencer handoff

    One-click export pushes credentials to Instantly, Smartlead, Saleshandy, Apollo, Lemlist, or any of 20+ supported destinations. The client never sees the credentials.

The full cohort is contract-signed, provisioned, warming, and connected to the client's sequencer inside one business day. The mailboxes themselves need 14-21 days of warmup before they hit production volume - that timeline is set by Gmail and Outlook, not by us, and no provider in the category can compress it without trading inbox placement for speed.

Pricing math at 50 / 100 / 300 / 600 client mailboxes

Pricing comparisons at agency scale are usually obscured by feature bundling. Here is the raw monthly cost of mailbox infrastructure across the four agencies most commonly considered, using each vendor's public pricing on annual billing as of May 2026. We compared StackMail to InboxKit, Mailforge, and Instantly because those are the three most-asked comparisons in agency RFPs.

Monthly mailbox infrastructure cost at 50, 100, 300, and 600 mailbox volumes
VolumeInboxKitMailforgeInstantly (bundled)StackMail
50 mailboxes / 5-10 clients$167/mo ($3.34)$155/mo ($3.10)$487/mo ($9.74)$129/mo ($2.58)
100 mailboxes / 10-15 clients$270/mo ($2.70)$295/mo ($2.95)$887/mo ($8.87)$250/mo ($2.50)
300 mailboxes / 30-50 clients$810/mo ($2.70)$885/mo ($2.95)$2,547/mo ($8.49)$750/mo ($2.50)
600 mailboxes / 60-100 clients$1,620/mo (negotiated)$1,770/mo (negotiated)$4,947/mo ($8.24)$1,425/mo ($2.37)

At 100 mailboxes the gap between StackMail and InboxKit is $20/month - small in absolute terms but consistent. At 300 mailboxes the gap widens to $60/month against InboxKit, $135/month against Mailforge, and $1,797/month against Instantly. At 600 mailboxes - the realistic top end of a healthy agency book - the gap against Instantly is $3,522 per month, or $42,264 per year, which is the cost of one full-time senior account manager.

The Instantly numbers look extreme because Instantly bundles the sequencer with the mailbox at $0.30-0.50/mailbox/month for the sequencer alone plus the mailbox cost on top. Sequencer-bundled pricing makes sense for a single founder running their own outbound; it is structurally hostile to an agency operating someone else's sequencer-of-choice. The full breakdown of why bundled pricing breaks at agency scale is in our Instantly alternatives analysis.

For a head-to-head with InboxKit specifically - the closest specialist competitor at agency scale - see our StackMail vs InboxKit comparison. The two products are infrastructure-equivalent at the mailbox level (we both resell Google Workspace and Microsoft 365); the price gap is the agency-relevant variable.

Sequencer-agnostic - running multiple stacks for different clients

Sequencer choice at the agency level is rarely uniform. Client A wants Smartlead because their previous agency used it. Client B wants Apollo because their sales ops team standardized on it. Client C wants Instantly because their founder watched a YouTube tutorial. Client D wants Lemlist because they need the personalization features. An agency that picks a single sequencer at the infrastructure layer is forcing a stack onto the client, which costs deals at the proposal stage.

StackMail is sequencer-agnostic by design. The export pipe at the workspace level lets you push mailbox credentials into any of 20+ supported destinations: Instantly, Smartlead, Saleshandy, Apollo, Lemlist, Woodpecker, Reply, Mailshake, Outreach, Quickmail, and others. The export is one-click bulk for the most-used destinations and OAuth-based for the rest. Different workspaces can use different sequencers - workspace A can run Smartlead, workspace B can run Apollo - without infrastructure conflicts.

The full integration surface is documented on our integrations page. If a sequencer you use is not on the list, ping support and we will add a connector inside two weeks - this is a routine request from new agency customers.

White-label options - what is available now, what is coming

White-label cold email infrastructure means different things to different agencies. The honest version of what we offer today, and what is on the roadmap, is below.

Available today (Pro and Custom tiers): rebranded client-facing reporting view with the agency's logo and primary color; custom CNAME for the client portal subdomain (clients.youragency.com pointing at our infrastructure); StackMail branding removed from CSV exports and PDF deliverability reports; agency-name attribution on the warmup audit log; agency-controlled email-template branding for client-facing notifications. The dashboard backbone, the support channel, and the billing entity remain StackMail; clients sign in to a co-branded experience but the underlying platform identity is visible at the footer level.

On the roadmap (H2 2026): a fully white-label reseller program where the entire dashboard runs under your domain (app.youragency.com), the support emails come from your team with our infrastructure underneath, the billing entity flips to the agency for client-facing invoices, and StackMail becomes invisible to the end client. This is a higher-touch tier with a minimum commitment of 500 mailboxes and a separate contract structure - if you want to be on the early-access list, mention it during the call.

Not on the roadmap: reselling the StackMail brand under a different name as a turnkey product. The reseller program is white-labeling our infrastructure under your brand; it is not packaging our SaaS for resale to other infrastructure agencies. We make this distinction explicit because a few prospective customers have asked and we want the answer in writing.

Reporting and handoff - what your client sees vs what you see

The asymmetry between agency-side and client-side reporting is deliberate. The agency operator needs full diagnostic depth to fix issues; the client needs a curated view that signals health without exposing operational complexity (or per-mailbox cost).

What the agency sees versus what the client sees in StackMail reporting
MetricAgency viewClient view
Per-mailbox health (open rate, bounce rate, spam complaints)Full dashboard, per-workspace and per-mailboxOptional read-only view, scoped to their workspace
Sender reputation telemetry (Postmaster Tools, Microsoft SNDS)Full export with raw scoresAggregated weekly summary in PDF format
Cost breakdown per mailbox / per workspaceItemized for rebillingHidden by default; revealable on request
DNS configuration (SPF, DKIM, DMARC records)Editable, exportable as zone fileRead-only or hidden
Warmup state and progressionFull timeline with peer-graphHidden - exposing warmup peers harms the warmup network
Deliverability incident logFull audit trail with timestampsFiltered to incidents that affected delivery on their domain

Common agency mistakes - 7 anti-patterns

These are the seven most common mistakes we see when agencies migrate to StackMail from a previous setup. The first three are infrastructure-level; the last four are operational. All seven are recoverable but cheaper to avoid than to fix.

  1. Mistake 1

    Pooling all clients into one workspace

    If one client gets a complaint storm or a domain blacklist, every other client's mailboxes share the reputation hit. Always one workspace per client - even if you have to absorb the small overhead.

  2. Mistake 2

    Buying mailboxes from a transactional-API reseller

    Some 'cold email infrastructure' vendors front Azure Communication Services or SendGrid as if they were Google Workspace mailboxes. They are not. They cannot reply, cannot land in primary, and will get clients banned. Always verify the underlying mailbox is a real Google Workspace or Microsoft 365 seat.

  3. Mistake 3

    Co-mingling sender IPs across verticals

    A B2B SaaS client and a debt-relief client should never share a tenant. The risk profile is asymmetric and the regulated vertical drags the rest of the cohort down.

  4. Mistake 4

    Skipping warmup to hit a deadline

    Mailboxes that ramp before day 14-21 land in spam at 3-5x the rate of warmed mailboxes. The 'savings' from a fast launch get burned in deliverability remediation by week three.

  5. Mistake 5

    Forgetting to set up DMARC reject

    p=none is the default but it leaves the door open for spoofing. Move clients to p=quarantine within 30 days and p=reject within 60. Most agencies forget and pay for it during a Google policy refresh.

  6. Mistake 6

    Letting clients log into the underlying admin console

    If a client logs into Google Admin and changes a setting, your DNS and warmup automation can drift. Lock admin access at the agency level and surface only the dashboard view the client needs.

  7. Mistake 7

    Pricing the mailbox at cost

    If you charge clients $3/mailbox - the same price you pay - your margin is zero and your support hours are unpaid. Most healthy agencies bill clients at $7-15/mailbox/month and absorb the operational risk in the spread. The volume pricing at 100-600 mailbox tiers is what funds that spread.

Frequently asked questions

Do I get billed per client or one consolidated invoice?

One consolidated invoice from StackMail, paid by the agency, regardless of how many client workspaces you operate. The dashboard exposes a per-workspace cost breakdown so you can rebill clients accurately, but we do not split the parent invoice. Agencies on the Pro and Custom tiers can request per-workspace cost-center tags for accounting export.

Can my clients log into the StackMail dashboard themselves?

By default no - the agency owns the workspace and the client never sees the dashboard. If you want to grant a client view-only access (mailbox health, send volume, bounces) without exposing credentials or other clients' workspaces, you can issue a scoped read-only invite on the Pro tier and above. The client will see only their workspace and only the metrics you choose to expose.

What happens when a client churns - do I lose the mailboxes or migrate them?

Three options. (1) Pause the workspace - mailboxes stay live, billing pauses at the next cycle, you keep the warmup state. (2) Delete the workspace - we deprovision the mailboxes from the upstream Google or Microsoft tenant within 24 hours and free up your included quota. (3) Hand the mailboxes off to the client by transferring the underlying Workspace tenant to their billing account - the mailboxes belong to whoever pays Google or Microsoft for the seat, and we will help with the export.

What does white-label mean today versus what is coming?

Today: agencies on the Pro and Custom tiers can rebrand the client-facing reporting view (logo, primary color, sender domain on email reports), use a custom CNAME for the client-portal subdomain, and remove StackMail branding from CSV exports. The dashboard backbone, the support channel, and the billing entity remain StackMail. Coming H2 2026: a fully white-label reseller program where the dashboard runs under your domain and the support is fronted by your team with our infrastructure underneath.

What support tier do agencies get?

Growth tier gets standard support with response inside one business day during EU and US business hours. Pro tier gets priority support with two-hour response during business hours and a named account manager. Custom tier (300+ mailboxes) gets a Slack Connect channel, a four-hour response SLA across business hours, and pager-duty escalation for tenant-level outages affecting more than 10 client workspaces simultaneously. We are not at 24/7 yet - if 24/7 is non-negotiable, InboxKit Enterprise is the honest recommendation.

Can I hand the mailboxes off to a client at the end of an engagement?

Yes. The Google Workspace and Microsoft 365 tenants are issued in the workspace's name and are portable. To hand off, the client creates their own Workspace billing account, we transfer the tenant to their billing identity, and we export the DNS configuration and sequencer credentials. The mailboxes keep their warmup history and sender reputation across the handoff because the underlying tenant does not change - only the billing payer does.

Is there a clean export path if a client wants their mailbox data?

Yes. Per workspace you can export (a) the mailbox list with addresses, domain ownership, sequencer connection, and warmup state as CSV, (b) DNS records as a zone file, (c) sender reputation history per mailbox as JSON, and (d) the deliverability dashboard as PDF for client reporting. The warmup engine state itself does not export - that lives inside our warmup network and is recreated if mailboxes move providers.

Do you offer multi-region routing for clients with mixed US and EU prospect lists?

Yes. At the workspace level you can pick US-only IP cohorts, EU-only IP cohorts, or split a single client across both. Most agencies pick US for North American outbound and EU for European outbound to match recipient-side reputation expectations and to comply with regional data preferences. The choice is per-workspace, so a single agency account can run US for client A and EU for client B without conflict.

How does GDPR work when I am a UK or EU agency emailing on behalf of a US client?

StackMail {LEGAL_NAME} is the data processor; you are the data controller for your agency account; your client is the controller for the data they send through your account. We sign a DPA at the agency level that flows down to client workspaces. For EU prospect data we route through EU IP cohorts and EU-resident infrastructure. We do not retain prospect data inside the platform - we only store mailbox metadata, sender reputation telemetry, and delivery logs. If a client requires SCCs for transatlantic data flow, we can provide them on the Pro tier and above.

What payment terms do you offer agencies?

Monthly billing is standard with credit card or ACH. Quarterly billing gets a 5% discount, annual billing gets 15-20% depending on tier. Custom tier (300+ mailboxes) can move to net-30 invoicing on request after the first quarter, and we accept wire for non-US agencies. We do not offer net-60 or net-90 today - if your agency runs longer payment cycles than that, talk to us during the call and we will work it out case-by-case.

Run the math for your agency

Sign up and provision a single client workspace in 24 hours, or book a 15-minute call to walk through the cost spread for your specific book of business.

No credit card to start10-minute setupYou own the mailboxes