Marketing Automation
193 martech vendors in Marketing Automation, part of Campaign & Lifecycle Marketing. Each record carries the date we last verified it, so you can see how current it is before you rely on it.
Last verified:
Procurement-readiness profiles — SOC 2, ISO 27001, GDPR and DPA posture, data residency, AI-training policies — are available when you sign in.
Marketing automation software runs cross-channel workflows — email, SMS, and web triggers combined with lead scoring — so a prospect moves through a lifecycle without a marketer sending each step by hand. Marketing operations teams rely on it for scale. IT security reviewers need it audited too, since it connects to a CRM and holds a prospect's fullest behavior profile.
Who it is for
- Marketing operations leads shortlisting a platform to orchestrate cross-channel lifecycle campaigns beyond what an email tool alone can trigger.
- IT security reviewers assessing how behavioral and lead-scoring data are protected across a platform that syncs directly with a CRM.
- Legal and compliance teams confirming consent handling holds up across every channel a workflow can trigger, not just the initial email.
What your No-Committee will ask
- IT security
- Is prospect behavioral and scoring data encrypted at rest and in transit, and is admin access protected by MFA? Encryption and MFA support are each tracked as their own evidenced claim, marked verified, self-attested, or not found.
- Data governance
- Where is behavioral and lead-scoring data stored, and is a Data Processing Agreement available? Data residency and DPA availability are drawn directly from the vendor's own legal pages, with a source link on the claim.
- AI governance
- If the platform scores leads or writes workflow copy with AI, is that disclosed, and does it train on prospect behavior data? AI-feature disclosure and the training-data question are recorded as a single evidenced claim, separate from the platform's general privacy language.
- Legal / compliance
- Does the vendor publish a sub-processor list, and does consent captured on one channel actually suppress a prospect across every other triggered channel? Sub-processor disclosure and cross-channel consent handling are each recorded with a source link.
- Risk / finance
- Does the vendor publish an uptime SLA, and a status page for past workflow-engine incidents? SLA terms and status-page links are captured wherever the vendor publishes them, since a stalled workflow engine can leave a lifecycle campaign silently broken for days before anyone notices.
How we verify
Every claim above comes from the vendor's own public pages — trust center, privacy policy, or security page — never from a marketing-technology awards list. What verified, self-attested, and not-found each mean is spelled out in full on our methodology page.
Frequently asked questions
How is marketing automation different from a CRM?
Marketing automation triggers cross-channel workflows based on prospect behavior, before a lead is necessarily ready for a sales conversation. A CRM is the system of record for contacts and deals once a relationship is being actively worked by a salesperson. The two usually sync tightly, with automation handing off a qualified lead to the CRM at a defined trigger point.
Do marketing automation vendors typically publish SOC 2 or ISO 27001 certification?
Larger platforms serving enterprise marketing teams with high lead volumes more often publish a SOC 2 report, sometimes alongside ISO 27001, behind a dedicated trust center. Smaller or mid-market tools more often rely on a general security page without independent certification, which our audits mark as self-attested rather than verified.
Is pricing usually based on contact volume or on active workflows?
Both models exist, and many vendors combine them — a tier based on the number of contacts in the database, plus limits on active workflows or emails sent per month. Enterprise tiers with custom scoring models or dedicated deliverability support are more often quote-only, which we note rather than estimate.
What should I check beyond workflow-builder features before shortlisting a platform?
Confirm where behavioral and scoring data is stored, whether consent captured on one channel suppresses a prospect everywhere else, and what the CRM sync actually carries over. A workflow that looks sophisticated in a demo can still leak a suppressed contact back into an active campaign if the sync isn't built correctly.