Germany · Austria · Switzerland
DACH
Choose a DACH GTM stack with separate German, Austrian and Swiss outbound gates, GDPR and Swiss transfer controls, local sales handoffs and invoicing.
DACH guideRegional expansion · Established B2B software teams
Keep the stack. Change the rules that govern it. Find the outbound, data and sales-ops changes your RevOps, GTM engineering, AE and CS teams need before entering a new region.
Checked . Sources are statutes, regulators and official vendor documentation. These guides do not certify compliance, provider coverage or a Cheetah client outcome. Local counsel must approve your actual channel design.
8 guides · Country-level constraints
Germany · Austria · Switzerland
Choose a DACH GTM stack with separate German, Austrian and Swiss outbound gates, GDPR and Swiss transfer controls, local sales handoffs and invoicing.
DACH guideFrance
Build a France-ready B2B GTM stack with job-relevant outreach, French sales handoffs, GDPR transfer controls and scoped 2026/2027 e-invoicing decisions.
France guideUnited Kingdom
Build a UK GTM stack with corporate-versus-sole-trader PECR gates, TPS and CTPS screening, UK GDPR transfers, provider QA and GBP invoicing.
United Kingdom guideDenmark · Sweden · Norway · Finland · Iceland
Build a Nordic B2B GTM stack with separate Danish, Swedish, Norwegian, Finnish and Icelandic channel gates, CRM controls and invoice workflows.
Nordics guideNetherlands · Belgium · Luxembourg
Build a Benelux GTM stack with separate Dutch, Belgian and Luxembourg outreach gates, Dutch and French handoffs, and scoped e-invoicing workflows.
Benelux guideJapan
Plan a Japan GTM stack with narrow email exceptions, APPI transfer controls, Japanese sales handoffs, provider QA and qualified-invoice decisions.
Japan guideBrazil
Build a Brazil GTM stack with LGPD channel gates, current calling rules, EU data transfers, Portuguese sales handoff, Pix and invoicing scope.
Brazil guideUnited States · European Union exporter jurisdictions
Plan US expansion with qualified outbound rules, EU data-transfer controls, provider sample QA, US sales handoffs, ACH payments and state tax review.
US for EU companies guideThese are qualified planning summaries, not channel permissions. Open a guide for country-level exceptions and the implementation checklist. No provider is ranked by undocumented regional coverage.
Scroll horizontally to compare all five dimensions. Keyboard users can focus the table and use the arrow keys.
| Region | Cold email | Phone | LinkedIn messages | CRM and transfers | Local operations |
|---|---|---|---|---|---|
| DACHGermany, Austria, Switzerland | Germany requires prior express consent or the narrow customer exception. Austria requires prior consent; confirm the complete customer exception with counsel before activation. Swiss telecom mass advertising is opt-in with a narrow customer exception. No blanket B2B exemption.[1][2][4]Not legal advice · Checked | German live advertising calls need prior express consent for consumers and at least presumed consent for other market participants. Austria requires prior consent for advertising calls. Switzerland restricts calls to starred and unlisted numbers, subject to its business-relationship exception.[1][2][4]Not legal advice · Checked | Manual LinkedIn use is not a country-law exemption. Our assessment is to require review of promotional DMs separately; LinkedIn prohibits unauthorized automated messaging and scraping.[5][1][2][4]Not legal advice · Checked | Germany and Austria use GDPR controls; Switzerland has its own FADP regime. EU exports to Switzerland can use adequacy, but onward transfers and Swiss exports need their own assessment.[6][7][8][9]Not legal advice · Checked | Our assessment is to localize German sales handoffs and not treat all Switzerland as German-speaking. German domestic e-invoicing dates are not a universal obligation on foreign SaaS exporters.[12][13][14]Not legal advice · Checked |
| FranceFrance | For named professional contacts, CNIL's mirror guidance requires job relevance, information and simple, free objections. It distinguishes generic legal-person addresses. This is not blanket permission to email every French business contact; production parity was not established.[1]Not legal advice · Checked | CNIL's mirror describes job-relevant professional live calls with information and free objection; production parity is unverified. Consumer prior consent became the general rule on 11 August 2026, with a related existing-contract exception. Do not apply consumer rules indiscriminately to B2B calls.[2][3]Not legal advice · Checked | Use human-led account research and separately review message legality. LinkedIn prohibits scraping and unauthorized bots or automated messaging; a connection is not a channel-consent record.[4][5]Not legal advice · Checked | Record GDPR basis, provenance, notice and objections. An EU exporter must still address non-EEA transfers and onward transfers; a processor contract is not itself a complete transfer assessment.[5][6]Not legal advice · Checked | Our assessment is to require a French sales-to-finance handoff. Domestic VAT-subject entities have 2026 reception and staged 2026/2027 issuance obligations; do not automatically apply them to a foreign SaaS exporter.[9][10]Not legal advice · Checked |
| United KingdomUnited Kingdom | UK corporate-subscriber email does not require PECR consent, but sender identification and an opt-out address remain necessary. Sole traders and certain partnerships need consent or a qualifying products-and-services soft opt-in.[1][2]Not legal advice · Checked | For ordinary live B2B sales calls, screen TPS, CTPS and prior objections. Registered numbers need specific permission. Recorded automated marketing calls require specific consent, including for corporate subscribers.[1][2]Not legal advice · Checked | Social direct messages are electronic mail. A personal professional-network profile is not automatically a corporate subscriber. The ICO rules do not grant permission for LinkedIn automation.[1]Not legal advice · Checked | UK GDPR applies to identifiable business contacts. Assess restricted UK exports separately from EEA-to-UK adequacy; EU SCCs alone do not cover UK restricted transfers.[1][4][5][6]Not legal advice · Checked | Our assessment is UK-English collateral, UK-hours ownership and a GBP quote option. VAT follows the supply and establishments, not the quote currency; UK VAT invoices can require a sterling VAT total.[9][11]Not legal advice · Checked |
| NordicsDenmark, Sweden, Norway, Finland, Iceland | Denmark requires consent even for generic corporate mailboxes. Norway and Iceland distinguish generic mailboxes from employee addresses. Sweden and Finland distinguish natural-person marketing from corporate marketing. None supplies a Nordic-wide B2B exemption.[1][4][7][3][5]Not legal advice · Checked | Manual live calls need separate screening. Danish corporate calls differ from consumer calls and sole-trader objections. Norway, Sweden and Finland separate live contact from automated systems. Iceland requires respect for telephone-directory marketing blocks.[2][4][3][5][8]Not legal advice · Checked | Do not treat LinkedIn messages as exempt email substitutes. Danish guidance includes private social messages, Norwegian guidance addresses social media, and Icelandic law covers electronic messages. Our assessment is to hold unapproved messaging and all automation.[1][4][8]Not legal advice · Checked | Norway and Iceland participate in the EEA GDPR framework. An EU exporter's non-EEA vendor disclosures still need Chapter V analysis in addition to lawful processing and processor contracts.[9][13]Not legal advice · Checked | Plan country-specific language and currency handoffs. Public and private invoice scopes differ. Finland has a request-based structured-invoice right; Norway stages in-scope issuance from 2027 and receipt from 2030.[15][16][17][18][19][20][24][26]Not legal advice · Checked |
| BeneluxNetherlands, Belgium, Luxembourg | Netherlands requires consent or a narrow statutory exception. Belgium distinguishes named people from genuinely impersonal legal-person inboxes. Luxembourg's consent provisions distinguish natural-person subscribers from legal persons.[1][5][8]Not legal advice · Checked | Dutch live calls distinguish legal personality, with a narrow exception for business numbers specifically published for unsolicited calls. Belgian live calls require national and internal objection screening. Luxembourg requires prior consent for natural-person subscribers; do not import Belgium's opt-out model.[2][1][4][7][8]Not legal advice · Checked | Approve Dutch, Belgian and Luxembourg promotional messages separately. Manual sending is not a legal exemption, and LinkedIn prohibits unauthorized message automation.[1][6][8][9]Not legal advice · Checked | GDPR applies to identifiable business contacts. Keep lawful basis, channel permission and transfer safeguards separate, including non-EEA vendor access to an EU CRM.[10][11]Not legal advice · Checked | Our assessment is Dutch and French sales handoffs with a separate Luxembourg language check. Belgium's 2026 domestic B2B mandate differs from Dutch and Luxembourg public-procurement invoicing scopes.[15][16][17][18]Not legal advice · Checked |
| JapanJapan | Japan starts from opt-in for advertising email. Self-published business addresses have a narrow exception, unavailable where the publication rejects advertising. Imported or guessed addresses do not establish that exception.[1][2]Not legal advice · Checked | Assess manual business calling separately. CAA excludes transactions between business operators from its consumer telemarketing rules, not from all law. SMS is covered by the advertising-email regime. Automated voice calls need separate review.[3][2]Not legal advice · Checked | Treat manual LinkedIn messages as a separate channel, not an email-consent workaround. LinkedIn prohibits unauthorized message automation and scraping; its terms do not grant Japanese legal permission.[4][5]Not legal advice · Checked | APPI purpose, security and foreign-recipient rules require a data-flow review, not an assumed Japan-hosting mandate. Hosting location alone does not establish who can access CRM data.[5][6][7]Not legal advice · Checked | Our assessment is a Japanese AE-to-CS handoff and finance-approved invoice template. Qualified-invoice treatment depends on seller status and the service classification, not simply a Japanese billing address.[11][12]Not legal advice · Checked |
| BrazilBrazil | LGPD legitimate interest requires a case-specific assessment. It is neither consent nor a blanket cold-email permission.[1][2]Not legal advice · Checked | Review state suppression separately. Anatel now describes 0303 as optional, while call authentication is mandatory above 500,000 monthly originated calls.[3][4]Not legal advice · Checked | Public professional profiles are not unrestricted prospecting data. LinkedIn prohibits scraping and unauthorized automated messaging.[1][5]Not legal advice · Checked | Check each transfer direction. ANPD recognizes EU adequacy and the EU recognizes Brazil, but lawful basis, notices and processor duties remain.[6][7][8]Not legal advice · Checked | Our assessment is a Portuguese handoff and entity-specific billing design. Stripe documents cross-border Pix eligibility but Brazil-only boleto merchant availability.[10][11]Not legal advice · Checked |
| US for EU companiesUnited States, European Union exporter jurisdictions | US commercial email, including B2B promotion, falls within CAN-SPAM. Use accurate headers, an honest subject, postal address and opt-out; process requests within 10 business days.[1][2]Not legal advice · Checked | Separate manual live calls from TCPA-covered autodialed or artificial/prerecorded calls. FTC B2B exemptions do not erase FCC wireless, residential DNC or state obligations.[3][4][5][6]Not legal advice · Checked | Use LinkedIn's permitted interfaces. Its agreement prohibits scraping and unauthorized automated messaging; a public profile is not campaign consent.[7][8]Not legal advice · Checked | EU-established processing retains GDPR obligations. DPF adequacy covers certified US recipients, not every US-hosted tool; otherwise assess a suitable transfer mechanism.[8][9][10]Not legal advice · Checked | Our assessment is US English selling and named US-hour service ownership. Stripe ACH accepts US bank accounts in USD for eligible merchants; Washington tax rules are a state example, not a US-wide template.[15][16][17]Not legal advice · Checked |
A regional launch needs permission evidence in the CRM, suppression shared with outbound, local account routing and a billing handoff. Treat product signals as input to the approved workflow, not automatic permission to contact a person.
Assess your GTM systems readiness to identify gaps in your existing stack. The assessment does not score regional legal compliance or replace the country-specific guides and counsel review.
Tell us what you want to improve. Fedor reviews the workflow and replies by email when there is a useful fit.