Cold Email Infrastructure for Law Firms

Every US state adopts some version of ABA Model Rule 7.3, which governs solicitation of clients. Most states allow targeted written solicitation (including email) to sophisticated recipients like general counsel and business decision-makers, as long as the message is clearly labeled as advertising, does not involve coercion or duress, and is not sent to someone who has made known a desire not to be solicited. Some states, notably Florida and Texas, add specific labeling requirements like a bold "ADVERTISING MATERIAL" header. California's Rule 1-400 requires the attorney to retain a copy of every solicitation email for two years.

The technical implication: law firm cold email must be archived, labeled, and targeted at non-individual-consumer recipients. That is not what generic cold email infrastructure is built for.

Here is how InboxKit supports compliant BD outreach for a typical law firm:

Pricing reflects InboxKit's Professional ($39/mo for 10 mailboxes), Agency ($99/mo for 30), and Enterprise ($299/mo for 100) tiers. Warmup add-on at $3/mailbox/month. InfraGuard monitoring is strongly recommended for law firms given the reputational cost of a deliverability failure.

Law firm cold email is low-volume and high-stakes. A single retained engagement from a Fortune 1000 GC can be worth $500K-$5M in billable hours.

Never use the main firm domain for cold outreach. smithlaw.com is the domain where retention letters, billing, and active-matter communications land. A bar complaint, blacklist hit, or aggressive spam filter would cripple client service overnight.

• smithlaw-advisory.com
• smithlaw-insights.com
• smith-bd.com

Each domain should be transparently tied to the firm in the message body and WHOIS record. Hiding affiliation can violate state-specific attorney advertising rules that require the sending firm's identity to be unambiguous.

Register through InboxKit for automatic DNS. Missing or incorrect DMARC is a near-guaranteed rejection at most Fortune 500 M365 tenants, which is where general counsel typically receive mail.

Use .com only. General counsel are the most conservative audience in B2B. A .io or .co domain is a near-automatic ignore for a BD pitch to a Fortune 1000 legal department.

Bar rules draw a sharp line between solicitation of a "lawyer, family member, close personal friend, or a person with whom the lawyer has a prior professional relationship" (always allowed) and solicitation of an individual consumer (often restricted). For BD outreach, the compliant audience is:

• General counsel and deputy GCs at corporations
• Chief legal officers at private companies and nonprofits
• In-house legal operations leaders
• C-suite decision-makers with retained-counsel authority (CFOs, COOs)
• Legal department procurement contacts

The non-compliant audience in most states:

• Individual consumers for personal legal matters (family law, personal injury, estate planning). These require much stricter solicitation rules in nearly every state.
• Anyone known to be represented by other counsel on the specific matter being pitched.
• Anyone who has previously opted out of solicitation from the firm.

InboxKit does not build lists, but its sequencer integrations pass suppression state back to the CRM so a single opt-out applies across every partner's mailbox in the firm.

Several states require specific labeling on attorney advertising:

• Florida: requires "This is an advertisement" or equivalent disclosure in written solicitations.
• Texas: requires "ADVERTISEMENT" in the subject line or first sentence of the email.
• New York: requires "Attorney Advertising" on the first page.
• California: requires retention of copies of the communication for two years.
• Most other states: follow ABA Rule 7.3 with minor variations.

Infrastructure implication: every BD email needs a standard labeled footer, and every sent message must be archivable for 2-7 years depending on state. InboxKit's sequencer integrations automatically inject a firm-specified footer across every outbound message and the firm's CRM (Interaction, Foundation, HubSpot, or similar) handles the archival requirement.

For firms running BD across multiple states, the safe default is to include the strictest labeling in every message: bold "Attorney Advertising" in the subject and a standardized footer with the firm name, address, attorney responsible for content, and jurisdiction of admission.

Law firm cold email is low-volume and extremely targeted. The pattern that actually works:

• Volume per mailbox: 10-25 sends per working day. More than that triggers conservative Fortune 500 spam filters and violates the high-touch nature of BD outreach.
• Cadence: 3-4 touches maximum, spaced 4-7 days apart. Pushy sequences are explicitly disallowed under Rule 7.3's "coercion, duress, or harassment" language.
• Personalization: Every message references a specific matter in the recipient's public record: SEC filings, litigation docket entries, recent M&A activity, reported transactions. Generic "We help companies with X" pitches fail on both deliverability and compliance grounds.
• Sender identity: Messages should come from a named partner with Bar admission, not from a generic bd@firm.com alias. Bar rules require identifying the responsible attorney.
• Reply handling: Replies must be triaged by a human who can confirm no conflict-of-interest issue before the firm engages further. InboxKit's unified inbox view makes this simple for a managing partner overseeing 10+ BD mailboxes.

For a boutique firm with 10 partners, the sustainable volume is roughly 150-250 BD emails per day across the firm, or about 3,000-5,000 per month. That's enough to build a meaningful pipeline without violating any state's solicitation rules.

The compliance requirements that infrastructure must support:

• Opt-out honored across all mailboxes: a single unsubscribe must apply to every partner and BD mailbox in the firm, not just the one that sent the message.
• Archival for 2-7 years per state: every outbound BD message must be stored in a system of record separate from the sending mailbox.
• Standardized advertising footer: injected automatically to avoid partner-by-partner drift.
• Sender identity verification: DMARC set to p=reject to prevent anyone from spoofing the firm's BD domain. Law firms are high-value spoofing targets because of the client-confidentiality trust their domains carry.
• No-contact list integration: existing client conflicts and represented-party lists must load into the sequencer as a hard suppression before any BD campaign sends.

InboxKit handles the sending-side pieces (DMARC, per-domain suppression, per-mailbox send windows). The CRM side (archival, no-contact list, advertising footer content) is owned by the firm's BD operations team, but InboxKit integrates cleanly with the major legal CRMs.