Coming soon
New-customer prospecting: coming soon to Pilotiko
Understand outbound prospecting, the rules that apply in Canada and Quebec, and what Pilotiko already does for customers who come to you.
Prospecting for new customers with an AI agent (an AI SDR) is not built in Pilotiko: it is coming soon and not included in any plan. Pilotiko sends no prospecting messages. What exists today covers inbound demand: the website form, sorted requests, a leads-to-call-back counter and cost per customer.
In short
- Status: coming soon. Pilotiko has no outbound prospecting engine.
- CASL bars commercial email without consent, so cold email is tightly limited in Canada.
- Available today: website form feeding the to-do list, request sorting, a Leads to call back counter.
- Any future prospecting will go through a person's approval.
What is an AI SDR?
An SDR (sales development representative) finds businesses likely to buy, reaches out first and books a meeting for a salesperson. An AI SDR hands part of that job to software.
The work breaks into four moves: build a target list, find the right person and their contact details, write a personalized first message, then follow up until someone replies. AI SDR tools mostly automate research and writing, and sometimes the sending.
Sending is where the risk sits. A message that goes out on its own to a stranger carries your name and your legal exposure. OWASP recommends that a person approve high-impact actions taken by a language-model system, and gives posting content on someone's behalf as an example [4].
What does the law allow for prospecting in Canada?
Canada's Anti-Spam Legislation prohibits sending a commercial electronic message to an address without the recipient's express or implied consent (s. 6(1)) [1]. Implied consent mostly covers an existing business relationship: a purchase within two years, or an inquiry the person made within six months (s. 10(10)) [2]. Cold-emailing a purchased list fits neither case.
In Quebec, a prospect list holds personal information. The private-sector privacy act limits access within the business to people who need it for their duties (s. 20) [3], and it sets strict rules on passing that information to a third party without consent (s. 13) [3].
| Method | Main framework | Watch out for |
|---|---|---|
| Cold email | CASL | Consent required; identification and unsubscribe in every message |
| Cold text message | CASL | A text is a commercial electronic message, just like email |
| Following up an inquiry you received | CASL (implied consent) | The inquiry must be less than six months old |
| Visit, trade show, business card | Quebec privacy act for the details collected | Tell the person how you will use them |
General pointers, not legal advice; telemarketing has its own federal rules too.
Where does Pilotiko stand on prospecting?
The code has no prospecting engine: no target search, no contact enrichment, no follow-up sequence. Prospecting only appears as an acquisition channel you can declare so its cost can be tracked.
What exists serves customers who come to you. The form on your hosted website creates a request in the to-do list, plus a customer record when the person is new. The AI secretary sorts each request (question, booking, quote, complaint, emergency) and drafts a reply that, by default, waits for your approval. The office shows a Leads to call back counter.
| Feature | Status |
|---|---|
| Website form feeding inbound requests | Available |
| Request sorting and draft reply (human approval by default) | Available |
| Cost per lead and per customer, by channel | Available (logged spend) |
| Target and contact research | Coming soon |
| First message and automated follow-ups | Coming soon |
How can you prospect today without Pilotiko?
- 1
Pick a narrow target
One trade, one region, one company size. For example, property managers with 20 or more units in Laval.
- 2
Favour consent-based channels
Trade shows, associations, referrals and useful content that gets people to write to you first.
- 3
Follow up on inquiries
Someone who asked you for information less than six months ago may receive a commercial email.
- 4
Identify yourself in every message
Name, mailing address, a way to reach you and an unsubscribe link.
- 5
Measure cost per customer
Log the time and money spent per channel; Pilotiko works out cost per customer from those figures.
How many contacts does it take to sign a customer?
What will Pilotiko build for prospecting?
If Pilotiko builds an AI SDR, it will follow the same rule as other AI agents: the agent prepares the list and messages, a person approves each send. Consent will be checked before sending, with the same safeguards as email marketing, which is also coming soon.
Meanwhile, advertising tracking and your website help you attract inquiries you can lawfully follow up. Every upcoming capability is on the roadmap.
Frequently asked questions
Can Pilotiko find and contact potential customers for me?
No. Outbound prospecting is not built. Pilotiko handles the requests you receive, not messages to people who have not contacted you.
Is prospecting included in a plan?
No. It is a coming-soon capability and is not included in any plan. You can join the waiting list by booking a demo.
Can I cold-email a business in Canada?
CASL requires the recipient's consent for a commercial electronic message. A purchased list does not provide that consent; have a specific case checked by an adviser.
Can I follow up with someone who asked for a quote?
Yes, if the request is less than six months old: CASL treats it as implied consent. Each message must still identify you and offer an unsubscribe.
What is the Leads to call back counter?
An office counter that groups lead-type requests with no follow-up yet. It shows you whom to call; it contacts nobody for you.
Will an AI SDR send messages without my approval?
No. If the capability is built, each send will wait for a person's approval, like every agent action that touches a customer.
Sources
- Justice Canada, Justice Laws, Canada's Anti-Spam Legislation, section 6 (prescribed message content) (accessed on October 15, 2026).
- Justice Canada, Justice Laws, Canada's Anti-Spam Legislation (S.C. 2010, c. 23), sections 10 to 11 (accessed on October 15, 2026).
- LégisQuébec, Act respecting the protection of personal information in the private sector (CQLR, c. P-39.1) (accessed on October 15, 2026).
- OWASP Gen AI Security Project, LLM06:2025 Excessive Agency (accessed on October 15, 2026).
Read next
Email marketing and newsletters: coming soon to Pilotiko
Newsletters and marketing email in Pilotiko: consent and unsubscribe rules are built; real sending and sequences are still to come. CASL explained plainly.
Your website, built and hosted by Pilotiko
Pilotiko builds your business website from your real services, checks it, gets your approval, then hosts it with versions and one-click rollback. See the steps.
AI agents: they prepare, a person approves
Pilotiko's AI agents read your data and prepare the work. Booking, sending or paying waits for a person's approval, enforced right down to the database layer.
Google Ads and Meta Ads management: coming soon to Pilotiko
Pilotiko runs no ads today. What it already does: approve budgets, log spend and work out cost per customer. Google Ads and Meta Ads management: coming soon.
Roadmap: what Pilotiko does not do yet
What Pilotiko does not do yet, with no dates or promises: AI receptionist, email marketing, ads, prospecting, routes, forecasting. And what already exists.