Strategy
Part of Email marketing software strategy: campaign governance
Email marketing software strategy framework
Build an email marketing software strategy framework that turns a one-sentence campaign decision into evidence, ownership, metrics, stop rules and recovery.
An email marketing software strategy framework is useful only when it forces a decision. Give one campaign a single purpose, a defined recipient population, a traceable acquisition route, an accountable owner and a stated reason to stop. Treat features as implementation choices after those fields are settled.
This how-to guide is for organisations operating in England. Its legal sources are UK-wide. It contains no performance figures, campaign results or implied benchmark, and the evidence was checked on 5 September 2026.
What to take away
- Write one sentence naming message type, population, channel, intended action, owner and evidence.
- Trace every address back to its collection date, notice, subscriber type and latest suppression check.
- Define metrics fully with numerator, denominator, population, period, exclusions and known uncertainty.
- Treat recovery as four partscontain, preserve evidence, correct the cause and repeat checks.
- Schedule reviews and bring them forward on acquisition, purpose, supplier or tracking changes.
Write the decision in one sentence
Use this construction: "We will send [message type] to [eligible population] through [channel] so they can [intended action], and [owner] will decide whether to continue using [defined evidence]."
For example: "We will send a monthly product update to UK customers who opted in to product news at checkout, by email, so they can activate the new feature, and the CRM manager will decide whether to continue using click-through and complaint data." If the sentence cannot name the population, action, owner and evidence, it is not ready.
One-sentence decision check
Is the recipient group specific?
Name eligible population
Rewrite before sending
If the sentence says "customers" without explaining which customers, or "engagement" without a measurable action, stop and rewrite it. Do not combine research recruitment, routine service information and promotion. The ICO distinguishes genuine research and routine customer-service messages from direct marketing, subject to the purpose and content of the communication.
Trace the population back to collection
Define eligibility in data terms that another analyst could reproduce. Record where the address came from, the collection date, the notice presented, the subscriber type, any objection or withdrawal and the latest suppression check. An invitation to research does not authorise later promotion, while a receipt address does not automatically belong in a newsletter segment.
Population trace record
- Address source recorded
- Collection date recorded
- Notice presented recorded
- Subscriber type recorded
- Objection or withdrawal recorded
- Latest suppression check recorded
The ICO's Direct marketing guidance requires organisations to consider the information used, the intended activity, responsibilities and lawful basis before direct marketing starts. For email in the UK, the operative rules are the UK GDPR and the Privacy and Electronic Communications Regulations 2003 (PECR). PECR regulation 22 requires consent for unsolicited direct marketing emails to individuals, with a limited soft opt-in for existing customers. The platform's audience count is not evidence that every displayed record is eligible.
Choose the email marketing software and deliverability tools
Name the email marketing software that will hold the audience, consent records and send logs. Common examples include Mailchimp, Klaviyo, Brevo, Dotdigital, HubSpot, Salesforce Marketing Cloud, ActiveCampaign, MailerLite and Campaign Monitor. The choice matters less than whether the platform can export the fields your framework requires.
Deliverability monitoring should sit alongside the sending platform. Google Postmaster Tools and Microsoft SNDS give reputation and delivery data for major mailbox providers. dmarcian, Validity Everest, Litmus, Mail-Tester, MXToolbox and GlockApps can be used for authentication checks, inbox placement testing and troubleshooting. Record which tool owns each check so a failure has an owner.
Connect inputs to the intended result
Draw a short chain:
Connect inputs to intended result
- Inputapproved data, staff time, content and configured sending domain.
- Activitycreate, check and send one defined message.
- Outputeligible messages accepted by the sending service, with failures recorded.
- Intended outcomethe recipient completes the action named in the strategy.
- Competing explanationsother contact, seasonal demand, account prompts or unrelated changes.
The 2026 Magenta Book separates implementation monitoring from assessment of outcomes and causal effects. It is government evaluation guidance, not proof that email caused a commercial result.
Give the metric a complete definition
Write the numerator, denominator, unit, population, period, timezone, data source, exclusions and known uncertainty. A completed-action rate might divide eligible recipients who completed the defined action during the measurement window by all eligible recipients included in the approved send. That is a definition, not an expected result.
Name the threshold and response before seeing data. A continuation rule might require data completeness and no unresolved suppression failure. A stop rule might fire on a broken unsubscribe, incorrect population query, unapproved claim or authentication fault. The reporting owner raises the signal; the campaign owner decides what happens next.
Design recovery as part of the framework
Recovery has four parts: contain the problem, preserve evidence, correct the cause and repeat the relevant checks. Restart needs named approval and a versioned change record. Lowering the send volume does not cure an unlawful population or misleading claim.
For example, if a campaign is sent to customers whose consent covered service messages only, contain the problem by pausing sends and suppressing that segment; preserve the send log, consent records and approval thread; correct the cause by updating the consent notice and audience query; repeat the suppression, authentication and unsubscribe checks before restart. The same four-part recovery applies if a broken link, misleading subject line or authentication failure reaches the inbox.
Technical checks should remain separate from permission. The NCSC explains how SPF, DKIM and DMARC reduce email spoofing risk, but successful authentication does not establish consent or a lawful basis. Likewise, a message accepted by a mailbox is not necessarily read or wanted.
Configure authentication and monitor deliverability
An SPF record is a TXT record such as v=spf1 include:_spf.example.com -all. DKIM uses a selector, for example selector1._domainkey.example.com, published as a CNAME to the provider's DKIM key. DMARC is published at _dmarc.example.com as v=DMARC1; p=none; rua=mailto:dmarc@example.com, then moved to p=quarantine and p=reject once alignment is proven. These records are technical checks, not permission checks.
Bounce handling separates hard bounces, which should be suppressed immediately, from soft bounces, which may be retried or suppressed after repeated failures. List hygiene includes removing role addresses, known spam traps, inactive subscribers and unsubscribed or complained addresses. Inbox placement is monitored through seed tests and the reputation tools named above, while sender reputation depends on authentication, low complaint rates and engagement.
Set the review trigger
Schedule a review date and list events that bring it forward: a changed acquisition route, new message purpose, supplier or sub-processor change, tracking change, material complaint pattern, regulator update or mailbox rule change. At review, compare the current configuration with the decision record rather than merely refreshing a date.
The finished framework should fit on one page and link to its evidence. If a reviewer cannot reproduce the audience, metric and stop logic, keep the campaign on hold.
Before you act
- Write the campaign decision in one sentence before configuring anything.
- Record the source, collection date and notice for each address.
- Define the metric fully before seeing any data.
- Name the continuation and stop rules in advance.
- Separate technical authentication checks from permission checks.
- Set a review date and list events that bring it forward.
Common questions
What should the one-sentence decision include?
It should state the message type, the eligible population, the channel, the intended action and the owner. It should also name the defined evidence the owner will use to decide whether to continue. If it says customers or engagement without specifics, rewrite it before proceeding.
Why is the platform's audience count not enough?
The platform's audience count is not evidence that every displayed record is eligible. You must record where each address came from, the collection date, the notice presented, the subscriber type, any objection or withdrawal and the latest suppression check. An invitation to research does not authorise later promotion.
What does recovery involve?
Recovery has four parts: contain the problem, preserve evidence, correct the cause and repeat the relevant checks. Restart needs named approval and a versioned change record. Lowering send volume does not cure an unlawful population or a misleading claim, so those faults must be fixed first.
