A marketing agency's cold email infrastructure has one job the tools can't do: make every client's deliverability independent of every other client's mistakes. Get that isolation wrong and one client's scraped list burns campaigns for all of them — we've watched a single bad upload take down outreach for six accounts sharing infrastructure. This guide builds the full agency stack layer by layer: domains, inboxes, DNS, sending platform, client isolation, monitoring, and the per-client cost model. It's written for agencies onboarding real clients, with the numbers included.
💡 TL;DR
The agency stack, bottom to top: dedicated secondary domains per client (never shared, never the client's primary domain) → 2 pre-warmed inboxes per domain at $4.99 each → SPF/DKIM/DMARC verified per domain → OAuth connection to your sending platform → weekly Postmaster monitoring per client → planned 15–20% quarterly inbox rotation. Standard per-client unit at 300 sends/day: 6 domains, 12 inboxes, ~$60/month inbox cost plus ~$7/month domains. Isolation is the whole game — one client, one blast radius.
Layer 1: Domain Architecture — Isolation Before Everything
Every infrastructure decision downstream depends on this one. The rules:
Dedicated domains per client. Never share a domain — or its reputation — between clients. Client A's bounce spike must be physically unable to touch Client B's placement.
Never the client's primary domain. Register lookalike secondaries (tryclientbrand.com, clientbrandhq.com) that 301-redirect to the client's real site. If outreach ever damages a domain, it's a $12 replaceable asset — not the client's business email.
2 inboxes per domain, maximum. Caps the blast radius of any domain-level dip at two inboxes.
Buy domains with sending history where possible. Pre-warmed domains skip the new-domain trust penalty — setup at pre-warmed domains, registrar guidance in our registrar guide.
Who owns the domains? Decide contractually at onboarding — we recommend the agency registers and manages them, with transfer terms written into the contract. Ambiguity here creates ugly offboarding disputes. Our agency client onboarding guide covers the full checklist.
Layer 2: The Inbox Pool — Where Agencies Win or Lose Margin
Inboxes are your recurring infrastructure cost and your deliverability foundation simultaneously, so both price and quality compound across every client. The spec that matters:
Requirement | Why Agencies Specifically Need It |
|---|---|
Genuine 4+ week warm-up history | Clients expect results in week 1, not week 7 — verified Good/High Postmaster reputation on arrival makes that possible |
Full admin access (owned, not rented) | You manage infrastructure independent of any provider platform; client handover stays possible |
Cross-platform OAuth | Different clients may need different sending tools; locked inboxes force bad choices |
Dedicated US + EU IPs | Clients with European ICPs need EU IPs — placement for EU recipients can differ 20+ points |
No minimum order | Client pools scale up and down; minimums force over-purchasing at onboarding |
Price per inbox | At $4.99 (Litemail) vs $8 elsewhere, a 100-inbox agency saves $3,612/year for identical deliverability |
Sizing per client: 1 inbox per 25–35 daily sends plus 20% reserve. A standard 300-sends/day client runs on 12 inboxes across 6 domains — about $60/month. White-label options for agencies reselling infrastructure are covered in the Litemail agency plan overview.
Layers 3–4: DNS and the Sending Platform
DNS: Verified Per Domain, Before First Send, No Exceptions
SPF, DKIM, and DMARC must pass on every client domain — a single failing record caps placement regardless of everything above it. Litemail configures all three automatically on delivery; verify anyway with MXToolbox per domain, because you're accountable to the client either way. Records and common failure modes: SPF/DKIM/DMARC auto-setup and the email authentication guide for agencies.
Sending Platform: Connect via OAuth, Organise by Client
Instantly, Smartlead, and Lemlist all work well at agency scale — the platform choice matters less than three configuration rules: OAuth connections only (SMTP creates compromise flags), workspaces or tags per client so a whole client's pool can be paused in one action, and per-inbox caps of 30 cold sends/day with randomised delays. Campaign-level daily cap: active inboxes × 25.
🚩 The Compliance Layer Agencies Forget They Own
When you send on a client's behalf, their compliance exposure is partly yours. Every campaign needs a working opt-out, truthful sender identity, and a physical address — and rules differ sharply between the US, EU, and Canada. Build the checks into onboarding, not after the first complaint. Reference: our CAN-SPAM and GDPR guide and compliance audit walkthrough.
Layer 5: Monitoring and Rotation — The Part That Keeps Clients
Agencies don't lose clients to bad weeks. They lose clients to bad weeks nobody caught for a month. The routine:
Weekly, per client: Postmaster reputation per domain, bounce rate per inbox, reply rate versus that client's baseline. Fifteen minutes per client. Routine details: inbox management for marketing agencies.
Any dip: pull the inbox to reserve immediately, rest 2 weeks on warmup-only, re-evaluate. Reserve capacity is why campaigns never pause.
Quarterly: rotate 15–20% of each client's pool on schedule. At $4.99/inbox this is trivial turnover cost against the placement it protects.
Monthly, to the client: a deliverability report — placement, reputation, volume, incidents. It turns invisible infrastructure work into visible value. Template: agency deliverability report template.
Scaling past 10 clients, the constraint shifts from infrastructure to process — playbooks for that stage are in scaling a cold email agency to 50 clients.
The Per-Client Cost Model, Fully Loaded
Here's the standard unit — a 300-sends/day client — priced end to end so you can quote with real margins:
12 pre-warmed inboxes (10 active + 2 reserve) at $4.99 = $59.88/month
6 secondary domains ≈ $7/month prorated
Sending platform share ≈ $15–30/month depending on plan and client count
List verification ≈ $10–20/month at typical volumes
Total infrastructure: roughly $92–117/month per client — against typical agency retainers of $1,500–4,000/month for outbound. Infrastructure is 3–7% of revenue when built this way.
That margin is the argument for doing infrastructure properly rather than cheaply: the $1.50 "pre-warmed" inboxes that fail Postmaster checks don't save money — they spend your retainer's credibility.
Build every client on the same foundation — Litemail pre-warmed GWS and MS365 inboxes at $4.99 each, automated DNS, dedicated US and EU IPs, full admin access, no minimum order. Scale pools per client without over-buying. Get Agency Infrastructure →
The Bottom Line
Isolation is the entire architecture: dedicated domains per client, 2 inboxes per domain, never the client's primary domain.
The standard 300-sends/day client unit: 6 domains + 12 inboxes ≈ $67/month in core infrastructure — 3–7% of a typical retainer.
Buy inboxes on the agency spec: verified warm-up history, full admin ownership, cross-platform OAuth, dedicated US/EU IPs, no minimums.
At $4.99 versus $8 per inbox, a 100-inbox agency keeps $3,612/year for identical deliverability.
Weekly per-client monitoring plus 15–20% quarterly rotation is what prevents the silent month-long decay that loses accounts.
Compliance is part of the stack — opt-outs, sender identity, and regional rules get checked at onboarding, not after complaints.
Frequently Asked Questions
What cold email infrastructure does a marketing agency need per client?
For a standard 300-sends/day client: 6 dedicated secondary domains, 12 pre-warmed inboxes (10 active, 2 reserve), SPF/DKIM/DMARC verified per domain, OAuth connection to your sending platform, and weekly monitoring. Total infrastructure cost lands around $92–117/month fully loaded.
Should agency clients share cold email infrastructure?
Never — not domains, not inboxes, not IPs where avoidable. Shared infrastructure means one client's bad list damages every client on it, and you can't explain that to the accounts that did nothing wrong. Per-client isolation is the single most important architectural rule for agencies.
Should we send from the client's own domain?
No. Register lookalike secondary domains that redirect to the client's site and send from those. If outreach ever damages a domain, you replace a $12 asset instead of harming the domain the client's entire business email runs on. Write domain ownership and transfer terms into the contract at onboarding.
How much do pre-warmed inboxes cost for agencies?
Litemail pre-warmed Google Workspace and Microsoft 365 inboxes cost $4.99/inbox/month with no minimum order — automated DNS, dedicated US and EU IPs, full admin access, and 4 to 12 weeks of Postmaster-verified warm-up history. For a 100-inbox agency, that's $499/month versus $800 at $8/inbox providers, with no measurable deliverability difference.
How do agencies monitor deliverability across many clients?
A weekly 15-minute routine per client: Google Postmaster reputation per domain, bounce rate per inbox, reply rate versus that client's baseline, and a monthly blacklist scan. Any dip pulls the inbox into reserve immediately. A monthly client-facing deliverability report turns this invisible work into retained revenue.
What happens to the infrastructure when a client leaves?
With owned infrastructure, you choose: transfer the domains and inboxes to the client (full admin access makes handover clean), or retire the domains and redeploy nothing. This is a core reason to buy owned inboxes rather than platform-rented ones — rented accounts can't be handed over and vanish with the subscription.
How fast can an agency onboard a new client's cold email infrastructure?
With pre-warmed inboxes: about 48 hours to first campaign-ready state. Day 1 — order domains and inboxes (Litemail delivers within 24 hours with DNS configured). Day 2 — verify Postmaster reputation and authentication, connect via OAuth, load verified lists. The 4–6 week warm-up wait that used to define onboarding timelines is gone.
The Inbox Layer of Your Agency Stack, Solved
Litemail supplies the foundation this guide is built on: pre-warmed Google Workspace and Microsoft 365 inboxes with 4 to 12 weeks of genuine history, automated SPF/DKIM/DMARC, dedicated US and EU IPs, and full admin access you own per client. $4.99/inbox, no minimum order — scale each client's pool independently, delivered in 24 hours, Postmaster-verified in 48.
Get Pre-Warmed Inboxes from $4.99 →
Per-client isolation ready · GWS and MS365 · Works with Instantly, Smartlead, Lemlist
About Litemail — Litemail provides pre-warmed Google Workspace and Microsoft 365 inboxes for cold email outreach. From $4.99/inbox with automated DNS setup, dedicated US and EU IPs, and full admin access. Explore cold email infrastructure →
Related reading: Cold Email Infrastructure Setup for Lead Gen Agencies · Cold Email Agency Inbox Management Guide · Agency Client Onboarding Guide · Scaling a Cold Email Agency to 50 Clients · Litemail Agency Plan — White-Label Inboxes · Litemail — Pre-Warmed Inboxes, Plans and Pricing
