Your target list has 300 companies on it. This quarter, maybe 15 of them are buying.
That's not pessimism. It's the 95/5 rule from the Ehrenberg-Bass Institute's research for the LinkedIn B2B Institute: at any given moment, only about 5% of B2B buyers are in the market for what you sell. The other 95% are out-market. Not hostile. Just not buying right now. [1]
Most ABM programmes still treat all 300 the same. Same ads, same nurture, same SDR cadence. Then the team wonders why engagement looks great and pipeline doesn't move.
I ran an always-on ABM engine across EMEA for years. The biggest lift didn't come from better creative or a bigger list. It came from changing when we acted on a company. After the relaunch, account-to-opportunity conversion went up by 100%.
This is the framework behind that, rebuilt for small teams selling across Europe, the Middle East and Africa. With a deep dive on DACH at the end, because it plays by its own rules.
Static lists vs. signal-led lists
A static list answers one question: could this company buy from us? A signal-led list adds the question that matters for sales time: is there a reason they'd buy now?
| Static list | Signal-led list | |
|---|---|---|
| How companies get on it | ICP match, set once a quarter | ICP match plus a reason to act now |
| Who sales works | Everyone, in rotation | Companies with fresh signals this week |
| When campaigns start | Always on for the whole list | When signals cross a threshold |
| How budget is split | Evenly, or by tier | By signal strength |
| What success means | Engagement on the list | Meetings and opportunities from signal companies |
| Refresh | Quarterly, if someone remembers | Weekly, automatically |
The ICP doesn't go away. It becomes the gate, not the plan.
The four layers I score every company on
1. Fit: could they buy?
Industry, size, region, tech stack. The firmographic and technographic basics.
Fit is necessary and never enough. A perfect-fit company with zero signals is a brand target, not a sales target this week.
2. Trigger: why now?
Something changed inside the company. A new leader, a funding round, a hiring wave, a new office, a regulation that now applies to them, a competitor removed from their stack.
Triggers explain timing. They're also the best opener you'll ever get, because they give you a reason to reach out that isn't about you.
3. Intent: are they researching?
Third-party topic research, review-site category activity, comparison behaviour.
Intent tells you someone is looking. It rarely tells you why. On its own it's the noisiest layer.
4. Engagement: are they looking at you?
Company-level website visits, content downloads, webinar attendance, replies, event conversations. Your own first-party data.
It's the most reliable layer and the one you fully control. It's also the one most small teams never set up properly.
How the layers combine
One layer alone is noise. Two is worth watching. Three is a conversation worth starting this week.
| Combination | What it usually means | What to do |
|---|---|---|
| Fit only | Could buy someday | Brand and awareness. No SDR time |
| Fit + Trigger | Something changed, no visible research yet | Early outreach with a point of view on the change |
| Fit + Intent | Researching, reason unclear | Watch for a trigger. Serve content, not calls |
| Fit + Engagement | Knows you, maybe not buying | Nurture. Ask one light question |
| Fit + Trigger + Intent or Engagement | Likely in an active buying cycle | Priority. Brief the rep this week |
| Trigger + Intent, weak fit | Real buyer, maybe outside your ICP | Qualify fast. Sometimes the ICP is wrong |
A caveat the signal crowd skips
The 95/5 rule is often quoted to argue "only target the 5%". That's not what the research says.
Ehrenberg-Bass's own conclusion is the opposite: advertising mainly works by building memory, so when the 95% move in-market later, they remember you. [1] If you only ever talk to the 5%, you'll be the vendor nobody has heard of when they're ready.
So use both. Brand reaches the 95%. Signals decide where sales time goes this week. Context determines which one you need more.
Signals decay. Speed beats precision.
A trigger is worth most in its first weeks. Job ads get filled. New leaders set their agenda. Budgets go to whoever showed up first.
My working rule: triggers older than 30 days get downgraded. Older than 90 days, they're dropped unless something new confirms them. Your loop has to run faster than the decay, which is why it has to be weekly and mostly automated.
What changes across EMEA
Most signal playbooks are written for the US. EMEA isn't one market. It's 100+ countries, dozens of languages and at least three different data realities. The method holds everywhere. The inputs don't.
1. Data coverage depends on the market
Global intent and contact databases are strongest where B2B content and buyers are English-speaking. That makes coverage uneven across EMEA. This is my working map, from running programmes across the region:
| Market group | Third-party data | What carries the weight |
|---|---|---|
| UK, Ireland, Nordics, Netherlands | Strong. English-heavy B2B research, high LinkedIn usage | The full four-layer model works |
| DACH, France, Benelux (French-speaking), Southern Europe | Patchy. Local-language research and mid-sized family firms are underrepresented | Public triggers and your own engagement data. Third-party intent only as support |
| Central and Eastern Europe | Thin outside the capitals and the largest companies | Registries, local job boards, regulation |
| Gulf (UAE, Saudi Arabia) | Thin and fragmented. Many decisions run through relationships and events | Triggers from government programmes, licences, hiring, events |
| Africa (e.g. South Africa, Nigeria, Kenya) | Thin, concentrated in a few hubs | Funding news, hiring, partnerships, events |
The practical consequence: don't run one scoring model across EMEA. Weight the layers per market. In London, intent can carry a third of the score. In Munich or Riyadh, it shouldn't.
2. Privacy rules shape the architecture
GDPR is the shared baseline in the EU and EEA, and the UK runs its own version. But the rules for contacting people differ a lot by country, and the strictest markets set the limits for your whole system.
The safe default works everywhere: score and prioritise at company level, add named people only at the moment you reach out, and keep one suppression list across all tools. I've broken this down market by market in GDPR and buying signals.
3. The best triggers are public, and local
Every EMEA market has official sources that publish leadership changes, new entities and filings. Most global tools don't watch them.
| Market | Public registry and announcements | Typical triggers |
|---|---|---|
| UK | Companies House | Director appointments, new entities, filings, charges |
| France | BODACC and the national business register | New managing directors, capital changes, new establishments |
| Netherlands | KvK (Chamber of Commerce) | New entities, management changes |
| Nordics | Bolagsverket (SE), Brønnøysund registers (NO), CVR (DK) | Board and management changes, new subsidiaries |
| Spain and Italy | BORME, Registro Imprese | Appointments, capital increases, mergers |
| Poland | KRS | Management board changes, new entities |
| DACH | Handelsregister / Unternehmensregister, Firmenbuch (AT), Zefix (CH) | New managing directors, Prokura, capital increases |
| Gulf | Emirate and free-zone registries, Saudi commercial register | New licences, branches, regional HQs |
Add the local job boards next to LinkedIn. A first hire in a function, a hiring wave or a tool named in a job ad is often the clearest signal you'll get. StepStone in DACH, Welcome to the Jungle in France, Pracuj.pl in Poland, InfoJobs in Spain, Bayt and GulfTalent in the Gulf.
4. Regulation creates buyers on a deadline, but not on the same day
EU regulation is a trigger machine. Everyone in scope has to act by a date. The catch in EMEA: the same rule lands at different times in different countries. That's useful. It means you can run the same play country by country, as each deadline comes up.
NIS2 (cybersecurity). The directive has to be written into national law, and countries did that years apart. Some examples from a public tracker: [2]
| Country | NIS2 national law in force |
|---|---|
| Italy | October 2024 |
| Germany | 6 December 2025 [3] |
| Poland | 3 April 2026, registration due by October 2026 |
| Netherlands | 15 August 2026 |
| Austria | 1 October 2026, registration within three months |
| Ireland | Not yet transposed at the time of writing |
E-invoicing (finance and ERP). B2B e-invoicing mandates are rolling out country by country: [4]
| Country | Mandate |
|---|---|
| Belgium | Structured B2B e-invoices since 1 January 2026 |
| Poland | KSeF platform from February 2026 for the largest taxpayers, April 2026 for most others |
| France | All companies must receive from September 2026. Large and mid-sized companies issue from September 2026, SMEs from September 2027 |
| Germany | Receive since 2025. Issue from 2027 (above €800,000 turnover) and 2028 (everyone) [5] |
DORA (financial services). Since 17 January 2025, EU financial entities must meet the Digital Operational Resilience Act's ICT risk requirements. [6]
The regulation itself isn't the signal. The signal is evidence that a specific company is in scope and hasn't solved it yet: a job ad for an information security officer, a new CISO, a tender, a line in the annual report.
Deep dive: what changes in DACH
Germany, Austria and Switzerland are where I live and work. They're also the hardest EMEA market for signal-based selling. Three reasons.
1. The Mittelstand is invisible to most tools
A family-owned manufacturer with 500 people and decades of history can be almost invisible in global databases. Thin LinkedIn presence, German-only website, no press releases.
What works instead: the Handelsregister for leadership changes, annual accounts in the Unternehmensregister for budget context, StepStone and company career pages for hiring, and German trade press for new sites and acquisitions. None of that needs an expensive platform. It needs someone, or something, watching it every week.
2. Contact rules are the strictest in EMEA
In Germany, cold advertising email needs prior consent, B2B included. Cold B2B calls need at least presumed consent, which means a concrete reason from the company's own area of interest, not just a fit with your offer. Austria is similarly strict for email.
That changes the whole outbound design. Signals become your justification for contact, not just your timing. "You posted three security roles and fall under NIS2" is a concrete reason. "You're in our ICP" isn't. Channel order shifts too. In Germany, a call with a specific, documented reason and personal LinkedIn messages are the common route, email once there's a relationship or consent. In Austria, calls need consent as well. Check the details in the GDPR article linked above.
3. Trust is built before the first call
DACH buyers check you before they talk to you. They read, ask peers, and look for proof that you understand their market. Data sovereignty, GDPR and "where is our data processed" come up early, often in the first meeting.
The upside: once you're trusted, deals are stable and loyal. The practical move: publish useful, local content and show your GDPR homework before anyone asks.
The weekly loop
- Monitor. Sources run automatically. This is where agents do the heavy lifting.
- Score. All four layers, weighted per market, with decay applied.
- Verify. A human checks the top 10 to 15. Is the trigger real? Still current? Is the company really a fit? This step kills most false positives.
- Brief. For each company: why this company, why now, who to contact (role first), what to say, which channel.
- Act. Sales works the brief within days, not weeks.
- Learn. What got replies, meetings, opportunities? Re-weight the signals once a month.
Here's what one entry in a weekly brief looks like. The example is fictional:
Company: Logistics company, Netherlands, around 400 employees
Why now: The Dutch NIS2 law took effect in August 2026. Two weeks ago they posted their first information security officer role. As a transport company of that size, they're likely in scope.
Signals: Fit (sector, size) + Trigger (first security hire, NIS2 in force) + Engagement (two visits to your NIS2 checklist page this month)
Who: Head of IT now. The new security officer once hired.
Opener: "Saw you're building out the security function. Most companies your size we talk to get stuck on registration and the risk documentation. Here's the checklist we use."
Channel: LinkedIn first, then phone. Check the local rules for email before using it.
Act by: Within 2 weeks. Once the role is filled, the new hire sets the agenda.
Five mistakes I keep seeing
- Buying an intent tool before defining which signals matter. Start with the triggers that predict a purchase for your offer. Then find sources.
- One scoring model for all of EMEA. Weight the layers per market. Data coverage in London and Warsaw isn't the same.
- Skipping verification. Automation finds signals. A human decides whether they're real.
- Dropping signal companies into the generic sequence. If the first message doesn't reference the reason, you've wasted the signal.
- Measuring opens and clicks. Measure meetings and opportunities from signal companies against the rest of the list.
Where to start if you're a small team
- Pick 3 to 5 triggers that matter for your offer. Write one sentence on why each predicts a purchase.
- List the public sources for those triggers in your top 2 or 3 markets.
- Set up your own website to show company-level engagement.
- Build the weekly brief by hand for four weeks. Then automate the parts you repeated.
- Track signal companies as their own cohort, so you can prove the difference.
That's the whole system. The tooling is the easy part. Knowing which signals matter in which market is the hard part.
I find who's buying in your market for small B2B teams across EMEA: the signals, the scoring and a weekly brief, checked by me before it reaches you. If you want to see what it finds for you, ask for a free sample.
References
- LinkedIn B2B Institute and Ehrenberg-Bass Institute, John Dawes: The 95-5 Rule. business.linkedin.com
- ISMS Copilot, NIS 2 transposition tracker for all 27 EU member states (status verified September 2026). ismscopilot.com
- Bundesgesetzblatt 2025 I Nr. 301, Gesetz zur Umsetzung der NIS-2-Richtlinie. recht.bund.de
- Lasernet, The Complete Guide to 2026 and 2027 E-Invoicing Mandates (May 2026). lasernetgroup.com
- IHK Frankfurt am Main, E-Rechnungspflicht ab 2025. frankfurt-main.ihk.de
- Regulation (EU) 2022/2554 on digital operational resilience for the financial sector (DORA). eur-lex.europa.eu