Veriphee by CréacodealVeriphee by Créacodealby Créacodeal

Find a company director's email: the methods that work

To find a director's address you need four things: who runs the company today, which domain receives its email, which address format the company uses, and whether the mailbox actually exists. All four can be worked out from the company name alone.

By Bertrand Menesguen, founder of Créacodeal · Updated : 2026-09-28

The short answer

A work email address is almost never published as such. It has to be reconstructed: the French business register gives the director's name, the website gives the domain, any public address at the company gives the format, and the mail server confirms whether the mailbox exists. Each of these steps can fail for a specific reason, and that reason is what should be displayed, rather than a plausible address delivered without proof.

The five methods, and what they actually deliver

1. The company website

The legal notice, the contact page and sometimes a team page will give an address. Most often it is a generic address, along the lines of contact@ or info@, read by an assistant or a switchboard. It does tell you one valuable thing, though: the mail domain the company really uses.

Useful for: the domain. Rarely useful for: reaching the person.

2. Professional networks and directories

They give the name and the job title, almost never the address. Watch out for stale profiles: someone who left two years ago stays visible for a long time.

3. The French business register

In France, the names of a company's registered officers are public: président, gérant, directeur général. It is the most reliable source for knowing who runs the company, but it does not cover operational directors (finance, sales, engineering, human resources), who are not registered officers. It is also behind reality when a change has not been filed yet.

4. Purchased contact databases

Some vendors sell ready-made contact files. The volume is immediate, but freshness is uneven, coverage of French small and mid-sized companies is poor, and using a purchased file calls for particular care under the GDPR, especially when it comes to informing the people concerned.

5. Reconstruction, then verification

This is the method with the best ratio of coverage to reliability: work out the company's address format, build the address of the person you are targeting, then verify it technically. The decisive advantage is that it produces a verdict dated today, not a record stored eighteen months ago.

This is what Veriphee does from the company name alone, in one to two minutes per company.

Side by side

MethodGives the personGives the addressFreshness
Company websiteSometimesGeneric addressGood
Networks and directoriesYesRarely, often maskedVariable
French business registerRegistered officers onlyNoOfficial, sometimes behind
Purchased databaseYesYes, unverifiedOften old
Reconstruction and verificationYesYes, with a verdictSame day

To choose between the tools on the market (Hunter, Dropcontact, Kaspr, Lusha, Veriphee), see the tools comparison.

The four traps that make a search fail

  1. The mail domain is not the website domain. A company can show company-group.com and receive its email on company.fr. Every address built on the wrong domain comes back as nonexistent, even though the person is right there. See the guide on a company's email address format.
  2. The domain accepts everything. A catch-all domain answers favorably to any address: there is no way to confirm which one exists. See catch-all domain.
  3. The person has left the company. The register or the public profile has not caught up. The address comes back as nonexistent, and that is the right result: it avoids a bounce.
  4. The name splits badly. Compound first names, names with a particle, double family names: a single form tested is not enough, you have to try the plausible variants.

Always verify before writing

A constructed address is only a hypothesis. Sending in order to find out is the worst method: every hard bounce damages the reputation of the sending domain and eventually pushes the messages that follow into the junk folder, including those addressed to customers. Verification without sending gives the same information without that cost. The mechanics are explained in verify an email address without sending a message.

What the law says

Under European law, a named work email address is personal data, even in a business context. B2B prospecting is still possible on the basis of legitimate interest, subject to three conditions: the message you propose must relate to the role the person holds, the person must be told where their contact details came from at the first contact, and any objection must be honored immediately. Our privacy policy describes how we apply these rules.

Frequently asked questions

Can you find a director's email from the company name alone?
Yes, in most cases. The company name leads to its SIREN number and to its registered officers in the French business register, and therefore to the director's name. The company website gives its mail domain. Once the company's address format has been identified, the director's address can be built, and all that is left is to verify it with the mail server.
Is it legal to look for a company director's work email address?
Yes in Europe, for business-to-business prospecting whose subject relates to the role the person holds. The GDPR allows it on the basis of legitimate interest, provided you tell the person where their contact details came from in the first message and honor any objection immediately.
Why do some addresses stay out of reach?
Four causes come up repeatedly: the mail domain is not the website domain, the person has left the company, the domain accepts every address without confirming which one exists (catch-all), or the company uses no regular format. A good tool should say which of these cases applies, rather than handing over an address at random.
Do you need to send a test email to find out whether an address exists?
No, and it is actually risky. A message sent to a nonexistent address produces a hard bounce that degrades the reputation of the sending domain. Verification talks to the mail server without transmitting a message: it gets the same answer without the risk.