B2B Data Audit: The 20-Point Checklist (2026)

Your CRM is full of contacts. But how many of those records are actually usable right now?

Research consistently shows that B2B databases degrade fast. Executives change roles, companies merge, phone numbers get reassigned. Industry estimates suggest between 20 and 30% of a B2B database becomes outdated every single year. Meanwhile, a study by Experian found that organizations believe roughly 30% of their data is inaccurate — leading directly to wasted prospecting effort, failed deliveries, and missed revenue.

A quarterly data audit fixes this at the source. This 20-point checklist walks you through exactly how to evaluate, clean, and enrich your B2B database — so your sales team is always working from a list they can trust.

---

Why a data audit is non-negotiable before any prospecting campaign

An SDR working through 200 contacts a day with a degraded list is burning time and budget. Every bounced email wastes an outreach credit. Every wrong number kills a call attempt. Every duplicate means one prospect gets contacted twice — a fast way to damage your brand reputation.

The problem compounds over time. Most teams treat data quality as a one-time fix rather than an ongoing process. The result: a database that looked clean 12 months ago is now full of outdated job titles, hard bounces, and contacts who left the company six months ago.

A structured data audit changes that. Here’s how to run one from start to finish.

---

Phase 1: Data inventory and mapping (points 1–4)

Before fixing anything, you need to know what you actually have. This first phase is about building a complete picture of your data landscape.

Point 1: Inventory all your data sources

What to check: List every place where contact data is stored — CRM (HubSpot, Salesforce, Pipedrive), Google Sheets, Excel files, web forms, LinkedIn exports, purchased lists.

What you should get: A complete source map with the date each source was last updated.

Warning sign: Data spread across multiple unsynchronized files is the primary driver of duplicates.

---

Point 2: Map the fields available in your CRM

What to check: List every field in your CRM or Google Sheets. Separate mandatory fields (email, first name, last name, company) from secondary ones (LinkedIn URL, website, industry, company size).

What you should get: A field inventory table with a priority level for each field relative to your ICP (Ideal Customer Profile).

Warning sign: Fields created over time that are rarely filled in signal a broken data collection process.

---

Point 3: Calculate the completion rate per field

What to check: For each priority field, calculate the percentage of records that actually contain that data. Out of 1,000 contacts, how many have an email? A phone number? A job title?

What you should get: A completion dashboard. Target: 80%+ on key fields (email, job title, company name).

Warning sign: An email completion rate below 70% makes your database effectively unusable for cold email outreach.

---

Point 4: Define your “minimum viable data” standard

What to check: Identify the 5 to 7 fields that are strictly necessary to begin prospecting based on your ICP. For a B2B SaaS company targeting mid-market, this might be: verified email, first name, last name, job title, company name, company size.

What you should get: A clear definition of what a “prospect-ready record” looks like in your context.

Warning sign: Without this standard, sales reps waste time chasing leads that can’t actually be contacted.

---

Phase 2: Data quality control (points 5–10)

Inventory done. Now it’s time to check the actual quality of your data, field by field. This is where the most costly problems surface.

Point 5: Verify the validity of your email addresses

What to check: Distinguish between syntactically valid emails (correct format) and actually deliverable ones (valid MX record, not a catch-all, active mailbox). An address like “contact@company.com” may look fine but still hard bounce.

What you should get: An email validity rate above 85% in your database.

How to do it: Use an email verification tool for every address. Derrick includes real-time email verification directly inside Google Sheets — no manual CSV export needed.

Warning sign: A hard bounce rate above 5% in your campaigns is a direct signal that your list has degraded.

---

Point 6: Check data freshness

What to check: Date-stamp each record. When was it created? When was it last enriched or updated? B2B data has a limited shelf life — the average executive changes roles every 2 to 3 years.

What you should get: A segmentation of your database by age — under 6 months, 6–12 months, 12–24 months, over 24 months.

Warning sign: More than 30% of records older than 18 months without any update = high-risk zone for stale data.

---

Point 7: Check job title consistency

What to check: Job titles are rarely standardized. “VP Sales,” “Head of Sales,” “Sales Director,” “Dir. of Revenue” — all can refer to the same role. This inconsistency blocks proper segmentation and lead scoring.

What you should get: Normalized titles grouped into consistent families (C-Level, VP/Director, Manager, Individual Contributor) so you can filter reliably.

How to do it: Derrick’s Data Normalization feature cleans and standardizes these fields directly in your Google Sheets.

Warning sign: Filters by job title returning erratic results reveal insufficient normalization.

---

Point 8: Review company firmographic data

What to check: Company size, industry, revenue range, location — these firmographic data points drive scoring and prioritization. Check they’re populated and consistent with your ICP criteria.

What you should get: A firmographic completion rate above 75% for your priority accounts.

Warning sign: Fields like “industry” filled predominantly with “N/A,” “Other,” or blanks make meaningful segmentation impossible.

---

Point 9: Validate LinkedIn URLs and website domains

What to check: LinkedIn profile URLs and company domains are the pivot points for enrichment. Verify their format (full URL, not just a name) and that they’re still active.

What you should get: Complete LinkedIn URLs in the format linkedin.com/in/first-last for each priority record.

Warning sign: Truncated URLs or incorrect domains will block any future enrichment attempt entirely.

---

Point 10: Audit your phone numbers

What to check: Are your numbers stored in international format (e.g., +1 415 123 4567)? Can you distinguish mobile from landline? A corporate switchboard number won’t get you to the right decision-maker.

What you should get: Normalized phone numbers with mobile/landline distinction where possible.

Warning sign: Numbers stored in local format only (10 digits, no country code) create immediate problems for international sales teams.

---

Phase 3: Data cleaning (points 11–14)

The audit reveals the problems. Cleaning fixes them. These four points are the operational core of any data audit.

Point 11: Find and remove duplicates

What to check: Duplicates accumulate naturally through successive imports from different sources — Sales Navigator exports, web forms, purchased lists, CRM migrations. The same contact may exist two or three times with slight variations in name, email, or company.

What you should get: Zero duplicates on key identifier fields (primary email, LinkedIn URL).

How to do it: Derrick’s Remove Duplicates feature automatically identifies and merges duplicate records inside Google Sheets.

Warning sign: Reaching the same prospect twice within a few days is one of the most damaging signals you can send in B2B outreach.

---

Point 12: Normalize data formats

What to check: Names in all caps or all lowercase, trailing spaces, special characters in email fields, phone numbers with or without spacing — these seemingly minor inconsistencies cause import errors in your CRM and break email personalization.

What you should get: Consistent data: first names capitalized, emails in lowercase, phone numbers in international format.

How to do it: Derrick’s Data Normalization handles first name/last name extraction and standardization from a full name field, among other fixes.

Warning sign: A cold email that opens with “Hi SARAH,” instantly reveals a non-normalized database — and tanks your reply rate.

---

Point 13: Archive or suppress inactive contacts

What to check: Identify contacts that have generated zero interactions over the past 12 to 18 months — no email opens, no replies, no CRM activity. These “dormant” contacts pollute your segmentation and skew your campaign metrics.

What you should get: A clean list of active contacts, and a separate archived list (do not delete outright — see GDPR/CCPA requirements below).

Warning sign: A low overall open rate across campaigns can partially be explained by too high a proportion of inactive contacts in your lists.

---

Point 14: Purge hard bounces and opt-outs

What to check: Any email that has generated a hard bounce must be immediately removed from active lists. Same goes for any contact who has unsubscribed or explicitly opted out of commercial contact.

What you should get: An up-to-date suppression list, synchronized with your sending tool (Instantly, HubSpot, Lemlist, etc.).

Warning sign: Continuing to send to hard bounce addresses degrades your sending domain’s reputation and increases the risk of being blacklisted by major email providers.

---

Phase 4: GDPR and data compliance (points 15–17)

In B2B, GDPR applies as soon as you process personally identifiable data about individual contacts. If you operate in the US, CCPA imposes similar requirements for California residents. These three points are non-negotiable.

Point 15: Verify the legal basis for data collection

What to check: On what legal basis did you collect each contact? In B2B, “legitimate interest” is the most commonly used basis for direct prospecting outreach. But it requires documenting why your interest outweighs the contact’s rights.

What you should get: Clear documentation of the legal basis used for each data source (web form = consent; LinkedIn import = documented legitimate interest, etc.).

Warning sign: Data collected without an identifiable legal basis exposes your company to regulatory complaints and potential fines.

---

Point 16: Audit opt-out and deletion request processing

What to check: Any unsubscribe request or exercise of the right to erasure must be processed within 30 days under GDPR. Verify that your process for handling these requests is actually working — and that you have a log of requests received and actioned.

What you should get: A timestamped register of all deletion and opt-out requests received and processed.

Warning sign: The absence of a deletion request register is one of the first things regulators check during a compliance audit.

---

Point 17: Review data retention periods

What to check: GDPR requires that personal data be kept only for as long as necessary for its stated purpose. For B2B prospecting under legitimate interest, a 3-year period from the last point of contact is generally considered reasonable.

What you should get: An automated purge process or re-consent workflow triggered when contacts approach the retention limit.

Warning sign: Storing data indefinitely without a defined retention policy is a clear compliance violation under both GDPR and CCPA.

---

Phase 5: Data enrichment and activation (points 18–20)

The audit and cleaning phases have fixed what was broken. Enrichment fills in the gaps identified earlier — and turns a clean database into a genuinely actionable one.

Related article →

How to enrich your B2B database

Methods, tools, and best practices to fill in missing contact and company data.

Point 18: Enrich missing contact data

What to check: For priority contacts (those that match your ICP but have incomplete records), identify the missing data to recover first: verified email, phone number, LinkedIn URL.

What you should get: A completion rate above 80% on key fields across your ICP prospects.

How to do it: Derrick lets you run a lead enrichment workflow directly from Google Sheets — starting from a name and domain, it finds the verified professional email, phone number, LinkedIn data, and 50+ attributes per contact, no manual work required.

Warning sign: Prospecting a list with less than 60% valid emails generates a negative ROI on cold email campaigns before you even start.

---

Point 19: Enrich missing company data

What to check: Company size, industry, revenue, tech stack, G2 presence — firmographic data determines the relevance of your scoring and segmentation. Check completeness on your target accounts.

What you should get: Complete company records across the 5 to 7 firmographic fields that matter most for your ICP.

How to do it: Derrick can automatically pull company data from LinkedIn (LinkedIn Company Scraper), web traffic insights via SimilarWeb, and product usage signals via G2 — all into your Google Sheets with the Enrich Companies feature.

Warning sign: Lead scoring based on incomplete firmographic data produces false positives — “good leads” that don’t actually match your ICP once you dig into them.

---

Point 20: Build a continuous data maintenance routine

What to check: An audit is a fix. A maintenance routine is the prevention. Define a check frequency for each data type: weekly for hard bounces and opt-outs, monthly for duplicates, quarterly for overall database freshness.

What you should get: A documented data maintenance calendar with a named owner for each task.

How to do it: Automate as much as possible using Zapier, Make, or n8n connected to Derrick — enrich new contacts as they enter your pipeline, and trigger periodic quality checks on existing records.

Warning sign: Treating data quality as a one-time project rather than an ongoing process is the single biggest reason databases degrade again within 3 to 6 months of a cleanup.

---

Summary table: the 20-point data audit checklist

#	Checkpoint	Phase	Priority	Frequency
1	Inventory all data sources	Inventory	High	Semi-annual
2	Map all CRM fields	Inventory	High	Semi-annual
3	Completion rate per field	Inventory	High	Quarterly
4	Define minimum viable data	Inventory	High	Annual
5	Email validity	Quality	Critical	Monthly
6	Data freshness	Quality	High	Quarterly
7	Job title consistency	Quality	Medium	Quarterly
8	Firmographic data	Quality	High	Quarterly
9	LinkedIn URLs and domains	Quality	Medium	Quarterly
10	Phone numbers	Quality	High	Quarterly
11	Duplicate detection	Cleaning	Critical	Monthly
12	Format normalization	Cleaning	High	Monthly
13	Inactive contact archiving	Cleaning	Medium	Quarterly
14	Hard bounce and opt-out purge	Cleaning	Critical	Weekly
15	Legal basis for collection	Compliance	Critical	Semi-annual
16	Opt-out and deletion requests	Compliance	Critical	Ongoing
17	Data retention periods	Compliance	High	Annual
18	Contact data enrichment	Enrichment	High	Monthly
19	Company data enrichment	Enrichment	High	Quarterly
20	Continuous maintenance routine	Maintenance	Critical	Ongoing

---

Common data audit mistakes (and how to avoid them)

Mistake 1: Auditing without defining quality criteria first

Impact: You end up cleaning data without a clear target — and you can’t measure whether things have actually improved.

Fix: Always start with Point 4. Define your minimum viable data standard before touching anything else. That’s your quality benchmark.

---

Mistake 2: Deleting records instead of archiving them

Impact: You lose interaction history and potentially create a compliance issue — you can’t prove you processed a deletion request if you’ve also deleted the record of the request.

Fix: Archive in a dedicated tab or table. Hard-delete only after your defined retention period has passed.

---

Mistake 3: Enriching before cleaning

Impact: You spend enrichment credits on duplicates and out-of-ICP contacts that should have been removed first.

Fix: Follow the checklist order — cleaning (points 11–14) always comes before enrichment (points 18–19).

---

Mistake 4: Treating the audit as a one-time project

Impact: The database degrades again within 3 to 6 months if no ongoing process is in place.

Fix: Point 20 is the most important one long-term. Set up automated workflows to maintain quality continuously — not just when things break.

---

Key takeaways

• A B2B data audit breaks down into 5 phases: inventory, quality control, cleaning, compliance, and enrichment.
• The critical points to address first: email validity, duplicate detection, hard bounces, and opt-out suppression.
• Run a full audit quarterly — with weekly checks on the most time-sensitive items (hard bounces, opt-outs).
• Data cleansing and data enrichment are complementary steps — always clean first, then enrich.
• Without a continuous maintenance routine (Point 20), a B2B database loses 20 to 30% of its value every year.

---

Conclusion: where to start your data audit today

A full audit on a 1,000-contact database takes 2 to 4 hours once your process is in place. The ROI is immediate: lower bounce rates, better campaign metrics, and a sales team that prospects with confidence instead of guesswork.

The fastest way to start: open your Google Sheets or export your CRM, and run Points 5, 11, and 14 first. Those three checks have the most direct impact on your active campaigns.

To go further, Derrick automates most of this work directly inside Google Sheets — email verification, duplicate removal, and data enrichment for missing fields — with no manual export or complex setup required.

---

FAQ

What is a B2B data audit? A B2B data audit is a structured review of your contact and prospect database to assess quality, completeness, and compliance. It identifies stale records, duplicates, invalid emails, and missing fields before they damage your prospecting campaigns.

How often should you run a data audit? A full audit is recommended quarterly. Some critical checks — like hard bounce purges and opt-out management — should run continuously, ideally automated. A light monthly check on email validity and duplicates is also good practice.

How do you measure B2B data quality? The six key dimensions are: accuracy (data reflects reality), completeness (all required fields are filled), consistency (uniform formats across systems), timeliness (data is up to date), uniqueness (no duplicates), and compliance (GDPR/CCPA requirements met). An 80%+ completion rate on key fields is a solid target.

What’s the difference between data cleansing and data enrichment? Data cleansing means fixing and cleaning existing data — removing duplicates, normalizing formats, purging invalid records. Data enrichment means adding new missing data — emails, phone numbers, company information. They’re complementary: always cleanse first, then enrich.

How long does a data audit take on 1,000 contacts? With a structured process and the right tools, a full audit on 1,000 contacts takes between 2 and 4 hours. The most time-consuming steps are format normalization and email verification. Tools like Derrick automate these tasks directly in Google Sheets and cut that time significantly.