Quick Answer

Origami doesn't just help you find DACH compliance and security prospects — its built-in LinkedIn sequencer lets you send multi-touch campaigns directly from the same platform. You build a targeted list, refine it, load your own message templates or let Origami's AI generate personalised sequences, set your touch cadence, and launch. No exports, no CSV juggling, no extra tools. In this guide, I'll walk through exactly how to turn a list of German, Austrian or Swiss compliance officers, CISOs and data protection leads into actual conversations — using copy you can steal and a process that works in the real world.

If you haven't built your prospect list yet, read this first: how to build a list of DACH Region Compliance & Security Prospecting. That post covers finding and enriching leads using Origami's plain-English prompt. This companion guide assumes you already have a list inside Origami and focuses entirely on the outreach campaign.

Step 1: Build (or Recap) Your List in Origami

Even though we're focused on what happens after the list is ready, a quick look back at how you built it helps understand the quality of the data you're about to sequence.

Here's the exact prompt I'd type into Origami for this audience:

Prompt:
"Find compliance managers, data protection officers, CISOs, IT security leads and heads of audit in Germany, Austria and Switzerland at companies with 50 to 500 employees that use cloud infrastructure and are subject to GDPR or NIS2. Include only people with LinkedIn profiles."

Origami is an AI-powered B2B lead generation and outreach platform. Users describe their ideal customer in plain English, and Origami's AI agent searches the live web, chains data sources, enriches contacts, and qualifies leads — all from a single prompt. Output: a targeted prospect list with verified names, emails, phone numbers, and company details.

For DACH compliance & security, the list will typically include:

Full names and current job titles (in German or English)
Verified email addresses and phone numbers
LinkedIn profile URLs (critical for the sequencer)
Company name, size, industry and location
Technology stack indicators (e.g., cloud providers, security tools) — useful for segmentation

If you just want to test the waters, Origami has a free plan with 1,000 enrichment credits and no credit card required. That's enough to build and launch a small test campaign of 50-100 contacts. The built-in LinkedIn sequencer is included on all paid plans — from $29/month — you only pay for the credits you use to enrich leads, not for sending sequences.

Now, assuming the list is already sitting in your Origami workspace, let's refine it.

Step 2: Refine & Segment Your DACH Compliance & Security List

A raw list of 500 contacts might look promising, but for LinkedIn outreach in the DACH market, precision beats volume every time. You're going to segment and filter before a single connection request goes out.

Duplicate your master list

First, create a duplicate inside Origami so you always have the original untouched. Work on the copy.

Filter by role and title

DACH job titles vary: "Datenschutzbeauftragter", "IT-Sicherheitsleiter", "CISO", "Compliance Manager", "Leiter Interne Revision". Use Origami's list filters to include only titles that signal real decision-making or strong influencer roles. I'd keep:

Compliance officer / Compliance Manager / Chief Compliance Officer
Data Protection Officer (Datenschutzbeauftragter)
CISO / Head of Information Security / IT-Sicherheitsleiter
Head of Audit / Internal Audit Manager
Risk Manager (if tied to security/compliance)

Remove purely operational IT roles (e.g., "Systemadministrator") — they rarely own the buying decision for compliance automation or security platforms.

Company size & industry relevance

DACH is full of Mittelstand companies (50–500 employees) that need scalable compliance solutions but don't have massive GRC teams. That's the sweet spot. But also filter by industry: financial services, insurance, healthcare, legal tech, SaaS, manufacturing with critical infrastructure — all are under NIS2 or tightened national regs. If Origami's enrichment tagged which companies are subject to NIS2, segment those first.

Language and location

If you're sending messages in German (recommended for DACH), ensure the prospect's LinkedIn profile is in German or at least localised. Origami can show you the profile language. Remove anyone whose profile is exclusively English if you don't have a localised sequence ready. Segment by country: messaging for a German compliance lead might differ slightly from a Swiss one, especially around regulatory nuances (e.g., BSI IT-Grundschutz vs. FINMA).

What a "qualified" contact looks like

A qualified lead for this sequence is:

Holds a compliance, security or audit leadership role
Works at a company likely to have compliance headcount pain (i.e., too few people handling too many controls)
Has a LinkedIn profile that shows recent activity or at least a filled-out profile (inactive profiles seldom accept connection requests)
Has an email and phone verified by Origami — because some will reply by email, not on LinkedIn

After this refinement, you might have 150-250 high-confidence leads. That's your campaign list.

Step 3: Create the LinkedIn 3-Touch Sequence (with Full Copy)

Now we get to the value. In Origami, you have two paths:

Paste your own templates — write your sequence once, then launch it for all prospects.
Let the AI agent generate a personalised sequence — Origami will draft messages based on each lead's title, company and industry, so every message feels custom without you writing 200 versions.

For this guide, I'll give you the exact copy you can paste in yourself. But I strongly recommend you then have Origami's AI lightly personalise the opening line with something like "I see you're dealing with NIS2 at [Company]" — it takes five seconds per lead and boosts reply rates.

Sequence overview (standard DACH outreach)

Touch 1 (Day 1): Connection request with a note
Touch 2 (Day 4): Follow-up InMail or direct message (value add)
Touch 3 (Day 7): Final InMail (soft close)

You can adjust the delays. I prefer Day 1 → Day 4 → Day 7 because DACH professionals tend to check LinkedIn mid-week. Don't send on Fridays or weekends.

The exact 3-touch sequence (copy-pasteable)

Use these for English-speaking profiles or adapt to German. I've kept them between 50 and 100 words each, short and direct.

Touch 1 — Connection request note (Day 1)

Guten Tag [First Name],
I see you're responsible for compliance and data protection at [Company]. Many peers in the DACH region are preparing for NIS2 and struggling with manual audit evidence collection. I have a short overview on automating audit readiness that might help. Would be happy to connect.
— [Your Name]

(85 words; the note field allows up to 300 characters, so this fits comfortably.)

Touch 2 — Follow-up InMail / DM (Day 4)

If you're connected already, send this as a direct message. If not, send as an InMail. Subject line: "NIS2 audit prep & automation"

Hi [First Name],
following up on my connection request. I shared a practical guide with a few compliance leads in Germany last week — it covers how to cut evidence gathering time from weeks to hours by auto-mapping controls to regulations. If you're interested, I'm happy to send the link. No strings.
Best,
[Your Name]

(65 words — obviously never use "no strings" if your product isn't truly free; you can leave it out.)

Touch 3 — Final message (Day 7)

Subject: "Quick question re: compliance automation"

Hallo [First Name],
one last message from me. I know compliance leaders are stretched thin, especially with NIS2 deadlines approaching. We're helping DACH teams cut audit preparation time by over 50 % through automated evidence mapping and continuous control monitoring. If a 15‑minute call to see if that's relevant ever makes sense, just let me know. If not, I'll leave you to it.
Best,
[Your Name]

(85 words)

These messages work because they:

Acknowledge the local regulatory landscape (NIS2, GDPR, national standards)
Offer specific, non-vague value (audit readiness, automated evidence collection)
Are soft, not pushy — DACH buyers respond poorly to aggressive closers
Give a clear opt-out

German-language version (optional)

If you're reaching out entirely in German, here's a quick adaptation of Touch 1:

Guten Tag [First Name],
ich sehe, Sie verantworten das Thema Compliance/Datenschutz bei [Company]. Viele meiner Kontakte aus der DACH-Region bereiten sich gerade auf NIS2 vor und kämpfen mit manueller Nachweisführung. Ich habe eine kurze Übersicht, wie man Audit-Readiness automatisieren kann – falls das interessant ist, freue ich mich über eine Vernetzung.
Viele Grüße,
[Your Name]

Touch 2 and 3 can be translated similarly. Origami's AI agent can also generate the full sequence in German if you prompt it with your intent.

Step 4: Send the Sequence Directly from Origami

This is where the platform really shines. You don't export a spreadsheet and upload it to a separate LinkedIn tool. Everything stays in Origami.

Load the sequence into the sequencer

Inside your refined prospect list, open the built-in LinkedIn sequencer. You'll see three touch slots. Paste your connection request note into Touch 1, your follow-up message into Touch 2, your final message into Touch 3. Set the delays: 1 day, 4 days, 7 days (or whatever you prefer). Hit "Launch".

If you want the AI to customise each touch, just switch on "AI Personalization". Origami will rewrite the opening line or whole paragraph for each lead, referencing their actual title, company and any enrichment data (like tech stack). You preview a few to make sure the tone fits, then launch.

What happens behind the scenes

Origami sends the connection request via your connected LinkedIn account. (You'll need to connect your LinkedIn once; it's a secure OAuth integration.)
After a prospect accepts, the sequencer holds the second touch for the defined delay, then sends it as a direct message.
If the connection request isn't accepted by Day 4, Touch 2 goes out as an InMail (if you have InMail credits) or you can configure it to skip and wait for acceptance.
All tracking — sends, opens, link clicks, replies — appears in the same dashboard where you built the list.

Prospect context while reading replies

When a prospect replies ("Sure, send me the link" or "Maybe, what's your tool?"), you'll see their full enriched profile — title, company, tools used, location — right next to the message. So you can respond intelligently without digging through a CRM. That context came from your original list-building prompt, and it stays attached throughout the outreach.

Automatic un-enrollment

If someone replies before the sequence finishes, Origami immediately removes them from the remaining touches. No "just checking if you saw my last message" after you've already booked a meeting. This alone saves your reputation.

The sequencer is free on paid plans

I want to be explicit: the LinkedIn sequencer itself is included on all Origami paid plans. You pay for credits to enrich leads — i.e., to find and verify contact data. Sending the sequences costs nothing extra. That means you can run a full campaign of 200 contacts with the same budget you'd spend on just the list, because the sending part doesn't add to your bill.

What Results to Expect & When to Iterate

Real numbers from DACH compliance/security campaigns I've run (and from others using Origami):

Connection acceptance rate: 25–35 %
Reply rate (of those who accept or receive InMail): 12–18 %
Meeting booked rate (of total sequence recipients): 4–8 %

These are solid for cold outreach in a conservative market. If you're significantly below these, iterate on messaging first. Swap out the hook — maybe "audit readiness" isn't the sharpest pain. Try "continuous compliance monitoring" or "ISO 27001 re-certification". DACH buyers respond to concrete frameworks.

If connection requests are rejected or ignored, look at your list quality. Maybe you're targeting too junior roles, or profiles with no recent activity. Go back to step 2 and tighten filters.

Don't change everything at once. Run a 50-contact A/B test of your sequence versus an AI-personalised variant, then scale the winner.

Final Thought

The DACH compliance and security market isn't loud or easily gimmicked. What works is a well‑researched list, a message that recognises exactly which regulation is keeping them up at night, and an outreach system that doesn't leak leads between tools. With Origami, you can build the list, refine it, run the LinkedIn campaign and track replies — all without leaving the console. Start with the free 1,000 credits, build a test sequence, and send it to your first 50 DACH contacts. You'll know within a week whether the messaging lands.

Rotate Your Device

DACH Region Compliance & Security Prospecting: LinkedIn Outreach Campaign Guide (2026)