Company-Level vs Person-Level Visitor Identification
Company-level visitor identification resolves anonymous website traffic to the visiting organization, typically via reverse-IP lookup. Person-level identification attempts to name the individual visitor, typically via identity graphs and cookie matching. They answer different questions — "which account is interested?" versus "who exactly should I contact?" — with very different compliance surfaces.
Why it matters
Identification is only valuable if it triggers a fast next step: firms that contacted a web lead within an hour were nearly 7x as likely to qualify it as firms an hour slower (Harvard Business Review, 2011). Knowing who's on your site right now — while they're still there — is the input that makes a sub-5-minute response possible.
Company-level vs Person-level
| Company-level | Person-level | |
|---|---|---|
| What it reveals | The visiting organization | The individual visitor |
| How it works | Reverse-IP and firmographic matching | Identity graphs, cookie and email matching |
| Best for | ABM signals, account prioritization | Direct follow-up and routing |
| Compliance surface | Lower — organizational data | Higher — personal data; consent rules apply, especially in the EU |
| Honest expectation | Resolves a minority of traffic; remote work lowers match rates | Resolves a small fraction; vendor claims often exceed field results |
A real example
45% of leads arrive outside business hours (Verse.ai, vendor-published) — identification plus an always-on agent is what turns an after-hours visit into a booked meeting instead of a cold lead in the morning queue, on the wrong side of a decay curve where conversion is 8x higher inside 5 minutes (XANT, 2021).
Frequently asked questions
Is person-level visitor identification legal?
It depends on geography and implementation. Person-level identification processes personal data, so EU/UK visitors generally require a lawful basis and consent-aware handling, and several US states add their own rules. Company-level identification carries a much lower compliance surface. Ask any vendor exactly how they establish lawful basis per region — a vendor who can't answer precisely is the red flag.
What should I do with an identified visitor?
Act while intent is live: open a qualified conversation on-site, or trigger a same-hour follow-up. Identification that ends in a Slack alert nobody acts on is the most common failure mode — see signal activation.
Related
See the difference on your own traffic
Expertise identifies your website visitors, runs qualified conversations, and books the meeting — while intent is still live.