B2B sales & lead generation

How to Build a Qualified B2B Prospect List

By Propler.ai. Editorial responsibility: Bundl AS.Published 27 October 2026Facts checked 27 October 20269 min read

Short answer

A qualified prospect list is a short list of companies that match your ideal customer profile and show a reason to buy soon, each with a note on why it is there. Build it by turning your ICP into firmographic filters, pulling companies from a reliable register, adding verifiable signals, scoring for fit and timing, and keeping the list clean. In Norway and the EU, treat contact details of named people as personal data and plan your outreach accordingly.

What "qualified" actually means

A prospect list is qualified when every company on it has passed a test you can explain. Not "they are in our industry", but "they are an accounting firm in Rogaland with 10–40 employees, they are hiring, and their latest accounts show growth". If you cannot say why a company is on the list, it probably should not be.

Two kinds of evidence make a company worth contacting:

  • Fit: the company looks like the customers you serve well. Industry, size, location, legal form, business model.
  • Intent or timing: something suggests the company may need what you sell now. Hiring, a new contract, a public tender, growth, a change of leadership.

Fit tells you who could buy. Timing tells you who might buy soon. A good list needs both, and it records which evidence put each company there.

Step 1: Write an ICP you can filter on

An ideal customer profile (ICP) describes the type of organisation that gets the most value from your product and gives you the most value back. Start from your best existing customers, or from the customers you wish you had, and look for what they share.

Write it in terms a database understands:

  • Industry: use the national industry code system rather than your own labels. In Norway, companies are classified under Statistics Norway's standard for industrial classification, which is based on the EU's NACE. Since 1 September 2025 the Central Coordinating Register for Legal Entities (Enhetsregisteret) uses the revised standard, SN2025.
  • Geography: county and municipality, or the regions you can serve.
  • Size: number of employees, and turnover if you can get it from published accounts. Choose the band from what you sell, not by habit; see SME or enterprise? How to choose the right customer size. Many small Norwegian companies show no employee count, so turnover is often the safer filter.
  • Legal form: a limited company (AS), a sole proprietorship (ENK), a foreign branch (NUF) and a municipality are very different buyers.
  • Status and age: active only; newly registered companies if you sell start-up services, established ones if you need a track record.

Add exclusions too. A hypothetical Oslo-based payroll consultancy might exclude companies with no employees, anything under liquidation, and public bodies it cannot serve. Exclusions are as valuable as inclusions because they stop wasted research.

Step 2: Pick data sources you can trust

The base of your list should be a source that is complete for your market and states where its data comes from. Typical options:

  • Official business registers. In Norway, the Brønnøysund Register Centre publishes Enhetsregisteret as open data under the Norwegian Licence for Open Government Data (NLOD), with lookups, an open API and full downloads. It covers organisation number, name, legal form, address, industry code, registered employee count, registration date and roles. See our guide to Norwegian company data for what each register contains.
  • Published annual accounts. Limited companies file accounts with the Register of Company Accounts, and Brønnøysund offers key figures through open services. The Enhetsregisteret record also shows the most recent accounts year submitted.
  • Public procurement. Doffin is Norway's national database for public procurement notices; notices above the EEA thresholds are forwarded to TED, the EU's tenders database.
  • Job ads. NAV publishes vacancies on arbeidsplassen.no and offers a public feed of them. Ads posted only on Finn.no are not in NAV's feed.
  • The company's own website. Usually the best source for what they actually do today.
  • Bought lists. Sometimes useful as a starting point, but you inherit someone else's definitions, freshness and legal basis. Check them against the register before using them.

Prefer sources where you can see the date of the data. A register refreshed daily beats a spreadsheet of unknown age.

Step 3: Apply firmographic filters

Turn the ICP into filters and run them against your base source. You will likely get a few hundred to a few thousand companies. That is your addressable universe, not your prospect list yet.

Check the output by hand before going further. Open twenty random results. Are they really the kind of company you meant? Industry codes are self-reported at registration and can be broad or out of date, and employee counts can be missing. If a third of your sample is wrong, adjust the filters rather than cleaning by hand later.

In Propler, the free company search lets you filter the Norwegian register by industry group, county, municipality, legal form, status, number of employees and registration date, without logging in.

Building the list from outside Norway works the same way; the extra steps are verifying unfamiliar companies and handling cross-border rules. See finding business partners in Norway from abroad and how to verify a Norwegian company.

Step 4: Qualify with a framework, honestly

Qualification frameworks give you a shared language for deciding whether a company deserves effort. Two are worth knowing.

BANT

BANT stands for Budget, Authority, Need, Timing: can they pay, are you talking to someone who can decide, do they have the problem you solve, and is it a priority now? It is simple and easy to teach.

Be honest about its limits. BANT is designed for conversations. You rarely know a company's budget or decision-maker from public data, so you cannot fully BANT-qualify a list before you talk to anyone. What you can do is find indirect evidence: published accounts hint at budget, registered roles show who leads the company, and signals hint at need and timing. Mark these as assumptions, not facts.

Fit versus intent

A more useful framework at list stage is to score fit and intent separately:

  • Fit is mostly knowable from data: industry, size, location, legal form, financial health.
  • Intent is inferred from events: a job ad, a tender, a new accounts filing that shows growth, a new subsidiary.

Keeping them separate stops a strong signal from hiding a poor fit. A company that is hiring heavily is interesting only if it is also the kind of company you can serve.

Step 5: Add signals that can be verified

The best signals are public, dated and linked to a source you can show. Examples relevant in Norway:

  • Open job ads. What role is being hired tells you about growth and new needs. A first HR hire may need payroll and HR tooling; many new technicians may need vehicles, equipment or training.
  • Public tenders. A company that wins public contracts may need subcontractors, staff or equipment. A public buyer announcing a tender is a direct opportunity.
  • New accounts. Growth in turnover or employees, or a turnaround, is a natural conversation starter.
  • Register changes. New CEO, new board chair, a move to a new municipality or a new branch.

Write the signal and its date next to the company. "Posted ad for two project managers, Stavanger, 14 October" is something you can use in your first message. "High intent" is not.

Step 6: Score and rank

Keep scoring simple enough that the team trusts it. One workable approach:

  1. Give each company a fit score of high, medium or low against the ICP.
  2. Give each company a timing score of high, medium or low based on how strong and recent its signals are.
  3. Work high/high first, then high fit with medium timing.
  4. Put high fit with no signals on a watch list and check again later.
  5. Drop low fit, even with strong signals.

Review the scores against outcomes every few weeks. If high-scoring companies do not convert better than the rest, your criteria need work.

Step 7: Keep the list clean

Lists decay. Companies are dissolved, merge, move and change their industry code; people change jobs. Good hygiene habits:

  • Use the organisation number as the key, not the company name, to avoid duplicates and mix-ups between similar names.
  • Re-check status against the register before each campaign, and remove dissolved companies and those in bankruptcy or liquidation.
  • Record the source and date of every data point, including signals.
  • Separate facts from assumptions. Registered employee count is a fact from a source; "probably has budget" is your estimate.
  • Honour opt-outs immediately, and keep a suppression record so they are not re-added.
  • Delete what you no longer need. Data you do not hold cannot go stale or be misused.

GDPR and outreach rules in Norway and the EU

Company data such as name, organisation number and industry code is not personal data on its own. But much of what makes a list usable is:

  • Named contacts at a company, including their work e-mail and phone, are personal data under the GDPR.
  • Sole proprietorships are not separate legal persons. The Norwegian Data Protection Authority (Datatilsynet) treats them as natural persons under data protection rules, and in Norway they are often named after their owner.

If you process personal data for B2B marketing, you need a legal basis. Recital 47 of the GDPR says processing for direct marketing may be regarded as a legitimate interest, but that requires a real balancing test and data minimisation. The right to object to direct marketing under Article 21(2) is unconditional: once someone objects, you must stop processing their data for that purpose. Datatilsynet stresses that people must be told about this right clearly, at the latest in your first communication. When you collect data from sources other than the person, Article 14 also requires you to tell them where it came from.

Norway's Marketing Control Act adds a separate rule for e-mail and SMS. Section 15 generally prohibits sending electronic marketing to natural persons without prior consent, and the Consumer Authority's guidance says this covers work addresses tied to a named employee, while general addresses such as post@company.no are treated differently. The Consumer Authority also notes that buying an address list does not transfer responsibility: the buyer must check that consents are valid.

How Propler helps

Propler is built on a nightly-refreshed copy of Enhetsregisteret, about 1.18 million registered entities, so it fits the workflow above for the Norwegian market:

  • Filters in the free company search cover the firmographics above, plus tick-boxes for open job ads, open tenders or assignments, tenders in the last year, has contact info and has website. Tender data currently comes from TED where the buyer is Norwegian.
  • Company pages collect register facts, roles, the latest available accounts figures, open job ads and announced tenders, which speeds up research.
  • AI search (login required) lets you describe what you sell in plain language. It searches the register, reads accounts and websites for the best matches, ranks them and explains why each one fits, for example hiring now, an open tender, growth or industry fit. Treat that ranking as decision support: it tells you where to look, not that a company has confirmed a need.
  • Saved companies in My companies let you keep your shortlist in one place. The Free plan holds five companies and paid plans are unlimited; see current plans.

Propler does not export lists or connect to a CRM today, and it does not collect personal contact details for individuals.

For a broader view of where leads come from in Norway, read how to find B2B leads in Norway, or compare approaches in AI prospecting vs traditional lead generation.

Checklist

  • ICP written as filters, with exclusions.
  • Base data from a dated, primary source.
  • Filter output spot-checked by hand.
  • Fit and intent scored separately.
  • Every signal has a source and a date.
  • Organisation number used as the key; status re-checked before outreach.
  • Legal basis, opt-out handling and Section 15 rules sorted before the first e-mail.

If you are working on the Norwegian market, you can describe your ideal customer in AI search and see which companies it ranks, and why.

Frequently asked questions

How many companies should a qualified prospect list have?

There is no right number. It should be small enough that you can research every company before contacting it. Many teams work better with a few dozen well-researched companies than with thousands of untouched records.

Is BANT still useful?

Yes, in conversations. At list stage you usually cannot know budget or authority from public data, so use fit and intent scoring to build the list, and BANT to qualify once you are talking to the company.

Is company data personal data under the GDPR?

Data about a limited company as such is not. Contact details of named employees are personal data, and the Norwegian Data Protection Authority treats sole proprietorships as natural persons, so data about them and their owners is covered.

Sources

Facts in this article were checked against these sources on the date given for each.

  1. Enhetsregisteret open data documentation – Brønnøysund Register Centre, checked 27 October 2026
  2. Datasets and API – Brønnøysund Register Centre, checked 27 October 2026
  3. Norwegian Licence for Open Government Data (NLOD) 2.0 – data.norge.no, checked 27 October 2026
  4. Ny standard for næringsgruppering innføres 1. september 2025 – Statistics Norway (SSB), checked 27 October 2026
  5. Om Doffin – Doffin / DFØ, checked 27 October 2026
  6. Job vacancies at arbeidsplassen.no – data.norge.no / NAV, checked 27 October 2026
  7. Regulation (EU) 2016/679 (General Data Protection Regulation) – EUR-Lex, checked 27 October 2026
  8. Guidelines 1/2024 on processing of personal data based on Article 6(1)(f) GDPR – European Data Protection Board, checked 27 October 2026
  9. Digital services and consumer data – Datatilsynet (Norwegian Data Protection Authority), checked 27 October 2026
  10. Regler for kredittopplysningsvirksomhet (sole proprietorships as natural persons) – Datatilsynet, checked 27 October 2026
  11. Markedsføringsloven (Marketing Control Act) § 15 – Lovdata, checked 27 October 2026
  12. Veileder for markedsføring via e-post, SMS og lignende – Forbrukertilsynet (Norwegian Consumer Authority), checked 27 October 2026
How to Build a Qualified B2B Prospect List