
What I like best about Cakemail is its fine-grained user permission structure paired with clean, exportable activity logging, which fits really well for our medical device startup where every outbound communication tied to clinical studies or regulatory updates needs to stay traceable and controlled. I’m David Ikum, Regulatory Compliance & Clinical Documentation Coordinator at Novus MedTech Labs. My days are spent managing clinical trial records, preparing for FDA audits, and coordinating controlled email outreach to investigators, external auditors, and clinical site leads. The separated user role management and dedicated sender domain settings save me hours each week that I previously spent reconciling sent messages and proving who had access to regulated email communications.
Before we adopted Cakemail, our regulated email outreach was scattered across shared Gmail aliases and basic marketing email tools that were never built for our compliance needs. When we needed to send formal notification emails to clinical sites, audit follow-ups, or recruitment communications for our outpatient diagnostic device trials, there was no clear way to isolate those sends from general company newsletters. Team members could hop into the same sending workspace without oversight, and tracking who edited a campaign, who approved it, and when it was dispatched meant manually compiling screenshots and spreadsheet logs. Every time an auditor asked for a communication trail tied to a trial site, I would scramble to pull together disjointed records, and I had no reliable way to restrict certain team members to only view analytics without the ability to modify or send regulated messages.
The feature I lean on most is the tiered user access panel you see in the settings menu. I create distinct user accounts for our regulatory team, clinical leads, and marketing staff, locking down permissions so only myself and our QA lead have owner-level control over sender domains and campaign approvals. Our clinical research coordinators get limited view-only access to relevant campaign performance, so they can see open rates for investigator check-in emails without editing templates or launching sends that contain sensitive trial language. The sender domain verification workflow is another huge win; every regulated clinical communication goes out from a pre-approved, validated domain, and Cakemail keeps a clear record of each domain’s verification status for our audit binders. I also rely heavily on the audience building segmentation tools, which let me isolate recipient lists strictly by clinical site, so I never accidentally send a trial update to the wrong group of investigators.
The unexpected benefit I’ve discovered is the clean, timestamped export of campaign activity data. Most email platforms bury this reporting or make exports messy, but Cakemail’s export function pulls out campaign creator, send time, recipient list, and delivery metrics in a consistent format I can drop straight into our regulatory documentation package. This was a nice surprise, because I originally only planned to use it for investigator outreach, and it’s become a core part of our pre-audit prep routine.
Cakemail is not our clinical document repository or our dedicated secure file exchange system, and I still use separate tools for sharing full trial PDFs and case report forms. But it gives us a controlled, auditable channel for regulated outbound email that our old tools could not. The role-based user controls, domain validation workflow, and exportable activity trails cut down the manual log-building work that used to eat up my week. When auditors request proof of communications with our clinical sites, I don’t have to piece records together anymore. I can pull the verified campaign log quickly, which takes a lot of pressure off ahead of FDA inspections for our diagnostic device program. Review collected by and hosted on G2.com.
What I find frustrating about Cakemail for our medical device startup workflow is its missing mandatory campaign approval gates, narrow audit-log depth, and limited native sync with our clinical document management system. I’m David Ikum, Regulatory Compliance & Clinical Documentation Coordinator at Novus MedTech Labs. Every email we send to investigators, site coordinators and auditors counts as regulated correspondence for our outpatient diagnostic trial, so I need enforceable guardrails and fully reconstructible activity trails. These gaps force me to build clunky manual checkpoints outside the platform and create compliance risk ahead of FDA inspections.
The biggest shortfall is there is no built-in mandatory approval workflow before a campaign launches. Right now, any user with send permissions can queue and dispatch an email containing clinical trial language without a second sign-off. We have a firm rule that all communications going out to clinical sites need review from our QA lead before sending. My workaround is to save every regulated campaign as a draft, export the HTML preview manually, attach it to our Doclink repository, and wait for written approval via a separate ticket. If someone forgets that step or accidentally hits send before review, there is no system block in place. A few weeks ago, one of our research coordinators almost sent an updated recruitment notice before our QA team finished reviewing the wording, and we only caught it because I happened to log into the user dashboard mid-work. That near-miss drove home how exposed we are; for medical device trial communications, that lack of a hard approval gate is a meaningful liability.
Second, the platform’s activity audit logs do not capture enough granular change history for regulatory submissions. The logs will tell you who created a campaign and when it sent, but they don’t log every edit: subject line changes, body text revisions, swapped recipient audiences, or edits to compliance disclaimers. When auditors ask for a full chain of custody showing every modification made to a site notification email, the native CSV export from Cakemail falls short. I end up taking timestamped screenshots of every draft version and compiling them into a separate audit binder, which can take two or three hours for a single campaign. These hand-assembled records are not immutable in the way regulators prefer, and it leaves room for questions during formal inspections.
Third, there is no pre-built integration or webhook template to push campaign activity logs directly into our clinical QMS and document repository. We have to manually export CSV logs and upload them to Doclink, then cross-reference the campaign ID with our trial folder structure. If we run multiple concurrent studies across different clinical sites, it becomes easy to misfile logs or miss an export entirely. While the API exists for custom development, our small startup does not have dedicated engineering bandwidth to build and maintain that custom sync.
For improvements, I would prioritize mandatory approval workflows, where regulated campaign folders require a designated approver sign-off before send is unlocked. Next, expand the audit trail to log every edit, including old and new values, and retain those records permanently for retention periods required under FDA guidance. Finally, add pre-built webhook templates to push campaign events to common clinical document and QMS platforms. Cakemail’s user permission structure works well once everything is set, but without these compliance-focused controls, it cannot fully satisfy the strict traceability rules we must follow for medical device clinical communications. Review collected by and hosted on G2.com.