Segment Size Sanity Checks: Catching Broken Audiences Before You Send
A segment sanity check compares the built audience against expectations before send: is the size within its normal range, does it overlap and exclude correctly with neighboring segments, and did membership change in ways the data can explain. Most catastrophic sends, the wrong offer to the whole list, the suppression that included everyone, were visible in the segment size an hour before launch to anyone who looked.
Why size is a safety signal
Marketers check copy, links, and rendering carefully, then send to an audience they never actually inspected. Yet the audience is the blast radius: a wrong segment multiplies a small error to hundreds of thousands of inboxes, and unlike a typo it cannot be recalled. Size is the quickest proxy for whether the audience built is the audience intended.
For more on this, see this related guide and our earlier explainer on the same theme.
Historical incidents rhyme: the winback that included last week buyers because a date field changed format, the suppression list that loaded empty. Every one announced itself as an impossible number first. Sanity checks are cheap insurance bought with five minutes and a baseline.
Building the baseline
For every recurring segment, record its expected range from the last several builds and the known drivers of legitimate movement: promotions, seasonal cycles, list growth, imports. A segment without a recorded expectation cannot be sanity checked, only stared at.
Store the baseline where the sender sees it at send time, inside the same screen or checklist, not in a wiki nobody opens during launch pressure. The check that requires archaeology will be skipped exactly on the rushed day it was needed.
Overlap, exclusion, and membership probes
Segments interact: today's campaign audience minus the suppression segment, plus a regional variant, minus recent purchasers. Verify the interactions explicitly: pick addresses you know belong to each rule and confirm each one lands where the logic says. Sample real members and eyeball ten profiles; humans spot a wrong cohort in seconds where counts look plausible.
Readers also found this companion piece from our archive useful.
VIP and exclusion lists deserve permanent probes: a few planted test addresses whose expected membership is known with certainty. When a probe lands wrong, the build is wrong, full stop, whatever the totals say.
Making the check a habit, not a hero act
Put the checks in the send checklist with initials and a timestamp, rotate who performs them, and log anomalies and their causes. Over a quarter the log becomes a map of your pipeline fragile points, which engineering can then fix at the source.
Celebrate the catches publicly. Teams repeat what gets praised, and the analyst who held a send and was right should be thanked in front of the room. Sanity checking is unglamorous work that quietly prevents the stories a brand tells about itself for years.
Frequently asked questions
What size change should trigger a pause?
A useful rule is investigating any segment that moves more than about twenty to thirty percent against its recent norm without a known cause like a sale or a big import. The exact threshold matters less than having one, plus a named person who sees the alert before the send, not after.
What are the fastest checks to run?
Compare today's count with the last send and the four week average. Check the segment against its exclusions by sampling a few known suppressed addresses. Confirm one known member is in and one known non member is out. Those four checks take minutes and catch most historical disasters.
Why do segments silently swell or shrink?
Common causes are a data feed delay making recent buyers look inactive, a definition edit that broadened a condition, an import that overwrote a field, or a timezone shift in a date rule. Size anomalies are usually pipeline symptoms, which is why the fix starts with the data team, not the campaign.
Should checks be automated or manual?
Automate the counting and alerting; keep a human in the approval path for anomalies. Fully automated blocking creates alert fatigue and workarounds. The healthy pattern is an automatic warning with a clear expected range and a human who can hold the send with one click and a reason field.