Email Deliverability: Why you should setup BIMI (and how) ?

BIMI enhances email trust, displaying verified logos in inboxes. Gmail supports CMC (Common Mark Certificate); rise to meet domain and logo requirements.

Othman Katim
Email Marketing Expert
Sep 2025
X
Some spam issues ?
Mailwarm keeps your emails away from spam.
See More

Email deliverability meets branding: what BIMI really does

Brand Indicators for Message Identification (BIMI) is a standard that allows email providers supporting its use to display your organization’s verified logo next to the sender’s name in the inbox. It works in conjunction with strong authentication protocols, so when your email passes all the necessary checks, recipients see a recognizable mark that signals legitimacy. However, BIMI doesn’t fix reputation issues or poor technical configurations; it’s a visual reward for domains that already demonstrate authenticated, reputable email practices.

Think of BIMI as an added visual trust layer on top of SPF, DKIM, and DMARC. With these foundations in place, BIMI can help make your domain’s email trustworthiness immediately visible to your recipients.

What changed in 2025: VMC, CMC, and where your logo appears

Gmail now supports Common Mark Certificates (CMC), allowing brands with a CMC to display their logo even without a registered trademark. For comparison, Gmail’s blue “verified” checkmark remains tied to Verified Mark Certificates (VMC). In summary: CMC enables your logo to show in Gmail; VMC allows the logo plus the blue verified checkmark. (workspaceupdates.googleblog.com)

Apple Mail on iOS, iPadOS, macOS, and iCloud.com supports BIMI for senders when their mail provider meets BIMI requirements and vouches for the message. Apple recognizes both VMCs and other BIMI evidence documents provided by email providers. (support.apple.com)

Increases in bounced emails this year might be due to evolving authentication requirements and new sending standards, of which BIMI is just one aspect. For more information, see our article explaining why emails get bounced in 2025 and the delivery rules behind it.

Prerequisites you must meet before BIMI

  • DMARC must be set at enforcement (p=quarantine or p=reject) on the organizational domain with 100% coverage. Setting p=none or a percent (pct) less than 100 will not suffice.
  • SPF and DKIM must be aligned with the visible From domain.
  • Your sender reputation must be strong, with no histories of abuse or poor engagement.

These requirements are essential for your BIMI logo to display across major providers. 

VMC vs. CMC: choose the path that fits your brand

Verified Mark Certificate (VMC)

  • Requires your logo to be a registered trademark.
  • Grants access to Gmail’s blue verified checkmark and the widest client support.
  • Entails identity vetting by a certificate authority and ongoing renewal of the certificate.

Common Mark Certificate (CMC)

  • No trademark is required, making it suitable for newer or smaller brands.
  • Enables logo display in Gmail, but without the blue verified check.
  • Still demands DMARC enforcement and a BIMI-compliant SVG logo.

Both certificate types serve as “evidence documents” referenced in your BIMI DNS record. Each email provider may handle display and requirements differently.

Prepare a compliant SVG logo

  • Export your logo as SVG Tiny PS profile.
  • Use a square artboard, and avoid external resources, scripts, or embedded raster images.
  • Keep the SVG file light, clean, and optimized, many email clients expect small files for efficient load times.

It’s best to export directly from your vector design tool rather than converting a PNG. Test your SVG with a BIMI validator before publishing. (bimigroup.org)

Publish your BIMI DNS record

Your BIMI record is a TXT record published at the selector host default._bimi.yourdomain.com. It points to your SVG logo and, optionally, to an evidence document (VMC or CMC) hosted securely over HTTPS.

Host:   default._bimi.example.comType:   TXTValue:  v=BIMI1; l=https://example.com/bimi/logo.svg; a=https://example.com/bimi/cert.pem;

The l= tag designates the URL for your logo. The a= tag refers to a PEM file for your VMC or CMC certificate. Self-asserted records (with an empty a= tag) see limited support, most major providers require a certificate.

Get and host your certificate

  1. Apply for a VMC or CMC from a trusted certificate authority.
  2. Complete identity and logo verification (trademark is required for VMC, not for CMC).
  3. Once issued, host the .pem certificate file at a stable HTTPS URL you control.
  4. Reference the PEM URL in the a= tag of your BIMI DNS record.

After DNS changes propagate, send test emails and verify logo display in supported inboxes. Use online BIMI validators to be sure your record, logo, and certificate are all accessible.

Verify and troubleshoot: a simple workflow

  1. Ensure DMARC is at enforcement (p=quarantine or p=reject) for your organizational domain and all sending subdomains.
  2. Validate your SVG logo through a BIMI logo checker.
  3. Check that your TXT record resolves and both logo and PEM URLs are available over HTTPS with status 200.
  4. Send test emails to users on Gmail, Yahoo, and Apple Mail. Examine both the list view and opened messages for logo display.

Common pitfalls

  • Setting DMARC to p=none or using a pct value less than 100.
  • Misalignment between the From domain and SPF/DKIM settings.
  • Logo is not true SVG Tiny PS or includes forbidden elements (e.g., scripts or raster images).
  • Logo or PEM file URLs have redirects or restricted access.
  • Poor sender reputation, which can delay or prevent logo display even with perfect DNS setup.

Email providers check both technical configuration and sender reputation, so maintaining good practices remains essential. 

How BIMI and warm-up work together

BIMI is not a shortcut to good sender reputation. If you’re using a new domain or restarting after a period of inactivity, you’ll still need to build your reputation gradually by sending in small volumes, ensuring consistent authentication, and letting mailbox providers observe normal engagement patterns.

Tools like Mailwarm can help by simulating natural inbox activity across a network of managed mailboxes. Activities like email opening, replying, and marking messages as “not spam” can foster a more robust sender reputation, making it more likely for your BIMI logo to appear in targeted inboxes. This process is about technical domain reputation, not marketing outreach.

Governance notes you shouldn’t skip

  • Continuously monitor DMARC reports for alignment issues, especially after making DNS or email service provider (ESP) changes.
  • Renew your VMC or CMC certificates before expiration; periodically check for updates in certificate authority policies and provider requirements.
  • If your company rebrands, be sure to update the SVG logo and corresponding certificate, and republish your BIMI record.
  • Keep a clear record of who controls your BIMI assets and URLs to avoid disruptions if your team changes.

Note: Apple Mail shows BIMI logos only when your email provider vouches for the message based on the BIMI specification, coordinate with your provider if logos are not displaying as expected. 

One-page BIMI checklist

  • Set DMARC to p=quarantine or p=reject at 100% for your domain and subdomains.
  • Ensure SPF and DKIM alignment with your visible From domain.
  • Export and validate a compliant SVG Tiny PS logo.
  • Choose between VMC (registered trademark, Gmail blue checkmark) or CMC (no trademark, broader access).
  • Host both SVG and PEM files over HTTPS at reliable URLs.
  • Publish a default._bimi TXT record with proper v=, l=, and a= tags.
  • Conduct validation and test sends; monitor your reputation and DMARC report outcomes.

Final thought

Implementing BIMI transforms your domain’s strong sender practices into a visible mark of trust in the inbox. Combine robust technical authentication with careful warm-up, and your branding will become instantly recognizable to recipients.

Need help reviewing your DMARC and BIMI implementation or developing a domain warm-up plan? Consult with deliverability specialists who can help validate your records and guide you through the process of attaining BIMI logo display.

FAQ

What is BIMI and how does it work?

BIMI stands for Brand Indicators for Message Identification. It allows email service providers to display your verified logo next to your email's sender name, enhancing your brand's visibility and trustworthiness if your domain passes authentication checks.

What are the prerequisites to implement BIMI?

To implement BIMI, ensure that DMARC is set to quarantine or reject with 100% enforcement, SPF and DKIM are aligned with your domain, and your sender reputation is strong.

What is the difference between VMC and CMC?

VMC (Verified Mark Certificate) requires a registered trademark and allows a blue checkmark on Gmail, while CMC (Common Mark Certificate) doesn't require a trademark but doesn't include a blue checkmark. Both serve as evidence documents for BIMI implementation.

How do I prepare my logo for BIMI?

Your logo should be exported as an SVG Tiny PS profile, using a square artboard without external resources or embedded raster images. It should be small and optimized to ensure efficient load times.

How do you publish a BIMI DNS record?

Create a TXT record located at default._bimi.yourdomain.com that points to your SVG logo and optionally to a certificate. The record should use proper tags like l= for logo URL and a= for certificate URL.

What should you do if your BIMI logo is not showing?

Verify DMARC enforcement, ensure your SVG logo is valid, check if your TXT record resolves correctly, and that URLs are accessible. Test sending emails to supported inboxes and assess any technical or reputation issues.

How does email warm-up affect BIMI?

Email warm-up helps build a positive sender reputation, necessary for BIMI visibility, by gradually increasing email volume and maintaining consistent authentication. Using tools to simulate inbox activity can further enhance your reputation.