What BIMI and Verified Mark Certificates (VMC) actually do
BIMI (Brand Indicators for Message Identification) is an email specification that allows verified domain owners to display their official brand logo alongside incoming messages in supporting inboxes (Gmail, Apple Mail, Yahoo).
In 2026, Google also awards domains with a valid Verified Mark Certificate (VMC) the coveted **Blue Verified Checkmark** next to the sender's name in Gmail. This provides instant visual trust, dramatically differentiates your emails from phishing attempts, and increases open rates by 10% to 30%.
VMC vs CMC: Which certificate do you need in 2026?
As of 2026, the AuthIndicators Working Group offers two certificate paths issued by authorized Certificate Authorities (DigiCert, Entrust):
| Feature | Verified Mark Certificate (VMC) | Common Mark Certificate (CMC) |
|---|---|---|
| Trademark Requirement | Registered Trademark required | No trademark required (12 mo public use) |
| Gmail Blue Checkmark | Yes — Verified Blue Checkmark displayed | No — Logo displayed without checkmark |
| Apple Mail & Yahoo | Full logo display supported | Full logo display supported |
| Cost | ~$1,000–$1,500 / year | ~$600–$900 / year |
| Best For | Established SaaS, Fintech & E-commerce | Emerging startups without trademarks |
The 4 non-negotiable prerequisites for BIMI
- 1. 100% DMARC Enforcement: Your domain's DMARC record must be set to p=quarantine or p=reject with pct=100 (or omitted as pct is phased out). A policy of p=none is strictly rejected.
- 2. SPF and DKIM Alignment: Both SPF and DKIM must pass and align with your visible From header. SadaSend handles 100% alignment automatically on all sending domains.
- 3. SVG Tiny-PS Logo Format: Your logo must be formatted as an SVG Tiny Portable/Secure (SVG Tiny-PS) profile. It must be square (1:1 ratio), scriptless, and hosted on a secure HTTPS server.
- 4. Valid Certificate (.pem): The certificate issued by DigiCert or Entrust must be published in DNS alongside the logo.
Publishing the BIMI DNS record
Once your logo and certificate are hosted on HTTPS, publish a DNS TXT record at default._bimi.yourdomain.com:
; TXT record at default._bimi.yourdomain.com
v=BIMI1; l=https://www.yourdomain.com/bimi-logo.svg; a=https://www.yourdomain.com/bimi-cert.pemHow SadaSend automates BIMI compliance
The hardest part of getting a VMC is not buying the certificate — it is ensuring that your DMARC and DKIM alignment never drifts. A single misaligned email stream drops your domain out of BIMI compliance, removing your logo from user inboxes.
SadaSend continuously validates your domain's SPF, DKIM, and DMARC alignment on every send. If an unaligned sender attempts to dispatch mail, SadaSend's pre-flight deliverability engine flags the issue before it damages your domain reputation.
Building AI agents that send email?
Join the SadaSend early access waitlist to get scoped API keys, recipient allowlists, and Model Context Protocol (MCP) servers upon launch.