BIMI is built on a foundation of proven email authentication standards that secure your domain, protect your customers, and make your logo trustworthy.
SPF (Sender Policy Framework)
Before anything else, you need to define who’s allowed to send emails from your domain. SPF tells inboxes which mail servers are authorized to send on your behalf — and blocks unauthorized ones from slipping through.
Learn more about SPF »
- Average cost of a data breach is close to $5 million
IBM's Cost of a Data Breach Report 2024
DKIM (DomainKeys Identified Mail)
Next, your emails need a digital signature — and that’s where DKIM comes in. It adds an encrypted signature to each message, confirming that the content hasn’t been altered in transit and that the sender is legitimate.
Learn more about DKIM »
- Businesses earn an average of $36 in revenue for every dollar spent on email marketing
Litmus, The 2024 State Of Email Trends Report
DMARC (Domain-based Message Authentication, Reporting & Conformance)
DMARC ties SPF and DKIM together into a single policy. It tells inboxes what to do with messages that fail authentication, and gives you reporting visibility into who’s sending emails from your domain — both the good and the bad.
Learn more about DMARC »
- As of March 31, 2025, DMARC is mandatory in the U.S. for all online business communication!
VMC (Verified Mark Certificate)
Once your domain is authenticated and protected, VMC lets you display your verified logo in inboxes together with the famous blue checkmark. To fully qualify for a VMC, your logo must be trademarked, and DMARC must be enforced.
Learn more about VMC »
