emailrules.today
In forceAuthIn force 1 Jan 2020

BIMI shows a logo after DMARC — it is not a bulk-sender mandate

Do I need BIMI to reach the inbox at Gmail or Yahoo?

Global

In one sentence

can show your logo after strong — it is not on Gmail/Yahoo’s bulk “must do” list.

Plain English

is a logo-in-the-inbox feature for some clients after is solid (usually quarantine or reject) and you publish the right and, for Gmail-class display, a mark certificate. Missing BIMI does not fail rules. Broken authentication still fails them with or without a logo.

Why it matters. Teams burn budget on certificates while and are on fire. Fix the bulk requirements first; treat as optional brand polish.

Dotted words open definitions. Full glossary.

What to do

Your move — not a lecture

Part platform, part you

The platform covers the mechanical bit. The judgement is still yours.

Nothing required. may host SVG or help with templates; they cannot buy your trademark certificate for you.

Your part: enforcement policy, logo/SVG correctness, certificate purchase if you want Gmail-class display, and the record.

What to do first

If someone sold you “ or no inbox,” open Gmail’s requirements and BIMI Group docs side by side. Fix and first; treat BIMI as optional brand polish after p=quarantine or reject is honest.

You can skip this if: You do not care about logos in the inbox chrome and your auth/complaints are already clean.

Who this applies to

Brands that want a verified logo in supporting inboxes and already authenticate mail. Anyone who was told is required to pass Gmail bulk checks.

Checklist

  • 01Do not prioritise over /, , or spam-.
  • 02If you want display: move toward quarantine/reject only when you can pass auth at volume.
  • 03Publish a TXT record with an HTTPS SVG; add a VMC/CMC when the clients you care about require evidence documents.
  • 04Expect uneven client support — including weak or no Microsoft support depending on product.

That’s enough to act. Sources and exact wording are below for counsel, bosses, or AI tools that need a citation. Not legal advice.

Proof

Exact position, enforcement, sources

For records and people who will check you. Skip if Monday’s move is already clear.

The exact position

Brand Indicators for Message Identification () is a specification that lets supporting clients show a brand-controlled logo next to authenticated mail. BIMI does not replace , , or , and it is not listed as a requirement in Gmail or Yahoo bulk-sender mandates. Practical display usually needs a DMARC policy of quarantine or reject (not p=none), a BIMI TXT record pointing at an SVG logo over HTTPS, and — for Gmail and other picky clients — a Verified Mark Certificate (VMC) or Common Mark Certificate (CMC) as evidence. Microsoft Outlook/Exchange Online support for BIMI remains limited or absent depending on product surface; treat logo display as brand UX, not deliverability law.

What happens if you do not

No mailbox provider fines you for lacking . Without it, mail can still pass bulk requirements. With broken auth, BIMI will not save you.

Sources

Related

History of this page

  • Added BIMI as optional brand display after primary BIMI Group and Google docs; not a bulk mandate.

FAQ

Awkward questions

Who is this actually for?

People who ship email and are too busy to re-read every PDF: week-one marketers, lifecycle/CRM, deliverability, multi-country ops, DTC brands, agencies — on Klaviyo, Mailchimp, Braze, HubSpot, SFMC, or something else. Pick your tool and geos so product-specific pages only appear when they match. EU and UK are first-class filters. Not for people who sell tools about email and need a fake score to demo.

Why only ~40 rules? Isn’t that… thin?

On purpose. A wall of 400 undated “best practices” is how you look busy and still get burned. Every page needs a primary source we actually read. Thin and checkable beats fat and folklore. Europe, bulk inbox rules, measurement honesty, and protocol topics like BIMI/DMARC policy are on the shelf when we can cite them — not every Member State and not every vendor myth. Coverage map lists what we still refuse to invent.

Is this legal advice?

No. If it were, you’d have a billable hour and a longer PDF. This is a dated operator reference written by an email geek. Confirm anything high-stakes with counsel who knows your facts. Same for “will this make me compliant?” — no tool does that. Lawyers and judges do. We say what the sources say and what to do first on Monday.

Why no trust score out of 100?

Because we refuse to invent a number you can’t audit. Fake scores sell seed tests and panic. You get findings, dates, and links. If that feels less exciting than a red dial, good — you’re not the red-dial customer.

Why should I trust you more than my ESP’s blog?

ESPs sell seats. Seed-score vendors sell fear. AI invents citations when nobody watches. We sell nothing today — no pixels, no placement scores, no affiliate — so we can say when a tool is the problem. A human verifies, dates, and corrects in public. Tools may help draft; they do not ship unsourced claims. Check the primary links. Fail that test and leave.

Do I need an account?

No. Filters live in this browser and the URL. Share the link. That’s it. Accounts come later only if they earn it — not so we can nurture you about email.

I’m an agency. Where’s multi-client mode?

We tried a client-name CRM on the setup card. It made the product feel like work before it felt useful. Role filters + copy link + one-page brief (optional PDF title) is enough for now. Complexity comes back when the free shelf is habit, not before.

Is the quiet changelog a bug?

No. Quiet means nothing material moved. We don’t invent urgency so the homepage looks “alive.” Sticky risks still show what usually needs a person when the market is still.