What BIMI does and does not do
BIMI (Brand Indicators for Message Identification) lets mailbox providers that support it show your logo next to messages that pass DMARC. In Gmail, senders verified with a VMC also get a checkmark. [1] Apple Mail supports BIMI on iOS 16, iPadOS 16, macOS Ventura 13 or later, and iCloud.com. [6]
BIMI does not improve authentication by itself and does not replace SPF, DKIM or DMARC. Its real prerequisite, DMARC at enforcement, is the part that stops other people sending mail that claims your domain. [2]
The requirements, one by one
The list below combines Google's setup page and the BIMI Group's sender FAQ. If any item is missing, logos will not appear. [1] [2]
| Requirement | What it means in practice | Source |
|---|---|---|
| DMARC at enforcement | p=quarantine or p=reject; Google requires the policy to cover all mail (pct=100). p=none is not supported. | [1] [2] |
| SPF or DKIM aligned | At least one must align with the visible From domain; the BIMI Group prefers aligned DKIM. | [2] |
| Logo file | Square SVG Tiny PS file with no scripts, external resources or embedded raster images. Gmail recommends 32 KB or smaller and a minimum of 96 by 96 pixels. | [1] [2] |
| HTTPS hosting | Logo and certificate files served over HTTPS; Google recommends TLS 1.2 or later. | [1] |
| Certificate | VMC or CMC from a Mark Verifying Authority; Gmail and other clients use the PEM file. | [1] [3] |
| DNS record | TXT at default._bimi.yourdomain with v=BIMI1, l= (logo URL) and a= (certificate URL). | [2] |
VMC or CMC, and what they cost
A Verified Mark Certificate needs a registered trademark. A Common Mark Certificate does not, but GlobalSign requires that you have actively used the logo for at least 12 months. Both are issued per email domain and are valid for about one year. [4] DigiCert lists a 397-day maximum validity. [5] The BIMI Group lists DigiCert, GlobalSign and SSL.com as Mark Verifying Authorities and says to expect an annual fee that varies by issuer. [2] [3]
Price check on October 29, 2026: DigiCert's VMC page showed a 12-month auto-renewing subscription line of $1,416.00 alongside a $125 per month email-domain line, and GlobalSign's page showed no amount before the shop. DigiCert's page did not clearly separate certificate and per-domain charges, so get a written quote. [4] [5]
| VMC | CMC | |
|---|---|---|
| Trademark | Registered trademark (or government seal) required [4] [5] | Not required [4] [5] |
| Logo history | Trademark process can take 6 to 12 months if you do not have one [1] | At least 12 months of active use (GlobalSign) [4] |
| Gmail checkmark | Yes, for VMC-verified senders [1] | Google's page does not say [1] |
| Google recommendation | Recommended whenever possible [1] | Alternative if the logo is not trademarked [1] |
Which inboxes show the logo
Support and certificate rules differ by provider, and the sources do not fully agree, so treat this as a starting point rather than a guarantee.
- Gmail: requires a certificate; shows a checkmark for VMC senders. [1] [2]
- Apple Mail and iCloud.com: supported on recent OS versions; Apple says BIMI works with VMCs and other BIMI evidence documents, while the BIMI Group lists Apple among providers requiring a VMC. [2] [6]
- Yahoo: can show a self-asserted logo without a certificate for bulk senders with enough reputation and engagement. [2]
- Others listed by DigiCert or the BIMI Group include Fastmail, Zoho Mail and La Poste. [2] [5]
- Outlook is not on either list we checked. [2] [5]
Reasons to skip BIMI for now
BIMI is a branding feature with a recurring cost and a strict prerequisite. These are the common reasons a small business should wait.
- Your DMARC policy is still p=none. Fix that first, with a gradual rollout; enforcement protects you whether or not a logo shows. [1]
- You have no registered trademark and have used your logo for less than 12 months, so neither certificate is available yet. [1] [4]
- You send from several domains; certificates are per domain, so costs multiply. [4]
- Your list is mostly on providers that do not display BIMI logos.
- You plan a logo change within the year; the certificate covers a specific mark.
- Note also that the new DMARC standard, RFC 9989, removes the pct tag. If your record still uses pct below 100, Google and the BIMI Group treat it as not fully enforced; publish p=quarantine or p=reject without a partial percentage. [1] [2] [7]
If you go ahead: a setup order that avoids rework
Work from the authentication outward so you do not pay for a certificate before the domain qualifies.
- Confirm every sending service passes DMARC in your aggregate reports.
- Move DMARC to quarantine or reject for all mail and watch reports for a few weeks.
- Export the logo as square SVG Tiny PS and check it against Google's requirements. [1]
- Apply for a VMC or CMC; budget for annual renewal. [4] [5]
- Host the SVG and PEM over HTTPS, publish the default._bimi TXT record, then allow up to 48 hours. [1] [2]
Questions before you decide
Can I use BIMI with p=none?
No. Google says BIMI does not support DMARC policies with p set to none, and the BIMI Group defines enforcement as p=quarantine or p=reject, not p=none or a percentage below 100.
Do I need a trademark?
For a Verified Mark Certificate, yes: Google says the logo must be trademarked with an office recognized by VMC issuers and that trademarking can take 6 to 12 months. A Common Mark Certificate does not need registration; GlobalSign requires that you have used the logo for at least 12 months.
Will my logo show without a certificate?
The BIMI Group says some providers accept a self-asserted record; Yahoo can show a logo without a certificate only for bulk mail with sufficient reputation and engagement. Gmail requires a certificate.
How long until the logo appears?
Google says logos can take up to 48 hours to appear in Gmail after setup.
Sources & verification
Product details and prices can change. Check the linked provider before buying.
- Google Workspace Admin Help: Set up BIMI Accessed 29 Oct 2026
- BIMI Group: FAQs for senders and ESPs Accessed 29 Oct 2026
- BIMI Group: Mark certificate issuers Accessed 29 Oct 2026
- GlobalSign: Verified Mark Certificates Accessed 29 Oct 2026
- DigiCert: Verified Mark Certificates Accessed 29 Oct 2026
- Apple Support: BIMI in Apple Mail Accessed 29 Oct 2026
- RFC 9989: DMARC Accessed 29 Oct 2026
Sources link directly to providers. Product buttons may use separately labeled affiliate links. Read our disclosure.