BIMI is a DNS-published signal that lets participating mailbox providers consider showing your brand logo next to authenticated email. It is not a replacement for SPF, DKIM, or DMARC.
The useful mental modelDMARC proves the sender is allowed to use the domain. BIMI tells a mailbox where the brand mark lives. The mailbox provider still decides whether to display it.
Check DMARC before touching the logo
For BIMI eligibility, use p=quarantine or p=reject with pct=100. A monitoring-only p=none policy is not enough for providers that require enforcement.
Publish the exact BIMI record
default._bimi.example.com. IN TXT "v=BIMI1; l=https://example.com/logo-bimi.svg;"Check the exact DNS name, HTTPS logo URL, MIME type, and cached answers. BIMI uses the stricter SVG Tiny PS profile, and some providers require VMC or CMC certificates.
Troubleshooting checklist
- Confirm the visible From domain.
- Verify DMARC enforcement and alignment.
- Query
default._bimi.domain. - Check SVG retrieval and profile constraints.
- Check provider-specific certificate requirements.
READY TO CHECK?
Turn the guide into evidence.
Use the StackHal tool connected to this field note to inspect your own configuration.
StackHal Field Notes: Practical explainers for developer infrastructure.