|—|—|
| Requires a registered trademark | Yes | No |
| Alternative requirement | — | Logo publicly used on a domain you own for at least 12 months |
| Gmail | Logo and verified checkmark | Logo only, no checkmark |
| Yahoo / AOL | Accepted, subject to reputation | Accepted, subject to reputation |
| Apple Mail | Documented support (macOS 13+, iOS 16+) | Not confirmed |
| Microsoft Outlook | Not displayed | Not displayed |

The Common Mark Certificate is the meaningful recent development here. Before it existed, BIMI was effectively locked shut for anyone without a registered trademark — which is most small businesses and essentially every solo operator. A CMC opens the door, at the cost of Gmail's blue verified checkmark.

Both certificate types are issued by a small number of authorities and carry a recurring annual cost. Prices shift, so check current rates directly with the issuers rather than trusting a number in a blog post — including this one.

Step 4 — Publish the record

A BIMI record is a TXT record at:

default._bimi.yourdomain.com

With a value roughly like:

v=BIMI1; l=https://yourdomain.com/bimi/logo.svg; a=https://yourdomain.com/bimi/certificate.pem

Three parts: the version, l= pointing at your SVG, and a= pointing at your certificate. Omit a= and you have a certificate-free BIMI record, which some providers will honour in limited circumstances and Gmail generally won't.

Then send a test and wait. Display isn't instant — providers cache, and some evaluate your sending reputation before showing the logo at all.

The honest assessment

Should you do this?

For most small senders, not yet. Outlook doesn't display BIMI at all, which removes a large chunk of many B2B lists from the equation entirely. Apple's support for CMC specifically is unconfirmed. And the certificate is a recurring annual cost against a benefit that's genuinely difficult to measure.

You'll find claims that BIMI lifts open rates. Treat them carefully — brands that qualify for BIMI are, by definition, brands that reached DMARC enforcement, cleaned up their authentication, and generally take their email seriously. Those senders were going to perform better anyway. Untangling the logo's contribution from everything else that had to be true first is close to impossible, and most published figures don't try.

Where it does make sense: consumer brands with a recognisable symbol, a mostly-Gmail audience, and a trademark that unlocks the VMC checkmark. In that specific combination, the visual credibility is real and the checkmark is a genuine trust signal that competitors won't have.

The best reason to pursue it regardless: it forces you to reach DMARC enforcement. That's worth having on its own merits — logo or no logo. If BIMI is the carrot that gets your authentication finished, chase it and enjoy the logo as a bonus.

Why your BIMI logo isn't showing

Assuming the record is published correctly, work down these in order:

DMARC isn't at enforcement. The most common cause by a distance. Check your actual published policy rather than what you intended to publish.

The SVG isn't Tiny P/S. A regular SVG export from your design tool won't validate. It needs the restricted profile specifically.

The provider doesn't support it. Outlook shows nothing regardless of what you do. Check where your test recipient actually reads mail.

Your reputation isn't good enough yet. Some providers evaluate sending reputation before displaying a logo. Authentication gets you eligible; it doesn't get you displayed.

It's simply too early. Caching and propagation mean display can lag your record by a while.

Frequently asked questions

Do I need a VMC for BIMI?
Not necessarily. A Common Mark Certificate works without a registered trademark, provided you've used the logo publicly on a domain you own for at least 12 months. The trade-off is that Gmail shows your logo but not the blue verified checkmark, which only a VMC unlocks.

How much does a VMC cost?
It's a recurring annual cost from one of a small number of issuing authorities, and prices change. Check current rates directly with the issuers rather than relying on figures quoted in articles — including this one. Budget for it as an ongoing subscription rather than a one-off.

Why isn't my BIMI logo showing?
Most often because DMARC isn't actually at p=quarantine or p=reject — check your published policy, not your intended one. Other causes: the SVG isn't in the required Tiny P/S profile, the provider doesn't support BIMI (Outlook displays nothing), your sending reputation isn't yet strong enough, or the record simply hasn't propagated.

What to do next

Check your current DMARC policy before anything else. If it says p=none, BIMI isn't your next project — reaching enforcement is, and it's the more valuable one anyway.

If you're already at enforcement, the remaining work is a few hours: prepare the SVG, buy a certificate, publish the record.

Free: The 60-Minute Email Authentication Fix — verify SPF, DKIM, DMARC, and alignment on your own domain in under an hour.

Go deeper: The Email Deliverability Playbook includes the full SVG preparation spec and a comparison of the certificate issuers.

---

Related guides

• How to set up DMARC safely — the prerequisite, done properly
• Email authentication: SPF, DKIM, DMARC and BIMI — the full picture
• Which email service actually delivers? — platform support for custom domain authentication

---

---

FAQ FIELD CONTENT

Paste into the mb_faq repeater, one pair per row.

Q1: Do I need a VMC for BIMI?
A1: Not necessarily. A Common Mark Certificate works without a registered trademark, provided you have used the logo publicly on a domain you own for at least 12 months. The trade-off is that Gmail shows your logo but not the blue verified checkmark, which only a VMC unlocks.

Q2: How much does a VMC cost?
A2: It is a recurring annual cost from a small number of issuing authorities, and prices change. Check current rates directly with the issuers rather than relying on figures quoted in articles. Budget for it as an ongoing subscription rather than a one-off.

Q3: Why isn't my BIMI logo showing?
A3: Most often because DMARC is not actually at p=quarantine or p=reject. Other causes include an SVG that is not in the required Tiny P/S profile, a provider that does not support BIMI such as Outlook, insufficient sending reputation, or a record that has not yet propagated.

---

SOURCE NOTES

Not for publication.

Claim	Source
BIMI requires DMARC at p=quarantine or p=reject	Red Sift BIMI certificate guidance, 2026; Playbook glossary
VMC requires trademark; CMC requires 12 months public logo use	Red Sift BIMI certificate guidance, 2026
Gmail shows checkmark for VMC only; Outlook displays neither	Red Sift BIMI certificate guidance, 2026
Apple Mail documented support macOS 13+/iOS 16+ for VMC; CMC unconfirmed	Red Sift BIMI certificate guidance, 2026
SVG Tiny Portable/Secure requirement	BIMI specification
Record location default._bimi. and tag syntax	BIMI specification

Note on open-rate claims: I've deliberately not cited a percentage lift for BIMI. The available figures don't isolate BIMI from the authentication and list quality improvements that necessarily precede it, so quoting one would be misleading. If you later find a study with a proper control, this is the section to update.

---

JSON-LD Schema

{
  "@context": "https://schema.org",
  "@graph": [
    {
      "@type": "HowTo",
      "name": "BIMI: How to Get Your Logo in the Inbox",
      "description": "What BIMI requires, whether a VMC certificate justifies its cost, and an honest read on whether it moves open rates at all.",
      "step": [
        { "@type": "HowToStep", "name": "Reach DMARC enforcement", "text": "Move your DMARC policy to p=quarantine or p=reject. Monitoring mode does not qualify for BIMI." },
        { "@type": "HowToStep", "name": "Prepare the logo", "text": "Produce a square SVG Tiny Portable/Secure file with a solid background, legible at very small sizes, hosted on your own domain over HTTPS." },
        { "@type": "HowToStep", "name": "Obtain a certificate", "text": "Choose a VMC if you hold a registered trademark, or a CMC if you have used the logo publicly on your own domain for at least 12 months." },
        { "@type": "HowToStep", "name": "Publish the BIMI record", "text": "Add a TXT record at default._bimi.yourdomain.com containing v=BIMI1 with l= pointing at your SVG and a= pointing at your certificate." }
      ]
    },
    {
      "@type": "FAQPage",
      "mainEntity": [
        {
          "@type": "Question",
          "name": "Do I need a VMC for BIMI?",
          "acceptedAnswer": { "@type": "Answer", "text": "Not necessarily. A Common Mark Certificate works without a registered trademark, provided you have used the logo publicly on a domain you own for at least 12 months. The trade-off is that Gmail shows your logo but not the blue verified checkmark, which only a VMC unlocks." }
        },
        {
          "@type": "Question",
          "name": "How much does a VMC cost?",
          "acceptedAnswer": { "@type": "Answer", "text": "It is a recurring annual cost from a small number of issuing authorities, and prices change. Check current rates directly with the issuers rather than relying on quoted figures. Budget for it as an ongoing subscription rather than a one-off." }
        },
        {
          "@type": "Question",
          "name": "Why isn't my BIMI logo showing?",
          "acceptedAnswer": { "@type": "Answer", "text": "Most often because DMARC is not actually at p=quarantine or p=reject. Other causes include an SVG that is not in the required Tiny P/S profile, a provider that does not support BIMI such as Outlook, insufficient sending reputation, or a record that has not yet propagated." }
        }
      ]
    }
  ]
}