Brand Indicators for Message Identification — a standard that lets mailbox providers display your logo next to your messages, for domains whose mail is authenticated and whose DMARC policy is enforcing. It's the visible reward for the authentication work.

Why does BIMI require DMARC enforcement?

The logo is a trust signal, so receivers only render it when spoofed mail is actually being stopped — which means a policy of quarantine or reject. At p=none, the logo would vouch for mail the domain isn't protecting.

Do I need a Verified Mark Certificate?

For the providers most brands care about, effectively yes — Gmail requires a certificate for the logo, and its blue verified checkmark comes with a VMC. A VMC is backed by a registered trademark; logos with a year or more of prior use may qualify for a Common Mark Certificate instead.

The restricted SVG profile BIMI requires — no scripts, no external references, a square viewport, and a title element. Standard design-tool exports usually fail it, which is why Palisade ships a converter.

Does Palisade host the BIMI record?

Yes — with Hosted DNS, the BIMI record delegates to Palisade by CNAME and updates deploy on your approval. Without delegation, Palisade generates the record and you paste it at your provider.

How long does BIMI take?

The record itself is minutes; the timeline is set by the prerequisites — reaching enforcement if you're not there yet, and the certificate authority's verification for the VMC. Palisade's job is making sure neither one stalls.

BIMI & VMC

Managed BIMI — your logo in Gmail and Yahoo

BIMI puts your verified logo on your email in inboxes like Gmail, Yahoo, and Apple Mail — once your DMARC is enforced, your logo is the right kind of SVG, and a certificate vouches for it. Three requirements, each with sharp edges. Palisade walks all three with you.

Get started Book a demo

Summarize with

Palisade Crunchy DemoAI-assisted workflow Domains Hosted DNS Reports Toolbox TLS Reports IntegrationsBIMI Verified checkmark

Verified checkmark — acme-corp.com

Requirements

✓DMARC at enforcementp=reject on acme-corp.comPassing

✓SVG Tiny PS logoacme-logo.svg — converted and validatedUploaded

✓Verified Mark CertificateIssued against a registered trademarkIssued

Gmail — inbox

AAcme CorpYour March statement is ready9:41 AM

AAcme CorpReceipt for order #8412Yesterday

The blue checkmark is Gmail’s, and needs a VMC. Yahoo shows the logo without a certificate; Apple Mail requires one.

The visible payoff of DMARC

Enforcement protects the domain; BIMI is what recipients actually see for it. The logo only renders because receivers verified the mail is really yours.

The hard parts, handled

SVG Tiny PS conversion, the trademark question, the Verified Mark Certificate process — the steps that stall BIMI projects are the ones Palisade does with you.

Recognition before the open

Your mark, next to your name, on every legitimate message — and on none of the spoofed ones. That contrast is the point.

Trusted by leading brands worldwide

How it works

Three requirements, one guided path

BIMI is strict on purpose — each step proves a little more that the logo belongs to you.

Reach DMARC enforcement

Receivers only show the logo on domains that enforce — quarantine or reject. Palisade's staged enforcement carries the domain there first, one approved step at a time.

Prepare the logo

BIMI requires SVG Tiny PS, a strict profile most design exports miss. Palisade's converter turns a standard SVG into a compliant one.

Obtain the certificate

A Verified Mark Certificate ties the logo to your organization, backed by a registered trademark. The certificate itself comes from Signet, our sister product — Palisade gets the domain ready and hands the VMC over.

Publish and verify

The BIMI record goes live — hosted by Palisade through CNAME delegation, or generated for your own DNS — and the checker confirms what receivers see.

What's included

What the BIMI service covers

Enforcement first

BIMI sits on top of DMARC at p=quarantine or p=reject. The staged enforcement path is the same one, so the prerequisite is part of the plan.

SVG Tiny PS conversion

The free converter produces the strict SVG profile BIMI demands, from the logo file you already have.

VMC guidance

The trademark question and the certificate authority's checks are Signet's work. Palisade handles the DMARC enforcement, the SVG conversion, and the hosted record.

Hosted BIMI record

With Hosted DNS, the BIMI record delegates by CNAME and deploys from Palisade; otherwise it's generated ready to paste.

Verification checks

The free BIMI checker validates the record, the SVG, and the VMC on any domain — before and after you publish.

Where it shows

Mailbox providers including Gmail, Yahoo, and Apple Mail support BIMI. Requirements differ by provider; Palisade tracks what each one expects.

Teams that put the Agent to work.From one domain to thousands.

BIMI

The blue verified checkmark.How POLITICO reached BIMI compliance.

“Palisade made it so easy for us to get our blue verified checkmark and achieve our BIMI compliance”

Max LeRoy — VP Product, Politico

See BIMI & VMC

Enforcement

Work with pros before changing anything.Why Devialet would not move to reject until every app checked out.

“We thought our implementation was good, but we weren't sure all of our different apps were configured properly. We never wanted to switch to quarantine or reject before we had DMARC software in place — our email program drives a significant chunk of our revenue. We wanted to work with pros before changing anything.”

Devialet

See the integration guides

Operations

Everything done faster.How SecurITShell simplified its DMARC operations.

“Palisade streamlined all of our DMARC operations. It was so complicated at first, it was taking so much time. It allowed us to get everything done faster and have a complete overview of our operations, at such an affordable cost. We're saving so much time. It's a great improvement for our operations.”

James Morin — IT Maestro, SecurITShell

See the DMARC Agent