Practice · BIMI

Setting up BIMI, your logo in the inbox.

Brand Indicators for Message Identification shows recipients your company logo right next to the sender line. That increases trust, open rates, and makes phishing harder.

What BIMI delivers

The prerequisites

BIMI requires DMARC with p=quarantine or p=reject. Without an active policy, no mail provider will display your logo. Finish DMARC setup first, then BIMI.

The four steps

1. Prepare an SVG logo

BIMI requires a specific SVG format, SVG Tiny Portable/Secure (SVG 1.2 Tiny PS). No external references, no script, only solid fills or paths.

2. Obtain a VMC certificate Cost factor

For Gmail and Yahoo, a Verified Mark Certificate (VMC) is mandatory. It proves that the logo is your registered trademark.

3. Upload the assets

Place the SVG and the .pem certificate on a publicly reachable HTTPS server (e.g. https://firma.at/bimi/logo.svg).

4. Set the DNS record

; TXT record for default._bimi.firma.at
"v=BIMI1; l=https://firma.at/bimi/logo.svg; a=https://firma.at/bimi/vmc.pem"

The components:

Who supports BIMI?

ProviderVMC required?Display
GmailYesYes
Yahoo / AOLYesYes
Apple Mail (iOS / macOS)YesYes
FastmailNoYes
Outlook.com / Microsoft 365Pilot
Test BIMI before going live. The first real send to a Gmail address shows whether everything fits, or whether the BIMI validator rejects the logo and certificate.

Key takeaways

  • BIMI requires DMARC with p=quarantine or p=reject, without an active policy, no provider shows your logo.
  • Prepare a square SVG in the SVG Tiny PS 1.2 format (max. 32 KB, publicly reachable over HTTPS).
  • Gmail and Yahoo need a VMC (typically EUR 1,000-1,500 per year, registered trademark required); Apple Mail and Fastmail show BIMI without a VMC.
  • Publish the TXT record at default._bimi.<domain> with l= (logo) and a= (certificate).

Frequently asked questions

What is a VMC?

Verified Mark Certificate, a certificate from DigiCert or Entrust that confirms the trademark rights to the logo used. Mandatory for BIMI display in Gmail and Yahoo. Apple Mail also shows BIMI without a VMC.

What SVG specs does BIMI require?

SVG Tiny PS 1.2, a restricted subset without animations, external references or JavaScript. Square, viewBox 0 0 N N, sRGB colour profile.

Where is BIMI actually displayed?

Gmail (with VMC), Yahoo Mail (with VMC), Apple Mail (possible without VMC), Fastmail. Outlook.com has support planned; rollout is currently open.

Do I need p=quarantine or is p=none enough?

At least p=quarantine is mandatory for BIMI display. BIMI sends a strong trust signal, that should not apply to domains that have not even activated an anti-spoofing policy yet.

What does a VMC cost?

Typically EUR 1,200-1,800 per year directly from DigiCert/Entrust. Through Mailantis you get reseller pricing and support with the trademark proof process.