Clients ask for this because they saw a competitor's logo in their inbox. Most of them don't need it yet, and a few can't get it without a step they haven't taken.
BIMI (Brand Indicators for Message Identification) displays your logo next to your email in a recipient's inbox, the same way a contact photo shows for a person. It's a recognition signal, not a deliverability fix: it doesn't improve inbox placement or authentication on its own, it adds a visual trust cue once your mail is already authenticated correctly.
BIMI requires DMARC enforcement, meaning a policy of p=quarantine or p=reject, applied to a meaningful percentage of your mail, not the p=none monitoring mode most domains start with. If you haven't moved past monitoring mode, see our guide to SPF, DKIM, and DMARC first. This single prerequisite is why most BIMI setup requests stall: the domain isn't ready for it yet, regardless of logo file or DNS record.
Gmail requires a Verified Mark Certificate, a paid certificate issued by one of a small number of approved certificate authorities, as legal proof the logo belongs to your organization. Yahoo and some other providers show a BIMI logo without requiring one. That's why the exact same BIMI setup can show a logo in Yahoo and nothing in Gmail: the VMC gate is provider-specific, not a universal BIMI requirement.
The VMC cost and setup effort make sense once a recognizable logo at real volume measurably moves open rates or recipient trust, which mostly describes consumer brands with name recognition sending high volume. A business sending moderate volume to an audience that already knows who's emailing them gets a small visual nicety, not a meaningful return. We tell most clients to get DMARC to enforcement first and revisit BIMI once that's stable and volume justifies it.
Check whether you're BIMI-ready: look up your DMARC policy with dmarcian's DMARC Inspector. If it shows p=none, that's the step to fix before anything BIMI-related.
Yes, and it has to be enforced, not monitoring-only. BIMI requires a DMARC policy of p=quarantine or p=reject with a high enough percentage applied. A domain still at p=none, the common starting point, won't qualify until enforcement is turned on.
Gmail requires a Verified Mark Certificate (VMC), issued by a small number of approved certificate authorities, as proof the logo legally belongs to your organization. Other providers, including Yahoo, display a BIMI logo without requiring a VMC, which is why the same setup shows a logo in one inbox and not another.
Usually not yet. The VMC cost makes sense once a recognizable logo at scale measurably improves open rates or trust, which matters most for consumer brands sending high volume. A small business sending modest volume to an audience that already knows the sender gets little practical lift from it.
We'll check your DMARC enforcement status and tell you directly whether it's worth pursuing yet.
Book a Deliverability Call →