The logo in the inbox is the cheap part of BIMI. The certificate behind it is where the budget goes.

BIMI puts a verified brand logo next to your mail. It's still an IETF draft, but the major providers have already settled the rules.

Publishing the DNS record costs nothing — displaying in Gmail or Apple Mail is where it gets expensive, because both require a Verified Mark Certificate (VMC).

What a VMC actually takes:

1. A registered trademark for your logo. Filing runs months and isn't free.

2. The certificate: $1,000–$1,500 a year, from one of only two issuers (DigiCert or Entrust).

3. DMARC already at enforcement — p=quarantine or p=reject (RFC 7489 §6.3). BIMI will not work at p=none. Hard prerequisite, not a recommendation.

4. Your logo rebuilt as SVG Tiny 1.2 PS — a restrictive profile most standard logos fail without rework.

Yahoo, AOL, and Fastmail show BIMI logos without a VMC. If your audience skews there, you can ship the logo for free.

What to do: don't start with the certificate. Get DMARC to enforcement first — it's the prerequisite and the part that actually protects you. The logo is the reward, not the goal.

Full BIMI setup and cost breakdown:

https://dmarcguard.io/learn/bimi/?utm_source=facebook&utm_medium=social&utm_campaign=jul2026&utm_content=li-w6-wed

#BIMI #EmailSecurity

Support Meysam Azad

DMARC enforcement roadmap

BIMI deployment is hard

how to set up BIMI for your domain?