Full Email Infrastructure with BIMI Logo Display - From Failing DMARC to Verified Brand in 3 Weeks
DMARC enforced at p=reject. BIMI logo verified and displaying in Gmail and Apple Mail. Zero legitimate email blocked.
The Challenge
A Dubai-based marketing agency was experiencing significant email deliverability issues - client campaign emails landing in spam, no DMARC policy in place, and multiple legacy ESP integrations creating SPF alignment failures. They also wanted to differentiate their client pitches by demonstrating brand-verified email with BIMI logo display.
Our Approach
Full Domain & Sender Audit
We audited 3 sending domains, 7 authorised senders (ESP, CRM, helpdesk, internal mail), and found 4 SPF alignment failures, missing DKIM for 2 senders, and no DMARC record. We also found the agency was inadvertently sharing an IP with a known spam sender through their ESP.
Authentication Remediation
We corrected SPF records to include all authorised senders, configured DKIM per sender and per domain, and deployed DMARC at p=none to begin collecting aggregate reports before moving to enforcement.
DMARC Ramp to Enforcement
Over 2 weeks of aggregate report monitoring, we confirmed all legitimate senders were authenticated and progressed DMARC from p=none → p=quarantine → p=reject. Zero legitimate emails were blocked during the ramp.
BIMI & VMC Implementation
We procured a Verified Mark Certificate from DigiCert for the agency's primary domain, configured the BIMI DNS record, and validated logo display across Gmail, Apple Mail, and Yahoo Mail. The agency's logo now displays in inbox clients used by their clients' marketing teams.
Results
p=reject
DMARC policy enforced on primary domain
100%
Legitimate senders authenticated before enforcement
3
Domains fully authenticated
BIMI
Logo verified and displaying in Gmail & Apple Mail
Technology Stack
Working on a similar challenge?
Book a free discovery call and let's talk through your situation.
Book a Free Discovery Call