ST. PETERSBURG, FL, September 2026. Email deliverability testing company MailGenius is setting out the full requirement chain behind BIMI, the standard that puts a verified brand logo beside authenticated email in supporting inboxes. It argues that the obstacle stopping a BIMI project is usually the authentication work underneath it rather than the certificate purchase teams tend to budget for.
BIMI is frequently discussed as a branding decision with a price attached. In practice the certificate is the last obstacle a sender meets, not the first, and the work that stalls most projects costs nothing to buy and several weeks to finish.
"Teams budget for the certificate and then find out the certificate was never the hard part," said Troy Ericson, owner of MailGenius. "Getting to DMARC enforcement means finding every system that sends email for your company and proving each one authenticates. That is weeks of unglamorous work, and it is worth doing whether or not you ever publish a logo."
What BIMI requires before a logo appears
The standard is maintained by the AuthIndicators Working Group, which publishes its requirements openly at bimigroup.org. A sender publishes a TXT record at a fixed location built from a selector and the bimi label on their domain. That record points to a logo file and, where required, to a certificate. The logo must be an SVG in the constrained Tiny-PS profile, hosted at a stable address and served with the correct content type.
The prerequisite sits underneath all of that. The BIMI Group states that BIMI requires DMARC alignment at a minimum, and defines enforcement as a DMARC policy of quarantine or reject rather than a policy of none. A sender whose DMARC record is still in monitoring mode does not qualify, no matter what else is in place.
The group is equally direct about what BIMI is not. In its published guidance, BIMI does not change message delivery. It is a display signal that sits on top of strong authentication.
Where senders stall
Reaching DMARC enforcement means every system sending email for the domain has to authenticate correctly first. Marketing platforms, transactional providers, support desks, invoicing systems and anything a department signed up for without telling anyone. Each has to be signing with DKIM or authorized in SPF, and aligned to the domain recipients see.
That inventory is where BIMI projects go quiet. It is unglamorous work, it belongs to several teams at once, and it produces nothing visible until it is finished. Moving a policy to quarantine before that inventory is complete risks quarantining the organization's own legitimate email, which is the outcome that makes a team retreat to monitoring and stay there.
The order that works runs the other way around. Complete the sending inventory, confirm alignment, advance the DMARC policy, and treat the logo as the last step rather than the goal.
What the certificate costs
Certificates for BIMI come in two forms, a Verified Mark Certificate and a Common Mark Certificate, and both are issued by an approved Mark Verifying Authority that validates the organization and its rights to the logo. Mailbox providers decide which types they accept.
Published pricing is available. DigiCert lists its Verified Mark Certificate at $1,752 and its Common Mark Certificate at $1,416, each on a twelve-month auto-renewing subscription, checked on 2026-08-25. Those are one authority's published list prices on one date rather than a market rate. Other authorities price differently, and a registered trademark is typically required for a VMC, which for organizations that do not already hold one is a separate expense on a much longer timeline than the certificate itself.
Which inboxes display a BIMI logo
The BIMI Group publishes where logos can appear, and support varies by provider and by view. Its guidance lists Apple, AU (KDDI), Fastmail, Gmail, La Poste, Yahoo and Zone among participating mailbox providers, with some displaying the logo beside the sender name in an open message and some also in the inbox list view. Each provider sets its own criteria and can decline to display a logo on reputation grounds even when the configuration is correct.
Senders can confirm where they stand before committing to any of it. MailGenius offers a free BIMI checker at https://www.mailgenius.com/bimi-checker/, which confirms whether a domain's BIMI setup passes inspection, alongside free SPF, DKIM and DMARC record checkers and a free inbox placement test at https://www.mailgenius.com/inbox-placement-test/ that evaluates a real message rather than a pasted draft.
"Read the DMARC result first," Ericson said. "If the policy is not at enforcement, the certificate question does not arise yet, and the weeks you spend finishing authentication will do more for your email than the logo will."
About MailGenius
MailGenius is a free email deliverability testing platform that simulates inbox behavior across major providers including Gmail, Outlook, and Yahoo, so senders can catch deliverability issues before they hit send. Every test returns a full breakdown of what is helping or hurting inbox placement, covering authentication, content, and blocklist status. MailGenius also offers free SPF, DKIM, DMARC, and BIMI record checkers and hands-on deliverability consulting led by owner Troy Ericson.