Skip to content

Home Topics BIMI and VMC Certification BIMI

BIMI and VMC Certification · BIMI

BIMI and UK GDPR and PECR compliance in the United Kingdom

Short answer

PECR governs electronic marketing; the soft opt-in applies only to existing customers for similar products. BIMI supports compliance by making sender identity verifiable and recipient choices enforceable.

What UK GDPR and PECR requires#

PECR governs electronic marketing; the soft opt-in applies only to existing customers for similar products.

What BIMI is#

BIMI (Brand Indicators for Message Identification) is a DNS record that points to a brand's logo so mailbox providers can display it next to authenticated messages. It depends on DMARC enforcement and, at Gmail and Apple, on a Verified Mark Certificate.

Why it matters#

A verified logo increases open rates and trust, and the DMARC prerequisite forces a domain to finish its authentication work. It is also a visible signal that a message is not a phish.

How BIMI supports UK GDPR and PECR compliance#

Regulators and recipients need to identify who sent a message and trust that opt-out mechanisms work. BIMI contributes by a verified logo increases open rates and trust, and the DMARC prerequisite forces a domain to finish its authentication work. It is also a visible signal that a message is not a phish.

Implementation steps#

  1. Reach DMARC p=quarantine (pct=100) or p=reject on the sending domain.
  2. Produce your logo as an SVG Tiny 1.2 Portable/Secure file, square, centered, with a solid background.
  3. Obtain a VMC or CMC from an approved certificate authority if you want display in Gmail and Apple Mail.
  4. Publish default._bimi.yourdomain.com with l= (logo URL) and a= (certificate URL).
  5. Validate with a BIMI inspector and send a test to Gmail, Yahoo, and Apple seed accounts.
Example BIMI record
default._bimi.example.com.  IN TXT  "v=BIMI1; l=https://example.com/brand/logo.svg; a=https://example.com/brand/vmc.pem"

Frequently asked questions#

Does BIMI work without a VMC?

Yahoo and Fastmail display BIMI logos with DMARC enforcement alone. Gmail and Apple require a VMC or CMC.

What image format does BIMI require?

SVG Tiny 1.2 Portable/Secure. No PNG, JPG, or standard SVG.

Does BIMI improve deliverability?

Not directly. Its prerequisite, DMARC enforcement, does. The logo mainly lifts engagement and trust.

Analyse your own setup

All analysers
Technical analysis

DMARC record analyser

Grade a DMARC record on enforcement, not just syntax.

Runs in your browser

Keep reading on BIMI