Donor lists age quickly; re-engagement and sunset policies protect reputation.
What Verified Mark Certificates (VMC) is#
A VMC is an X.509 certificate issued by an approved authority (DigiCert or Entrust) that binds a registered trademark logo to a domain. Gmail and Apple Mail require a VMC or CMC to render a BIMI logo.
Why it matters#
The VMC is the trust anchor: it proves the logo belongs to the trademark holder, preventing brand impersonation in the inbox.
Implementation plan for nonprofits#
- Confirm your logo is a registered trademark in an accepted jurisdiction (USPTO, EUIPO, UKIPO, JPO, and others).
- Prepare the exact trademarked artwork as SVG Tiny PS.
- Complete organization validation with the CA, including notarized identity verification.
- Receive the PEM certificate, host it over HTTPS, and reference it in the a= tag of your BIMI record.
- Calendar the renewal; VMCs are valid for one year.
Priorities specific to nonprofits#
Donor lists age quickly; re-engagement and sunset policies protect reputation. Weight your effort toward the steps above that address this constraint first, and measure with metrics that match how nonprofits generate value from email.
Common mistakes#
- Submitting a logo that differs from the registered mark, even slightly.
- Letting the certificate expire, which silently removes the logo.
- Assuming a pending trademark application qualifies; it must be registered.
Frequently asked questions#
How much does a VMC cost?
Roughly $1,000 to $1,500 per year per logo, depending on the CA.
How long does issuance take?
Typically 2 to 6 weeks, mostly spent on organization and trademark validation.
Do I need one VMC per domain?
One VMC can cover multiple domains using SANs, if they share the same trademark.