What Verified Mark Certificates (VMC) is#
A VMC is an X.509 certificate issued by an approved authority (DigiCert or Entrust) that binds a registered trademark logo to a domain. Gmail and Apple Mail require a VMC or CMC to render a BIMI logo.
Why it matters#
The VMC is the trust anchor: it proves the logo belongs to the trademark holder, preventing brand impersonation in the inbox.
What Postmark handles#
Most platforms, including Postmark, generate the records or settings you need under a domain authentication or sending settings page, and expose bounce and complaint data in reports. Confirm the exact location in Postmark's current documentation.
What you still own#
- Confirm your logo is a registered trademark in an accepted jurisdiction (USPTO, EUIPO, UKIPO, JPO, and others).
- Prepare the exact trademarked artwork as SVG Tiny PS.
- Complete organization validation with the CA, including notarized identity verification.
- Receive the PEM certificate, host it over HTTPS, and reference it in the a= tag of your BIMI record.
- Calendar the renewal; VMCs are valid for one year.
Common mistakes#
- Submitting a logo that differs from the registered mark, even slightly.
- Letting the certificate expire, which silently removes the logo.
- Assuming a pending trademark application qualifies; it must be registered.
Frequently asked questions#
How much does a VMC cost?
Roughly $1,000 to $1,500 per year per logo, depending on the CA.
How long does issuance take?
Typically 2 to 6 weeks, mostly spent on organization and trademark validation.
Do I need one VMC per domain?
One VMC can cover multiple domains using SANs, if they share the same trademark.
Does Postmark set up Verified Mark Certificates (VMC) automatically?
Postmark provides the values and some checks, but publishing DNS, aligning domains, and monitoring results remain your responsibility.