Skip to content

Email security · BIMI · Verified Mark Certificates · Dubai, Muscat and Doha

BIMI setup: your logo and blue checkmark in Gmail

BIMI puts your registered logo, and in Gmail a blue verified checkmark, next to every email you send. It is a process, not a switch: we align SPF, DKIM and DMARC, arrange the certificate, publish the record and check it works.

Why set up BIMI with us?

  • Since 2007in the Middle East, with 1,500+ active cloud customers and offices in Dubai, Muscat and Doha.

  • Google Cloud Premier Partnerand Microsoft Solutions Partner for Modern Work: we set up DKIM signing in Google Workspace and Microsoft 365 as part of the same work.

  • DMARC is our daily workwe take domains from p=none to enforcement and manage them afterwards, which is the hardest part of BIMI.

  • One team for the whole chainDNS records, the certificate, the logo file and the final check in Gmail.

BIMI (Brand Indicators for Message Identification) shows your company logo next to your emails in inboxes that support it, and in Gmail adds a blue verified checkmark. It needs SPF, DKIM and DMARC at enforcement, a registered trademark and a Verified Mark Certificate. Gulf Infotech runs the whole BIMI setup end to end, from DNS to the final check.

  1. p=nonereports start
  2. Map sendersevery service found
  3. Fix SPF and DKIMeach sender aligned
  4. p=rejectspoofing refused

What does BIMI do for your business?

  1. Your logo in the inbox

    recipients see your brand next to your name instead of a grey initial.

  2. A blue checkmark in Gmail

    with a Verified Mark Certificate, Gmail tells the reader that you own the domain and the logo.

  3. Fewer convincing fakes

    BIMI only works when DMARC is at quarantine or reject, so spoofed mail using your exact domain is already blocked or sent to spam.

  4. Every email becomes brand space

    invoices, quotes and replies from every staff member carry the same verified logo.

How does BIMI setup work, end to end?

  1. Domain check

    we review SPF, DKIM, DMARC, MX and DNS for every domain you send from.

  2. SPF and DKIM aligned

    every service that sends as your domain (Google Workspace or Microsoft 365, your ERP, CRM, website forms and marketing tools) is authenticated and aligned with your From address.

  3. DMARC at enforcement

    we move your policy from p=none to quarantine or reject in stages, reading the reports so legitimate mail is never blocked.

  4. Trademark, your part

    your logo must be a registered trademark. Registration is done by your company with the trademark office, and Google notes it can take 6 to 12 months, so start early.

  5. Verified Mark Certificate, our part

    once DMARC is enforced and the trademark is registered, we arrange the VMC with an approved Certificate Authority, which validates your domain and your trademark.

  6. Logo and BIMI record

    we prepare the logo as an SVG Tiny PS file, host the logo and the certificate over HTTPS, and publish the BIMI record in your DNS.

  7. Check it works

    we confirm the records are found and valid, then check that your logo and checkmark appear in Gmail and other mailbox providers that support BIMI.

Who does what in a BIMI project?

Takeaway: apart from the trademark and the approvals, the work is ours. The trademark is usually the longest step, so it pays to start it while we fix DMARC.

  • Step: SPF, DKIM and DMARC

    Your company: Approves DNS changes and lists the systems that send mail

    Gulf InfotechConfigures, aligns and moves DMARC to enforcement

  • Step: Trademark

    Your company: Registers the logo as a trademark

    Gulf InfotechTells you which version of the logo the certificate needs

  • Step: Verified Mark Certificate

    Your company: Provides company and trademark documents for validation

    Gulf InfotechArranges the certificate and handles the application

  • Step: Logo file and BIMI record

    Your company: Approves the final logo

    Gulf InfotechBuilds the SVG Tiny PS file, hosts it and publishes the record

  • Step: Checking

    Your company: Sends test emails if needed

    Gulf InfotechVerifies the records and the display in Gmail and other inboxes

Why do SPF, DKIM and DMARC have to be right first?

Because Gmail and other providers show a BIMI logo only for mail that passes DMARC on a domain whose policy is quarantine or reject. With p=none, nothing is shown, whatever certificate you hold. Most of a BIMI project is therefore the DMARC work: finding every system that sends as your domain, fixing SPF and DKIM for each one, and tightening the policy without losing legitimate invoices or notifications. If your domain is already at enforcement, BIMI can follow as soon as the trademark and certificate are ready. See DMARC, SPF and DKIM setup.

How much does BIMI cost?

We quote BIMI per domain. The quote covers the DMARC work needed to reach enforcement, the Verified Mark Certificate we arrange and the setup and checking of the BIMI record. Trademark registration fees are paid by your company to the trademark office. After go-live, we recommend our managed DMARC service, with quarterly reports and health checks, so your domain stays at enforcement and your logo keeps showing. We quote in OMR, AED or QAR, and in USD for Saudi Arabia, Kuwait and Bahrain.

Frequently asked questions

Not sure what your domain publishes today? We check it for you.

What is BIMI?

BIMI, Brand Indicators for Message Identification, is an email standard that lets mailbox providers display your registered logo next to messages from your domain. It works only for mail that passes DMARC on a domain at quarantine or reject. In Gmail, a Verified Mark Certificate also adds a blue checkmark that confirms you own the domain and the logo.

Do we need a registered trademark?

Yes, for the blue checkmark. A Verified Mark Certificate is issued only for a logo registered as a trademark, and the logo shown must match the registered one. Registering the trademark is your company's part and can take 6 to 12 months, according to Google, so we suggest starting it while we bring DMARC to enforcement.

Do you arrange the Verified Mark Certificate?

Yes. Once your domain is at quarantine or reject and your trademark is registered, we arrange the Verified Mark Certificate with an approved Certificate Authority and handle the application. The Certificate Authority validates your domain and your trademark before issuing it. We then host the certificate and reference it in your BIMI record.

Where will our logo appear?

In Gmail, and in other mailbox providers that support BIMI, next to messages from your domain that pass DMARC. Gmail shows the blue checkmark when the record points to a Verified Mark Certificate. Each provider decides when to display logos, so we check the display in Gmail after setup and confirm the records are valid for the others.

How long does BIMI take?

The trademark is usually the longest part. If your logo is already registered and DMARC is at enforcement, the certificate, logo file and record can follow quickly. If DMARC is still at p=none, moving safely to enforcement takes a few weeks of monitoring. These timelines are indicative and depend on your senders and the trademark office.

Put your logo on every email

Send us your domain and tell us where your trademark stands. We will check your SPF, DKIM and DMARC and tell you what is left before your logo can show.

Book a free consultation

Tell us what you are working on. A consultant replies within one working day.

What would you like to talk about?