Definition
A BIMI Verified Mark Certificate (VMC) is a digital certificate that authenticates an organisation's ownership of a trademarked logo for use with BIMI (Brand Indicators for Message Identification). BIMI is an emerging email standard that enables mailbox providers to display a brand's logo next to authenticated emails in the recipient's inbox. The VMC is issued by an authorised Certificate Authority after validating that the organisation holds a registered trademark for the logo being displayed. The VMC serves as the trust anchor that prevents brand impersonation through logo display.
The cost structure for VMCs includes the certificate authority's issuance fee, which typically ranges from £1,500 to $2,000+ USD per year per logo. Additional costs may include: trademark registration if the brand has not already registered the logo (approximately £200-800 per class per country), legal fees for trademark verification, and the cost of creating a properly formatted SVG Tiny 1.2 logo file. For organisations with multiple brands or logos, each distinct logo requires its own VMC. Some organisations maintain separate VMCs for parent and subsidiary brands.
The requirements for implementing BIMI with a VMC are specific and non-trivial. The organisation must have DMARC configured with a policy of at least p=quarantine (p=reject is stronger but both satisfy the requirement). The sending domain must have valid SPF and DKIM configured. The logo must be in SVG Tiny 1.2 format, square or circular, and must match the registered trademark exactly. The BIMI record is published as a DNS TXT record at default._bimi.{domain} containing the URL of the logo file and the VMC location. Without a VMC, some mailbox providers (including Gmail) will display a generic BIMI logo; the VMC enables the verified brand logo to appear.
Best Practices
Establish DMARC reject or quarantine policy before pursuing BIMI VMC. BIMI requires DMARC enforcement as a prerequisite. If you are still at p=none, achieve p=quarantine or p=reject first. This typically takes 2-3 months of DMARC monitoring and sender authentication remediation. BIMI VMC should be seen as the final step in email authentication maturity, not the starting point.
Register your logo as a trademark before applying for a VMC. The VMC process requires proof of trademark registration for the logo. If your logo is not trademarked, initiate the trademark application process first. Trademark registration can take 6-12 months, so plan ahead. In the UK, trademark registration through the UK Intellectual Property Office costs £170-200 for a single class. The VMC cannot be issued until the trademark is registered.
Use a Certificate Authority approved by the BIMI working group. Not all CAs are authorised to issue VMCs. Approved CAs include DigiCert, Entrust, and GlobalSign. Verify that your chosen CA supports VMC issuance and understand their specific verification requirements, which may differ slightly between CAs. Some CAs offer BIMI-specific packages that include the VMC and technical support for implementation.
Create your SVG logo file following BIMI specifications precisely. The logo must be: SVG Tiny 1.2 format, square or circular aspect ratio, valid SVG code with no external references or scripts, and rendered at a single solid colour (no gradients, patterns, or opacity). Test the SVG file using BIMI validation tools before publishing. An invalid SVG file will cause the inbox logo to not appear.
Monitor BIMI display rates after implementation and verify with seed testing. Not all mailbox providers support BIMI yet. Gmail, Yahoo, and Fastmail have implemented BIMI logo display. Outlook and other major providers are in various stages of implementation. Use seed list testing to verify which inboxes display your logo. Monitor for any changes in BIMI-supported clients and update your BIMI record if requirements evolve.
Related Glossary Terms
DMARC Alignment
DMARC identifier alignment determines whether the domain in the From header matches the domains used in SPF and DKIM authentication. Strict or relaxed.
DMARC Policy Tags
DMARC DNS record tags including v, p, sp, rua, ruf, pct, adkim, aspf, fo, rf, and ri control authentication policy, reporting, and alignment enforcement.
Email Bandwidth
Email sending bandwidth and throughput refer to the rate at which emails can be delivered, typically 100-500 emails/second per IP. Bandwidth planning ensures campaigns complete within desired delivery windows.
Email Blacklist
An email blacklist (DNSBL) is a real-time database of IP addresses or domains known for sending spam or unwanted email.
Email Bulk
Bulk email classification distinguishes mass commercial messages from transactional emails, with specific authentication requirements for senders over 5,000 daily.
Email Bulkhead
Email bulkhead pattern isolates transactional emails from marketing sends using separate IPs, subdomains, and servers. This protects critical deliverability and prevents marketing issues from affecting essential transactional messages.
Frequently Asked Questions
A BIMI Verified Mark Certificate (VMC) is a digital certificate that proves you own the trademark for a logo you want to display in email inboxes via BIMI. It prevents brand impersonation by ensuring only the legitimate trademark holder can display their logo. Without a VMC, some providers display a generic or unverified logo, or no logo at all.
VMC pricing varies by Certificate Authority but typically ranges from £1,500 to $2,000+ per logo per year. This is an annual recurring cost. Additional costs include trademark registration (if not already registered), SVG logo creation, and potential consulting or implementation support fees. For multiple brands, each logo requires its own VMC.
The key requirements are: DMARC policy of p=quarantine or p=reject for your sending domain, valid SPF and DKIM authentication, a registered trademark for your logo, an SVG Tiny 1.2 format logo file matching the trademark, a VMC issued by an authorised CA, and a BIMI DNS record at `default._bimi.{domain}` pointing to the logo and VMC.
No. As of 2025, BIMI logo display is supported by Gmail, Yahoo, Fastmail, and some other providers. Outlook, Apple Mail, and many other clients have not implemented BIMI display. Adoption is growing but is not yet universal. BIMI also requires DMARC enforcement to function, which some organisations have not yet implemented.
BIMI VMC primarily improves brand recognition and trust in the inbox. Studies suggest that recognised brand logos increase open rates by 10-20% and improve overall inbox trust signals. The presence of a verified logo also reduces the likelihood of recipients marking the email as spam because it clearly signals the email's legitimate origin.