Folderly Flash Send-readiness test

Check BIMI readiness without overclaiming logo display

If Flash reports a BIMI readiness warning, start with the exact From domain and the authentication result. Flash checks the BIMI DNS shape and DMARC foundation; it does not fetch the referenced SVG or PEM, validate a certificate or guarantee that a mailbox provider will display a logo.

Why mailbox providers enforce this

BIMI is a brand assertion layered on authenticated mail, not an inbox-placement guarantee. The BIMI Group requires aligned SPF, DKIM and DMARC with an enforced policy, plus an SVG Tiny PS logo; a VMC or CMC is optional in the general guide but matters for providers that require certificate-backed display. Gmail's own setup guidance says supported clients need a PEM-backed mark, while participating providers apply their own display criteria.

Primary sources for this guidance

How to fix it

  1. Read the Flash finding for the exact From domain. A missing record, duplicate record, missing l= logo URL, unenforced DMARC policy or missing a= pointer is a different repair path; a temporary DNS lookup is reported as unknown rather than a penalty.
  2. Confirm that the received message passes SPF, DKIM and DMARC with an aligned domain. The one-point BIMI subcheck is separate from those message verdicts and cannot turn a failed authentication result into a pass.
  3. Move DMARC to p=quarantine or p=reject with 100 percent coverage only after every legitimate sending stream is aligned and monitored. A p=none policy may satisfy Gmail's bulk-sender minimum, but it is not BIMI-ready.
  4. Publish exactly one record at default._bimi.yourdomain with v=BIMI1 and an HTTPS l= logo URL. Add an HTTPS a= PEM URL when the target provider requires a VMC or CMC; do not publish duplicate TXT records.
  5. Prepare an SVG Tiny PS logo and verify its dimensions, profile and safe contents against the BIMI requirements. Flash reads the DNS pointer but does not download or validate the logo asset.
  6. Obtain VMC or CMC evidence when the target provider requires certificate-backed BIMI. Treat trademark, certificate issuance, PEM chain and provider eligibility as owner or provider checks, not as a Flash pass.
  7. Fetch the HTTPS SVG or PEM yourself, verify the certificate and URL response, then check a participating provider after DNS propagation. Provider display can lag or remain unavailable even when DNS is correct.
  8. Preserve the baseline and send one comparable production-path message after the DNS, asset and provider state is observable. Recheck BIMI plus SPF, DKIM, DMARC and placement evidence; a BIMI pass does not prove inbox placement.

Limitations

Flash checks one default._bimi TXT record for the From domain, its l= logo URL and a= certificate pointer, plus the DMARC policy and pct coverage used by the auth audit. It does not fetch or validate SVG or PEM contents, HTTPS responses, certificate chains, trademarks, provider eligibility, logo rendering, inbox placement or all BIMI selectors.

Next action Confirm the exact From domain and Flash finding, align SPF/DKIM/DMARC, enforce DMARC at 100 percent when safe, publish one BIMI record, verify the SVG or PEM and certificate with the owner or provider, then run one comparable production-path retest after propagation.
Run a free test →

FAQ

Does a BIMI warning mean SPF, DKIM or DMARC failed?
Not necessarily. BIMI is a separate, lower-weight readiness subcheck. Read the message-level SPF, DKIM and DMARC verdicts and alignment findings first; a BIMI warning alone does not explain every placement result.
Can I use BIMI with DMARC p=none?
Gmail may accept p=none as the minimum DMARC policy for a bulk sender, but the BIMI Group requires enforcement for BIMI readiness. Use p=quarantine or p=reject at 100 percent only after legitimate streams are aligned and the change is safe.
Does Flash validate my SVG, PEM or certificate?
No. Flash checks one default._bimi DNS record, its l= and a= tags and the DMARC enforcement foundation. It does not fetch or parse the referenced files, validate trademark or certificate issuance, or test a provider's logo UI.
Will BIMI improve inbox placement?
BIMI can add brand context where a provider displays it, but it is not a deliverability or placement guarantee. Authentication, reputation, complaints, message content and provider-specific evidence still matter.

Related

Content record Owner: Folderly Flash content operations Reviewed: 2026-10-13 Maintenance trigger: Review when Flash changes the BIMI DNS or DMARC audit, when the BIMI Group or a target mailbox provider changes SVG, certificate or display requirements, or when Gmail changes its BIMI setup guidance.
Want a deliverability engineer to fix this for you? Hand it to Folderly →