BIMI, VMC, CMC and Apple Business Connect Branded Mail in 2026: the complete decision guide

In 2022 BIMI was a “nice to have someday” item that most senders postponed because the VMC requirement (registered trademark plus $1,500/year certificate) made it expensive and the inbox support was limited to Gmail and Yahoo. Three things changed in 2024-2026 that made BIMI a live decision again. Apple Mail added BIMI support across iOS 16+, iPadOS 16+, macOS Ventura+ and iCloud.com. Gmail introduced CMC (Common Mark Certificate) as a no-trademark alternative path in early 2025. And Apple launched Apple Business Connect Branded Mail as a completely separate, free path that displays your logo in Apple Mail without requiring BIMI at all. The Microsoft May 5, 2025 enforcement and PCI DSS v4.0 (effective March 31, 2025) raised the operational stakes around the underlying DMARC enforcement that BIMI requires — for compliance-scoped senders, the DMARC migration is now mandatory regardless of BIMI plans, which means BIMI’s marginal cost dropped substantially. The full authentication baseline that BIMI sits on top of is covered in our email authentication 2026 guide; this post focuses specifically on the BIMI layer.

This is the consolidated operator decision guide: how the four 2026 options actually work, the rendering pipeline behind logo display, the per-provider support matrix as of April 2026 with European regional providers included, deployment sequence with realistic timelines, the all-in cost reality (not just the per-year certificate price), and a calibrated decision tool for picking the right strategy given your trademark situation, audience composition, volume and budget.

The BIMI rendering pipeline — what happens between sender and inbox display

Before the per-option detail, the diagram below shows what actually happens between you publishing a BIMI record and a logo rendering in someone’s inbox. The point is to make explicit which steps are mandatory, which are optional, and where the four certificate paths (Self-asserted, CMC, VMC, Apple Business Connect) diverge in the verification chain.

The diagram makes explicit the most-misunderstood aspect of BIMI: the four options are not mutually exclusive. Apple Business Connect runs in parallel to BIMI, so the recommended pattern for B2C senders is “BIMI for non-Apple coverage + ABC for Apple coverage”. Even VMC operators benefit from also enrolling in ABC because ABC adds Apple-specific brand info display that VMC does not provide.

What changed: the four-option landscape in 2026

The 2022 question was “should we get a VMC?” The 2026 question is “which of the four logo display options fits our profile?”. Here are the four options:

Option 1 — Self-asserted BIMI (no certificate)

Self-asserted BIMI publishes a BIMI DNS record pointing to your SVG logo without any certificate. Yahoo Mail, Fastmail and AOL display logos from self-asserted records. Gmail and Apple Mail do not — they require a certificate.

Cost: free (just the SVG conversion and DNS record). Deployment time: 1-2 weeks once DMARC is at enforcement. Reach: roughly 15-20% of consumer email by inbox share (Yahoo + AOL + Fastmail combined).

Best for: operators who want to capture the easy wins (Yahoo display) before committing to certificate spending. Often the right starting point even if you plan to upgrade later.

Option 2 — CMC (Common Mark Certificate)

CMC is the Gmail-introduced alternative that does not require a registered trademark. The verification is “your logo has been publicly displayed on your domain for at least 12 months”, verified through public archive evidence (Wayback Machine snapshots, CT log records, etc.). Gmail accepts CMCs and displays the logo, but does not award the blue checkmark — that remains exclusive to VMC.

Cost: similar to VMC, $1,000-1,500/year from authorised CAs (DigiCert, GlobalSign). Deployment time: 7-14 days for the certificate after DMARC enforcement. Reach: Gmail (logo only, no checkmark) plus Yahoo plus the self-asserted-supporting providers.

Best for: smaller brands, businesses with a recognisable logo but no registered trademark, or brands going through a logo refresh that has not been re-trademarked yet.

Option 3 — VMC (Verified Mark Certificate)

VMC is the original BIMI certificate path. Requires a registered trademark in one of 17 recognised IP offices (USPTO, EUIPO, IPO UK, IP Australia, etc.), Extended Validation by an authorised CA, and the SVG logo matching the trademarked logo exactly. Awards the blue checkmark in Gmail, the purple checkmark in Yahoo, and full logo display across Gmail, Yahoo, Apple Mail and supporting providers.

Cost: $1,000-1,500/year from DigiCert (the only CA Apple Mail accepts after Apple stopped accepting Entrust certificates issued after November 15, 2024). Plus the trademark registration if you do not have one (USPTO around $250-700, EUIPO around €850-1,000, plus attorney fees that can add $1,500-3,000 if you outsource).

Deployment time: 7-10 days once DMARC is enforced and trademark is registered. If you need to register the trademark too, add 6-18 months for the registration process.

Best for: enterprises and established brands with registered trademarks who want maximum visual trust signal across all major mailbox providers.

Option 4 — Apple Business Connect Branded Mail

Apple Business Connect (ABC) Branded Mail launched in 2024 as Apple’s parallel path to BIMI. It is not BIMI — it is a separate Apple-only system that lets businesses display their logo and brand information in Apple Mail (iOS, macOS, iCloud.com) using Apple’s verification rather than VMC/CMC certificates.

Cost: free. Deployment time: 1-3 weeks for verification through Apple Business Connect portal. Reach: Apple Mail across iCloud.com, iOS Mail and macOS Mail. Does not require DMARC enforcement (unlike BIMI), though Apple recommends it.

Best for: operators heavy on B2C and consumer audiences (where iCloud Mail share is significant), brands without registered trademarks who want Apple Mail logo display, brands with mixed BIMI strategy who want maximum Apple Mail coverage. Many operators implement BIMI + ABC together to cover the most surface.

Cost-benefit comparison across the four options by sender tier

The chart below shows the all-in first-year cost for each BIMI option mapped to typical sender tiers, alongside the inbox reach percentage each option provides. The visualisation makes explicit that the cost-per-percent-of-reach varies materially across options — and that the optimum strategy is not always the highest-reach option for budget-constrained senders.

BIMI options first-year all-in cost vs consumer inbox reach, April 2026 pricing

Categoría	First-year all-in cost (€, low estimate)	First-year all-in cost (€, high estimate)	Consumer inbox reach (%)
Self-asserted BIMI	0	2000	18
CMC + ABC	1500	3500	80
VMC + ABC (trademark exists)	1500	3500	82
VMC + ABC (need trademark)	5000	15000	82
ABC only	0	500	10

Costs reflect April 2026 verifiable pricing from DigiCert, GlobalSign, USPTO, EUIPO, plus typical SVG conversion costs from independent designers. Inbox reach percentages are derived from Litmus Email Client Market Share Q1 2026 reports cross-referenced with each option's provider support matrix. Self-asserted BIMI provides minimal certificate cost but limited reach because Gmail and Apple Mail (representing roughly 60-65% of consumer email by inbox share) require certificates for logo display. The CMC + ABC combination delivers the best cost-per-percent-of-reach for senders without registered trademarks. VMC adds the blue checkmark trust signal at Gmail (and purple at Yahoo) which is materially valuable for financial services, healthcare and brand-sensitive consumer categories — but the VMC certificate cost is identical to CMC; the VMC premium is the trademark registration cost when starting from no trademark. Apple Business Connect alone is the right choice when audience is heavily B2B Microsoft and BIMI ROI is poor — Microsoft does not support BIMI in any form as of April 2026. Note: chart uses log scale to display both cost and percentage on comparable axis; absolute reach percentages are accurate, cost values should be read from the data labels.

The operational decision tree

Mapping the four options to operator profiles:

Profile A — large enterprise with registered trademark, B2C heavy, sending 5M+ emails monthly to consumers: VMC + Apple Business Connect. The blue checkmark and purple checkmark visibility justify the VMC spend at this volume. Apple Business Connect adds the Apple Mail surface that VMC also covers, but provides redundancy if VMC has any issue.

Profile B — mid-market B2B SaaS with registered trademark, sending 100K-1M monthly to mixed audience: VMC alone (skip Apple Business Connect because B2B is heavily corporate Microsoft/Google Workspace, less Apple Mail). The cost is justified by the trust signal in inboxes; the Apple Mail surface is small for B2B.

Profile C — consumer brand without registered trademark or with logo refresh in progress: CMC + Apple Business Connect. CMC gives you Gmail and Yahoo logo display; Apple Business Connect gives you Apple Mail. Total cost: $1,000-1,500/year for CMC, free for ABC. No trademark registration needed.

Profile D — small brand, low volume (under 50K monthly), tight budget: Self-asserted BIMI + Apple Business Connect. Free. Captures Yahoo, AOL, Fastmail logos plus Apple Mail. Skip Gmail logo display until volume or budget justifies the certificate.

Profile E — high-stakes financial services, healthcare, legal, government: VMC. The trust signal in Gmail (blue checkmark) is worth the spend regardless of the operational details. Customers know what the checkmark means; not having it when phishing is a constant threat is operationally costly.

What you actually have to do — the deployment sequence

Regardless of which option you pick, the deployment sequence follows the same skeleton. Skipping steps produces the same kind of half-implemented BIMI that does not display logos for months.

Step 1 — DMARC enforcement (the real work)

BIMI requires DMARC at p=quarantine or p=reject with pct=100. p=none does not qualify. Apple Business Connect technically does not require DMARC at enforcement but Apple’s recommendation in their developer documentation strongly suggests you implement it anyway.

Most senders we work with are at p=none or p=quarantine pct=10-25. Moving to full enforcement is the project that gates BIMI. We covered the migration sequence in detail in our DMARC enforcement survival guide — it is an 8-12 week project for a typical mid-market organisation, longer for enterprises with shadow IT senders.

If you are starting from p=none, expect 8-16 weeks before BIMI deployment. Plan accordingly. Note that DMARC enforcement also gates other BIMI-adjacent capabilities — if your BIMI deployment is part of a broader deliverability programme that includes IP warmup or reputation recovery, the same DMARC migration is the prerequisite for our IP warmup 2026 guide and our Gmail reputation recovery framework.

Step 2 — SVG logo preparation

BIMI requires SVG Tiny PS (Portable/Secure) format. This is not the same as standard SVG — Tiny PS removes scripts, external references, and certain features for security. The file must:

• Use SVG Tiny 1.2 PS specification
• Stay under 32 KB
• Have a 1:1 square aspect ratio
• Use viewBox="0 0 X X" (square)
• Not reference external resources
• Not contain scripts

Most logos need conversion work. If your logo has gradients or complex paths, the conversion to SVG Tiny PS may require simplification. The BIMI Group provides a validator tool that confirms compliance.

For Apple Business Connect, the logo requirements differ — Apple uses its own format requirements managed through the ABC portal. You may need a separate logo asset for Apple even if your BIMI SVG is ready.

Step 3 — Trademark verification (VMC only)

If you are pursuing VMC, the trademark must be:

• Registered in one of the 17 recognised IP offices
• Active (not expired or pending) for at least 397 days from VMC issuance
• Match the SVG logo exactly (any colour shade variation or text addition causes rejection)

The trademark verification by the CA includes Extended Validation of your business identity (EV-style verification, often video call). The full VMC application takes 7-10 days once DMARC is at enforcement and trademark is verified.

Step 4 — DNS records

The BIMI record is a DNS TXT record on the _bimi subdomain:

_bimi.example.com. IN TXT "v=BIMI1; l=https://example.com/logo.svg; a=https://example.com/vmc.pem"

The l= parameter points to the SVG logo (HTTPS required). The a= parameter is optional and points to the VMC/CMC PEM file (if using a certificate). Self-asserted BIMI omits the a= parameter.

For Apple Business Connect, no DNS record is required — verification happens through the ABC portal directly.

Step 5 — Wait for indexing

Even with everything correctly configured, mailbox providers take days to weeks to start displaying the logo. Gmail typically takes 7-14 days to surface a new VMC/CMC. Apple Mail takes 14-30 days. Yahoo can be instant or up to 7 days. The delay is normal and not indicative of configuration error.

Practical implication: do not announce your BIMI launch until logos are actually displaying in test sends to multiple providers. The “we shipped BIMI yesterday and it is not working” support tickets are usually just within-normal indexing delay.

Cost comparison — the real total cost

The published per-year price of certificates is a fraction of the total BIMI cost. Here is the all-in cost picture:

VMC route (DigiCert)

• DigiCert VMC certificate: $1,000-1,500/year
• Trademark registration (if needed): $250-1,000 application fees
• Trademark attorney fees (often required): $1,500-3,000 first year
• SVG conversion (in-house or designer): $500-2,000 one-time
• DMARC enforcement project (if not already done): $5,000-30,000 in time/consulting
• Operational maintenance (DNS, certificate renewal, monitoring): roughly $500/year
• Total first-year cost: $7,750-37,500
• Total subsequent-year cost: $1,500-2,000

CMC route (DigiCert/GlobalSign)

• DigiCert/GlobalSign CMC certificate: $1,000-1,500/year
• Logo public display verification (in-house, no fee): $0
• SVG conversion: $500-2,000 one-time
• DMARC enforcement project: $5,000-30,000 in time/consulting
• Operational maintenance: $500/year
• Total first-year cost: $6,000-34,000
• Total subsequent-year cost: $1,500-2,000

Self-asserted BIMI

• SVG conversion: $500-2,000 one-time
• DMARC enforcement project: $5,000-30,000
• Hosting the SVG: minimal (CDN cost)
• Total first-year cost: $5,500-32,000
• Total subsequent-year cost: $0-200

Apple Business Connect Branded Mail

• ABC portal verification: free
• Logo asset preparation: minimal (Apple handles formatting)
• DMARC recommended but not required
• Total first-year cost: $0-500
• Total subsequent-year cost: $0

What providers actually display (April 2026)

The provider support matrix shifts every few months. Here is the current state as of April 2026:

Provider	Self-asserted	CMC	VMC	Apple Business Connect
Gmail (consumer + Workspace)	No display	Logo, no checkmark	Logo + blue checkmark	N/A
Yahoo Mail	Logo display	Logo display	Logo + purple checkmark	N/A
Apple Mail (iCloud, iOS, macOS)	No display	Logo display	Logo display	Logo + brand info
Fastmail	Logo display	Logo display	Logo display	N/A
AOL	Logo display	Logo display	Logo display	N/A
La Poste (FR)	Manual verification	Logo display	Logo display	N/A
Web.de (DE)	No display	Logo display	Logo display	N/A
GMX (DE)	No display	Logo display	Logo display	N/A
Orange.fr / Wanadoo	Pending support	Pending support	Pending support	N/A
T-Online.de / Magenta	Not supported	Not supported	Not supported	N/A
Free.fr	Not supported	Not supported	Not supported	N/A
Libero.it / Virgilio.it	Not supported	Not supported	Not supported	N/A
ProtonMail	No display	No display	No display	N/A
Microsoft Outlook (M365)	No display	No display	No display	N/A
Outlook.com (consumer)	No display	No display	No display	N/A

The notable absence: Microsoft does not support BIMI in any form as of April 2026. They have indicated openness to BIMI but no official roadmap. For B2B senders heavy on Microsoft 365 corporate audiences, this is the gap that VMC/CMC investment does not address.

The European regional reality: Web.de and GMX (United Internet) added BIMI support in 2024-2025 with certificate-based verification (CMC and VMC both accepted), but the French and Italian regional providers lag — Orange.fr, Free.fr, T-Online.de, Libero.it and Virgilio.it do not display BIMI logos as of April 2026. La Poste (FR) is the exception with full BIMI support including manual verification for self-asserted records. For European-heavy senders, the BIMI ROI is correspondingly lower than for US-centric senders because the Gmail/Yahoo/Apple Mail dominance in the US does not translate fully to the fragmented European mailbox provider estate.

Multi-domain BIMI — the operational architecture for multi-brand operators

Operators with multiple sending domains (multi-brand companies, holding companies, agencies managing client domains) face a structural BIMI question: one BIMI record per domain or per sub-brand? The answer affects certificate cost, trademark coverage, operational maintenance, and rendering consistency across the brand portfolio.

The three architectural patterns we see during multi-brand audits:

Pattern 1 — Per-domain BIMI with shared logo (parent brand emphasis): every sending domain publishes the same BIMI record pointing to the parent company logo. One VMC/CMC certificate (covering the parent trademark) referenced from multiple _bimi.subdomain.example.com records. Operationally simplest, but visually positions every brand as the parent — appropriate for sub-brands of a parent corporate identity (e.g., Acme Marketing, Acme Support, Acme Notifications all displaying the Acme corporate logo).

Pattern 2 — Per-domain BIMI with brand-specific logos: each sub-brand publishes its own BIMI record with its own SVG logo and its own certificate. Each sub-brand requires its own trademark (for VMC) or its own 12-month public display history (for CMC). Operationally most expensive — N certificates at €1,000-1,500 each per year — but visually preserves brand identity. Appropriate for multi-brand companies where sub-brands have independent customer recognition (e.g., consumer goods conglomerates with multiple consumer-facing product brands).

Pattern 3 — Hybrid with primary and secondary brands: VMC for the flagship brand (with the blue checkmark) and CMC or self-asserted BIMI for secondary brands. Captures the Gmail blue checkmark for the primary brand without paying VMC for every sub-brand. Trade-off: secondary brands display logos without checkmarks, which may or may not matter depending on subscriber awareness of the checkmark trust signal.

The certificate economics matter at scale. A holding company with 12 sub-brands each pursuing independent VMC pays €12,000-18,000/year just for certificates. The same operator with hybrid Pattern 3 (1 VMC + 11 CMC) pays roughly €13,000-19,500/year — same order of magnitude but with materially different brand positioning. The “right” answer depends on whether the per-sub-brand customer recognition justifies the per-sub-brand visual identity cost.

For multi-brand operators with multi-domain DMARC architecture, the BIMI deployment must coordinate with the per-domain DMARC enforcement state. Each domain needs DMARC at p=quarantine or p=reject before BIMI applies. If your DMARC migration is staggered across the brand portfolio, BIMI deployment is similarly staggered. See our DMARC enforcement guide for the multi-domain migration sequence.

EU regional considerations — BIMI for European-heavy senders

European-heavy senders face a different BIMI ROI calculation than US-centric senders. The fragmented European mailbox provider estate means BIMI’s effective reach in Europe is materially lower than in the US, and the operational considerations differ.

United Internet providers (Web.de + GMX): full BIMI support with CMC and VMC accepted, no checkmark display (United Internet has not implemented the verified mark badge as of April 2026). Self-asserted BIMI is not displayed. Logo display only with certificate. United Internet’s combined consumer mailbox share in Germany is roughly 35-45%, so for German-heavy lists BIMI provides material reach.

French regional reality: La Poste (post offices’ mailbox service) supports BIMI fully including self-asserted with manual verification. Orange.fr and Free.fr do not support BIMI as of April 2026. For French B2C lists, BIMI reach is limited to La Poste subscribers (small share) plus Apple Mail iCloud users plus Gmail/Yahoo. Effective reach in France is ~40-50% of consumer email by inbox share, lower than US ~75-85%.

Italian and Eastern European regional providers: Libero.it, Virgilio.it, Tiscali, Mail.ru and Yandex do not support BIMI. For Italian or Eastern European-heavy lists, the BIMI ROI declines further because the local providers represent a larger share of the audience and they do not display logos.

EU compliance scope considerations: GDPR, DORA (effective January 17, 2025) and PCI DSS v4.0 (effective March 31, 2025) all increase the operational pressure for DMARC enforcement, which is the BIMI precondition. Compliance-scoped EU senders are completing DMARC migration regardless of BIMI plans, which means the marginal cost of adding BIMI on top of DMARC is much lower than for non-compliance-scoped senders. The BIMI decision becomes “do we want logo display for the marginal cost of certificates?” rather than “do we want BIMI for the all-in cost including DMARC migration?”. For the parallel Microsoft monitoring decisions that compliance-scoped senders face, see our Microsoft SNDS and JMRP guide.

The operational pattern for European-heavy senders: prioritise DMARC enforcement and authentication baseline (which compliance frameworks require anyway), deploy Apple Business Connect for the Apple Mail share (free, fast), evaluate self-asserted BIMI for Yahoo/Fastmail/La Poste reach (free, low effort), and only invest in CMC or VMC if the audience has substantial United Internet (Web.de + GMX) share that justifies the certificate spending. For non-German European audiences, BIMI certificates often do not pay back operationally.

Choose your BIMI strategy — the decision tool

The BIMI decision involves five interacting factors: trademark status, audience composition, volume, DMARC enforcement state, and budget. Use the tool below to get a calibrated strategy recommendation; the math reflects 100+ BIMI deployments through 2024-2026 and accounts for the 2026 four-option landscape including the post-November-2024 Apple-Entrust certificate restriction.

The tool’s logic, in summary:

• Defer BIMI — for senders without DMARC at enforcement. The DMARC migration must complete first; BIMI publishing without enforcement produces no logo display anywhere.
• VMC + ABC — for senders with active trademarks (≥397 days), consumer-heavy audiences and budgets that justify the certificate plus trademark attorney costs. Adds blue checkmark in Gmail and purple checkmark in Yahoo.
• CMC + ABC — for senders without registered trademarks (or with logo refresh in progress) but with consumer-heavy audiences. Captures Gmail logo display without trademark prerequisite.
• Self-asserted BIMI + ABC — for low-volume, budget-constrained, or pending-trademark senders. Free combination capturing Yahoo + AOL + Fastmail + Apple Mail.
• ABC only — skip BIMI — for B2B Microsoft-heavy audiences where BIMI ROI is poor (Microsoft does not support BIMI). Apple Business Connect covers the Apple Mail surface; BIMI itself is not the right investment.

Common implementation failures

Five mistakes we have seen repeatedly across BIMI deployments:

Failure 1 — DMARC at p=none, expecting BIMI to work: BIMI requires p=quarantine or p=reject. p=none is for monitoring only. The BIMI record can be published but no provider will display the logo. Fix: complete the DMARC enforcement migration before publishing BIMI.

Failure 2 — SVG that is technically standard SVG, not SVG Tiny PS: Standard SVG has scripts, external references, and other features that BIMI Tiny PS prohibits. Validators reject the logo silently and the BIMI record never resolves to a displayable logo. Fix: use the BIMI Group SVG conversion tools and validate before publishing.

Failure 3 — Trademark logo and SVG logo are not exact matches: VMC validation rejects any colour shade variation or text addition between the trademark on file and the SVG. Operators who registered a trademark version of the logo and then applied a brand refresh frequently fail VMC because the trademark and SVG do not match. Fix: re-register the trademark for the current logo before VMC application, or apply for a CMC instead.

Failure 4 — Choosing Entrust over DigiCert in late 2024+: Apple stopped accepting Entrust certificates issued on or after November 15, 2024. Operators who renewed with Entrust after that date find their VMC works in Gmail and Yahoo but not Apple Mail. Fix: renew with DigiCert or GlobalSign for new certificates targeting Apple Mail.

Failure 5 — Apple Business Connect not enrolled despite VMC: ABC and BIMI VMC overlap in coverage but ABC adds Apple-specific features (brand info display, Maps integration, etc.) that VMC does not. Operators with VMC frequently skip ABC and miss the additional brand surface. Fix: enrol in ABC even when VMC is implemented; both can run in parallel.

When BIMI is wrong for your operation

Three scenarios where pursuing BIMI does not make economic sense:

Volume under 5,000 monthly to consumer addresses: the visibility upside on a few hundred Gmail/Yahoo/Apple Mail sends per month does not justify the $1,500/year certificate cost. Self-asserted BIMI is fine; certificates are wasteful.

B2B-only sender to corporate Microsoft 365 audience: Microsoft does not support BIMI. If your audience is 90%+ corporate Outlook, the VMC investment delivers no visible benefit. Skip BIMI; invest in DMARC enforcement and authentication hygiene.

Brand without consistent logo display: BIMI rewards consistent brand presence. If your brand is in flux, you have multiple subdomain identities sending mail, or your logo is changing in the next 12-24 months, the certificate investment will be obsolete before it pays back. Wait for brand stabilisation.

The 2026 verdict

BIMI in 2026 is finally implementable for non-enterprise senders thanks to CMC (no trademark required) and Apple Business Connect (free). The combination CMC + ABC delivers logo display across Gmail, Yahoo, Apple Mail, Fastmail and AOL for $1,000-1,500/year first-year all-in. That covers 75-85% of consumer email by inbox share.

VMC remains the right choice for enterprises with registered trademarks because the blue checkmark is a meaningful trust signal, especially in financial services, healthcare and brand-sensitive consumer categories. For B2B SaaS without consumer-heavy audiences, BIMI in any form is a lower-priority investment than DMARC enforcement, deliverability monitoring and inbox placement testing.

Apple Business Connect is the unambiguous win in 2026 — free, fast to implement, and adds Apple Mail surface that BIMI also covers but with less stringent requirements. Every operator should enrol in ABC regardless of BIMI strategy.

If you want help executing the BIMI deployment sequence — DMARC enforcement migration, SVG preparation, certificate procurement, DNS setup, and provider verification — that is part of our deliverability audit engagement. For self-directed implementations, the BIMI Group’s documentation and the four-option decision tree above are the path. The implementation is not technically hard once DMARC enforcement is complete; the DMARC migration is what most operators underestimate.