The Brand Indicators for Message Identification standard has two practical paths. The certified path runs through a Verified Mark Certificate from DigiCert, Entrust, or Sectigo at 750 to 1,700 USD annually plus the registered trademark requirement and the legal work to defend the registration; this is the path that unlocks logo display at Gmail and Apple Mail and the blue verified checkmark at Gmail. The self-asserted path drops the certificate requirement entirely and displays the logo at Yahoo Mail, AOL Mail, Fastmail, La Poste, Onet Poczta, Zone, and Netscape at zero certificate cost. Both paths share the same technical prerequisites: SPF and DKIM passing with alignment to the From domain, DMARC at p=quarantine or p=reject (not p=none which causes approximately 84 percent of BIMI display failures per Validity 2025 data), SVG logo in SVG Tiny PS conformant format, HTTPS hosting with valid TLS. The self-asserted path is the right answer for senders piloting BIMI before committing to VMC capital, organizations with unregistered trademarks where VMC is structurally unavailable, secondary domain owners where the certified spend would not earn back, and senders whose receiver base skews toward Yahoo, AOL, or Fastmail. Outlook does not support BIMI in 2026 regardless of which path is chosen.
The provider coverage for self-asserted BIMI is narrower than the certified path but covers a specific audience segment well. The split below names the 2026 reality including the market share data for the supported providers so the buying decision has the right context. The unsupported list matters as much as the supported list; organizations whose receiver base skews heavily toward Gmail or Outlook get limited visible benefit from the self-asserted path and the better answer is either certified VMC for the Gmail share or postponing BIMI until trademark and budget conditions support VMC.
The provider data points to an important economic decision. If the receiver base sits above 50 percent at Yahoo, AOL, and Fastmail combined, the self-asserted path captures most of the BIMI value at zero certificate cost. If the receiver base sits above 70 percent at Gmail and Apple Mail, the self-asserted path captures negligible visible value and the right answer is either certified VMC or postponing BIMI. The mixed-audience case (50/50 split or similar) is the most common in B2B and direct-to-consumer programs, and the recommendation depends on budget and timing: organizations with VMC budget approved should pursue the certified path; organizations without VMC budget approved should start with self-asserted and upgrade to VMC when the budget and trademark conditions align. EMP runs the audience split analysis during discovery to inform the path recommendation rather than defaulting to one answer.
# DNS TXT record at default._bimi.example.com default._bimi.example.com. 3600 IN TXT "v=BIMI1; l=https://example.com/bimi/logo.svg;" # Compare with certified VMC record (includes a= tag pointing to certificate) default._bimi.example.com. 3600 IN TXT "v=BIMI1; l=https://example.com/bimi/logo.svg; a=https://example.com/bimi/vmc.pem;" # SVG Tiny PS root element (file at https://example.com/bimi/logo.svg) <svg xmlns="http://www.w3.org/2000/svg" version="1.2" baseProfile="tiny-ps" viewBox="0 0 64 64"> <title>Brand Name</title> <!-- logo path elements --> </svg> # Required prerequisites verified independently before BIMI displays: # 1. SPF passes with alignment to From domain # 2. DKIM passes with alignment to From domain # 3. DMARC policy at p=quarantine or p=reject (NOT p=none) # 4. Sender reputation at receiving provider sufficient # 5. Bulk mail context (Yahoo only displays for bulk, not personal)
| Capability | Self-Asserted | CMC (Common Mark) | VMC (Verified Mark) |
|---|---|---|---|
| Annual certificate cost | $0 | $650-$1,100 | $750-$1,700 |
| Registered trademark required | No | No | Yes |
| Established use evidence required | No | ~12 months | Via trademark |
| Yahoo / AOL / Fastmail display | Yes | Yes | Yes |
| Gmail logo display | No | Yes | Yes |
| Gmail blue verified checkmark | No | No | Yes |
| Apple Mail logo display | No | No | Yes |
| DMARC at p=quarantine or reject | Required | Required | Required |
| SVG Tiny PS format | Required | Required | Required |
| Setup time at EMP | 1-2 weeks | 3-8 weeks | 2-6 months |
| Annual renewal required | No | Yes (397 days) | Yes (397 days) |
The comparison surfaces a counterintuitive point. The technical work required for self-asserted is identical to the work required for VMC except for the certificate procurement; the DMARC enforcement migration, the SVG Tiny PS conversion, the HTTPS hosting, and the DNS publication apply equally. This means an organization that pursues self-asserted is performing 90 percent of the work required for the eventual VMC upgrade. EMP recommends self-asserted as the entry point for most programs because the operational learning happens at zero certificate cost; the VMC upgrade becomes a coordinated certificate procurement plus DNS update rather than a complete BIMI setup from scratch.
One operational nuance specific to the SVG hosting phase causes intermittent display failures. The SVG file must be served with content-type image/svg+xml and accessible without authentication or CORS restrictions. Generic web servers sometimes default to text/xml which the BIMI fetcher rejects. EMP CDN applies the correct content-type and allows the BIMI fetcher User-Agent through.
Organizations evaluating BIMI lift before approving the recurring VMC spend. Self-asserted validates the operational discipline (SVG hosting, DNS publication, DMARC monitoring) at zero certificate cost. If the Yahoo/AOL lift justifies the broader investment, the VMC upgrade follows.
VMC requires a trademark registered in a recognized jurisdiction (USPTO, EUIPO, JPO, KIPO, CIPO, ATMO, and similar). Organizations with pending trademarks or in unrecognized jurisdictions cannot pursue VMC and CMC requires 12 months of established use. Self-asserted imposes neither constraint.
Organizations operating 5 to 10 sending domains face VMC compounding to 5,000 to 17,000 USD annually. Self-asserted on secondary domains avoids the per-domain certificate cost while keeping the primary brand domain on certified VMC. Common pattern: VMC on main, self-asserted on transactional and lifecycle subdomains.
The honest recommendation for receiver bases skewed toward Gmail and Apple Mail is either pursue certified VMC for the full Gmail share including the blue verified checkmark, pursue CMC if the trademark is unregistered but established use exists, or postpone BIMI until budget and trademark conditions support VMC. The self-asserted path on a Gmail-heavy program puts the operational work in place without visible output, which is acceptable as preparation for the eventual VMC upgrade but does not justify the engagement on its own. EMP runs the receiver split analysis during discovery and recommends postponing self-asserted setup when the visible benefit would not earn back the engineering investment within 12 months. The free 48-hour deliverability audit includes a receiver-split estimate that informs this conversation before any paid engagement begins.
For organizations already at DMARC enforcement the setup completes in 1 to 2 weeks. For organizations starting from DMARC p=none the combined engagement runs 60 to 120 days because the DMARC enforcement migration is the longer phase; the BIMI overlay activates within 1 week once the policy reaches p=quarantine. EMP runs both pathways as defined engagements.
DMARC policy verification (p=quarantine or p=reject confirmed), SPF and DKIM alignment audit, customer logo source review, audience split estimate to confirm self-asserted fit, bilateral NDA signed.
Source logo conversion through validated SVG optimization pipeline, conformance validation against BIMI Group checker, typical 1-3 iterations to achieve clean validation, file size optimization to stay under 32 KB.
SVG deployment on EMP CDN with TLS valid certificate, appropriate cache headers and CORS configuration, BIMI TXT record drafting, customer DNS team coordination, record publication, propagation wait 4-24 hours.
BIMI Group checker validation, seed testing to Yahoo, AOL, and Fastmail accounts, screenshot capture from each provider for customer evidence, monitoring setup, 30-day post-deployment Yahoo and Fastmail observation.
All three tiers are fixed-fee with no recurring license cost. The infrastructure fee for the EMP CDN hosting the SVG is included in the EMP standard hosting offering and not a separate BIMI Self-Asserted charge. Customers who later upgrade to certified VMC receive a 200 USD credit on the VMC engagement fee.
One sending domain · standard.
Up to 5 domains · best value.
Combined p=none to enforcement.
"Most of our recipients are at Gmail. Is this worth pursuing?"
If 70 percent or more of recipients are at Gmail and Apple Mail, the self-asserted path provides negligible visible benefit and the better answer is either certified VMC for the Gmail share or postponing BIMI. The Gmail blue verified checkmark and logo display require VMC specifically; CMC unlocks Gmail logo display but not the blue checkmark. Self-asserted unlocks neither at Gmail. For mixed audiences with 30-50 percent Yahoo/AOL/Fastmail share the self-asserted path captures meaningful value at zero certificate cost and the upgrade to VMC happens when budget and trademark conditions allow. EMP runs the receiver split analysis during discovery using the customer's ESP analytics or 30-day DMARC aggregate report parsing. Regional senders in Latin America frequently underestimate their Yahoo and AOL share because global Gmail-dominant statistics do not apply uniformly across the region.
"What is the actual cost difference vs going straight to VMC?"
Self-asserted: 950 USD one-time fee, zero recurring. VMC: typically 950 USD EMP setup plus 1,200 USD average annual certificate from DigiCert or Entrust plus trademark registration cost varying by jurisdiction (1,500 to 5,000 USD USPTO including legal work). Year one cost comparison: self-asserted approximately 950 USD, VMC approximately 4,000 to 8,000 USD depending on trademark status. Year two onward: self-asserted zero recurring, VMC 1,200 USD annual certificate renewal. Over 5 years self-asserted runs approximately 950 USD total; VMC runs approximately 10,000 to 14,000 USD. The economic threshold where VMC pays back: when the Gmail audience share is large enough that the open rate lift on that segment exceeds 2,000 to 3,000 USD annually, which typically occurs above 50,000 monthly Gmail recipients.
"How long does the DMARC p=none to enforcement migration take?"
Standard timeline is 60 to 120 days depending on the complexity of the sending environment. The first 30 days are spent parsing DMARC aggregate reports to identify all legitimate sending sources: marketing automation platforms, transactional ESP, internal mail servers, CRM integrations, SaaS tools that send on behalf of the domain. Each legitimate source must be explicitly authorized via SPF and DKIM. Days 30 to 60 cover the SPF and DKIM updates and the validation that aggregate reports show high alignment percentages. Days 60 to 90 cover the policy ramp from p=none to p=quarantine at 25 percent rollout (pct=25), then 50 percent, then 100 percent. Days 90 to 120 optionally cover the move to p=reject if the business case requires it. Organizations with simple sending environments (single ESP, no internal mail) can complete the migration in 30 to 45 days; complex multi-tenant or multi-brand environments can take 6 months.
"What if the logo does not display at Yahoo after deployment?"
Yahoo applies four criteria before displaying the logo and any failure suppresses display. First, DMARC enforcement must be at p=quarantine or p=reject and aligned; failures here cause approximately 84 percent of BIMI display issues. Second, the SVG must be valid SVG Tiny PS and retrievable over HTTPS without HTTP errors, redirects, or TLS issues. Third, the sender must be sending bulk mail (Yahoo does not display logos for personal mail). Fourth, the sender reputation at Yahoo must be sufficient (no display for senders below the reputation threshold). EMP runs the troubleshooting checklist in the order above when the logo fails to display, and the 30-day post-deployment monitoring catches issues early. Typical resolution: 70 percent of failures resolve at the DMARC validation step, 15 percent at the SVG validation step, 10 percent at the reputation step, 5 percent at edge cases including DNS propagation lag.
"Can we upgrade from self-asserted to VMC later without breaking display?"
Yes, the upgrade path is straightforward and EMP supports both transitions. The upgrade adds the a=https URL tag to the existing BIMI DNS record without removing the l=https URL tag. The resulting record reads "v=BIMI1; l=https://example.com/bimi/logo.svg; a=https://example.com/bimi/vmc.pem;" and activates the certified path at Gmail and Apple Mail while the existing self-asserted path continues serving Yahoo, AOL, and Fastmail. There is no transitional period of broken display because both paths coexist in the same DNS record. The SVG file used in the self-asserted phase can typically be reused for the VMC phase because the format requirements are identical (SVG Tiny PS). The transition completes within 24 to 48 hours of DNS propagation once the certificate is obtained from the CA. Customers who started with self-asserted EMP engagement receive a 200 USD credit on the VMC engagement fee.
"Does this work for Panama-based senders or only US?"
Self-asserted BIMI is jurisdiction-neutral. The supported providers (Yahoo Mail, AOL, Fastmail, La Poste, Onet Poczta, Zone) display the logo regardless of where the sender is hosted geographically, what the sender domain TLD is, or whether the organization is incorporated in a particular jurisdiction. The Panama Law 81 compliance regime under which EMP operates does not affect BIMI eligibility; the BIMI standard is technical rather than regulatory. The certified VMC path has a trademark jurisdiction constraint (trademark must be registered in USPTO, EUIPO, JPO, KIPO, CIPO, ATMO, or other recognized offices); Panama-based organizations with Panama-registered trademarks would need to also register in one of the recognized jurisdictions to pursue VMC. The self-asserted path imposes no such constraint, which is one of the reasons it is attractive to LatAm-based senders whose trademarks may not be registered in the BIMI-recognized jurisdictions.
Supported providers without VMC:
Not supported without VMC: Gmail, Apple Mail. Not supported at all: Outlook, Microsoft 365.
Five common reasons:
Constrained SVG 1.2 Tiny profile defined for BIMI:
EMP runs source logo through validated optimization pipeline and delivers conformant SVG Tiny PS file passing BIMI Group validation.
BIMI requires DMARC at p=quarantine or p=reject (enforcement band):
Migration from p=none to enforcement runs 30-120 days. EMP offers combined DMARC push plus BIMI Self-Asserted as single $3,800 engagement.
Self-asserted imposes no trademark requirement:
Common pattern: run self-asserted while trademark advances to registration; upgrade to VMC when registration completes (typically 8-18 months).
Published research data:
Self-asserted lift applies only to Yahoo/AOL/Fastmail share of audience. Weighted lift = audience share × published lift.
Timeline depends on DMARC starting state:
BIMI Group validation has external runtime that cannot be expedited.
Straightforward upgrade path:
Customers who started with EMP self-asserted receive $200 credit on VMC engagement fee.
The discovery call gathers four data points: current DMARC policy status (p=none, p=quarantine, or p=reject), audience split between Yahoo/AOL/Fastmail and Gmail/Apple/Outlook (estimated from ESP analytics or DMARC reports), trademark status (unregistered, pending, registered in recognized jurisdiction), number of sending domains in scope. With those four points EMP recommends the right path (self-asserted, certified VMC, or postpone) and quotes the engagement. Bilateral NDA before any data is shared. If the recommendation is postpone or VMC, EMP says so and points to the appropriate engagement type rather than pursuing the wrong path for revenue reasons.
