BIMI Record Generator

What is BIMI (Brand Indicators for Message Identification)?

BIMI (an acronym for Brand Indicators for Message Identification) is an emerging email security and brand authentication standard that allows organizations to display their official trademarked logo directly alongside incoming messages in supporting email clients (including Google Gmail, Apple Mail, and Yahoo Mail). Unlike unverified sender avatars pulled from Gravatar or social networks, BIMI binds visual branding directly to cryptographic domain authentication.

Strict Prerequisites for BIMI Implementation

Before major mailbox providers will display a BIMI logo, domain owners must satisfy strict cryptographic conditions:

1. Enforced DMARC Policy: The domain must publish a DMARC policy with full quarantine or reject enforcement (p=quarantine or p=reject with pct=100). Monitoring policies (p=none) are completely ineligible for BIMI.
2. SVG Tiny P.S. (Portable/Secure) Format: The brand logo must be an SVG file adhering to the SVG Tiny 1.2 profile, formatted with a square 1:1 aspect ratio, centered graphics, solid background, and zero external scripts or links.
3. Verified Mark Certificate (VMC): While Yahoo Mail permits BIMI without a certificate, Google Gmail and Apple Mail strictly require a VMC (Verified Mark Certificate) issued by an authorized CA (such as DigiCert or Entrust) confirming legal ownership of the registered trademark logo.

Technical Specification of the SVG Tiny P.S. Format

The BIMI technical working group mandates strict geometric and security rules for your brand logo SVG file:

• Root Element Constraints: The SVG document must have version="1.2" and baseProfile="tiny-ps" declared on the root <svg> element.
• Equal Aspect Ratio: The image dimensions must be square ($1:1$) with an explicit viewBox="0 0 500 500" attribute. Do not hardcode fixed pixel width or height attributes.
• Zero External Resources: No external stylesheets, fonts, bitmap raster embeds, or javascript scripts (<script>) are permitted. All styling must be vector paths with inline fill colors.
• Solid Background Fill: Transparent backgrounds should be avoided because recipient email clients operate in both light and dark modes. An uncolored transparent logo will become invisible when viewed against dark mode inbox headers.

The Verified Mark Certificate (VMC) Acquisition Process

To display your logo in Google Gmail, Apple Mail, and Fastmail, you must acquire a Verified Mark Certificate (VMC) from an accredited Certificate Authority (such as DigiCert or Entrust):

1. Trademark Registration: Your brand logo must be an officially registered trademark with a recognized international intellectual property office (e.g. USPTO in the USA, EUIPO in Europe, UKIPO in the United Kingdom, or JPO in Japan).
2. Identity Verification: The CA will conduct formal background vetting of your corporate registration, domain ownership, and legal identity.
3. Certificate Issuance: The CA delivers an encrypted PEM certificate embedding your validated trademark logo. You host this file on your public HTTPS web server and link it in the a= tag of your BIMI DNS record.