Skip to content
Verified Everywhere

Email trust · 7 min read

Apple Branded Mail vs BIMI: What Each One Actually Does

Apple Branded Mail and BIMI both put your logo in the inbox, but they are separate systems and neither one delivers the other. Here is what each requires, which Apple surfaces show which logo, what it costs, and the order to build them in.

The short answer

Apple Branded Mail and BIMI both put your logo next to your name in an inbox. They are separate systems. Neither one delivers the other. If you have BIMI published, that alone will not produce Branded Mail. If Apple has approved your Branded Mail logo, that alone will not produce a logo in Gmail.

BIMI is an open standard. You publish a DNS record, and any mailbox provider that chooses to support BIMI can read it. Gmail, Yahoo, Fastmail and Apple Mail all do, in different ways. To get the logo shown at Gmail you will in practice need a certificate, and that certificate is a recurring annual cost.

Apple Branded Mail is Apple's own system. You upload a logo inside Apple Business, Apple reviews your organisation and your mark, and Apple renders it on Apple surfaces. It is free. There is no certificate, and no trademark registration is required.

The part most comparisons miss: both sit on the same foundation. Both require DKIM and DMARC at enforcement. Do that work once and you have paid the expensive part of the bill for both.

Configuring one does not configure the other

These are two independent paths to the same visual outcome. A brand can run both, one, or neither. Running both is common and is not a conflict.

What Apple Branded Mail is

Branded Mail lets you attach a brand name and logo to your business email so it displays on Apple surfaces. It launched as part of Apple Business Connect. As of 14 April 2026, Apple Business Connect no longer exists under that name. Apple consolidated Business Connect, Apple Business Manager and Apple Business Essentials into a single free platform called Apple Business, and migrated existing Business Connect data automatically. A lot of the guidance still circulating online uses the old name and the old URLs, which is one reason this topic is poorly covered.

Apple's requirements, from Apple's own documentation, are:

  • DMARC on your sending domain set to quarantine or reject. A policy of none is not accepted.
  • DKIM on every message sent to customers. Apple states that authentication only by SPF is not supported.
  • A commercial email domain. Consumer domains such as gmail.com or icloud.com are not permitted.
  • The domain must carry an MX, A or AAAA record.
  • Your organisation must be verified by Apple, and Apple must approve the brand name and the logo.
  • A square logo at a 1:1 aspect ratio, minimum 1024 x 1024 pixels and maximum 4864 x 4864 pixels.
  • A maximum of 100 domains, subdomains and email addresses per brand.

The 14-day window is the one that catches people

Apple issues a TXT record for domain verification and gives you 14 calendar days to complete it. Miss that window and you start the process over. Get the record to whoever controls your DNS before you begin, not after.

The Apple timeline and status values

Once you submit, Apple's review can take up to seven business days. After approval, Apple allows up to a further five business days for the brand information to propagate into its services. So budget roughly two weeks from submission to a logo you can actually see, assuming nothing is rejected.

Inside Apple Business, your Branded Mail entry shows one of four statuses: In review, Approved, Not approved, or Incomplete. Incomplete usually means the DNS side is unfinished rather than that anything was refused. Not approved is a real rejection of the brand or the logo, and you resubmit rather than appeal.

Apple checks specific values in your DMARC record during verification. The v value must be DMARC1. The p value must be quarantine or reject. The pct value must be 100. The sp value must also be quarantine or reject, but only where you are registering subdomains and the DMARC record sits on the parent domain. Apple's own example record is v=DMARC1;p=reject;pct=100;

What BIMI is

BIMI stands for Brand Indicators for Message Identification. It is a published standard rather than one company's product. You host an SVG of your logo, optionally obtain a certificate, and publish a DNS TXT record at default._bimi.yourdomain.com in the form v=BIMI1; l=[SVG URL]; a=[PEM URL].

The image cannot be any SVG. It must conform to the SVG Tiny Portable/Secure profile, usually written SVG Tiny PS. A normal export from design software will fail. Gmail additionally requires a minimum height and width of 96 pixels, with the image size specified in absolute pixels.

On DMARC, BIMI is stricter than most people expect. Enforcement is required on the organisational domain and its subdomains, so p=quarantine with sp=quarantine, or p=reject with sp=reject. A policy of none is not permitted, and neither is a pct value below 100.

The certificate is where the money goes. The BIMI Group describes a Verified Mark Certificate or Common Mark Certificate as highly recommended but optional, while noting that self-asserted BIMI records have limited support across mailbox providers. In practice, if your goal is Gmail, treat a certificate as required.

There are only three certificate issuers

The BIMI Group currently lists DigiCert, GlobalSign and SSL.com as Mark Verifying Authorities. If a vendor tells you they issue VMCs and they are not one of those three, they are reselling.

What a VMC costs and what it requires

A VMC requires a logo registered as a trademark with one of a short list of recognised intellectual property offices, including the USPTO, the EUIPO, the UK IPO, the Canadian Intellectual Property Office, the DPMA in Germany, the Japan Trademark Office, the Spanish Patent and Trademark Office and IP Australia. No registration, no VMC. That is the hard gate, and no amount of process gets you past it.

A Common Mark Certificate is the lighter alternative. It accepts prior use marks and modified registered marks rather than requiring a registration. The tradeoff is real: in Gmail, the blue checkmark appears next to senders verified with a VMC. A CMC can get your logo shown, but not the checkmark.

Third party surveys through 2026 put VMC pricing roughly in the range of 749 to 1,688 US dollars per year, and CMCs at roughly 650 to 1,100. We hold a GlobalSign VMC for our own hockey apparel business, Bench Clearers, at about 780 dollars per year. Prices move, and the number you are quoted depends on the reseller as much as the issuer.

One more thing worth knowing before you budget. Microsoft supports BIMI as a sender but not as a receiver. Exchange Online and Outlook do not render BIMI logos. If your audience is heavily corporate Microsoft, a VMC buys you very little.

The order to build this in

The sequence matters, because most of the cost and most of the risk sits in one step that both systems share.

First, get SPF and DKIM correct, then publish DMARC at p=none and read the aggregate reports for a few weeks. This is the step people skip, and skipping it is how legitimate mail gets quarantined later.

Second, move to enforcement. Go to quarantine, watch, then to reject, with pct=100. Both Apple and Google currently document pct=100, so publish it explicitly rather than leaving it out.

Third, do Apple Branded Mail. It is free, it needs no certificate and no trademark, and the only real cost is the review wait. There is no good reason to skip a free logo placement.

Fourth, decide on BIMI. Publish the record and host a valid SVG Tiny PS file. That alone earns you display at Yahoo, AOL and Fastmail. Only then decide whether Gmail volume justifies a certificate, and whether you hold the registered trademark a VMC requires.

After the BIMI record is live, Gmail states it can take up to 48 hours for the logo to appear.

Enforcement first, always

If your DMARC is still at none, that is your actual project. Neither Apple nor Gmail will show your logo, and no vendor can shortcut it. Anyone selling you a logo before your authentication is at enforcement is selling you something that cannot work yet.

Traps we hit doing this ourselves

We ran this whole stack on our own business before offering it to anyone. A GlobalSign VMC, BIMI live in Gmail, and Meta Verified on a 52,000 follower Instagram account. These are the things that cost us time.

Test from an address that is not saved in Contacts. A saved contact photo replaces the brand logo in Apple Mail, so you can have a perfectly working setup and see nothing. This produces a lot of false alarms.

Test on fresh mail, not on messages already sitting in the mailbox. Older messages will not retroactively gain a logo.

For the VMC, the logo must match the registered trademark exactly, and the SVG must byte-match what the certificate was issued against. Not similar. Identical. A re-export with different metadata will break validation.

Sender reputation was never the gate for us on BIMI. If your logo is not showing, check authentication, the SVG profile and the certificate before you go chasing reputation theories.

If you send through an email platform on a subdomain, your DKIM d= domain has to align, and the parent domain's sp value governs that subdomain. Getting sp wrong is a quiet failure with no error message.

When you should not do this

We would rather tell you to keep your money than take a fee for work that cannot succeed.

If you do not have a registered trademark, a VMC is not available to you at any price. The spec's only other route is a Government Mark, created by legislation rather than registration, which no private business can obtain. A CMC can still get your logo displayed in Gmail, but it will not produce the checkmark, and if the checkmark was the point, stop here.

If your audience is mostly corporate Outlook, BIMI will not render for them. Spending on a certificate to reach an audience that cannot see it is not a strategy.

If you send very little email, or your sending is transactional only and low volume, the annual certificate cost is unlikely to return anything measurable. Do Apple Branded Mail, which is free, publish a self-asserted BIMI record, and revisit the certificate when volume justifies it.

And if your DMARC is not yet at enforcement, do not buy a certificate this month. Fix authentication first. That work has real deliverability value on its own, independent of whether any logo ever appears.

Nobody can promise you a logo. Apple reviews and approves brands at its discretion, and every mailbox provider displays logos at its discretion. Treat any guaranteed outcome as a warning sign.

Working with us

Verified Everywhere is run by JWC Apps in San Diego. We built this stack for our own store first, through official channels only, which is why this page is specific rather than general. If you want help, we will look at your current DNS and tell you honestly which of these are worth doing for your business and which are not. We screen out work we do not believe can succeed and decline it rather than take the fee. We never ask for your passwords, your government ID documents, or your card numbers.

Common questions

Do I need both Apple Branded Mail and BIMI?

Only if you want coverage on every Apple device. Apple lists Mail on iPhone and iCloud Mail on the web as the Branded Mail display paths, and does not list iPad or Mac. Apple Mail on macOS and iPadOS reads BIMI instead, and needs a certificate. So Branded Mail alone leaves Mac users seeing nothing, and BIMI alone means you skip a free placement on iPhone.

Is Apple Branded Mail really free?

Yes. Apple Business itself is free, and Branded Mail requires no certificate and no trademark registration. Apple reviews your organisation, brand name and logo instead of relying on a paid certificate. Your only costs are the time to get DMARC to enforcement and the review wait, which can be up to seven business days plus a further five for the branding to propagate.

Will configuring BIMI give me Apple Branded Mail automatically?

No. They are independent systems. A BIMI DNS record does not register you for Branded Mail, and Apple approving your Branded Mail logo does not publish a BIMI record or get your logo into Gmail. You configure each one separately, though both rely on the same DKIM and DMARC foundation.

What DMARC policy do I need?

Enforcement, for both. Apple requires p set to quarantine or reject with pct set to 100, and sp set to quarantine or reject where you are registering subdomains against a parent domain record. BIMI requires the same, and explicitly rejects a policy of none or a pct below 100. Get to enforcement carefully, starting at none and reading aggregate reports before you tighten.

Do I need a VMC, or is a CMC enough?

It depends what you want. A VMC requires a trademark registered with a recognised IP office and is what triggers the blue checkmark in Gmail. A Common Mark Certificate accepts prior use marks and modified registered marks, so it is available without a registration, but it gets you the logo without the checkmark. Reporting through mid-2026 also indicates Apple Mail does not display CMC logos.

Why is my logo not showing even though everything is approved?

Check the simple causes first. A saved photo in Contacts will replace the brand logo, so test from an address that is not in your address book. Older messages will not gain a logo retroactively, so test fresh mail. On iPhone, the device default language must be one of the supported languages. And confirm the message actually passed DKIM, since Apple does not accept SPF-only authentication.

What happened to Apple Business Connect?

Apple retired it. On 14 April 2026 Apple consolidated Apple Business Connect, Apple Business Manager and Apple Business Essentials into a single free platform called Apple Business, and migrated existing Business Connect data across automatically. Branded Mail now lives inside Apple Business. Older guides still reference the Business Connect name and URLs, which is a common source of confusion.

Sources checked

  • https://support.apple.com/en-us/guide/business/abcb761b19d2/web
  • https://support.apple.com/en-us/guide/business/abcb22cbade5/web
  • https://support.apple.com/guide/business/set-up-branded-mail-abcb28ad2a2d/web
  • https://support.apple.com/en-us/108340
  • https://www.apple.com/newsroom/2026/03/introducing-apple-business-a-new-all-in-one-platform-for-businesses-of-all-sizes/
  • https://bimigroup.org/implementation-guide/
  • https://bimigroup.org/vmc-issuers/
  • https://bimigroup.org/understanding-bimi-certificate-types/
  • https://knowledge.workspace.google.com/admin/security/set-up-bimi
  • https://www.valimail.com/resources/guides/bimi-email/apple-mail-bimi/
  • https://www.suped.com/learn/email-deliverability/why-apple-branded-email-logos-dont-show-in-native-mail-apps
  • https://www.suped.com/learn/bimi/what-are-the-differences-between-bimi-and-apple-branded-mail-and-do-you-need-both-for-email-bran

Related service

Email Authentication (SPF, DKIM, DMARC)

Google and Yahoo began enforcing sender rules in 2024. Microsoft started rejecting outright in 2025. Most small businesses still are not compliant and find out when their invoices stop landing.