Skip to content
inboxprobe

Checkers

Generators

Guides

Checkers

BIMI record checker

Checks everything Gmail and Yahoo need before they show your logo: an enforced DMARC policy, the BIMI record, an SVG Tiny PS logo and a mark certificate.

What BIMI needs, in order

  1. DMARC at enforcement: p=quarantine or p=reject, applied to 100% of mail. Google is explicit that BIMI doesn't work with p=none.
  2. An SVG logo in the SVG Tiny Portable/Secure (Tiny PS) profile, hosted over HTTPS.
  3. A BIMI record at default._bimi.yourdomain pointing to the logo (l=) and the certificate (a=).
  4. A mark certificate for Gmail: a Verified Mark Certificate (needs a registered trademark, gets the blue checkmark) or a Common Mark Certificate (for logos used publicly for at least a year, no checkmark).
  5. Reputation: providers decide whether to show the logo; a valid setup is necessary, not sufficient.
Type
TXT
Host / name
default._bimi
Value
v=BIMI1; l=https://example.com/brand/logo.svg; a=https://example.com/brand/vmc.pem

The SVG checks we run

RuleWhy logos get rejected
baseProfile="tiny-ps" and version="1.2" on <svg>Design tools export SVG 1.1 by default
A <title> elementRequired by the profile; use your brand name
No scripts, event handlers, animation, <image> or external linksTiny PS forbids anything active or remote
No x=/y= on the root elementCommon in exports from Illustrator
Square (1:1) and ideally under 32 KBLogos are shown in a circle or square

These are static checks on the file. They catch the usual mistakes but aren't a full schema validation; certificate authorities validate the exact SVG embedded in your VMC/CMC.

What we check in the certificate

We download the PEM file from a=, count the certificates, look for the BIMI extended key usage (1.3.6.1.5.5.7.3.31) and read the expiry date. We don't validate the chain or revocation — mailbox providers do that. A plain TLS certificate at a= is a common mistake we flag.

Why this check uses our server

Browsers can't download files from other websites unless those sites allow it, and logo and certificate hosts don't. So for BIMI only, our server fetches the two URLs named in your BIMI record — never any other URL — and passes the files back to your browser for checking.

Questions

Why isn't my BIMI logo showing in Gmail?

The usual reasons, in order: DMARC isn't at quarantine or reject for all mail; there's no VMC or CMC (Gmail requires one); the SVG isn't Tiny PS; or Gmail hasn't decided to show it yet. Logos can take days to appear after everything is valid.

Do I need a VMC for BIMI?

For Gmail, you need either a Verified Mark Certificate (requires a registered trademark) or a Common Mark Certificate. Other providers set their own rules and some may show logos without a certificate.

What's the difference between a VMC and a CMC?

A VMC proves you own a registered trademark for the logo and earns a blue checkmark in Gmail. A CMC requires evidence the logo has been in use for at least a year, has no checkmark, and is easier to obtain.

How do I convert my logo to SVG Tiny PS?

Start from a clean, square vector. Set version="1.2" and baseProfile="tiny-ps" on the svg element, add a title, remove x/y attributes, scripts, embedded images and external references. The BIMI Group publishes guidance and conversion tools.

Sources

Last reviewed: