BIMI record checker
Checks what a mailbox provider looks at before showing your logo: the BIMI record, the SVG file, the mark certificate and the DMARC policy that BIMI requires.
- Live DNS
- BIMI (Internet-Draft)
- RFC 9989
How this check works
We look up <selector>._bimi.<domain> (selector “default” unless you enter another) and, if nothing is published there, the organizational domain, as described in the BIMI Internet-Draft.
The logo is downloaded over HTTPS and checked against the SVG Tiny PS rules that matter for display and safety: the tiny-ps profile, a title, a square viewBox, and no scripts, animation or external references. The mark certificate (a=) is parsed: validity dates, the BIMI key usage, the embedded logo and whether it is identical to the logo at l=.
BIMI also requires DMARC enforcement: p=quarantine (without pct below 100) or p=reject, and no sp=none. We check the policy that applies to your domain.
Limitations
- BIMI is still an Internet-Draft, and each mailbox provider decides on its own whether to show a logo. Passing these checks does not guarantee that it appears.
- We do not validate the certificate chain against the trust lists of mark certificate authorities.
- Checked domains are not stored or logged.
Frequently asked questions
Do I need a mark certificate?
It depends on the mailbox provider. Gmail shows BIMI logos only with a Verified Mark Certificate (VMC) or a Common Mark Certificate (CMC). Requirements of other providers differ, so check the ones that matter to you.
Why does BIMI require DMARC enforcement?
A logo is only safe to show when receivers can reject or quarantine mail that impersonates you. That is why BIMI requires p=quarantine or p=reject for the organizational domain and its subdomains.
What is SVG Tiny PS?
A restricted profile of SVG Tiny 1.2 for logos: no scripts, no external references, no animation, and a title element. Most design tools need a conversion step to produce it.
What does a record with empty l= and a= mean?
It explicitly declines BIMI — for example on a subdomain that should not show the logo of its parent domain.