Record, logo, and certificate evidence in one check

Free tool

BIMI checker

Look up and validate any domain's BIMI record and logo

Free BIMI checker for any domain. We look up the BIMI record for the selector you choose, validate it against the current BIMI draft, fetch the SVG logo where the host allows it, check it against the SVG Tiny PS profile, and report whether a VMC or CMC is referenced.

Enter a domain. Leave the selector empty to check the default selector.

The check runs in your browser via DNS-over-HTTPS, so the BIMI record reaches you without passing through our servers. When a BIMI record is found, we receive the name of the checked domain: it triggers an independent check from our own servers for our public domain index. The SVG logo you preview is fetched directly by your browser, not by us.

How to use this BIMI checker

Three steps from a domain name to a clear verdict on its BIMI setup.

  1. 1

    Enter a domain

    Type any domain into the form above. Add a selector if the domain publishes more than one brand indicator; otherwise we check the default selector.

  2. 2

    Run the check

    We query the TXT record at {selector}._bimi.{domain} via DNS-over-HTTPS from your browser and validate every tag against the current BIMI specification draft.

  3. 3

    Read the verdict, logo check, and evidence

    You see the raw record, every violation we found, the SVG Tiny PS validation of the logo where the host allows the browser to fetch it, and whether a VMC or CMC evidence document is referenced.

What you can learn from a BIMI check

A BIMI check answers questions a DMARC or SPF check alone cannot. Use it to:

  • Confirm your BIMI record went live after publishing it in DNS.
  • Catch an http:// logo URL, a misplaced v tag, or another record error that silently disables BIMI.
  • Validate the published SVG against the SVG Tiny PS profile before a mailbox provider rejects it.
  • See whether a domain references a VMC or CMC evidence document, the prerequisite for Gmail display.
  • Check a non-default selector used for a specific brand or mail stream.
  • Audit a competitor's or vendor's BIMI setup in seconds.

Understanding BIMI

What is a BIMI record?

BIMI announces a brand logo through a DNS TXT record at {selector}._bimi.{domain}, most commonly default._bimi.{domain}. The record is a tag-value list: v=BIMI1 must come first, l points to an SVG logo served over HTTPS, and the optional a tag points to an authority evidence document. Unknown tags are ignored by receivers, but a wrong version tag or a non-HTTPS logo URL invalidates the whole record.

BIMI requires DMARC at enforcement

The BIMI specification draft requires participating domains to have a strong DMARC policy, quarantine or reject, on both the sending domain and its organizational domain. Receivers are explicit about the other side of this: if the applicable policy is p=none, or a subdomain policy of sp=none applies, BIMI processing must not be performed for the message. If your record still carries the legacy pct tag (removed by RFC 9989), a quarantine policy with pct below 100 also disqualifies it. A perfect BIMI record achieves nothing while DMARC sits at p=none.

VMC vs CMC: certificate evidence

The a tag references a mark certificate: a VMC (Verified Mark Certificate) requires a registered trademark on the logo, while a CMC (Common Mark Certificate) accepts a logo in public use for 12 or more months. Gmail displays a logo with either, but only a VMC earns the blue verified checkmark next to the sender name. As of June 2026 both certificate types are issued by DigiCert, GlobalSign, and SSL.com, with list prices of roughly $1,416 to $1,752 per year and resellers from about $649. A record without an a tag is still valid BIMI, but Gmail will not display its logo.

The logo must be SVG Tiny PS

BIMI logos use SVG Portable/Secure (SVG Tiny PS), a restricted SVG profile: no scripts, no animations, no external references, no embedded raster images, a square canvas, and a recommended maximum of 32 KB. A regular SVG export from a design tool usually fails at least one of these rules. This checker runs the same validation as our converter against the file your record points to, where the logo host allows the browser to fetch it.

Why the logo sometimes cannot be fetched here

This tool runs entirely in your browser, and browsers only download cross-origin files when the host opts in via CORS headers. Many logo hosts do not, so the checker may report a valid record whose logo it could not fetch. That is an informational result, not a failure: mailbox providers fetch logos from their own servers, where CORS does not apply.

Declination: a record that says no

A record of v=BIMI1; l=; a=; with both tags empty is an explicit declination to participate in BIMI. It is not an error. Organizations publish it on subdomains to stop a parent domain's brand indicator from being applied where they do not want it.

Build your BIMI setup

The checker is one of three free BIMI tools. Generate the record, convert the logo, then verify the result:

BIMI record generator

Build a correct v=BIMI1 record for your domain and logo URL.

BIMI SVG Tiny PS converter

Convert a clean SVG into the required SVG Tiny PS profile and validate it.

VMC vs CMC: prices and requirements

Our buyer's guide to mark certificates: issuers, trademark vs 12-month-use paths, and current prices.

Frequently asked questions

What is BIMI?
BIMI (Brand Indicators for Message Identification) lets a domain publish a logo that supporting mailbox providers display next to its messages. The logo location is announced in a DNS TXT record at {selector}._bimi.{domain}, and display is gated on strong email authentication: the specification requires a DMARC policy of quarantine or reject before a receiver will even evaluate BIMI.
What does a BIMI record look like?
A BIMI record is a DNS TXT record such as v=BIMI1; l=https://example.com/logo.svg; a=https://example.com/vmc.pem. The v tag must come first and be BIMI1, the l tag points to the SVG logo over HTTPS, and the optional a tag points to an authority evidence document, a VMC or CMC certificate. A record of v=BIMI1; l=; a=; is an explicit declination: it tells receivers the domain refuses to participate in BIMI.
Why is my BIMI logo not showing in Gmail?
The most common reasons: your DMARC policy is p=none (BIMI requires quarantine or reject on both the domain and its organizational domain), the logo is not a valid SVG Tiny PS file, or Gmail requires a mark certificate you have not published. Without a VMC or CMC, Gmail ignores the BIMI record entirely. This checker validates the record and the SVG; check your DMARC policy alongside it.
Do I need a VMC or CMC certificate?
It depends on the mailbox provider. Gmail requires a Verified Mark Certificate (VMC) or Common Mark Certificate (CMC) before it displays a BIMI logo. A VMC requires a registered trademark on the logo and is the only certificate that earns Gmail's blue verified checkmark; a CMC accepts a logo in public use for 12 or more months instead. As of June 2026 both are issued by DigiCert, GlobalSign, and SSL.com.
Why must the BIMI logo URL use HTTPS?
The BIMI specification allows only HTTPS as the transport for the l and a tags. A record whose logo URL starts with http:// is invalid and receivers will not fetch it. This checker rejects non-HTTPS URLs for exactly that reason.
What does 'logo could not be fetched from the browser' mean?
Your BIMI record is fine; the logo host simply does not allow cross-origin requests from web pages (CORS). This checker runs in your browser, so it can only download the SVG when the host permits it. Mail clients fetch logos from their own servers and are not subject to CORS, so this result does not mean your logo is broken.
Is this BIMI checker free?
Yes. The BIMI checker is completely free with no signup required. The check runs in your browser using public DNS-over-HTTPS resolvers. When a BIMI record is found, we do receive the domain name: it triggers an independent check from our own servers for our public domain index. The SVG file you preview never passes through our servers.