Looking for competitive CMC and VMC certificates in 2026? We hear you.

You've configured DMARC at p=reject. Your SPF is aligned. Your DKIM signs correctly.

There's only one thing missing to display your logo in Gmail, Yahoo, and Apple Mail: a CMC or VMC (Verified Mark Certificate).

And that's exactly what this article is about.

The announcement: In a few weeks, you'll be able to order your VMC orCBMC certificate directly from your DMARCTrust dashboard. No more navigating between three different vendors, no more copy-pasting cryptic files. We handle everything.

The offering is currently being tested with a few pilot customers. But before we reveal the commercial details, let us explain what you're actually buying.

1. BIMI in 30 seconds: Why a certificate?

BIMI (Brand Indicators for Message Identification) allows you to display your logo next to your emails in compatible inboxes.

The problem: Anyone can host an SVG file and declare "Here's my BIMI logo." Without validation, an attacker could visually impersonate your brand.

The solution: The VMC (or BMC for "Brand Mark Certificate") proves that you are the legitimate owner of the trademark associated with the logo. It's a cryptographic attestation issued by an accredited certification authority.

Without this certificate, Gmail and others will ignore your BIMI record. With it, your logo displays.

2. VMC vs. BMC: What's the difference?

Two terms are circulating. Here's the clarification:

VMC (Verified Mark Certificate): The official term used by DigiCert, Entrust, and legacy CAs. It's the X.509 standard with BIMI extension.
BMC (Brand Mark Certificate): The term used by some alternative authorities or in marketing contexts. Functionally identical.

In practice: Both do the same thing. We'll use "VMC" for convenience, but our CA partners may offer one or the other depending on their internal nomenclature.

3. What a VMC certificate contains

A VMC is a specialized X.509 certificate. It contains:

The applicant's identity: Legal name of your company (as registered with the business registry)
The SVG logo hash: A cryptographic fingerprint of your BIMI logo file
Your trademark reference: Registration number with EUIPO, USPTO, WIPO, or other national office
The public key: Used to verify the certificate signature
The certification authority's signature.

4. The usual process (and why it's tedious)

Today, obtaining a VMC looks like this:

Step 1: Register your trademark (for VMC)
If not already done, you must register your logo as a trademark with EUIPO (Europe), INPI (France), USPTO (USA), or WIPO (international). This process takes 6 to 12 months and costs between $900 and $5,500.

Step 2: Prepare your BIMI logo (for CMC and VMC)
The logo must be an SVG Tiny PS (Portable/Secure). No JavaScript, no external references, no forbidden tags. You often need to hire a designer to convert your logo.

Step 3: Request the Mark Certificate
You go to a CA's website (DigiCert, Sectigo...), fill out a form, and upload:

Your SVG file
Your trademark registration proof
Your company identity documents (articles of incorporation, bylaws...)

Step 4: Legal and technical validation
The certification authority verifies:

That your company legally exists
That you are indeed the trademark holder
That the SVG logo matches the registered trademark
That the SVG file complies with BIMI specifications

This process takes between 2 and 6 weeks.

Step 5: Installation
You receive the certificate. You must then:

Host the .pem file on your domain or use your CA's urls
Create the BIMI DNS record with a= pointing to the certificate
Test with Google/Yahoo and tech tools

The finding: It's long, technical, and fragmented. You're juggling between your trademark agent, your SVG designer, and the certification authority. The slightest error (wrong SVG format, unrecognized trademark) extends the process by several weeks.

5. Our approach: Everything from DMARCTrust

Here's what we're preparing:

✅ One-click ordering: From your dashboard, you specify your domain and upload your logo.
✅ Automated SVG validation: We verify BIMI compliance before even submitting to the CA.
✅ Single interface with CA partners: We handle communication with our partner CAs. You don't need to create an account with them.
✅ Real-time tracking: A status dashboard shows you where your request stands (trademark validation, company validation, issuance).
✅ Hosting included: The certificate is automatically hosted. No .pem file to upload manually.
✅ Pre-configured DNS record: We generate the final BIMI record. You copy it into your DNS, and you're done.

Important: You must still have a registered trademark. We can't bypass this legal requirement. But we simplify everything else.

6. Indicative pricing and availability

VMC certificates currently cost between $1,300 and $2,000 per year (depending on the CA and volume).

Our goal: Offer competitive pricing with more services.

Timeline:

Today: Testing phase with 5 pilot customers (multinationals and SMBs).
December/January: Feedback collection, workflow adjustments.
February 2026: Online ordering opens for all customers.

We'll publish final pricing details by the end of January.

7. Anticipated FAQ

Q: Can I use BIMI without a CMC/VMC?
Technically yes, but Gmail, Yahoo, and Apple Mail won't display your logo. Only a few small providers accept BIMI without a certificate. For high volumes (B2B, e-commerce), the VMC is essential.

Q: My current logo is a PNG. Does that work?
No. BIMI requires an SVG Tiny PS. We offer a conversion service from SVG-vectorized files to SVG Tiny-PS (included or optional depending on your plan).

Q: What happens if my trademark is rejected by the CA?
We'll notify you immediately with the rejection reasons. In 90% of cases, it's a matter of missing documentation or mismatch between the SVG logo and the registered trademark. We'll guide you to correct it.

Conclusion: Simplifying what should be simple

BIMI is an excellent technology. But its adoption stagnates because the CMC/VMC process is absurdly complex for an SMB or an already overloaded IT team.

Our mission at DMARCTrust has always been to make DMARC accessible. With this new offering, we're extending that philosophy to BIMI.

Want to be among the first notified when the offering is available?
Contact us at team@dmarctrust.com with "BIMI VMC" in the subject line. We'll add you to the priority notification list.

In the meantime, make sure your DMARC is at p=reject. That's the #1 prerequisite for BIMI.

This article will be updated with final pricing details in Q1 2026.