What is the difference between self-asserted and verified BIMI?
Still have a question, spotted an error, or have a better explanation or a source we should cite?
You're ready to implement BIMI, but you keep hearing two terms and they sound like corporate gobbledygook: self-asserted and verified. Here's what they actually mean, and why it matters for your brand.
Self-asserted BIMI is the fast path. You create your logo in SVG Tiny PS format, add a BIMI DNS record that points to it, and you're done. You're essentially saying "This logo belongs to my brand, trust me on it." No third party is verifying anything. No paperwork, no legal checks, no money spent. If you want to test BIMI without committing resources, this is your move. Yahoo Mail will display self-asserted logos. Apple Mail verifies evidence such as a VMC. But Gmail? Gmail says no thanks and won't show your logo.
Verified BIMI takes the verified path. You buy a Verified Mark Certificate (VMC) from a Certificate Authority. As of November 2026, the BIMI Group list names DigiCert, GlobalSign and SSL.com. Each mailbox chooses, so check before you buy. They check that your company legally owns a registered trademark for the logo you want to display. They do the paperwork, verify your ownership, and issue a certificate. You then link that certificate in your BIMI DNS record. As of November 2026, a VMC runs roughly $750 to $1,750 a year, depending on the authority, reseller and term. A CMC is usually a bit less. A VMC also needs a registered trademark, a separate cost. This is a guide only, so ask for a current quote. It unlocks Gmail display. And Gmail is huge. For many senders, that reach justifies the cost.
Think of it like this. Self-asserted is you saying "I'm a real business." Verified is you showing a government document proving you're a real business. Gmail wants that document before it'll take a risk on your logo.
Here's how to decide between them:
- Go self-asserted if you're testing the waters, your audience is mostly Yahoo users, or you don't have a registered trademark. It costs nothing and takes a day to set up.
- Go verified if you have a registered trademark, you want Gmail reach, and your brand reputation is strong enough to justify the certificate cost. Check your analytics first to see if Gmail users are worth the investment.
Setting up BIMI for the first time? Start with DMARC alignment first. Both paths require that foundation.
The most useful email questions, once a month
One email a month. New questions worth reading, real deliverability changes (Gmail and Outlook updates, etc.), and any tool or report that landed since the last issue. No fluff, no upsell.
Contributors
Who worked on this answer
Every name links to their profile. Every company links to their site. Real people, real accountability.
