What is a Verified Mark Certificate (VMC)?

So you're thinking about putting your logo in Gmail inboxes? That's where a Verified Mark Certificate (VMC) comes in. It's basically a credential that proves you legally own your brand's logo, kind of like how an SSL certificate proves you own a website. An ordinary website certificate does not work for BIMI, though. A Verified Mark Certificate carries its own BIMI marking, and mailboxes that check for it will not accept one without it.

Here's the deal. When you set up BIMI (Brand Indicators for Message Identification), you're telling Gmail and other mailbox providers to display your logo next to your sender name. But any company could claim any logo without proof. VMCs solve that problem by requiring a certificate authority working under the Mark Certificate rules to verify you actually own the trademark. As of November 2026, the BIMI Group list names DigiCert, GlobalSign and SSL.com. Each mailbox chooses, so check before you buy. They check your registration and issue the certificate tied to your specific logo file. The logo you link to should be the same file as the one inside your certificate. A mailbox may refuse the logo if they differ, so publish the file the certificate was issued for.

Here's what matters for you. Gmail asks for a certificate to display your logo, a VMC or a CMC. Other providers like Yahoo are more flexible, and each mailbox decides, so whether you need one depends on the mailboxes you care about. As of November 2026, a VMC runs roughly $750 to $1,750 a year, depending on the authority, reseller and term. A CMC is usually a bit less. A VMC also needs a registered trademark, a separate cost. This is a guide only, so ask for a current quote. That is a real investment for smaller teams.

Next step: if you've got a registered trademark and DMARC enforcement set up, check whether your domain meets BIMI prerequisites before committing to a VMC.