What is a Verified Mark Certificate (VMC)?

Still have a question, spotted an error, or have a better explanation or a source we should cite?

So you're thinking about putting your logo in Gmail inboxes? That's where a Verified Mark Certificate (VMC) comes in. It's basically a credential that proves you legally own your brand's logo, kind of like how an SSL certificate proves you own a website.

Here's the deal. When you set up BIMI (Brand Indicators for Message Identification), you're telling Gmail and other mailbox providers to display your logo next to your sender name. But any company could claim any logo without proof. VMCs solve that problem by requiring Entrust or DigiCert (the only approved Certificate Authorities) to verify you actually own the trademark. They check your registration and issue the certificate tied to your specific logo file.

Here's what matters for you. Gmail requires a VMC to display your logo. Other providers like Yahoo are more flexible, but if you want that visual trust signal across the board, you'll need one. The cost is typically $1,500 to $3,000 per year, which is a real investment for smaller teams.

Next step: if you've got a registered trademark and DMARC enforcement set up, check whether your domain meets BIMI prerequisites before committing to a VMC.

Contributors

Who worked on this answer

Every name links to their profile. Every company links to their site. Real people, real accountability.

Ask an AI · tailored to your setup

Get personalized guidance on whether a VMC makes sense for your business.

I read about Verified Mark Certificates (VMCs) on the Email Almanac. It's a digital certificate that proves I own my logo's trademark, issued by Entrust or DigiCert, and required by Gmail for BIMI. Help me figure out if I actually need one: 1. Does my sending volume and brand recognition justify the $1,500-$3,000/year cost? 2. What are the full prerequisites I need in place first (trademark registration, DMARC setup)? 3. How much does this actually improve customer engagement or deliverability? 4. Which certificate authority should I work with? --- My details (fill in what applies): - Email platform/ESP: e.g., SendGrid, Mailchimp, Postmark - Domain(s): your sending domain(s) - Sending volume: e.g., 5,000/month or 500/day - Current DMARC policy: none / quarantine / reject - Do you have a registered trademark?: yes/no, which jurisdictions? - Target mailbox providers: Gmail / Yahoo / Apple Mail / others - Brand recognition/audience size: estimate

Edit the yellow boxes, then send to the AI of your choice.