SignumeBIMI vs VMC: What Is the Difference?
BIMI is the standard that tells inboxes where to find your logo. A VMC is the certificate that proves the logo is yours. Here is how the two fit together.
BIMI and a VMC are not two options you choose between. They are two halves of the same setup. BIMI is the standard that tells a mailbox provider where to find your logo. A VMC is the certificate that proves the logo belongs to you.
We get asked to "set up BIMI" and to "buy a VMC" as though they were separate projects. They are not, and understanding why saves a lot of wasted effort.
The short version
| BIMI | VMC | |
|---|---|---|
| What it is | An email standard | A digital certificate |
| Where it lives | A TXT record in your DNS | A file issued by a Certificate Authority |
| What it does | Points inboxes to your logo | Proves you own the logo |
| Who provides it | You publish it yourself | A Mark Verifying Authority issues it |
| Cost | Free to publish | Paid, renewed annually |
| Requires a trademark | No | Yes |
What BIMI actually is
BIMI stands for Brand Indicators for Message Identification. It is a published specification, not a product, and nobody sells it to you.
In practice BIMI is a single DNS record on your sending domain. It usually looks something like this:
default._bimi.yourdomain.com. IN TXT "v=BIMI1; l=https://yourdomain.com/logo.svg; a=https://yourdomain.com/vmc.pem"
Three parts matter. v=BIMI1 declares the version. The l= tag is the URL of your logo file. The a= tag is the URL of your certificate, which is where the VMC comes in.
You can publish a BIMI record today, for free, in about ten minutes. That is the part people find surprising. The record itself is trivial. Everything that makes it work sits either side of it.
What a VMC actually is
A Verified Mark Certificate is a real certificate, issued by a Certificate Authority that has been authorized to act as a Mark Verifying Authority. It is closer in spirit to the TLS certificate on your website than to a DNS record, except that it attests to something different. A TLS certificate proves you control a domain. A VMC proves you own a logo.
That proof comes from a registered trademark. The Certificate Authority checks your mark against the register, checks that the logo file you submitted matches the registered mark, and verifies your organization's identity before issuing anything. Our full walkthrough of that process is in what a VMC is and how to get one.
Why the two get confused
Two reasons, and both are understandable.
The first is that a BIMI record without a certificate does almost nothing in the inboxes most brands care about. Gmail and Apple Mail want the a= tag populated with a valid certificate. So people publish BIMI, see no logo, and conclude BIMI is broken. It is not broken. It is incomplete.
The second is that Yahoo muddies the picture. Yahoo has displayed logos from a BIMI record without requiring any certificate at all. A brand publishes BIMI, checks Yahoo, sees its logo, and reasonably assumes the job is done. Then nothing appears in Gmail. We cover which provider wants what in which email providers show your logo.
Do you need both?
If you want your logo in Gmail or Apple Mail, yes. The BIMI record is how those inboxes find your logo, and the certificate referenced in that record is how they decide to trust it.
If Yahoo is genuinely the only inbox you care about, a BIMI record alone may show your logo there. We have yet to meet an EU or UK brand for whom that is a sensible goal.
There is one more wrinkle. A VMC is what earns Gmail's blue checkmark. A Common Mark Certificate, the alternative for brands without a registered trademark, will display your logo in supporting inboxes but never produces the checkmark. The difference between the certificate and the checkmark is worth reading on its own: see VMC vs Gmail's blue checkmark.
Where each side fails
The failures are different, which is useful to know when something is not working.
BIMI side failures are usually mechanical. The record is on the wrong hostname, the selector does not match, the SVG is not square, the logo URL is not served over HTTPS, or the file is not the required SVG Tiny P/S profile. These are fixable in an afternoon once you know which one it is, and the full checklist is in the technical requirements for a VMC.
VMC side failures are usually about eligibility. The trademark is registered to a different legal entity, the logo has been refreshed since registration and no longer matches the mark, or the mark is still pending. These take weeks or months to fix, which is why we check them before anyone spends money.
Sitting underneath both is DMARC. No mailbox provider will display a logo for a domain that is not at DMARC enforcement, whatever your record and certificate say. That is the single most common stall point, and we explain the reasoning in why DMARC enforcement is mandatory.
How we sequence it
Working in the wrong order is expensive. Buying a certificate before the trademark is confirmed, or before DMARC is at enforcement, means paying for something that cannot display yet.
The order we use is: confirm the trademark, get DMARC to enforcement, prepare a compliant SVG, apply for the VMC, and publish the BIMI record last. The DNS record is the final step, not the first, because it is the only part that depends on everything else.
Signume runs that sequence for EU and UK brands, including the trademark check that tells you early whether the VMC route is open to you at all.
Frequently asked questions
Is BIMI the same as a VMC? No. BIMI is a free email standard published as a DNS record on your domain. A VMC is a paid certificate issued by a Certificate Authority that proves you own the logo the BIMI record points to.
Can I publish BIMI without a VMC? Yes, and it costs nothing. Yahoo has shown logos from a BIMI record alone, but Gmail and Apple Mail expect a valid certificate referenced in the record, so most brands see no result without one.
Which comes first, BIMI or the VMC?
The certificate. Your BIMI record references the VMC in its a= tag, so the record is normally published last, after the trademark, DMARC enforcement, SVG and certificate are all in place.
Does BIMI cost money? Publishing the DNS record is free. The cost of a BIMI project is the VMC itself, renewed annually, plus trademark registration if you do not already hold one.
Do I need a trademark for BIMI? Not for the BIMI record itself. You need one for the VMC that Gmail and Apple Mail expect that record to reference. A Common Mark Certificate is the alternative route without a trademark, but it does not earn Gmail's checkmark.
Related guides
Can One VMC Cover Multiple Domains and Subdomains?
One VMC covers one logo, but it can protect several domains and subdomains. Here is how coverage works, and when you genuinely need a second certificate.
What Is a VMC (Verified Mark Certificate) and How Do You Get One?
A Verified Mark Certificate puts your trademarked logo, and Gmail's blue checkmark, in the inbox. Here's what a VMC is, what it requires, and how to get one.
BIMI, VMC & CMC: Which Email Providers Show Your Logo (and the Checkmark)?
Not every inbox treats BIMI the same. Here's which providers show your brand logo, which add Gmail's blue checkmark, and which show nothing at all in 2026.