StrategyCore
Back to Resources
09/cybersecurity 2 min read

BIMI for Japanese organisations: requirements before logo display

Treat the logo as a provider-dependent feature, with authentication and certificate work behind it.

BIMI lets a domain publish information that supporting mail systems can use to display a brand logo. For a Japanese prospect, the useful questions are which recipients will see it, what the provider requires and who will maintain the DNS records and certificate. Logo display is not universal, and it is not a verdict that a message is safe.

BIMI readiness and display checks

SC-FL-03 · REV A · 2026.07

01Recipient support

provider requirements

02DMARC readiness

authentication

03Logo and certificate

brand evidence

04Display test

supported clients

Display depends on the receiving environment; it does not guarantee message safety.

Review provider support, authentication, brand evidence and certificate acceptance before testing display.
01

Start with the recipient’s provider

Google’s BIMI setup guidance calls for DMARC enforcement with quarantine or reject and describes accepted mark certificates. Apple has its own provider and certificate conditions. Check the services and clients used by the organisation’s recipients rather than promising the same presentation everywhere. A logo may be absent even when the sender is legitimate.

02

Confirm brand and certificate readiness

Check the logo format, domain control and eligibility for the certificate accepted by the intended provider. Google documents both Verified Mark Certificates and Common Mark Certificates; their eligibility and presentation differ. Work with the certificate issuer on evidence and renewal. Do not assume every brand needs a newly registered trademark, or that every certificate produces a verification mark.

03

Test authentication and presentation separately

Verify legitimate senders and DMARC alignment before the BIMI rollout. Then test logo hosting, DNS publication, certificate validity and display in supported recipient environments. Record the test date and the specific provider. Successful authentication and a valid BIMI record do not guarantee inbox placement, a logo on every message or better open rates.

04

Plan ownership after launch

Assign owners for DNS, the hosted image, certificate renewal and brand changes. Keep customer guidance clear: a displayed logo is one signal, while payment requests, links and account access still require normal checks. If discussing commercial benefits, use the customer’s own measured results rather than a universal uplift percentage.

Sources and further reading

// Key Takeaways

What to remember

  • Check the requirements of the intended recipient providers.
  • Certificate eligibility and logo display vary.
  • Maintain renewal and brand-change ownership after launch.

// FAQ

Frequently asked questions

Q1

Does BIMI require p=reject in every case?

No. Google’s cited guidance allows quarantine or reject for DMARC enforcement. The full requirements of the target mailbox provider and certificate issuer still need to be met.

Q2

Can a vendor guarantee logo display in every inbox?

No. Provider support, certificate acceptance, authentication and local presentation rules differ. Test the intended recipient environments and maintain the record and certificate.

Last updated:

Explain BIMI support clearly in Japanese product discussions.

Share your product’s DMARC and BIMI functions, certificate requirements and supported mailbox providers. We can help your team present those conditions accurately to Japanese prospects and distinguish authentication from logo display.