Verified & Common Mark Certificates

A trusted logo in the inbox is a Marketing + IT achievement.

A VMC or CMC only issues when Marketing has secured the registered trademark and brand SVG, and IT has email authentication — DMARC, SPF and DKIM — fully enforced. If either side isn't ready, the certificate can't be issued or rendered. BIMI Sidekick verifies both, live, in about 15 seconds — so the order is right the first time.

DMARC at enforcement, with aligned SPF & DKIM — checked live across multiple resolvers.

A registered trademark — verified against USPTO, EUIPO & WIPO.

The brand logo as SVG Tiny P/S — validated and corrected before checkout.

Two teams, one trusted inbox

A Verified Mark is a partnership between Marketing and IT.

The logo your customers see is the visible result of two disciplines working in step. Marketing earns the right to the mark; IT earns the trust that lets it render. A VMC or CMC only succeeds when both are in place — and that is precisely what this platform verifies, for each team, before a purchase is made.

🎨
Marketing owns
The brand & the mark

› A registered trademark for the logo, in a recognised office (USPTO, EUIPO, WIPO and others).
› The logo delivered as a square SVG Tiny P/S file that meets the BIMI profile.
› Brand consistency — the same mark customers already trust, now beside every message.
› The business case: stronger recognition, higher engagement, a verified brand presence.

🛡️
IT owns
The authentication & trust

› DMARC at enforcement (p=quarantine or reject) — the precondition for any logo.
› Aligned SPF and DKIM so every legitimate message authenticates cleanly.
› The BIMI DNS record and certificate published and propagated correctly.
› Ongoing deliverability — protecting the domain from spoofing and impersonation.

BIMI Sidekick gives both teams a single source of truth — Marketing confirms the mark qualifies, IT confirms authentication is enforced — so a certificate is bought and deployed right the first time: a secure and successful experience for everyone involved.

For Marketing · the brand mark

Is your logo BIMI-ready?

Marketing owns the mark — and a Certificate Authority will only issue against a square SVG Tiny P/S file. Drop your logo below and BIMI Sidekick runs the exact profile checks a Public CA enforces, then previews how it renders in the inbox — square, and circle-cropped the way Gmail and Apple Mail display it.

SVG Tiny P/S validator · runs in your browser

Validate your logo

Drop your logo SVG here, or click to choose

…or paste the SVG markup below. Nothing leaves your browser.

Load a sample:

Validated locally against the SVG Tiny P/S profile — the same rules behind the BIMI Sidekick validator. No upload, no API call.

For IT · email authentication

For IT: confirm a message is actually authenticating.

DNS configuration is one half of IT's job; the other is proving real messages pass. Paste the raw headers of an email your domain sent and BIMI Sidekick reads its SPF, DKIM, DMARC and BIMI results — the same evaluation a receiving mailbox performs. It's the fastest way to confirm enforcement is working, both before a certificate is purchased and after it goes live.

Email authentication analyzer · runs in your browser

Paste email headers

Load a sample:

Parsed locally with the same logic as the BIMI Sidekick header utility — no upload, no API call. In Gmail use “Show original”; in Outlook, “View message source”.

The customer-experience gap

Your VMC page already lists the requirements. It just can't check them.

Sectigo's VMC page even has FAQs like “How do I check if my logo is registered?” and “What validation is required?” — great questions with no self-service answer. That's exactly the moment a buyer stalls, opens a support ticket, or buys a cert that fails validation.

Today Read the requirements, then guess

✗ Buyer skims “you need DMARC at enforcement” — unsure if theirs is.
✗ “Logo must be a registered trademark” — no way to confirm here.
✗ Buys the VMC, uploads an SVG, it fails the Tiny P/S profile.
✗ Refund request + support ticket + a frustrated brand.

Embedded Self-qualify in 15 seconds

✓ Live verdict: “You qualify for a VMC today” — or the exact blocker.
✓ DMARC / DKIM / BIMI / MX checked across multiple resolvers.
✓ Trademark verified against the registry; SVG validated pre-checkout.
✓ Only ready customers reach “Add to Cart” — fewer bounced orders.

1 call

JSON in, verdict out — drop it into any page.

~3 sec

Live multi-resolver readiness + registry check.

Fewer refunds

Failed-validation orders caught before checkout.

It's an API, not a redirect

Embed it under your brand. We never touch your checkout.

The widget above is this exact call. White-label it in Sectigo teal, keep customers on sectigo.com, and read the verdict, blockers, readiness, and CA-acceptance straight from JSON. Per-tenant rate limits and webhooks included.

GET https://bimisidekick.com/api/eligibility?domain=paypal.com

# run a check above — the real response renders here

The same engine powers the SVG Tiny P/S validator and email authentication analyzer above, plus a live DNS propagation matrix — each embeddable under your brand the same way.

Give Marketing and IT a shared path to the inbox.

Embedded readiness checks let both teams confirm their half is ready before a certificate is purchased — lifting conversion, cutting failed orders, and protecting the brand. Under your brand, powered by BIMI Sidekick.

Try the live check See the platform ↗