What is included
- Approved-sender review
- SPF and DKIM records for each service
- DMARC monitoring and staged enforcement
- Brand-logo (BIMI) readiness advice
Email authentication
SPF, DKIM and DMARC, set up properly and enforced without breaking your email.
These three DNS records tell receiving servers which services may send email as your business. Set them carelessly and genuine invoices go to spam; leave them open and anyone can send in your name. We list every sending service first, then enforce step by step.
No contract needed. Scope and price confirmed before any work starts.
Sounds familiar?
- Customers received fake invoices that looked like they came from you
- Google or Microsoft warned about bulk sender requirements
- Your invoices or newsletters land in spam
- Nobody knows which services send email for your domain
How it works
From your first message to a tested fix.
List every sender
Microsoft 365, invoicing, newsletters, website forms and anything else that sends as you.
Publish SPF and DKIM
Records are set for each approved service and checked.
Monitor with DMARC
Reports show who is sending as your domain before anything is blocked.
Enforce in stages
Policy moves to quarantine and then reject once genuine mail is confirmed.
Good to know
- No one can guarantee inbox placement; authentication removes a common cause of spam filtering.
- Some services need their own settings changed; we guide you or the provider through them.
SPF, DKIM and DMARC setup: common questions
What do SPF, DKIM and DMARC do?
SPF lists the servers allowed to send for your domain, DKIM signs your messages, and DMARC tells receivers what to do with mail that fails, and reports back to you.
Will setting up DMARC break our email?
Not if it is done in stages. We start in monitoring mode, confirm every genuine sender, then enforce.
Do Google and Microsoft require this now?
Large mailbox providers expect authenticated mail, especially from businesses sending in volume. Authentication is now a baseline.
Can you show our logo in the inbox?
Brand logos (BIMI) need DMARC enforcement first. We advise on readiness once enforcement is in place.
Ready when you are.
Tell us what is going on. A real person confirms the next step, scope and price before any work starts.
Irish based · security, privacy and quality by design
Your information deserves controlled handling.
We minimise the information collected, restrict access by role and keep accountable delivery records. Customer solutions are designed for EU-region primary data hosting; any service-specific processor, exception or transfer safeguard is identified during scope.
ISO/IEC 27001:2022Information security management
ISO/IEC 27002:2022Security control guidance
ISO/IEC 27701:2025Privacy information management
ISO/IEC 27018:2025Cloud personal-data protection where relevant
ISO 9001:2015Quality management
EU GDPRData-protection principles and obligations
Our delivery framework is aligned with relevant EU GDPR principles, ISO/IEC 27001:2022 information-security practices and ISO 9001:2015 quality-management practices. Alignment does not represent independent Nexus Digital certification. Data location is confirmed for each production service before an EU-only commitment is made.
How can we help?
Nexus DigitalTalk to us or choose one clear next step
Request securely. Do not send passwords or payment-card details. We use the information supplied to respond and correctly route your request.