EasyDMARC and GMO GlobalSign today said they have formed a partnership that pairs EasyDMARC's sender authentication software with GMO GlobalSign's Verified Mark Certificates and Common Mark Certificates, the documents that let a brand's logo appear next to its messages in supported inboxes. According to the companies, the arrangement is available to GMO GlobalSign customers across the Americas, EMEA and Asia Pacific. Neither company disclosed pricing, commercial terms or which mailbox providers the logos will reach.

In Short

Two companies that work on email security have agreed to work together, one helping businesses prove their emails are really from them and the other selling the certificates that put a company logo next to those emails. This matters to any brand that sends marketing or transactional email, because big mailbox providers increasingly reject or filter messages that fail these checks, and a visible logo is one of the few signals recipients can see. The change is that GlobalSign customers can now reach both pieces through one partnership, though the companies have not said what it costs.

What the companies said

EasyDMARC, Inc., which describes itself as "the Email Trust Platform," published the announcement on October 20, 2026, at 06:00 GMT, under a Dover, Delaware dateline. GMO GlobalSign is a certificate authority and a subsidiary of GMO GlobalSign Holdings, K.K., itself part of the Japan-based GMO Internet Group.

The premise of the deal is a familiar one for anyone who has managed a corporate sending domain. According to EasyDMARC, organizations now send email through "an increasing number of cloud applications, marketing platforms, CRMs, helpdesk systems, and third-party services." Each of those senders, the company says, "introduces new DNS records, authentication requirements, and potential risks that can impact security, deliverability, and brand reputation."

The two companies split the work along a clear line. EasyDMARC's software, according to the company, lets organizations "discover every service sending email on their behalf, manage SPF, DKIM, and DMARC across complex DNS environments, monitor authentication and deliverability, and confidently move toward DMARC enforcement." GMO GlobalSign supplies the Verified Mark Certificate (VMC) or Common Mark Certificate (CMC), which enables Brand Indicators for Message Identification (BIMI) and the display of "verified brand logos in supported inboxes," according to the release.

The companies listed five capabilities that the combination is meant to cover:

  • Visibility into domains, DNS, and every authorized email sender
  • Centralized management of SPF, DKIM, and DMARC
  • Continuous monitoring of authentication, domain health, and deliverability
  • Protection against domain spoofing and unauthorized senders
  • A path to BIMI readiness and verified brand identity through GMO GlobalSign's VMCs and CMCs

The executives' framing

Gerasim Hovhannisyan, chief executive and co-founder of EasyDMARC, placed the emphasis on infrastructure rather than on any single standard. "Email trust isn't built by a single protocol or certificate," he said. "It starts with understanding your entire email infrastructure-from domains and DNS to every service sending on your behalf-and ensuring every legitimate message reaches the inbox securely. Our partnership with GMO GlobalSign extends that foundation with verified brand identity, helping organizations build trust at every stage of the email journey."

Mike Boyle, vice president of business units at GMO GlobalSign, focused on fraud. "Email is a primary pathway for hackers to cause financial destruction and the breakdown of brand identity through Business Email Compromise. It sparks legitimate user fear of being phished and tarnishes brand credibility. One of the most effective methods of mitigating this risk is the combination of identity-based digital certificates with DMARC," Boyle said. "Our partnership with EasyDMARC provides users with a method of enabling customers to create verified trusted email identities and help improve security and protect their brand."

How the pieces fit together

The partnership makes more sense once the dependency chain is laid out. Three older standards do the authentication work. Sender Policy Framework (SPF) lists which servers may send for a domain. DomainKeys Identified Mail (DKIM) attaches a cryptographic signature to each message. DMARC, published as RFC 7489 in March 2015, sits on top of both and tells receiving servers what to do with mail that fails. PPC Land's explainer on phishing describes DMARC as the mechanism that lets domain owners instruct receiving servers on failed mail.

BIMI comes last, and it is conditional. PPC Land's explainer on brand verification notes that a sender can only show its logo "provided the domain enforces DMARC." That is the commercial logic behind pairing a DMARC management vendor with a certificate authority: a company cannot reach the logo stage until its DMARC policy has moved beyond monitoring into enforcement, and enforcement is where many organizations stall because an unknown sending service, an old CRM integration or a forgotten agency tool starts failing once the policy tightens.

The two certificate types are not equivalent. According to the same PPC Land explainer, a VMC is tied to a registered trademark, while a CMC displays a logo for senders without a trademark but withholds the checkmark. Gmail moved BIMI from a July 2020 pilot to general availability on July 12, 2021, and added a blue checkmark for VMC senders on May 3, 2023. The explainer names DigiCert and Entrust as VMC issuers for Gmail. Yahoo and AOL accept self-asserted records, which the explainer describes as a lower bar than Gmail's.

The release does not name Gmail, Yahoo, Apple Mail or any other mailbox provider. "Supported inboxes" is the only description given, which leaves the actual reach of a GlobalSign-issued logo for readers to establish from each provider's own documentation.

Why the timing matters for email senders

Authentication stopped being optional for high-volume marketers more than two years ago. In November 2023, PPC Land reported that Google would require bulk senders to Gmail to deploy SPF, DKIM and DMARC from February 1, 2024, along with one-click unsubscribe and a spam rate below 0.3% in Postmaster Tools. Yahoo applied the same three standards from the same date. Microsoft followed in April 2025 with comparable rules for high-volume senders to Outlook.com, Hotmail.com and Live.com, as PPC Land's explainer on spam traps records.

The gap between those requirements and practice is wide. When Cloudflare published its 2026 threat report in March, its email telemetry showed that nearly 46% of analyzed emails failed DMARC, a figure the report used to illustrate how inconsistently existing protocols are enforced. The same report described phishing campaigns run through high-reputation infrastructure such as Amazon SES and SendGrid - services that legitimate marketers also use.

Fraud figures give Boyle's comments on business email compromise some context. PPC Land's phishing explainer cites the Anti-Phishing Working Group as reporting that the average BEC wire transfer request rose 45% to $61,732 in the second quarter of 2026. And marketers are themselves a target. Earlier this month, PPC Land reported on an analytics engineer who was phished through a Google search ad for "cloud console" that led to a counterfeit login page hosted on sites.google.com. That case involved search advertising rather than email, but it illustrates how brand impersonation travels across channels.

For email marketers, authentication also carries a reputational cost that shows up in campaign results. The German digital association BVDW's email guide, covered by PPC Land in March, treated SPF, DKIM, DMARC and BIMI as a technical foundation rather than an optional extra. Separately, a Firmable survey reported by PPC Land on October 2 found that 52% of professionals delete cold outreach without reading it and that 75% had blocked, muted or reported a sender - complaints that feed directly into the spam-rate thresholds mailbox providers monitor.

EasyDMARC's recent repositioning

The partnership follows a change in how EasyDMARC presents itself. On September 23, 2026, according to an earlier EasyDMARC release linked from today's announcement, the company introduced what it calls the Email Trust Platform. That release described three layers: a "System of Record" covering domains, senders, configurations and reputation signals; a "System of Intelligence" that traces configuration drift to its cause; and a "System of Action" for enforcing policy. It also described an agentic intelligence layer that ranks operational risks. That earlier release gave no pricing, availability dates or performance figures.

According to EasyDMARC's company description, the business draws on "a decade of expertise" and is "trusted by more than 90,000 organizations in 130+ countries." Both figures are the company's own and have not been independently verified. The release does not say how many of those organizations already publish a DMARC policy at enforcement, how many use BIMI, or how many are GlobalSign customers.

GMO GlobalSign describes itself as "one of the world's most deeply-rooted certificate authorities" and says its public key infrastructure supports "billions of services, devices, people, and things comprising the IoT." It lists offices in the Americas, Europe and Asia. These are also the company's own characterizations.

What the announcement leaves out

Several practical questions are not answered in the release:

  • Pricing. Neither company stated what the combined offering costs, whether certificates are discounted when bought through the partnership, or how revenue is shared.
  • Direction of access. The availability statement refers only to GMO GlobalSign customers. Whether existing EasyDMARC customers can order VMCs or CMCs from inside EasyDMARC's software is not stated.
  • Integration depth. The release describes "complementary capabilities" but does not say whether there is a technical integration, such as automated BIMI record publishing, or a referral arrangement.
  • Mailbox coverage. No mailbox provider is named, so the set of inboxes where a GlobalSign-issued logo will appear is not specified.
  • Start date. The release says the partnership "is available" but gives no separate launch or rollout date.

None of this changes the underlying requirement. A domain still has to reach DMARC enforcement before any logo can appear, and the certificate remains a separate purchase from a certificate authority. What the two companies are offering is a single route through both steps for one certificate authority's customer base.

Timeline

Summary

Who: EasyDMARC, Inc., an email authentication software company led by chief executive and co-founder Gerasim Hovhannisyan, and GMO GlobalSign, a certificate authority within Japan's GMO Internet Group, represented by vice president of business units Mike Boyle.

What: A partnership that pairs EasyDMARC's tools for discovering email senders and managing SPF, DKIM and DMARC with GMO GlobalSign's Verified Mark Certificates and Common Mark Certificates, which enable BIMI brand logos in supported inboxes. Pricing, integration depth and supported mailbox providers were not disclosed.

When: Today, October 20, 2026, at 06:00 GMT.

Where: Available to GMO GlobalSign customers across the Americas, EMEA and Asia Pacific, according to the companies.

Why: Gmail, Yahoo and Microsoft now require authentication from high-volume senders, a BIMI logo can only appear once a domain enforces DMARC, and both companies frame the combination as a defense against spoofing and business email compromise.