Brand Logo (BIMI)
BIMI puts your logo beside your email in the inbox. It is not a security control, though — it is DMARC's visible reward: the thing that actually stops spoofing is DMARC itself. Specula builds the chain and watches every link in it.
A Turkish trademark alone is not enough for a VMC
TÜRKPATENT is not among the 17 trademark offices BIMI recognises. A mark registered only in Türkiye cannot get a VMC; the route is a CMC. With a CMC the logo shows in Gmail without the verified tick, and does not show in Apple Mail at all.
No record is written while DMARC isn't enforced
The wizard has five steps and the first is whether DMARC is genuinely enforced. Until it is, no BIMI record is written — because the assurance BIMI rests on is DMARC.
An expired certificate drops your logo quietly
Measured: of 25 brands checked, three (sendgrid, booking.com, zoom.us) had lost their logo to an expired certificate and nobody had noticed. Daily monitoring warns at 30, 7, 1 and 0 days.
| VMC | CMC | |
|---|---|---|
| Trademark requirement | one of 17 offices | none |
| TÜRKPATENT only | cannot | can |
| Gmail | logo + tick | logo |
| Apple Mail | shows | does not show |
For most Turkish brands the route is a CMC
Its limits
The screen says the certificate was read, not that it was verified; the chain is not validated against BIMI root certificates. Nor does it promise your logo will appear: the provider table is an inference from the configuration measured, and the screen says so.
Other features
Run this check on your own domain.
Add a domain and Specula finishes the first scan within minutes. No credit card needed.