What Does BIMI Logo Approval Actually Involve?
There is no single “BIMI logo approval” authority. Logo approval for BIMI is performed by the Certificate Authority during VMC or CMC issuance. The CA validates that the logo is in SVG Tiny PS format, that it matches the registered trademark (for VMC), and that the organization identity is verified. Mailbox providers do not approve logos — they read the certificate and BIMI record at display time to decide whether to show the logo.
Who Actually “Approves” the Logo
The misconception that BIMI logos require approval from Google, Yahoo, or another mailbox provider is common. Mailbox providers are consumers of the BIMI infrastructure, not gatekeepers. When Gmail evaluates a BIMI record, it reads the VMC issued by the CA, checks that the certificate is valid, and decides whether to display the logo based on that. The provider does not maintain a logo approval queue or allowlist.
The CA is the approval authority. The CA’s validation creates the certificate that mailbox providers trust. Everything downstream — DNS records, logo hosting, mailbox display — depends on having a valid certificate from an accepted CA.
Approval Flows: VMC vs. CMC
Trademark verification — CA looks up the trademark at the declared registry. Confirms active registration, matching logo, correct trademark owner.
Organization identity verification — CA confirms the applicant is the trademark holder or authorized to act on their behalf.
SVG Tiny PS validation — CA validates the submitted logo file against the profile requirements. Rejects standard SVG 1.1 or non-compliant files.
Certificate issuance — CA issues a signed VMC encoding the trademark claim, organization identity, and domain. The certificate establishes verified logo ownership for BIMI and typically takes 1–5 business days from complete documentation.
Domain control verification — CA confirms the applicant controls the domain. No trademark lookup required.
Organization identity verification — CA confirms the organization exists and the applicant has authority to act for it.
SVG Tiny PS validation — Same as VMC. Logo must conform to SVG Tiny PS profile.
Certificate issuance — CA issues a signed CMC encoding organization identity and domain. The certificate establishes BIMI logo eligibility without a registered trademark.
What the Logo Validation Actually Checks
The CA does not evaluate whether the logo is aesthetically appropriate, brand-safe in general, or visually distinct. The validation checks are technical and legal — not editorial:
SVG format conformance. The file must be SVG Tiny 1.2 with baseProfile="tiny-ps", a <title> element, no disallowed features (scripts, external references, animations), and a square viewBox. See What Is SVG Tiny PS?
Trademark-to-logo match (VMC only). The logo submitted must correspond to the registered trademark. The CA compares the submitted image to the trademark registration. Minor variations that were not part of the trademark registration will cause rejection. See Why Was My VMC Application Rejected? for the specific trademark mismatch scenario.
No third-party trademark infringement. For CMC specifically, where there is no trademark validation to establish ownership, the CA may check that the submitted logo does not obviously infringe a well-known registered trademark. This is a basic check, not a comprehensive clearance search.
There is no appeal process with Gmail or other mailbox providers regarding logo display decisions — they are automated based on the BIMI record and certificate. If logo display is not working after a valid certificate is in place, the issue is in the technical configuration, not a provider-side approval decision. See Why Isn’t My BIMI Logo Showing?