Global BIMI Adoption Report 2026:
20227 Certificates. 109 Countries.

BIMI commercial certificate issuance began in earnest in 2021 with 539 certificates. By 2025 that annual figure had grown to 6679 — a 12-fold increase in four years. The 2026 pace of 4552 certificates in the first half of 2026 (January 1 – July 2) extrapolates to approximately 9079 for the full year, which would represent a further 33% year-on-year increase.

What makes this growth notable is its consistency. Every year from 2021 to 2025, new issuances exceeded the prior year by between -32% and 2350%. There is no year in this dataset where growth decelerated sharply. The BIMI market is not a hype cycle with a correction — it is a steadily maturing infrastructure adoption curve.

The United States holds 8670 certificates — 42.9% of the global total. The next four markets are the UK (1738), Germany (1192), India (940), and Japan (932). Together, these five countries account for 66.6% of all BIMI deployments worldwide.

The concentration is shifting. India’s growth trajectory is steeper than Germany’s in percentage terms — India added 104 banking sector certs alone in 2025, more than Germany’s entire market in 2022. By late 2027, India is projected to surpass Germany for the #3 position globally. Japan’s 932 certificates are concentrated in media and technology, with banking adoption still early relative to the size of the Japanese enterprise base.

Technology/SaaS accounts for 25.8% of all BIMI certificates — the largest sector by volume. But the more telling signal is in the notability data. Banking/Financial, which holds 16.5% of certificates, has a high-notability rate of 37.5% (organisations scoring ≥7 out of 10 on brand recognition). Energy/Utilities has the highest high-notability rate of any sector at 50.7%, despite being only 1.8% of total volume.

That divergence tells a clear story: sectors with high phishing exposure and strong brand recognition are deploying BIMI as a security and brand protection measure — and they are deploying it at the large-brand level first. Technology/SaaS has broader coverage across company sizes. Both patterns are healthy signals for different reasons.

BIMI certificates launched commercially with two founding Certificate Authorities: DigiCert and Entrust. From 2020 through 2024, the two shared the market with Entrust at times ahead — in 2022, Entrust issued 693 certificates to DigiCert’s 646. That parity ended abruptly. Entrust issued 501 certificates in 2025 and zero in 2026. Its CA business has been discontinued.

The result is a near-monopoly. DigiCert holds 73.6% of all certificates ever issued and 85.4% of all new issuances in 2026. GlobalSign entered in late 2024 and has grown to 359 certificates in 2026 YTD — a 177.7% increase from its first full year. Sectigo (operating under SSL Corporation’s CA infrastructure) and SSL Corporation are both accelerating.

VMC (Verified Mark Certificate) requires a registered trademark. CMC (Common Mark Certificate) requires only documented prior use of the logo in commerce — no trademark registration needed. In 2023, there were 8 CMC certificates in this dataset. By July 2, 2026, there are 1870 — a 234-fold increase in under three years.

CMC now accounts for 9.2% of all certificates. Its growth rate is faster than VMC in percentage terms, though VMC remains dominant at 90.8%. The practical implication: organisations that have been unable to access BIMI due to the trademark requirement now have a viable path. This is the single biggest structural change in BIMI market access since the standard launched.

The notability gap is an adoption roadmap. Energy/Utilities has 50.7% high-notability deployment but only 360 total certificates. That gap — large brands deployed, mid-market not yet — is where the next 5,000 certificates come from in that sector. The same pattern exists in Telecom (51.8% high-notability, 506 certs) and Media/Publishing (51.4% high-notability, 640 certs). Markets with high notability concentration and low total volume are not laggards. They are early-stage adopters with clear runway.

The US concentration will dilute, not decline. The US holds 42.9% of all certificates today. That share will shrink over the next three years — not because US adoption slows, but because India, France, Japan, and the Nordics are growing faster in percentage terms. This is healthy market globalisation, not a reversal.

This report is derived entirely from Certificate Transparency (CT) log data. The dataset contains 20227 BIMI certificate records captured from publicly available CT logs with a snapshot date of 2026-07-02. The dataset covers VMC (Verified Mark Certificate) and CMC (Common Mark Certificate) records across 109 countries.

Sector classification is based on keyword matching against the Company Description field in the CT log records. Approximately 21.5% of records fall into “Other” — organisations whose descriptions did not match any defined sector taxonomy. Notability Score (0–10) is a field within the source dataset; the ≥7 threshold used throughout this report corresponds to globally or regionally well-known organisations.

CA identification uses the Intermediate CA field, with Root CA as fallback. Sectigo Limited certificates are issued under SSL Corporation’s CA infrastructure; they are shown separately in volume tables but treated as a single CA family in concentration analysis. 2026 full-year projections are based on the daily issuance rate through July 2, 2026 (184 days).