The core question — answered in one sentence each
VMC
Requires a registered trademark. Your logo must be trademark-registered in the country of use.
90.8% of all BIMI certs — 18357 records
VS
CMC
No trademark required. Your logo just needs to be in established commercial use.
9.2% of all BIMI certs — 1870 records · Growing fast

Section 01

The One Difference That Everything Else Flows From

VMC and CMC produce the same visible outcome: your logo appears in the recipient’s inbox alongside your emails. The difference is not what they do — it is what you need to have before you can get one.

A VMC requires a trademark registration. This means your logo — in the specific form you want to display — must be registered as a trademark in at least the country where you are using it. The trademark requirement exists because a VMC is a verified mark: a certificate authority has confirmed the organisation owns the legal right to that logo.

A CMC requires prior use. Your logo must be demonstrably in use commercially — visible on your website, in your marketing, on your products. No government registration required.

That single difference creates almost every other practical distinction between the two paths.

FactorVMCCMC
Trademark required✓ Required✗ Not required
Logo type supportedRegistered mark, government markPrior use mark, modified registered mark
Typical time to obtain2–6 weeks (assuming TM exists)1–3 weeks
Certificate costHigher (trademark verification included)Lower
Gmail support✓ Full support✓ Full support
Yahoo Mail support✓ Full support✓ Full support
Apple Mail support✓ Full support✓ Full support
Annual renewal required✓ Both paths✓ Both paths
DMARC enforcement needed✓ p=quarantine or reject✓ p=quarantine or reject
Best for established brands✓ Primary pathSecondary / alternative
Best for startups / SMBs✗ Trademark barrier✓ Primary path

Section 02

What the Market Data Shows

CMC has gone from 8 records in 2023 to 1870 by July 2, 2026 — a 234-fold increase in under three years. That is the fastest growth rate of any BIMI certificate category. But 90.8% of all certificates in deployment are still VMC.

That split reflects the current market composition, not a permanent preference. BIMI adoption has been driven by enterprise and large-brand deployments where trademark registrations already exist. As CMC awareness increases and MSP/agency channels start offering it as a standard service, the ratio will shift.

VMC vs CMC issuance volume — 2023 to 2026 YTD
CMC growth trajectory is steeper in percentage terms despite lower absolute volume

VMC — 2023: 2730; 2024: 4215; 2025: 5674; 2026 YTD: 3809 | CMC — 2023: 8; 2024: 114; 2025: 1005; 2026 YTD: 743
The Entrust factor and CMC

Only 5 of Entrust’s 4431 certificates were CMC. Entrust’s customer base was almost entirely VMC. That matters for the migration wave: organizations replacing Entrust certificates are replacing VMCs with VMCs — not switching types. CMC growth is genuinely new adoption, not migration volume. In November 2024, Google Chrome and Mozilla Firefox publicly distrusted Entrust as a Certificate Authority — citing compliance failures — which ended its ability to issue new BIMI certificates. Existing Entrust certificates remain valid until expiry, but no renewals are possible.

Section 03

Which Sectors Choose Which Type

Sector differences in VMC vs CMC adoption are smaller than you might expect. Banking (87.6% VMC) and Retail (88.4% VMC) are both heavily VMC — established brand names with registered trademarks have no reason to choose CMC. Healthcare’s CMC rate of 13.1% is slightly higher, likely because mid-size clinics and regional providers are deploying BIMI before obtaining full trademark registrations.

VMC vs CMC split by sector
Percentage of certificates that are CMC within each sector

CMC share % — Banking: 12.4; Tech/SaaS: 15.1; Retail: 11.6; Healthcare: 13.1; Media: 25; Travel: 12.8; Telecom: 12.8; Energy: 10.8

Section 04

The Decision Matrix: Which One Is Right for You

The trademark requirement is the first filter. If your logo is not registered as a trademark, VMC is not currently available to you — CMC is your path. If it is registered, either path is technically available, but the right choice depends on your situation.

You have a registered trademark for your logo
The trademark exists and covers the logo you want to display in BIMI
Use VMC
Your logo is in established commercial use but not yet trademarked
Visible on website, in marketing materials, on products — but no registered TM
Use CMC
Startup or early-stage company, trademark application in progress
Trademark filed or planned but not yet granted — BIMI wanted now
Use CMC now → upgrade to VMC
Large enterprise, multiple sending domains, all with trademark coverage
Brand protection is the primary driver; trademark infrastructure is mature
Use VMC
Mid-market company, some sending domains trademarked, some not
Mixed trademark coverage across domains or sub-brands
VMC where TM exists · CMC elsewhere
Government or public sector entity
Government marks are supported natively under VMC via a separate mark type
Use VMC (government mark type)
Agency or MSP deploying for clients — mixed portfolio
Clients have different trademark situations; need to handle both paths
Assess per client

Section 05

The CMC-to-VMC Upgrade Path

One of the most practical points that rarely gets covered: CMC is not a permanent alternative. It is a viable entry point. If your trademark is in progress, or your organisation simply has not yet registered the mark, CMC gets you into the inbox with a verified logo now. When your trademark is granted, upgrading to VMC is a standard certificate reissuance — not a new deployment.

The inbox experience for recipients is identical. The sender experience changes only at renewal — instead of renewing a CMC, you issue a VMC. The BIMI DNS record format and the SVG logo requirements are the same for both types.

What does not change between VMC and CMC

DMARC enforcement requirement (p=quarantine or p=reject), SVG Tiny P/S logo format, BIMI DNS record structure, annual renewal cadence, and mailbox provider compatibility. The only operational difference is the certificate type and the supporting documentation provided during issuance.

FAQ

Common Questions

Does CMC display the same logo as VMC in Gmail?

Yes. The verified checkmark and logo display are identical for both certificate types in all supporting mailbox providers.

Can I get a VMC if my trademark is pending?

No. A VMC requires a granted trademark registration, not a pending application. Use CMC during the pending period and upgrade when the registration is confirmed.

Is CMC less credible or less secure than VMC?

No. Both require the same DMARC enforcement baseline and are issued by the same Certificate Authorities through the same BIMI standard. The difference is in the verification evidence — trademark registration for VMC, prior use evidence for CMC.

Can I have both VMC and CMC certificates?

Yes. An organisation with multiple sending domains can use VMC on trademarked brand domains and CMC on sub-brands or domains without trademark coverage. Each domain has its own BIMI configuration.

Which CA issues CMC certificates?

DigiCert issues the majority of CMC certificates (1693 of 1870 in this dataset). GlobalSign and Sectigo also issue CMC. Entrust issued very few CMC certificates (5 records) before exiting the market.

Expert Interpretation

What the VMC/CMC Split Tells Marketers and IT Teams

VMCcerts Research · Mark Type Analysis

“CMC’s 234-fold growth in under three years is not a niche phenomenon. It represents a fundamental shift in who BIMI is accessible to. Before CMC, the trademark requirement made BIMI a large-enterprise product by default. CMC removes that barrier — any organisation with an established logo in commercial use can now deploy BIMI. The question is not whether to choose VMC or CMC. It is whether your trademark infrastructure is in place to use VMC, or whether CMC is the faster path to inbox trust today.”

The CMC-to-VMC upgrade path is underused. Many organisations choose CMC as a temporary measure while awaiting trademark registration, then never formally upgrade. Since the inbox experience is identical for recipients, the operational urgency to upgrade is low. The practical reason to upgrade from CMC to VMC when the trademark is granted: VMC is considered the more defensible long-term foundation, particularly for organisations in regulated sectors where trademark ownership documentation has compliance value.

Not sure which certificate path fits your situation?
VMCcerts advisors assess your trademark status, DMARC readiness, and sending infrastructure to recommend the right path — VMC, CMC, or staged approach — and handle issuance through DigiCert, GlobalSign, or Sectigo.
Cite This Report



VMCcerts Research. (2026). VMC vs CMC: BIMI Certificate Buyer Decision Guide 2026 [Research Report]. VMCcerts. https://vmccerts.com/research/vmc-vs-cmc-buyer-decision-guide-2026
VMCcerts Research. “VMC vs CMC: BIMI Certificate Buyer Decision Guide 2026.” VMCcerts, 2026, https://vmccerts.com/research/vmc-vs-cmc-buyer-decision-guide-2026.
@techreport{vmccerts2026VMCvsCMCGuide,
author = {VMCcerts Research},
title = {VMC vs CMC: BIMI Certificate Buyer Decision Guide 2026},
institution = {VMCcerts},
year = {2026},
url = {https://vmccerts.com/research/vmc-vs-cmc-buyer-decision-guide-2026},
note = {Dataset: VMCcerts BIMI Dataset v2026.2. Snapshot: 2026-07-02.}
}
TY – RPRT
AU – VMCcerts Research
TI – VMC vs CMC: BIMI Certificate Buyer Decision Guide 2026
PY – 2026
PB – VMCcerts
UR – https://vmccerts.com/research/vmc-vs-cmc-buyer-decision-guide-2026
ER –