Why your invoices land in spam, and the three DNS records that fix it.
Mail providers increasingly reject or spam-folder messages from domains without authentication records. Three DNS records solve this.
SPF lists which servers may send mail for your domain. DKIM cryptographically signs your outgoing mail. DMARC tells receivers what to do when a check fails.
We publish SPF and DKIM automatically for mailboxes hosted with us — you only need to add records manually if you also send through a third party such as a CRM or newsletter tool.
Start DMARC in monitoring mode, review the reports for a fortnight, then tighten the policy to quarantine and finally reject.