Welcome to iO™ DMARC

If you haven't already scheduled your onboarding call above scroll back up to do that now. If the scheduling calendar isn't working, that's ok, just use this link: iO™ DMARC - Schedule Onboarding

Before your onboarding call, be sure to get the following pulled together:

• Access to your DNS settings. This is typically managed through GoDaddy, Cloudflare, Namespace, etc. This can also be with your web hosting provider.

• A list of services that send email using your domain name. These typically include M365, Google, CRMs (Hubspot, Zoho, etc.), marketing platforms (Mailchimp, Constant Contact, etc.), Helpdesk or ticketing systems, billing software, and even your website. List any you can think of.

Do the best you can, but don't stress over this. We can help you get your DNS information, and even if you forget some sending sources, iO™ DMARC will help pick them up.

On your scheduled call, we'll:

• Review your current SPF, DKIM, and DMARC records
• Configure your legitimate sending sources
• Configure and publish your authentication records
• Connect your domain to iO™ DMARC monitoring
• Set your initial DMARC policy and explain what the reports will show you
• Configure MTA-STS and TLS-RPT reporting
• Configure any additional users for your iO™ DMARC platform
• Answer any questions you have about email security and deliverability

By the end of the call, your domain will be actively protected and monitored.

After your onboarding is where iO™ DMARC really kicks in.

• Within 24–48 hours, you'll start receiving DMARC reports showing exactly who's sending email from your domain.

• We'll review your first reports with you and flag anything that needs attention, like unauthorized senders or misconfigurations we catch early.

Depending on your email volume (and sending complexity), over the next 30-60 days of monitoring, we'll work with you to:

• Tighten your DMARC policy from monitoring (p=none), to flagging (p=quarantine), and finally to the full protection (p=reject).

• Identify any other legitimate sending sources that were missed and get them configured.

Once your DMARC is fully configured (p=reject), then it's time to further enhance your email deliverability and security.

• Configure BIMI. iO™ DMARC will help you configure your records and even properly optimize and host your logo.

• Tighten your incoming email security by enforcing MTA-STS.

Your domain stays monitored. If something changes, like a new sender, a misconfiguration, a blacklist hit, iO™ DMARC will let you know about it. With the continued monitoring and management you'll enjoy:

• Better email deliverability
• Enhanced security on incoming emails
• Prevent illegitimate usage of your domain name (spoofing)