# BIMI Checker

Inspect BIMI records, basic SVG logo properties, certificate fields and DMARC policy. Does not verify certificate trust or guarantee logo display.

Canonical: https://tamperbox.dev/bimi-checker

Reviewed: 2026-10-13

## Capabilities and processing

Enter a domain, paste a BIMI record, SVG logo or PEM certificate, or choose a file. A domain is looked up at `default._bimi.<domain>` by our server, which also fetches the logo and certificate. Pasted text and chosen files are read in your browser and never uploaded.

The logo is previewed on light and dark inboxes as an image, so nothing in it runs. Basic SVG Tiny PS attributes and disallowed constructs are inspected, the certificate for the logotype extension, validity and named domains, and DMARC for enforcement.

## Example workflow

The reserved sample domain harbor-supply.example has a sample logo and certificate, but its p=none policy does not meet the DMARC enforcement requirement for BIMI. This is a fixture, not a live inbox result. Open the DMARC checker to plan enforcement.

## Limits and interpretation

Full SVG schema conformance, certificate trust, revocation and logo hash matching are not verified. Each mailbox provider decides whether to show a logo; passing every check does not guarantee display. The application does not persist tool inputs or results.

## Related tools

[DMARC Checker](https://tamperbox.dev/dmarc-checker) inspects the enforcement policy BIMI depends on. [Email Provider Lookup](https://tamperbox.dev/email-provider) identifies known receiving hosts or gateways.

[All tools](https://tamperbox.dev/) · [Privacy](https://tamperbox.dev/privacy)

## References

[BIMI Group implementation guide](https://bimigroup.org/implementation-guide/). The checks here cover only the subset described above.