Knowledge Base

When do I need a VMC Authorization Letter?

Updated on October 14, 2026

Provide a VMC authorization letter from the mark certificate owner

Overview

By following this article, you will know when Sectigo needs an authorization letter for your Verified Mark Certificate (VMC), and how to provide a valid letter if Sectigo asks for one.

A VMC authorization letter is a signed letter in which the registered owner of a trademark or government mark (the mark owner) allows your organization to use the mark in a VMC. The article explains when an authorization letter is required, the steps to follow if Sectigo requests a letter, and why Sectigo validates mark ownership for Brand Indicators for Message Identification (BIMI).

Do not submit an authorization letter unless Sectigo asks you to provide one.

Sectigo will review the ownership information for the mark during validation and let you know if an authorization letter is required.

When is a VMC authorization letter required?

During Verified Mark Certificate (VMC) validation, Sectigo reviews who owns the mark that will appear in the certificate. A VMC authorization letter may be required when the organization that requests the VMC (the applicant) is not the registered owner of the mark.

The current Brand Indicators for Message Identification (BIMI) Mark Certificate Requirements state that when the registered owner of a Registered Mark is not the applicant, the Certificate Authority (CA) must obtain an authorization letter from the registered owner before it issues the certificate. The requirements apply a similar rule to Government Marks.

Sectigo tells you during validation if your VMC order needs an authorization letter.

What should I do if Sectigo requests a VMC authorization letter?

If Sectigo determines that your Verified Mark Certificate (VMC) order needs an authorization letter, the Sectigo Validation team contacts you with the requirements and instructions.

Read the requirements and instructions from the Sectigo Validation team.
Share the requirements with the registered owner of the mark.
Ask the mark owner to complete and sign the authorization letter as described in the instructions.
Return the signed letter to Sectigo using the method stated in the validation request.

Important: Complete and submit a VMC authorization letter only when Sectigo requests it. A letter that you send before Sectigo reviews the mark ownership does not replace the VMC validation process.

Why does Sectigo validate mark ownership for a VMC?

A Verified Mark Certificate (VMC) creates a verified link between an organization, its domain, and the logo (mark) that email clients display through Brand Indicators for Message Identification (BIMI). For this reason, Sectigo validates both the organization and the mark before it issues a VMC.

Sectigo’s VMC and Common Mark Certificate (CMC) validation documentation describes the wider organization validation process. The BIMI requirements also require Sectigo to verify that the applicant owns the Registered Mark or is licensed to use it.