The audit is free. Hosted DMARC is billed annually.

18 October 2026

Sender Identity is operated by Finmail Limited. These terms cover the free static audit and the paid hosted DMARC subscription at senderidentity.com. Subscribing confirms these terms and the privacy policy.

Registered office of Finmail Limited
Unit 2904-05, 29/F, Universal Trade Centre, 3 Arbuthnot Road
Central
Hong Kong

The free audit

You can audit a domain without an account. The audit reads public DNS and, for MTA-STS, one well-known policy file. It does not see every sender. The result stays in this browser and is not stored on the server. A suggested DMARC record is a draft for you to publish. The audit does not publish DNS, does not open a report mailbox, and does not write p=reject.

Accounts

An account uses an email address. There is no password. A login link works for 15 minutes and only once. Creating an account does not start a subscription and does not mark the account paid. Questions about an account or a charge: support@senderidentity.com

Hosted DMARC

The hosted plan is $180 per year, for 2 domains. That is $15 per month for 2 domains, billed annually. A third domain is refused on the hosted plan. If an agency plan is opened on the account, that plan is $900 per year, for 25 domains.

The subscription renews for another year unless you cancel the next charge. You cancel on the Stripe billing page. The year already paid runs until its end date. Card details are entered on the payment page and kept there for the yearly renewal. Opening that page, or returning from it, does not start the subscription. The subscription starts when the payment notice is verified. A refund or a dispute ends the current period and stops later charges.

A report mailbox is issued only while the subscription is active. Reports go to an address at reports.senderidentity.com, not on the website host.

What you publish

You remove the TXT at _dmarc and publish one CNAME to the hosted name on the account. If that name is on Cloudflare, set the CNAME to DNS only and leave the proxy off. We publish the DMARC TXT, starting at p=none. Removing a domain removes the mailbox, the sender list, and the hosted TXT. You delete your own CNAME.

p=reject stays blocked until the static audit and the saved report agree, and the paying account approves it. A person's approval cannot override that block. Include, a, and mx are not expanded, so an unnamed sender is not proof that the sender is unauthorized. We do not issue a certificate.

Notices

A notice is sent only to the account address, and only when a sender is new, gone, or failing, or when a saved report first lists senders with no alignment failures. The account owner can add one https webhook. The notice does not include the raw aggregate XML and does not change the hosted record.

Your responsibilities

You use the service for a domain you are allowed to manage. You do not use the report mailbox for ordinary mail. You do not try to break the service, or read or change another account.

Limits

The audit and the sender list can be incomplete. Publishing p=reject can block mail, including mail you wanted to receive. You decide when to publish it. We do not promise inbox placement. Mail is not relayed.