Private email infrastructure & deliverability engineering
northboundmail.net
NorthboundMail Systems
Est. 2011 — SMTP infrastructure & deliverability
Infrastructure

Domain Management

Sending domain provisioning, DNS management, SPF flattening, DKIM key rotation, DMARC alignment and reporting, and BIMI submission. Delivered as an operational service, not a checklist.

Overview

Domain strategy is where most deliverability programs go wrong. Senders often reuse a primary corporate domain for marketing, or spin up dozens of look-alike sending domains that regulators and filters treat with suspicion.

Northbound designs the domain topology with the client: primary, subdomains for streams (transactional, marketing, notifications), and separate domains only where the vertical or brand strategy justifies them. DNS is either managed by us or by the client under our specification.

Benefits

  • Coherent SPF / DKIM / DMARC posture across all sending domains
  • Automated DKIM key rotation on a defined schedule
  • DMARC aggregate and forensic report ingestion and analysis
  • BIMI submission and VMC coordination

Technical specifications

AuthenticationSPF, DKIM (2048-bit default), DMARC, ARC, BIMI
DMARC policy migrationmonitor → quarantine → reject with staged rollout
DNSManaged on the client's authoritative servers or on ours

Use cases

  • — Brands using the same domain for corporate mail and marketing
  • — Companies with sprawling sending domain estates to consolidate
  • — Publicly listed companies needing DMARC enforcement

Questions

Do we need a separate domain for marketing?
Usually a subdomain of your primary is enough — for example, mail.brand.com — provided authentication is aligned. Standalone lookalike domains attract filter scrutiny.

Related

  • SMTP Relay
    Authenticated SMTP submission to a hardened relay cluster, with per-stream credentials, en…
  • Dedicated SMTP
    A private MTA cluster allocated to a single client. Dedicated IPs, isolated bounce and com…
  • Managed SMTP
    A dedicated MTA that we operate on your behalf, with ongoing tuning, monitoring, reputatio…
  • PowerMTA
    Licensed PowerMTA nodes operated by engineers who have run it in production for over a dec…
  • Postfix
    Hardened Postfix installations for API-driven, transactional and general-purpose outbound …
  • Dedicated IPs
    Dedicated IPv4 allocations in multiple regions, with reverse DNS, SWIP assignment, PTR ali…