Organization

Sending domains

Bring your own domain so campaign email sends from your brand, not a shared address. Every domain needs four DNS records verified in DNS before it can send: TXT, SPF (TXT), DKIM1, and DKIM2.

Add a sending domain

A dedicated subdomain (e.g. mail.yourcompany.com) is safer than your root domain — a sending problem never touches your main site or inbox.

How verification works

1. TXT / SPF proves ownership

Add the TXT and SPF records shown below to your DNS zone. This tells Azure Communication Services — and every mailbox provider — that you control the domain.

2. DKIM1 and DKIM2 sign every send

Add the CNAME records shown below once TXT is verified. DKIM lets receiving servers confirm the email wasn't altered in transit.

Subdomains need the short label

In Cloudflare-style zone editors, the zone is your root domain, so only enter the subdomain part in the record's Name field — not the full host shown below.

DNS propagation typically takes 15–20 minutes. Re-check a record instead of re-adding the domain.

Your domains

Domain Status Sender Actions