Email Deliverability Infrastructure and Best Practices
Email deliverability is whether a message reaches the intended inbox rather than being rejected or filtered to spam. It depends on the sending identity, transport infrastructure, domain or IP reputation, audience quality, and the message itself.
Resources
Use the map below to find the owner of each layer and the evidence worth checking. If delivery changes, start with authentication and provider events.
Then inspect complaints, bounces, recent volume changes, audience source, and the final message. This guide covers product, lifecycle, and transactional email from software products.
Deliverability infrastructure map
Deliverability crosses several systems and owners. This map shows where to look first and what to collect.
Layer
Primary owner
Sending identity
Sender and provider
Transport
Provider
Reputation
Shared
Audience and consent
Sender
Message and stream
Sender
Monitoring
Shared
SPF, DKIM, and DMARC let a receiver connect a message to the domain shown to the recipient. Google and Yahoo require bulk senders to use SPF, DKIM, and DMARC, keep complaint rates low, and support easy unsubscribe for marketing and subscribed mail.
SPF lists the systems allowed to send for an envelope domain. DKIM signs the message so a receiver can verify the signing domain and detect changes.
DMARC checks whether the SPF or DKIM domain aligns with the visible From domain and publishes a policy and reporting address. BIMI is optional branding and comes after authentication is working.
Use a sending subdomain when you want product mail separated from other email. Publish the records your provider supplies, start DMARC at p=none, and review aggregate reports until every legitimate sender aligns.
Move to quarantine or reject only after that check. Recheck DNS after a provider, domain, or routing change.
If you send through Loops, this is largely filled in for you. Loops generates the exact SPF, DKIM, and MX records for your sending domain, places its SPF record at an envelope subdomain so it will not collide with an existing one, and you copy them into your registrar once and click verify. See the sending-domain guide for the step-by-step.
Sender reputation and warming
List hygiene and consent
Use confirmed opt-in when a signup form is easy to abuse or a typo would subscribe the wrong person. Suppress hard bounces and complaints immediately.
Define an inactivity policy from the signals your product has, such as recent use, clicks, or replies. Open data is imperfect because mail clients and corporate networks can preload, cache, or block tracking pixels.
Keep consent and unsubscribe state in one source of truth.
Engagement signals and content
Use a recognizable From name and a monitored reply address. Give marketing and subscribed mail a visible unsubscribe link.
Bulk senders to Gmail and Yahoo must also support one-click unsubscribe in the message headers. Keep URLs consistent with the sending brand, include a readable plain-text part, and test the final MIME message rather than only the editor preview.
What Loops handles, and what you own
Loops supplies sending-domain records, verifies the configured domain, and sends over managed infrastructure. It automatically suppresses hard bounces and complaints, and webhooks expose delivered, bounced, and complaint events for monitoring.
DNS ownership, DMARC policy, consent, segmentation, and message content stay with the sender.
Transactional email deliverability for SaaS
Keep account-critical messages separate from promotional campaigns in templates, triggers, monitoring, and rate controls. Verification links, password resets, receipts, billing notices, and security alerts should have one clear purpose and a recognizable sender.
Leave unrelated promotions out of required mail. Monitor transactional latency, bounce responses, and delivery events separately.
A campaign problem should not hide an authentication failure or a delayed account email.
The deliverability checklist
Authentication
Sending from a dedicated subdomain, not the root domain
SPF published and passing
DKIM signing enabled and passing
DMARC published (none to quarantine to reject) with reporting on and alignment confirmed
Custom return-path aligned
BIMI only once DMARC is enforced
Reputation and warming
New domain or IP warmed gradually, most-engaged contacts first
Steady baseline cadence, such as a welcome workflow on every signup
Dedicated IP only if volume justifies it; otherwise a healthy shared pool
List and consent
Explicit opt-in only; no purchased or scraped lists
Double opt-in on marketing signups
Sunset policy for chronic non-openers
Hard bounces and complainers suppressed automatically
Engagement and content
Segmented, relevant sends
Recognizable From name and monitored reply address
One-click List-Unsubscribe header plus an obvious unsubscribe link
Complaint rate monitored in Google Postmaster Tools and kept below provider thresholds
Branded, understandable links and standards-compliant HTML with a plain-text alternative
Delivery events and inbox tests reviewed separately
Frequently asked questions
What is email deliverability?
What are the most important email deliverability best practices?
How do I improve email deliverability?
What is email authentication?
What is the difference between SPF, DKIM, and DMARC?
Do I need a dedicated IP for good deliverability?
What is a good spam complaint rate?
Does Loops handle deliverability for me?