Email Deliverability Infrastructure and Best Practices

Email deliverability is whether a message reaches the intended inbox rather than being rejected or filtered to spam. It depends on the sending identity, transport infrastructure, domain or IP reputation, audience quality, and the message itself.

Resources

Use the map below to find the owner of each layer and the evidence worth checking. If delivery changes, start with authentication and provider events.

Then inspect complaints, bounces, recent volume changes, audience source, and the final message. This guide covers product, lifecycle, and transactional email from software products.

Deliverability infrastructure map

Deliverability crosses several systems and owners. This map shows where to look first and what to collect.

Layer

Primary owner

Verify

Sending identity

Sender and provider

SPF and DKIM results, plus DMARC alignment

Transport

Provider

TLS, acceptance, queues, and delivery events

Reputation

Shared

Complaints, bounces, deferrals, and blocks

Audience and consent

Sender

Signup source, suppressions, and inactivity policy

Message and stream

Sender

Purpose, sender, unsubscribe, HTML, and links

Monitoring

Shared

Provider logs, Postmaster Tools, and DMARC reports

Delivery, inbox placement, and filtering

Delivery, inbox placement, and filtering

These outcomes happen at different stages. A receiving server can reject a message, accept it and place it in spam, or accept it and sort it into a category such as Promotions.

These outcomes happen at different stages. A receiving server can reject a message, accept it and place it in spam, or accept it and sort it into a category such as Promotions.

Delivery rate reports whether the receiving server accepted the message. Inbox placement reports where an accepted message appeared. Track both. When either changes, inspect SMTP responses, complaint data, provider logs, and controlled inbox tests.

Delivery rate reports whether the receiving server accepted the message. Inbox placement reports where an accepted message appeared. Track both. When either changes, inspect SMTP responses, complaint data, provider logs, and controlled inbox tests.

Do not diagnose inbox placement from delivery rate alone. A high acceptance rate can coexist with spam placement, while a short-lived deferral can recover without becoming a bounce.

Do not diagnose inbox placement from delivery rate alone. A high acceptance rate can coexist with spam placement, while a short-lived deferral can recover without becoming a bounce.

Email authentication: SPF, DKIM, and DMARC

Email authentication: SPF, DKIM, and DMARC

SPF, DKIM, and DMARC let a receiver connect a message to the domain shown to the recipient. Google and Yahoo require bulk senders to use SPF, DKIM, and DMARC, keep complaint rates low, and support easy unsubscribe for marketing and subscribed mail.

SPF lists the systems allowed to send for an envelope domain. DKIM signs the message so a receiver can verify the signing domain and detect changes.

DMARC checks whether the SPF or DKIM domain aligns with the visible From domain and publishes a policy and reporting address. BIMI is optional branding and comes after authentication is working.

Use a sending subdomain when you want product mail separated from other email. Publish the records your provider supplies, start DMARC at p=none, and review aggregate reports until every legitimate sender aligns.

Move to quarantine or reject only after that check. Recheck DNS after a provider, domain, or routing change.

If you send through Loops, this is largely filled in for you. Loops generates the exact SPF, DKIM, and MX records for your sending domain, places its SPF record at an envelope subdomain so it will not collide with an existing one, and you copy them into your registrar once and click verify. See the sending-domain guide for the step-by-step.

Sender reputation and warming

Mailbox providers evaluate sending history at the domain and IP level. Complaints, hard bounces, invalid recipients, sudden volume changes, and repeated mail to inactive recipients can damage that history. Authentication establishes identity. It does not create a good reputation by itself.

Mailbox providers evaluate sending history at the domain and IP level. Complaints, hard bounces, invalid recipients, sudden volume changes, and repeated mail to inactive recipients can damage that history. Authentication establishes identity. It does not create a good reputation by itself.

A new domain or dedicated IP has little history. Start with recipients who recently asked for the mail, increase volume in controlled steps, and slow down when deferrals, bounces, or complaints rise. Keep the sending rate steady, but do not manufacture traffic to create a baseline.

A new domain or dedicated IP has little history. Start with recipients who recently asked for the mail, increase volume in controlled steps, and slow down when deferrals, bounces, or complaints rise. Keep the sending rate steady, but do not manufacture traffic to create a baseline.

A dedicated IP gives one sender control over its IP history, but it also requires enough consistent mail and operational attention to maintain that history. A managed shared pool can be the better default for lower or uneven volume. There is no universal message threshold that makes a dedicated IP correct.

A dedicated IP gives one sender control over its IP history, but it also requires enough consistent mail and operational attention to maintain that history. A managed shared pool can be the better default for lower or uneven volume. There is no universal message threshold that makes a dedicated IP correct.

List hygiene and consent

List quality starts with permission. Every address should have a clear source, a message type it can receive, and a suppression path. Purchased or scraped lists create complaint and trap risk that authentication cannot repair.

List quality starts with permission. Every address should have a clear source, a message type it can receive, and a suppression path. Purchased or scraped lists create complaint and trap risk that authentication cannot repair.

Use confirmed opt-in when a signup form is easy to abuse or a typo would subscribe the wrong person. Suppress hard bounces and complaints immediately.

Define an inactivity policy from the signals your product has, such as recent use, clicks, or replies. Open data is imperfect because mail clients and corporate networks can preload, cache, or block tracking pixels.

Keep consent and unsubscribe state in one source of truth.

Engagement signals and content

Once identity and audience quality check out, look at the message itself. Complaints, unsubscribes, replies, clicks, and product activity can reveal a mismatch between the audience and the send. Treat opens as directional rather than exact.

Once identity and audience quality check out, look at the message itself. Complaints, unsubscribes, replies, clicks, and product activity can reveal a mismatch between the audience and the send. Treat opens as directional rather than exact.

Use a recognizable From name and a monitored reply address. Give marketing and subscribed mail a visible unsubscribe link.

Bulk senders to Gmail and Yahoo must also support one-click unsubscribe in the message headers. Keep URLs consistent with the sending brand, include a readable plain-text part, and test the final MIME message rather than only the editor preview.

What Loops handles, and what you own

Loops manages the sending service and generates the message sent to the receiving provider. The sender decides who receives it, why they receive it, and whether it is transactional or marketing email.

Loops manages the sending service and generates the message sent to the receiving provider. The sender decides who receives it, why they receive it, and whether it is transactional or marketing email.

Loops supplies sending-domain records, verifies the configured domain, and sends over managed infrastructure. It automatically suppresses hard bounces and complaints, and webhooks expose delivered, bounced, and complaint events for monitoring.

DNS ownership, DMARC policy, consent, segmentation, and message content stay with the sender.

Transactional email deliverability for SaaS

Keep account-critical messages separate from promotional campaigns in templates, triggers, monitoring, and rate controls. Verification links, password resets, receipts, billing notices, and security alerts should have one clear purpose and a recognizable sender.

Leave unrelated promotions out of required mail. Monitor transactional latency, bounce responses, and delivery events separately.

A campaign problem should not hide an authentication failure or a delayed account email.

The deliverability checklist

Authentication

Sending from a dedicated subdomain, not the root domain

SPF published and passing

DKIM signing enabled and passing

DMARC published (none to quarantine to reject) with reporting on and alignment confirmed

Custom return-path aligned

BIMI only once DMARC is enforced

Reputation and warming

New domain or IP warmed gradually, most-engaged contacts first

Steady baseline cadence, such as a welcome workflow on every signup

Dedicated IP only if volume justifies it; otherwise a healthy shared pool

List and consent

Explicit opt-in only; no purchased or scraped lists

Double opt-in on marketing signups

Sunset policy for chronic non-openers

Hard bounces and complainers suppressed automatically

Engagement and content

Segmented, relevant sends

Recognizable From name and monitored reply address

One-click List-Unsubscribe header plus an obvious unsubscribe link

Complaint rate monitored in Google Postmaster Tools and kept below provider thresholds

Branded, understandable links and standards-compliant HTML with a plain-text alternative

Delivery events and inbox tests reviewed separately

Frequently asked questions

What is email deliverability?

What are the most important email deliverability best practices?

How do I improve email deliverability?

What is email authentication?

What is the difference between SPF, DKIM, and DMARC?

Do I need a dedicated IP for good deliverability?

What is a good spam complaint rate?

Does Loops handle deliverability for me?