Technical
Business email on your own domain: why buyers distrust Gmail, and DNS
Ilyes Massoudi7 min readThe short answer
A professional business email is mail on your own domain: info@yourcompany.com rather than yourcompany@gmail.com. Gulf buyers, especially in dealings between companies and with institutions, read a Gmail address on a quotation as a sign of an unregistered business. Setting it up takes an hour through Google Workspace, Microsoft 365 or Zoho on a small monthly subscription per user. The part everyone skips and then asks why their mail goes to spam: three records in the domain settings, SPF, DKIM and DMARC, that prove to the recipient's server that you are the sender. Without those three your quotation may never arrive at all.
Why the address matters
A quotation from alnoor.contracting2019@gmail.com is read by a procurement manager at a Gulf company with one question: is this even a registered business? An address on your own domain answers before a line is read. And when the domain matches the website they visited and the commercial registration they saw, the picture of a single entity is complete.
It is one of the cheapest trust signals in the trust signals checklist, and one of the most commonly missing in small businesses.
The options in the Gulf
| Provider | Suits | What you get | Approximate cost |
|---|---|---|---|
| Google Workspace | A team working in Google tools, and most small businesses | Gmail’s interface on your domain, Drive, Docs, Meet | A small monthly subscription per user |
| Microsoft 365 | A team working in Office and Teams, and larger companies | Outlook on your domain, Office, Teams, OneDrive | Similar |
| Zoho Mail | A smaller budget, mail only | Clean mail and calendar, a limited free plan | Less |
| Hosting email | Temporary only | Basic mailboxes | Free with hosting |
Choose one and stay with it. Changing provider later is possible but disrupts a whole team.
Setup in five steps
- A domain registered in your name. If you do not have one, choosing it is covered in the domain name article.
- A subscription with the provider for the actual number of users.
- Prove ownership of the domain with a TXT record in the domain settings at the registrar.
- Add the MX records the provider gives you, and delete the old ones.
- Create the users, and general addresses such as info@ and sales@ that forward to a real person who replies.
The three records that decide whether your message arrives
This is where most people stop after creating the mail, then wonder a month later why the customer never replied to the quotation. Because the message is in spam.
The recipient’s server (Gmail, Outlook, corporate servers) asks three questions before placing a message in the inbox:
SPF: is this server allowed to send in this domain’s name? A TXT record in your domain naming your provider’s servers. Without it anyone can send in your name, so the recipient is suspicious.
DKIM: is the message digitally signed by the domain’s owner and unaltered in transit? The provider gives you a record to place in the domain, and signs every message automatically.
DMARC: what should the recipient do with messages that fail both? A record that says: only monitor, put them in spam, or reject them. And it sends you reports on whoever tries to impersonate your domain.
Since 2024 Gmail and Yahoo require these records from bulk senders and have tightened them for everyone. An example of what they look like in the domain settings:
TXT @ v=spf1 include:_spf.google.com ~all
TXT google._domainkey v=DKIM1; k=rsa; p=MIIB... (the provider gives you the value)
TXT _dmarc v=DMARC1; p=quarantine; rua=mailto:dmarc@yourdomain.com
The exact values come from your provider’s pages, and a free check with a tool such as MXToolbox tells you in a second whether all three are sound.
Recurring mistakes in the Gulf
- An SPF record with several providers in no order, or two SPF records at once, so both fail.
- Sending the newsletter from the ordinary mail account, damaging the whole domain.
- The website on a .com domain and the mail on a different domain, breaking the entity picture.
- An info@ address nobody opens. Put it on a specific person’s phone.
- A signature with no WhatsApp number, no site link and no commercial registration.
Where this sits in the audit
The audit checks the email authentication records on your domain, SPF, DKIM and DMARC, as part of the site’s technical foundation, and whether the domain matches between the website and the mail. It is an item whoever manages your domain fixes in an hour, and it may be the reason a quotation never arrived.
