Common signs
- Authentication reports show SPF or DKIM failure
- DMARC alignment fails after adding a sender
- The domain has multiple SPF records
- A marketing or invoicing tool was added recently
Email authentication, explained plainly
SPF, DKIM and DMARC help
SPF, DKIM and DMARC help receiving systems understand which mail is authorized for a domain. AIVIQ reviews the public records, maps legitimate senders and corrects a bounded one-domain configuration without claiming that authentication controls every inbox.
No password by emailNo compulsory callRemote across Canada
What to look for
Useful signs and evidence
What the evidence can show
SPF lists permitted infrastructure but has lookup and formatting limits. DKIM uses a provider-specific public key to validate a signature. DMARC applies policy and reporting when aligned SPF or DKIM results are available. Each legitimate sender must be accounted for.
What to provide
List every service that legitimately sends as the domain, including the mailbox provider, website forms, invoicing, CRM and marketing tools. Provide DNS access through a temporary or delegated method. Existing records are documented before changes.
What the starting scope covers
One-domain authentication repair starts at CAD $149 and includes public MX, SPF, DKIM and DMARC review, one bounded correction pass and a documented verification. Complex multi-sender consolidation, managed reports and high-volume infrastructure are quoted separately.
Safe expectations
Repair, verify, and stop at the boundary
Correct authentication can improve trust signals but cannot guarantee inbox placement, repair reputation instantly or control recipient filtering. The free diagnostic reports only records visible in public DNS.
Before changing DNS or account settings, record the existing configuration. Use temporary access where needed, verify the agreed result, and remove that access afterward. AIVIQ does not claim access to private provider systems and does not promise a guaranteed repair time.
Next step
Start with the free public DNS check or send a written request through the main Business Email Rescue page. The hub explains all four price levels, exclusions, access rules and what happens after submission.
Questions
Before you start
Can I publish two SPF records?
A domain should normally have one SPF policy; separate records can produce an invalid result and need careful consolidation.
Does DMARC read my messages?
No. A public DMARC record publishes policy and reporting destinations; it does not provide AIVIQ with mailbox access.