--- title: "How do third-party marketing agencies send emails on behalf of clients while staying DMARC compliant? | DuoCircle" description: "How do third-party marketing agencies send emails on behalf of clients while staying." image: "https://www.duocircle.com/images/og-default.png" canonical: "https://www.duocircle.com/blog/dmarc/third-party-agencies-send-client-emails-dmarc-compliance-guide/" --- Quick Answer A marketing agency sending mail on behalf of a client without breaking DMARC has two clean paths. Path one (preferred): get authorized as a sender on the client's primary domain. The client adds the agency's SPF include (e.g., include:agencyrelay.com) to their SPF record, the agency signs with a DKIM key whose d= tag matches or aligns with the client's From domain (the client publishes the public key under a selector like agency.\_domainkey.client.com), and DMARC alignment passes. Path two: send from a dedicated subdomain (e.g., mail.client.com or news.client.com) with its own SPF and DKIM, and a subdomain DMARC policy. This isolates marketing reputation from the corporate domain and is what most ESPs (Mailchimp, Constant Contact, HubSpot, Klaviyo) recommend. Avoid the trap of sending From: agency@agencydomain.com on behalf of the client, that is just your own mail and undermines the client's brand. Always confirm the client has DMARC at p=none or stricter before launch and monitor aggregate reports during the first two weeks. How do third-party marketing agencies send emails on behalf of clients while staying DMARC compliant? Your browser does not support the audio element. [ Download episode](https://media.mailhop.org/duocircle/images/2025/08/How-do-third-party-marketing-agencies-send-emails-on-behalf-of-clients-while-staying-DMARC-compliant.mp3) Share [ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Fdmarc%2Fthird-party-agencies-send-client-emails-dmarc-compliance-guide%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=How%20do%20third-party%20marketing%20agencies%20send%20emails%20on%20behalf%20of%20clients%20while%20staying%20DMARC%20compliant%3F&url=undefined%2Fblog%2Fdmarc%2Fthird-party-agencies-send-client-emails-dmarc-compliance-guide%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Fdmarc%2Fthird-party-agencies-send-client-emails-dmarc-compliance-guide%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Fdmarc%2Fthird-party-agencies-send-client-emails-dmarc-compliance-guide%2F&title=How%20do%20third-party%20marketing%20agencies%20send%20emails%20on%20behalf%20of%20clients%20while%20staying%20DMARC%20compliant%3F "Share on Reddit") [ ](mailto:?subject=How%20do%20third-party%20marketing%20agencies%20send%20emails%20on%20behalf%20of%20clients%20while%20staying%20DMARC%20compliant%3F&body=Check out this article: undefined%2Fblog%2Fdmarc%2Fthird-party-agencies-send-client-emails-dmarc-compliance-guide%2F "Share via Email") ![third-party marketing](https://media.mailhop.org/duocircle/images/2025/08/spf-record-tester-3321.jpg) It is a common practice for businesses to delegate marketing tasks to **third-party agencies**. Working with these marketing agencies brings in added benefits such as specialisation in particular niches and cost-effectiveness. These agencies need to take extra care to ensure their emails don’t end up in the [spam folder](https://cybernews.com/news/microsofts-breach-notification-emails-end-up-in-spam-folder/) or get rejected. In order to prevent phishing or spoofing attacks, domain owners often deploy [DMARC](https://dmarcreport.com/what-is-dmarc/) (Domain-based Message Authentication, Reporting, and Conformance). One of the most popular and effective [email authentication](/resources/email-authentication) protocols, DMARC also discourages domain owners from unnecessarily [spamming their subscribers](https://martech.org/subscriber-acquisition-best-practices-following-gmails-spam-update/). Emails that fail the authentication check (SPF and DKIM) are moved to the spam folder or rejected right away by DMARC. So, if you’re a **marketing agency** working with DMARC-compliant domains, ensure you are one of the authorized senders. This will help you achieve greater visibility, improved email deliverability, engagement, and boosted conversion rates. Here’s what else you should consider: - _The origin of the email links must be from the client’s domain. But make sure that these email links can be used by your infrastructure_. - The origin of images, as well as other email elements, should also happen from the client’s domain. You must be able to use the same in your infrastructure. - Tweaking the email delivery server names is also necessary to match them with the **client’s domain**. [![ email deliverability ](https://media.mailhop.org/duocircle/images/2025/08/spf-record-checker-3321.jpg)](https://media.mailhop.org/duocircle/images/2025/08/spf-record-checker-3321.jpg) ## How to send emails from a client’s domain? This is how you should send emails from your client’s domain to ensure seamless [email deliverability](/a-guide-on-email-deliverability) and higher conversions: ### Domain delegation To be able to send emails on your client’s behalf officially, you must ask them to delegate a subdomain to you. Once delegated, it is your responsibility to manage the subdomain completely. The client can delegate a subdomain to you using either **CNAMEs or full delegation**. Now, let’s understand what full delegation and CNAMEs are! [![send emails](https://media.mailhop.org/duocircle/images/2025/08/spf-record-3321.jpg)](https://media.mailhop.org/duocircle/images/2025/08/spf-record-3321.jpg) #### Full delegation The full delegation method enables the client to delegate a complete subdomain to you. In that case, you will have to bear the responsibility of maintaining it. It’s a one-time process that requires the client to delegate a subdomain to you. Once done, they are free from all obligations. The majority of the clients and marketing agencies prefer using the **full delegation approach**. #### CNAMEs This involves the creation of **multiple CNAMEs by the client**. Each CNAME points back to its own domain. The job of each CNAME is to delegate specific services. Generally, clients don’t prefer this approach as it involves the creation of multiple DNS entries in the beginning. [![Email Delegation Methods](https://media.mailhop.org/duocircle/images/2025/08/what-is-dkim-4785.jpg)](https://media.mailhop.org/duocircle/images/2025/08/what-is-dkim-4785.jpg) NOTE: CNAMEs are commonly created to configure [SPF](https://autospf.com/blog/spf-guide-understanding-sender-policy-framework/), support DKIM authentication, address email rejections, and associate email capabilities with the client’s domain. ### Relaying This technique works well when you are required to send only a couple of emails on behalf of your client. The relaying process involves the configuration of emails to be relayed. _The configuration has to be done by your client using a different email server. This can be done using two methods: User credential configurations and SMTP relay_. #### User credential configurations This technique allows your clients to create user credentials and helps you with an account that is used for sending emails on their behalf. The client will configure your services and enable you to use the **new user credentials to send emails**. [![ routing emails](https://media.mailhop.org/duocircle/images/2025/08/spf-record-check-3321.jpg)](https://media.mailhop.org/duocircle/images/2025/08/spf-record-check-3321.jpg) #### SMTP relay _An SMTP server acts like an intermediary between the sender’s domain and the recipient’s email servers by forwarding emails from the former to the latter_. The [SMTP relay](/content/smtp-as-a-service/smtp-relay) enables you to send emails across different domains and networks. Relaying help in routing emails from one server to another in case direct delivery is impossible. ### Manual configuration If you are looking for something simple, the **manual configuration approach** is the best option. In order to manually configure SPF, the client must add your netblocks to their [SPF record](/content/spf-records). To manually configure DKIM, the client has to add the DKIM-related keys to their DKIM record. **NOTE:** The bounce address of the emails should include the client’s domain. [![SPF records](https://media.mailhop.org/duocircle/images/2025/08/sender-policy-framework-3321.jpg)](https://media.mailhop.org/duocircle/images/2025/08/sender-policy-framework-3321.jpg) The manual configuration approach requires the client to take care of the **one-time configuration process** to sign the DKIM keys and add SPF records. As an agency, you will have to take care of the email server functions, which include adding the client’s domain to [DKIM signatures](https://docs.mapp.com/docs/dkim-signature) and bounce addresses. Further, you’ll have to update SPF records on a regular basis and make sure the client updates theirs as well. No matter which method you opt for sending emails on behalf of **DMARC-protected domains**, your priority as a marketing or a [digital marketing agency](https://delivix.digital/services/digital-marketing/) should be to simplify the process for your clients as well as align the emails with DMARC requirements. For further help, you can connect with [email security](/) experts who will take care of the authentication part while you focus on your marketing strategies. ## Topics DKIMDMARCSecurityspfSPF record ![Brad Slavin](https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg) Brad Slavin General Manager General Manager at DuoCircle. Product strategy and commercial lead across the email security portfolio. ## Secure your email infrastructure Protect, authenticate, and deliver. Contact our team to find the right solution. [Contact Sales](/contact/) [Explore Products](/products/) Share this article [ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fdmarc%2Fthird-party-agencies-send-client-emails-dmarc-compliance-guide%2F) [ ](https://twitter.com/intent/tweet?text=How%20do%20third-party%20marketing%20agencies%20send%20emails%20on%20behalf%20of%20clients%20while%20staying%20DMARC%20compliant%3F&url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fdmarc%2Fthird-party-agencies-send-client-emails-dmarc-compliance-guide%2F) [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fdmarc%2Fthird-party-agencies-send-client-emails-dmarc-compliance-guide%2F) Copy Related Articles - [ ![SPF, DKIM, and DMARC requirements](https://media.mailhop.org/duocircle/images/2025/07/sendgrid-alternative-8960.jpg) Cloudflare’s new SPF, DKIM, and DMARC requirements DMARC ](/blog/dmarc/cloudflares-new-spf-dkim-and-dmarc-requirements/) - [ ![Configuring SPF, DKIM, and DMARC](https://media.mailhop.org/duocircle/images/2025/10/spf-record-generator-6703.jpg) Configuring SPF, DKIM, and DMARC for Loops.so: A guide DMARC ](/blog/dmarc/configuring-spf-dkim-and-dmarc-for-loops-so-a-guide/) - [ ![DMARC failures](https://media.mailhop.org/duocircle/images/2025/04/spf-validator-6854.jpg) Dealing with DMARC failures: Here’s how you can fix the errors DMARC ](/blog/dmarc/dealing-with-dmarc-failures-how-to-fix-errors/) - [ ![DMARC](https://media.mailhop.org/duocircle/images/2025/07/spf-record-tester-7544.jpg) DMARC is now mandatory in New Zealand: Here’s what the NZ government expects DMARC ](/blog/dmarc/dmarc-mandatory-new-zealand-nz-government-email-security-requirements/) ## Related Articles [ DMARC 7m Cloudflare’s new SPF, DKIM, and DMARC requirements Jul 18, 2025 ](/blog/dmarc/cloudflares-new-spf-dkim-and-dmarc-requirements/)[ DMARC 5m Configuring SPF, DKIM, and DMARC for Loops.so: A guide Oct 28, 2025 ](/blog/dmarc/configuring-spf-dkim-and-dmarc-for-loops-so-a-guide/)[ DMARC 6m Dealing with DMARC failures: Here’s how you can fix the errors Apr 4, 2025 ](/blog/dmarc/dealing-with-dmarc-failures-how-to-fix-errors/)[ DMARC 5m DMARC is now mandatory in New Zealand: Here’s what the NZ government expects Jul 9, 2025 ](/blog/dmarc/dmarc-mandatory-new-zealand-nz-government-email-security-requirements/) ```json {"@context":"https://schema.org","@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}],"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://www.g2.com/products/phish-protection-by-duocircle/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://support.duocircle.com"},"knowsAbout":["Email Security","Email Authentication","SPF","DKIM","DMARC","Phishing Protection","Spam Filtering","SMTP Relay","Email Deliverability","Email Forwarding"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"DuoCircle LLC","url":"https://www.duocircle.com","description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}} ``` ```json [{"@context":"https://schema.org","@type":"BlogPosting","headline":"How do third-party marketing agencies send emails on behalf of clients while staying DMARC compliant?","description":"How do third-party marketing agencies send emails on behalf of clients while staying.","url":"https://www.duocircle.com/blog/dmarc/third-party-agencies-send-client-emails-dmarc-compliance-guide/","datePublished":"2025-08-14T19:48:47.000Z","dateModified":"2025-10-10T15:39:09.000Z","dateCreated":"2025-08-14T19:48:47.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/dmarc/third-party-agencies-send-client-emails-dmarc-compliance-guide/"},"articleSection":"dmarc","keywords":"DKIM, DMARC, Security, spf, SPF record","wordCount":812,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2025/08/spf-record-tester-3321.jpg","caption":"third-party marketing","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":2,"name":"DMARC"},{"@type":"ListItem","position":3,"name":"How do third-party marketing agencies send emails on behalf of clients while staying DMARC compliant?","item":"https://www.duocircle.com/blog/dmarc/third-party-agencies-send-client-emails-dmarc-compliance-guide/"}]}] ``` ```json {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.duocircle.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":3,"name":"DMARC","item":"https://www.duocircle.comundefined"},{"@type":"ListItem","position":4,"name":"How do third-party marketing agencies send emails on behalf of clients while staying DMARC compliant?","item":"https://www.duocircle.com/blog/dmarc/third-party-agencies-send-client-emails-dmarc-compliance-guide/"}]} ``` ```json {"@context":"https://schema.org","@type":"BlogPosting","headline":"How do third-party marketing agencies send emails on behalf of clients while staying DMARC compliant?","description":"How do third-party marketing agencies send emails on behalf of clients while staying.","url":"https://www.duocircle.com/blog/dmarc/third-party-agencies-send-client-emails-dmarc-compliance-guide/","datePublished":"2025-08-14T19:48:47.000Z","dateModified":"2025-10-10T15:39:09.000Z","dateCreated":"2025-08-14T19:48:47.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/dmarc/third-party-agencies-send-client-emails-dmarc-compliance-guide/"},"articleSection":"dmarc","keywords":"DKIM, DMARC, Security, spf, SPF record","wordCount":812,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2025/08/spf-record-tester-3321.jpg","caption":"third-party marketing","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}} ```