Learning Centre

What Does An Email Deliverability Audit Check?

Learn what an email deliverability audit checks, from SPF, DKIM and DMARC to DNS, domain reputation, mailbox setup and spam triggers, so business emails have a better chance of reaching inboxes.

—
On this page

    Definition

    Email Deliverability Audit

    An email deliverability audit is a structured review of the technical, reputational and configuration factors that affect whether business emails are accepted, rejected, quarantined or filtered into spam. It usually checks DNS records, email authentication, sending infrastructure, domain reputation, mailbox setup, website form delivery and common spam triggers.

    An audit can improve the conditions for better delivery, but it cannot guarantee inbox placement. Spam filtering also depends on recipient mail systems, user behaviour, email content, sender history and third-party provider rules.

    Key Takeaways

    • An email deliverability audit checks whether your domain, DNS records and sending platforms are correctly configured to send trusted business email.
    • The most important technical checks usually include SPF, DKIM and DMARC, along with MX records, DNS consistency, sender reputation and spam filtering behaviour.
    • Deliverability problems can affect invoices, enquiries, website form notifications, client communication and trust, so they should be treated as a business continuity issue, not just an email app problem.

    Quick Explanation

    What an Email Deliverability Audit Looks For

    An email deliverability audit checks why emails may be landing in spam, being rejected, failing authentication or not arriving at all. It reviews the technical setup behind your business email, not just the mailbox or email app you use every day. The audit usually starts with your domain name because email delivery depends heavily on DNS. Your DNS records tell receiving mail servers which platforms are allowed to send email for your domain, where incoming mail should be delivered and how failed authentication should be handled. A proper review should also look beyond one record. Many businesses use Microsoft 365, website contact forms, CRMs, booking platforms, accounting software and marketing tools that all send email in different ways. If those services are not aligned, one system may pass authentication while another fails. The practical goal is to find the weak points that make a receiving mail server distrust a message. That might include a missing SPF include, DKIM not being enabled, a DMARC policy that is too loose or too strict for the current setup, duplicate SPF records, poor sending practices or website forms sending from the wrong address.
    Email deliverability depends on domain, DNS, platform and sending behaviour working together.
    Email deliverability depends on domain, DNS, platform and sending behaviour working together.

    Deliverability Is Not the Same as Guaranteed Inbox Placement

    Correct authentication improves trust and reduces avoidable failures, but no provider can guarantee that every email will reach the inbox. Recipient filters, content, engagement, blacklists, sender reputation and third-party mail systems can all affect the final result.

    Key Email Deliverability Terms

    These terms appear often during an email deliverability audit. Understanding them makes it easier to see why email problems are rarely caused by one setting alone.

    SPF
    Sender Policy Framework is a DNS record that lists which servers or platforms are authorised to send email for your domain.
    DKIM
    DomainKeys Identified Mail adds a digital signature to outgoing emails so receiving servers can check that the message was not altered after being sent.
    DMARC
    Domain-based Message Authentication, Reporting and Conformance connects SPF and DKIM to a policy that tells receiving servers what to do when a message fails authentication.

    Audit Process

    How an Email Deliverability Audit Usually Works

    The exact process depends on the domain, email provider and connected systems, but most audits follow a logical sequence. The aim is to understand what sends email, how it is authenticated and where failures may occur.

    1. Map the Sending Sources

      The audit identifies every system that sends email using the business domain. This may include Microsoft 365, website forms, CRM software, booking systems, accounting platforms and marketing tools.

    2. Check DNS and Authentication Records

      The domain is reviewed for MX, SPF, DKIM and DMARC records. The audit checks whether records exist, whether they are valid, whether there are duplicates and whether they match the platforms actually sending email.

    3. Review Failures, Reputation and Risk

      The audit looks for symptoms such as rejected messages, spam placement, authentication failures, blacklisting, inconsistent sending patterns and website form delivery problems. Findings are then prioritised by business impact and technical risk.

    Technical Checks

    SPF, DKIM and DMARC Checks

    SPF, DKIM and DMARC are the three core authentication areas in most email deliverability audits. They help receiving mail servers decide whether a message claiming to come from your domain is likely to be legitimate. An SPF check confirms whether your domain has a valid SPF record and whether it authorises the correct sending services. A common issue is having more than one SPF record on the same domain. That can cause SPF to fail because the receiving server may not know which record to trust. A DKIM check confirms whether outgoing messages are being signed by the sending platform. Having a DKIM record in DNS is not always enough. The sending platform also needs to be configured to sign messages correctly. A DMARC check reviews your domain policy and alignment. DMARC can be set to monitor, quarantine or reject failed messages. A strict policy can help reduce spoofing, but it can also break legitimate email if SPF and DKIM are not configured correctly first. For many businesses, the safest approach is staged. First, identify all sending sources. Then configure SPF and DKIM properly. Then use DMARC reporting and monitoring before moving to stronger enforcement where appropriate.
    Email authentication records need to match the real platforms sending mail for the domain.
    Email authentication records need to match the real platforms sending mail for the domain.

    Example Email Authentication Records

    The following records are illustrative only. Real values depend on your domain, email provider and connected platforms. For example, Microsoft 365, website forms and third-party tools may each require different DNS entries.

    dns
    example.com. TXT "v=spf1 include:spf.protection.outlook.com -all"
    selector1._domainkey.example.com. CNAME selector1-example-com._domainkey.example.onmicrosoft.com.
    _dmarc.example.com. TXT "v=DMARC1; p=none; rua=mailto:[email protected]; adkim=s; aspf=s"

    Do not copy these records into a live domain without checking your actual provider requirements.

    Business Impact

    Why Deliverability Problems Matter for Business Email

    Email deliverability affects more than outbound messages from staff mailboxes. It can affect website form notifications, invoices, quotes, booking confirmations, password resets, support requests and automated system alerts. If a quote lands in spam, the customer may assume no one responded. If an invoice is rejected, payment may be delayed. If a website enquiry notification fails, the business may never know a lead came through. These issues are easy to overlook because the sender often sees the email as sent, even when the recipient does not receive it. Deliverability problems can also create trust issues. When a domain is poorly authenticated, it is easier for attackers to impersonate it. SPF, DKIM and DMARC do not stop all abuse, but they make it harder for unauthorised systems to send convincing messages from your domain. For businesses using multiple providers, email problems often become a blame-shifting issue. The website provider may point to the email host, the email host may point to DNS and the DNS provider may point back to the platform sending the message. A deliverability audit helps bring those moving parts into one clear picture.
    Missed email can become a sales, operations and trust issue.
    Missed email can become a sales, operations and trust issue.

    Common Issues an Email Deliverability Audit Can Diagnose

    The symptoms may look simple, but the cause is often hidden in DNS, authentication, provider settings or sending behaviour.

    Emails are landing in spam

    Likely cause

    The domain may have missing or failing authentication, poor sender reputation, spam-like content, inconsistent sending patterns or issues with the recipient's filtering rules.

    Solution

    Check SPF, DKIM and DMARC first, then review sending sources, message content, domain reputation and any recent changes to email platforms or DNS.

    Website form notifications are not arriving

    Likely cause

    The website may be sending mail from a server that is not authorised in SPF, or the form may be using a sender address that does not align with the domain.

    Solution

    Configure the website to send through an authenticated mail service where appropriate, then test form delivery, headers and recipient filtering.

    Some emails work but others fail

    Likely cause

    Different systems may be sending mail in different ways. Microsoft 365 mailboxes may pass authentication while a CRM, invoicing platform or website form fails.

    Solution

    List every sending platform, confirm each one is authorised and check whether each source is signing messages correctly with DKIM where supported.

    Common Email Deliverability Mistakes

    Most deliverability problems are not caused by one dramatic failure. They often come from small configuration mistakes that build up over time as new tools and providers are added.

    Adding a new platform without updating SPF or DKIM

    Do this instead

    Every platform that sends email for your domain should be checked before it goes live. If it needs authentication records, those records should be added and tested.

    Publishing multiple SPF records on one domain

    Do this instead

    A domain should normally have one SPF record that includes all authorised senders. Multiple SPF records can cause SPF validation to fail.

    Turning on a strict DMARC policy too early

    Do this instead

    DMARC enforcement should usually follow a review of all sending sources. Moving to quarantine or reject before legitimate systems are aligned can block valid business email.

    Technical Checks vs Sending Behaviour Checks

    An email deliverability audit should not stop at DNS records. Technical configuration matters, but receiving servers also look at sender history, message patterns and user engagement signals.

    Audit Area Technical Configuration Sending Behaviour
    Main focus DNS, MX records, SPF, DKIM, DMARC, provider setup and platform alignment. How often emails are sent, who they are sent to and how recipients interact with them.
    Common problem found A platform is sending email without being authorised or signed correctly. A domain or mailbox has low engagement, high complaint risk or sudden changes in volume.
    Why it matters Failed authentication can lead to rejection, quarantine or spam placement. Poor sending patterns can damage reputation even when authentication records are valid.

    Email Deliverability Audit Checklist

    Use this checklist before changing email providers, launching a new website, connecting a CRM or troubleshooting repeated spam issues.

    • Identify every system that sends from the domain

      Include staff mailboxes, website forms, marketing platforms, CRMs, accounting software, booking tools and automated notifications.

    • Review DNS and authentication records

      Check MX, SPF, DKIM and DMARC records for validity, duplication, missing includes, alignment issues and provider-specific requirements.

    • Test real delivery paths

      Send test messages from each platform, review headers where possible and confirm whether failures are technical, reputational or content-related.

    When to Review

    When Should a Business Request an Email Deliverability Audit?

    A deliverability audit is worthwhile when email is unreliable, but it is also useful before major changes. If you wait until important messages are already being missed, the business impact can be harder to manage. Common triggers include moving to Microsoft 365, changing DNS providers, launching a new website, replacing a contact form, connecting a CRM, adding marketing software or changing domain names. Each change can affect how email is sent or authenticated. An audit is also useful when no one has a clear record of who manages the domain, DNS and email setup. This is common when a business has changed agencies, IT providers or hosting companies over several years. You may be able to handle simple checks internally if your setup is small, well documented and managed by one provider. Professional help becomes more valuable when several systems are connected, email is business-critical, DNS access is unclear or failed changes could interrupt mail delivery.
    Email should be reviewed before major domain, website or platform changes.
    Email should be reviewed before major domain, website or platform changes.

    Doing a Basic Check Internally vs Getting a Technical Audit

    Internal Basic Check

    • Suitable for checking obvious issues, such as whether SPF, DKIM and DMARC records exist.
    • May be enough for a simple setup with one domain, one email provider and no third-party sending tools.
    • Can help internal teams document which platforms are currently connected to the domain.

    Technical Deliverability Audit

    • More appropriate when several platforms send email, because authentication and alignment need to be checked across each source.
    • Reduces the risk of changing DNS records without understanding their effect on mailboxes, website forms and third-party systems.
    • Provides clearer prioritisation when problems involve provider configuration, domain reputation, spam filtering and business risk.

    Email Deliverability Audit FAQs

    These questions cover the practical concerns businesses often have before reviewing their email setup.

    Can an email deliverability audit guarantee that emails reach the inbox?

    No. An audit can identify and fix technical issues that reduce trust, but inbox placement depends on recipient filters, sender reputation, content, user engagement and third-party provider rules.

    Does Microsoft 365 still need SPF, DKIM and DMARC?

    Yes. Microsoft 365 is a reputable email platform, but your domain still needs correct DNS authentication. Connected tools such as website forms and CRMs may also need separate checks.

    Can DNS changes break business email?

    Yes. Incorrect MX, SPF, DKIM or DMARC changes can interrupt mail delivery or cause messages to fail authentication. DNS changes should be planned, documented and tested.

    Need Help Reviewing Your Email Deliverability?

    If your business emails are landing in spam, website form notifications are unreliable or your DNS records are unclear, we can review your email, domain and DNS setup and explain the next practical steps. Email delivery cannot be guaranteed, but a structured audit can remove avoidable technical problems and reduce provider finger-pointing.

    Discuss Your Email Requirements View Domain Management

    Keep learning

    Tap to call
    Enquire now

    Ask Dobble

    Ask a question

    Send us your question and the Dobble team will get back to you.

    Prefer to talk to us directly?

    Get in touch

    Contact us

    Tell us about your project and the Dobble team will be in touch shortly.

    Prefer to talk to us directly?