HubSpot Sending Domain Authentication & Deliverability Setup

Service Scope

HubSpot Sending Domain Authentication & Deliverability Setup is a fixed-scope HubSpot Email Marketing service for one business, one HubSpot account, and one client-owned email sending domain.

The service covers the approved quantities and configuration described below in one HubSpot account. Work outside those quantities is quoted separately.

The objective is to deliver a practical, documented configuration that the client can understand, approve, and continue using after handoff.

Review Domain and Sender Readiness

We confirm the sending domain, DNS provider, existing email services, primary sender identity, and the HubSpot authentication status before any DNS changes are made.

• Client-owned sending domain
• DNS provider access
• Existing SPF and DMARC configuration
• Current DKIM status
• Other legitimate email-sending services

Configure HubSpot Email Authentication

We connect one email sending domain and configure the DNS records HubSpot requires or recommends for the approved setup, including DKIM, SPF, DMARC, and related records shown by HubSpot.

• 1 email sending domain connection
• HubSpot-provided DKIM records
• SPF review and alignment
• DMARC review and approved update
• MX or related record review where required by HubSpot

Testing and Validation

After DNS propagation, we review HubSpot's visible authentication status and complete one controlled test send to up to three client-provided inboxes.

• Approved quantities and settings
• Names, properties, fields, and mapping logic
• Visible HubSpot status and permissions
• Representative test result
• Exceptions requiring client action

Implementation Summary

At handoff, the client receives a concise implementation summary covering the completed work, the configuration visible in HubSpot, and any unresolved platform or third-party dependency.

• 1 HubSpot email sending domain
• DNS and sender-readiness review
• DKIM configuration
• SPF review
• DMARC review or approved setup
• Visible authentication-status check
• Test send to up to 3 inboxes
• Implementation summary

Client Requirements

Before work begins, the client must provide the following access, information, content, and approvals:

• HubSpot Super Admin access or the permissions required for the approved work
• An active HubSpot plan that supports the requested configuration
• Final business information, brand assets, content, data, and implementation instructions required for the service
• Permission-based contact data and accurate subscription or marketing-status instructions when contacts are involved
• Timely review and written approval of proposed settings and test results
• Access to the DNS provider or timely assistance from the authorized domain administrator
• One working email address on the owned domain
• Disclosure of other legitimate email-sending services using the domain
• Up to three test inboxes

Delivery and Revisions

Standard delivery is 3–5 business days after all required access, content, data, and approvals are received. Platform processing, DNS propagation, app review, or other third-party delays may extend completion.

One consolidated correction round is included when submitted within seven days of delivery and remains within the approved scope. New content, replacement data, additional assets, or a materially different configuration is treated as separate work.

Important Scope Boundaries

The following items are not included in this service:

• Domain registration or mailbox creation
• Dedicated IP setup or IP warming
• Blacklist removal
• Sender-reputation repair
• Ongoing deliverability monitoring
• Guaranteed inbox placement
• HubSpot subscription, contact-tier, add-on, app, or third-party software fees
• Original legal, privacy, or regulatory advice
• Unapproved work outside the stated quantities
• Ongoing management after handoff
• Guaranteed delivery, inbox placement, engagement, leads, conversions, or revenue