Skip to content

Get your invoices out of spam, and stop anyone else sending as you

If your quotes and invoices land in junk folders, you lose replies and get paid late. If your domain has no DMARC enforcement, anyone can send an email that looks exactly like it came from your accounts team. We fix both: we find every system that sends email as you, authenticate it, move your domain to DMARC enforcement step by step, and keep watching it.

Order online and pay in US dollars. We then contact you to schedule the setup. Not sure yet? Book a 20-minute call.

The two email problems that cost businesses money

Gmail requires every sender to pass SPF or DKIM, and since February 2024 large senders must also publish DMARC. Outlook.com applied the same rule to large senders on 5 May 2025. Smaller senders feel it too: mail that fails these checks is far more likely to be filtered.

Your invoices and quotes

Without it: Some land in junk, and you only find out when a client says they never got them

With Tremhost: Every system that sends as you is authenticated, so receivers can trust the mail

Someone emails your client pretending to be you

Without it: Nothing stops a forged message with your exact address in the From line

With Tremhost: At DMARC reject, receiving servers refuse mail forged in your name

Your domain or mail server gets blocklisted

Without it: Mail bounces for days while you work out who to contact

With Tremhost: We check weekly, tell you when it happens and request removal

A new tool starts sending as you

Without it: It fails authentication silently until customers stop receiving its mail

With Tremhost: We see it in the DMARC reports and tell you how to fix it

How we take your domain to full protection

The order matters. Tightening DMARC before every legitimate sender is fixed blocks your own mail, so we do it in stages and show you each one.

  • Week 1: find every sender

    We publish a monitoring DMARC record and list every service that sends email using your domain: your mail provider, website forms, accounting and payroll systems, newsletter tools.

  • Weeks 1 to 3: fix authentication

    We correct your SPF record, add DKIM signing for each sender, and give you exact instructions for any change that has to be made inside a third-party tool.

  • Weeks 3 to 10: enforce

    When the reports show your legitimate mail passing, we move the policy to quarantine and then to reject. You approve each step.

  • Every month after: watch

    We read your DMARC reports, flag new or failing senders, check blocklists weekly and send you a short report in plain English.

One plan per domain

Most organisations send from one domain. If you have more, each one is covered separately, because each has its own senders and its own reports.

Prices in US dollars, billed monthly or yearly.

Most organisations start here

Inbox Assurance

Businesses, schools and institutions whose invoices, quotes or notices must reach people.

$47a month

or $564 a year. One-off setup: $184.

Includes a one-off setup that takes the domain to DMARC enforcement.

Order Inbox Assurance
  • Sending domains1
  • Senders authenticatedAll we find
  • DMARC policy targetReject
  • DMARC report reviewMonthly
  • Blocklist checksWeekly
  • Delisting requestsIncluded
  • SupportHuman, Mon–Fri

Extra domains

Groups, brands and organisations with several domains, including parked domains that should never send mail.

$47a month per extra sending domain

plus $184 setup each. Domains that never send email: $6 a month each, plus $12 setup.

Add extra domains on the order page.

Order with extra domains
  • Sending domainsEach priced as above
  • Non-sending domainsLocked to reject
  • Consolidated reportMonthly

What this service does not do

So you know exactly what you are paying for.

  • No inbox guarantee

    We remove the technical reasons mail is rejected. What you send and to whom still affects whether it lands in the inbox.

  • Not a newsletter service

    We do not send marketing email for you. If you send in bulk, we make sure the tool you use is authenticated.

  • Not inbox filtering

    Protecting your staff from incoming phishing is Armor Mail.

  • Your tools, your logins

    Where a fix has to be made inside a third-party system, we tell you exactly what to change, or make it with access you give us.

The same work we do on our own mail servers

Tremhost has run mail servers for Zimbabwean businesses since 2016. Keeping our own sending addresses off blocklists, setting reverse DNS that receivers accept and getting delisted when a client mailbox is abused are routine work for our engineers, not something we learned for this service.

Office 3, Mezzanine Floor, Batanai Gardens, Cnr First Street & Jason Moyo Ave, Harare. Human support Monday to Friday, 08:00–17:00 CAT.

Email deliverability questions, answered straight

Still unsure? Ask us on WhatsApp or open a ticket.

What is DMARC, in plain terms?

A DNS record that tells receiving mail servers what to do with messages that claim to come from your domain but fail its checks. At its strongest setting (reject), mail forged in your name is refused before it reaches anyone. DMARC works alongside SPF, which lists the servers allowed to send for you, and DKIM, which signs your messages.

Do I need this if my email is on Google Workspace or Microsoft 365?

Yes. DMARC is set on your domain, not inside your mailbox provider, and most businesses send from more than one place: their mail provider, a website contact form, an accounting system, a newsletter tool. Each of those has to be authenticated for DMARC enforcement to be safe. We work with Google Workspace, Microsoft 365, Zoho, Tremhost email and other providers.

Why not just publish a DMARC record myself?

You can, and a record set to p=none costs nothing. It also stops nothing: p=none only reports. Moving to quarantine or reject is where the protection is, and it is also where legitimate mail gets blocked if one sending system was missed. We read the reports, find every system that sends as you, fix them, and only then tighten the policy.

Can you guarantee my mail reaches the inbox?

No, and nobody honestly can. Inbox placement also depends on what you send, who you send it to and how recipients react. What we remove is the technical reasons for rejection: missing or broken SPF, DKIM and DMARC, unaligned senders and blocklisted sending addresses that we can get delisted.

How long until my domain is fully protected?

Typically six to ten weeks to reach a reject policy, because we wait for enough report data to be sure no legitimate sender is caught. Domains with few sending systems can move faster. You see each step before we make it.

What do you need from me?

Access to change your domain's DNS records (or your domain on Tremhost DNS), a list of the tools that send email for you, and someone who can make changes inside those tools when they need a DKIM key added.

Is this the same as Armor Mail?

No. This service stops other people sending email that pretends to come from your domain, and helps your own mail get delivered. Armor Mail protects your staff from phishing and fake invoices arriving in their inboxes. Many organisations use both.

What happens if one of our mailboxes is hacked and starts sending spam?

We help you stop the sending, tell you which account is involved and what to change, and request removal from the blocklists that listed you. Rotating passwords and cleaning affected devices stays with you or your IT provider.

Find out what is sending email as you

In a 20-minute call we look at your domain's SPF, DKIM and DMARC records with you and tell you what we would change first.

Order Inbox Assurance