If you're sending emails to your customers, there's a good chance many of them never see your messages. They're sitting in spam folders, bouncing back, or getting silently dropped by inbox providers. In 2026, getting emails delivered is harder than ever—but it's also more important.

This guide covers everything you need to know about email deliverability: what it means, why it matters, and exactly how to fix it. No fluff, no generic advice—just the practical steps that actually work.

What Is Email Deliverability (And Why Should You Care)?

Email deliverability is the percentage of your emails that actually land in your recipients' inboxes. Not their spam folders. Not bounced. Actually delivered where people can see them.

Here's the thing most people don't realize: sending an email and delivering an email are two completely different things. Your email service provider might show "sent" for 10,000 emails, but if 30% land in spam, you've effectively lost 3,000 customers.

For SaaS companies, poor deliverability means:

Lost revenue — Trial users don't see your onboarding emails, so they never activate
Damaged reputation — Customers think you're not responsive when your emails are just getting filtered
Wasted effort — Your carefully crafted campaigns reach a fraction of your audience
Compliance issues — If transactional emails don't arrive, you might miss legal requirements

The New Rules: What Changed in 2024-2025

In February 2024, Google and Yahoo rolled out strict new requirements for bulk senders. If you send more than 5,000 emails per day to Gmail or Yahoo users, you're now considered a bulk sender and must comply with these rules:

1. Email Authentication Is Now Mandatory

Gone are the days when authentication was "nice to have." You now must have all three of these configured:

SPF (Sender Policy Framework) — Tells inbox providers which servers are allowed to send email on your behalf
DKIM (DomainKeys Identified Mail) — Adds a digital signature to prove your emails haven't been tampered with
DMARC (Domain-based Message Authentication) — Tells providers what to do with emails that fail SPF or DKIM checks

Without all three properly configured, your emails will either bounce or land in spam. There's no middle ground anymore. For a step-by-step setup guide, see our post on how to set up email authentication: SPF, DKIM, and DMARC.

2. One-Click Unsubscribe Is Required

Every marketing email must include a visible, one-click unsubscribe option. This means:

A List-Unsubscribe header in your email (handled automatically by good email providers)
An unsubscribe link that works with a single click—no login required, no confirmation pages
Processing unsubscribe requests within 2 days (ideally instant)

Going beyond basic unsubscribe, consider building an email preference center that lets users adjust what they receive rather than opting out entirely.

3. Spam Complaint Rate Limits

Google now publicly states your spam complaint rate must stay below 0.3%. Go above that, and your deliverability will suffer. The sweet spot is under 0.1%.

This means if 1,000 people receive your email and 3 of them click "Report Spam," you're at the limit. Just three people.

4. What These Changes Mean for SaaS Companies Specifically

SaaS companies are uniquely affected by these rules because they send both transactional and marketing email. A few implications worth calling out:

Transactional emails are not exempt from authentication. Even password resets need SPF, DKIM, and DMARC. The only exception is that transactional emails don't need unsubscribe headers.
Onboarding sequences count as marketing. Even though onboarding emails help users, they're not triggered by an explicit user request for that specific email. They need unsubscribe headers and must respect opt-out preferences.
Product update newsletters are the biggest risk. These go to your full user base, often including users who haven't engaged in months. A single poorly targeted product update can push your spam complaint rate above the threshold.

The safest approach: maintain a clean email list and segment aggressively so you're only sending to users who want to hear from you.

How Email Actually Gets Delivered (The Technical Stuff)

Understanding what happens behind the scenes helps you fix problems. Here's the simplified version:

You send an email — Your app triggers an email through your email provider
DNS lookups happen — The receiving server checks your SPF, DKIM, and DMARC records
Reputation check — The receiver looks up your sending IP and domain reputation
Content analysis — AI models scan your email for spam signals
Delivery decision — Based on all factors, the email goes to inbox, spam, or gets rejected

Each step is a potential failure point. Let's look at how to optimize each one.

Step-by-Step: What Happens When Gmail Receives Your Email

To make this concrete, here's what happens when you send an email to a Gmail user:

Your email server connects to Gmail's MX server (smtp.google.com)
Gmail checks if your IP is on any DNS blocklists — if yes, connection is rejected immediately
Gmail looks up your SPF record to verify the sending server is authorized
Gmail checks the DKIM signature to verify the email wasn't modified in transit
Gmail evaluates your DMARC policy to determine what to do if SPF or DKIM fails
Gmail checks your domain and IP reputation scores from Postmaster Tools data
Gmail's ML models analyze the email content, structure, and patterns
Gmail considers the recipient's past behavior with your emails (did they open, reply, delete, or report previous emails?)
Based on all signals, Gmail places the email in Primary, Promotions, Social, or Spam

Steps 2-6 are within your direct control. Steps 7-8 are influenced by your sending practices over time. Step 9 is Gmail's final decision, but it's deterministic based on the preceding steps.

Setting Up Authentication (Step by Step)

To dive deeper into each authentication method, we have dedicated guides: SPF checker, DKIM checker, and DMARC checker tools to validate your setup.

SPF Configuration

SPF tells receiving servers which IP addresses can send email from your domain. Here's how to set it up:

Go to your DNS provider (Cloudflare, Route53, etc.)
Add a TXT record for your domain
Include all services that send email on your behalf

A typical SPF record looks like this:

v=spf1 include:_spf.google.com include:sendgrid.net ~all

Common mistake: Having multiple SPF records. You can only have one, so combine all includes into a single record.

DKIM Setup

DKIM adds a cryptographic signature to your emails. Setup varies by provider, but generally:

Generate a DKIM key pair through your email provider
Add the public key as a TXT record in your DNS
Your provider automatically signs outgoing emails with the private key

The DNS record typically looks like:

selector._domainkey.yourdomain.com TXT "v=DKIM1; k=rsa; p=MIGfMA0GCS..."

DMARC Policy

DMARC ties SPF and DKIM together and tells receivers what to do with failing emails. Start with a monitoring policy:

v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com

This sends you reports without affecting delivery. Once you're confident everything is set up correctly, move to a stricter policy:

v=DMARC1; p=reject; rua=mailto:dmarc@yourdomain.com

DMARC Policy Progression

Don't jump straight to p=reject. Here's the recommended progression:

Phase	Policy	Duration	Purpose
1	`p=none`	2-4 weeks	Monitor and collect reports
2	`p=quarantine; pct=10`	2 weeks	Test with 10% of failing email
3	`p=quarantine; pct=50`	2 weeks	Expand quarantine coverage
4	`p=quarantine; pct=100`	2 weeks	Full quarantine
5	`p=reject; pct=100`	Ongoing	Maximum protection

At each phase, review your DMARC reports. If legitimate emails are failing, fix the authentication issues before moving to the next phase. Common causes of legitimate failures include forgotten third-party senders (like a helpdesk tool that sends on your behalf) or employees forwarding email.

Building and Protecting Your Sender Reputation

Your sender reputation is like a credit score for email. It's built over time and can be destroyed quickly. Learn more about this concept in our sender reputation glossary entry. Here's what affects it:

Factors That Help Your Reputation

High open rates — People engaging with your emails signals they're wanted
Low bounce rates — A clean list shows you're collecting emails properly
Consistent sending volume — Steady patterns look legitimate
Low spam complaints — The most important factor
Email replies — Recipients replying is a strong positive signal

Factors That Hurt Your Reputation

Spam traps — Hitting email addresses specifically set up to catch spammers
High hard bounce rates — Sending to invalid addresses suggests a purchased or scraped list
Sudden volume spikes — Going from 100 emails/day to 100,000 looks suspicious
Spam complaints — Even a few can tank your reputation
Blacklist appearances — Getting listed on DNS blocklists (check with our blacklist checker)

Domain Reputation vs IP Reputation

It's worth understanding the difference between these two reputation types:

IP reputation is tied to the server sending your email. If you use a shared sending service, you share IP reputation with other senders. Dedicated IPs give you full control but require enough volume (typically 50,000+ emails/month) to build and maintain reputation.

Domain reputation is tied to your sending domain. This travels with you regardless of what IP you send from. In 2026, domain reputation is the more important factor. Gmail and other major providers have shifted toward domain-based reputation scoring.

For SaaS companies, this means:

Switching email providers doesn't reset your reputation (for better or worse)
Using separate subdomains for transactional vs marketing email can protect your core domain
A domain with years of good sending history is a valuable asset

Warming Up a New Domain or IP

If you're starting fresh with a new domain or IP address, you need to warm it up. Inbox providers are suspicious of new senders—for good reason, since most spammers use fresh domains. Use our email warmup calculator to plan your schedule.

Here's a realistic warmup schedule:

Week	Daily Volume	Focus
1	50-100	Only your most engaged users
2	200-500	Expand to recent openers
3	1,000-2,000	Include active subscribers
4	5,000-10,000	Most of your list
5+	Full volume	Everyone

Key principle: Send to people most likely to engage first. Their opens and clicks build your reputation for the larger sends later.

Warmup Tips for SaaS Companies

SaaS warmup has a unique advantage: you have users who actively expect email from you. Use this to your benefit:

Start with transactional emails. Password resets and verification emails have near-perfect engagement. Send these from your new infrastructure first.
Expand to active users. Users who logged in within the last 7 days are your next best audience. Send them product updates or onboarding tips.
Add engaged subscribers. Users who opened your last 3 emails are safe to include next.
Gradually include full list. Only after 3-4 weeks should you send to users who haven't engaged recently.

The worst thing you can do during warmup is send a blast to your entire list. Even if you have 100,000 subscribers, start small and build up.

Content That Doesn't Trigger Spam Filters

Modern spam filters use machine learning to analyze email content. While there's no magic formula, certain patterns help:

Things to Avoid

ALL CAPS in subject lines or body text
Excessive punctuation (!!!!! or $$$$$)
Spammy phrases like "Act now!" "Limited time!" "Free money!"
Image-only emails with no text
Shortened URLs (bit.ly, etc.) — they're commonly used by spammers
Mismatched "From" names and domains
Attachments in marketing emails

Things That Help

Personalization (using the recipient's name naturally)
Plain text versions alongside HTML
Consistent sender information
Proper HTML structure
A healthy text-to-image ratio
Links to your primary domain (not random tracking domains)

Subject Line Best Practices for Deliverability

Subject lines affect deliverability in ways most marketers don't realize:

Length matters. Subject lines between 30-60 characters perform best for both engagement and deliverability. Extremely short or extremely long subjects can trigger spam filters.
Consistency builds reputation. If your subject lines are always professional and clear, inbox providers learn to trust your patterns. Sudden shifts (like adding emojis after never using them) can temporarily affect filtering.
Reply-based subjects help. Emails with "Re:" in the subject line have higher inbox placement because they look like ongoing conversations. Some marketers abuse this, which is dishonest and counterproductive long-term. But legitimate reply threads (like customer support) benefit from this pattern.
Preview text matters too. The preview text (preheader) that appears after the subject line in most email clients affects whether users open or ignore your email. Low engagement hurts reputation over time. Write compelling preview text.

For SaaS specifically, subject lines that reference the user's product or account (like "Your weekly report is ready" or "3 new comments on your project") perform best because they signal relevance that both users and spam filters recognize.

List Hygiene: The Unsexy But Essential Part

Your email list degrades over time. People change jobs, abandon email addresses, or simply lose interest. Regular cleaning is essential. We have tools to help with this, like our email validator and disposable email checker to verify list quality.

For a deeper dive into maintaining list quality, our guide on how to clean your email list for SaaS covers everything from identifying bad addresses to re-engagement strategies.

Remove These Addresses

Hard bounces — Remove immediately and never send again
Soft bounces — After 3-5 consecutive soft bounces, remove them
Long-term inactive — No opens in 6+ months? Consider a re-engagement campaign, then remove non-responders
Role addresses — support@, info@, admin@ rarely help your metrics

Validate Before Sending

Use email validation services to check addresses before adding them to your list. They can identify:

Invalid syntax
Non-existent mailboxes
Known spam traps
Disposable email addresses
Role-based addresses

List Hygiene Schedule

Consistency matters more than perfection. Here's a practical schedule:

After every send:

Remove hard bounces immediately (your email provider should do this automatically)
Flag soft bounces for monitoring

Weekly:

Review new subscribers for obvious bad addresses
Check for duplicate entries

Monthly:

Run suppression list against your active list
Remove addresses that have soft-bounced 3+ times
Review engagement metrics by segment

Quarterly:

Run a re-engagement campaign for users who haven't opened in 90+ days
Remove non-responders from the re-engagement campaign
Audit your signup sources for quality (which forms or integrations produce the most bounces?)

Annually:

Full list audit against an email validation service
Review and clean up old segments
Verify all suppression lists are being respected

Deliverability by Email Provider

Different inbox providers have different priorities and quirks. Understanding these helps you troubleshoot and optimize.

Gmail

Gmail is the most common inbox provider for most SaaS companies and the hardest to consistently land in.

Tabbed inbox — Gmail sorts email into Primary, Promotions, Social, and Updates tabs. Marketing email typically lands in Promotions, which has dramatically lower open rates. Transactional email usually lands in Updates or Primary.
Engagement-heavy signals — Gmail weights user engagement heavily. If users consistently delete your emails without opening, future emails are more likely to land in spam.
Postmaster Tools — Essential. Set up Google Postmaster Tools immediately. It shows your domain reputation, spam rate, authentication results, and delivery errors.

Microsoft (Outlook, Hotmail)

SmartScreen — Microsoft uses their own filtering system that weighs sender reputation differently from Gmail
Junk Email Reporting — Microsoft's spam complaint mechanism is less transparent than Gmail's, making it harder to monitor
Authentication strict — Microsoft is increasingly strict about DMARC alignment

Apple Mail (iCloud)

Privacy features — Apple Mail Privacy Protection pre-loads tracking pixels, making open rate data unreliable for iCloud users
Less transparent — Apple provides no equivalent to Postmaster Tools
Generally permissive — Apple Mail tends to deliver email to inbox more readily than Gmail, but this makes it a poor benchmark for overall deliverability

Corporate Email (Google Workspace, Microsoft 365)

Admin controls — IT departments add their own filtering rules on top of provider defaults
Safe sender lists — If your users add you to their contacts or safe sender list, your deliverability improves dramatically for that recipient
SPF/DKIM strict — Corporate email servers tend to be stricter about authentication, especially for security-conscious organizations

Monitoring Your Deliverability

You can't fix what you don't measure. Here's what to track:

Key Metrics

Delivery rate — Percentage of emails accepted by receiving servers
Inbox placement rate — Percentage that actually land in inbox (not spam)
Open rate — Can indicate deliverability problems if suddenly dropping
Bounce rate — Keep under 2%
Spam complaint rate — Keep under 0.1%

For comprehensive guidance on tracking email metrics, see our SaaS email marketing KPIs guide and benchmarks post.

Tools for Monitoring

Google Postmaster Tools — Free, essential for Gmail deliverability data
DMARC reports — Your DMARC policy generates reports showing authentication results
Blacklist monitors — Check if your IP/domain appears on blocklists with our blacklist checker
Seed list testing — Send to test addresses across providers to see where you land

Setting Up Alerts

Don't wait for problems to find you. Set up alerts for:

Delivery rate drops below 95%
Bounce rate exceeds 2% on any send
Spam complaint rate exceeds 0.1%
Domain reputation changes in Postmaster Tools
New blacklist appearances

Most email providers offer webhook notifications for bounce and complaint events. Use these to build real-time monitoring rather than discovering problems days later.

When Things Go Wrong: Troubleshooting

Sudden Drop in Deliverability

If your metrics suddenly tank:

Check your authentication records — did something change?
Look for blacklist appearances
Review recent list changes — did you add unverified addresses?
Check for complaints about recent campaigns
Verify your sending infrastructure hasn't changed

Gmail-Specific Issues

Gmail is the hardest to crack. If you're having Gmail problems:

Set up Google Postmaster Tools immediately
Check your domain reputation in Postmaster
Look for authentication failures
Review your spam rate trend
Send a re-engagement campaign to your most active Gmail users first

Recovery Playbook

If your deliverability is already damaged, here's how to recover:

Week 1: Stop the Bleeding

Pause all marketing campaigns immediately
Continue sending critical transactional emails only
Identify and remove any addresses that bounced or complained recently
Fix any authentication issues (SPF, DKIM, DMARC)

Week 2-3: Clean and Segment

Run your full list through an email validation service
Remove all invalid, risky, and unengaged addresses
Segment your remaining list by engagement level (opened in last 30, 60, 90 days)
Check and clear any blacklist appearances

Week 4-6: Rebuild

Resume sending to your most engaged segment only (opened in last 30 days)
Send your best content — whatever historically got the highest engagement
Monitor metrics daily. If complaint rates are under 0.05% and open rates are healthy, gradually expand
Add the next engagement segment every 3-5 days

Week 7+: Scale Back Up

Gradually return to full sending volume
Keep monitoring metrics closely for the first month
Consider permanently removing addresses that haven't engaged in 6+ months

Recovery typically takes 4-8 weeks. There's no shortcut. Patience and discipline are the only path back to good deliverability.

Deliverability Checklist for SaaS Companies

Use this as a regular audit checklist:

Authentication:

SPF record configured with all sending services included
DKIM keys set up for every service that sends email on your behalf
DMARC policy in place (at minimum p=none with reporting)
All authentication records passing validation

List Quality:

Hard bounces removed after every send
Email validation on signup forms
Re-engagement campaigns for inactive subscribers
Suppression lists maintained and respected

Sending Practices:

Consistent sending volume (no dramatic spikes)
Transactional and marketing email separated by subdomain or IP
One-click unsubscribe in all marketing emails
Preference center available for granular control

Monitoring:

Google Postmaster Tools configured
DMARC reports being received and reviewed
Blacklist monitoring active
Alerts configured for metric anomalies

Content:

Plain text versions included
Healthy text-to-image ratio
Links to your primary domain
Professional, consistent sender information

The Bottom Line

Email deliverability isn't magic—it's a set of technical requirements and best practices that, when followed consistently, get your emails where they need to go.

The most important things to remember:

Set up authentication properly — SPF, DKIM, and DMARC are non-negotiable
Protect your reputation — Send to engaged users, keep complaints low
Keep your list clean — Remove bounces, validate new addresses
Monitor constantly — Problems are easier to fix when caught early
Send content people actually want — The best deliverability strategy is sending emails people are happy to receive

If you're building a SaaS product and want deliverability handled for you, that's exactly what we built Sequenzy to do. We take care of authentication, warming, reputation management, and monitoring so you can focus on your actual business.

Frequently Asked Questions

How long does it take to build sender reputation from scratch?

Typically 4-8 weeks of consistent, well-targeted sending. Start with your most engaged users, send valuable content, and gradually increase volume. Rushing the process by sending to your full list too early is the most common mistake and can set you back months.

Does switching email providers reset my reputation?

It depends. Your domain reputation travels with you, but if the new provider uses different sending IPs, you'll need to warm those up. Your domain reputation (which is increasingly more important than IP reputation) stays intact regardless of which provider you use.

Should I use a dedicated IP or shared IP?

Shared IPs are fine for companies sending under 50,000 emails per month. Above that threshold, a dedicated IP gives you more control over your reputation. But dedicated IPs require enough volume to maintain—if you're only sending 10,000 emails per month, a dedicated IP can actually hurt you because there isn't enough positive engagement to build strong reputation.

Why do my emails land in Gmail's Promotions tab instead of Primary?

Gmail uses machine learning to categorize emails. Marketing emails almost always land in Promotions. This isn't a deliverability problem—it's expected behavior. To increase Primary placement, make emails more personal (use the recipient's name, reference their specific activity), send from a person's name rather than a brand, and keep formatting simple. But honestly, Promotions tab placement is normal for marketing email and your strategy should account for it.

How often should I clean my email list?

Remove hard bounces after every send (this should be automatic). Run a deeper clean monthly, removing addresses that have soft-bounced multiple times. Quarterly, run a re-engagement campaign for inactive subscribers and remove those who don't respond. For a detailed guide, see our post on cleaning your email list.

Can email deliverability affect my domain's overall reputation?

Yes. If your primary domain (yourcompany.com) develops a poor email reputation, it can marginally affect other aspects of your domain's reputation in Google's ecosystem. This is another reason to use subdomains for sending email—it creates a layer of isolation between your email reputation and your web domain.

What's the difference between hard bounces and soft bounces?

A hard bounce means the address is permanently invalid (doesn't exist, domain doesn't exist). Remove immediately. A soft bounce means a temporary issue (mailbox full, server temporarily unavailable). Retry soft bounces, but if the same address soft bounces 3-5 times across different sends, treat it as a hard bounce and remove it.

How do I know if I'm on a blocklist?

Use our blacklist checker or services like MXToolbox to check your IP and domain against known blocklists. Most blocklists have a delisting process that involves fixing the underlying problem and requesting removal. Some blocklists auto-delist after a period of clean sending.