The deliverability guide: staying out of spam, for good

Deliverability is the invisible half of outbound. You can have the sharpest message in your category, aimed at exactly the right buyer, and it changes nothing if the email lands in spam. Most teams discover this months in, after the reply rate has quietly told them something the tooling never did. Here is how the mechanics actually work, and the discipline that keeps campaigns in the inbox.

Separate your sending from your company domain

The first rule costs nothing and saves everything: never run cold outbound from your primary domain. Sending reputation is earned and burned at the domain level, and a campaign that misfires can follow your company domain into every filter for months. Serious operators send from dedicated adjacent domains, keep the primary pristine, and treat sending infrastructure as replaceable.

Authentication is table stakes

SPF, DKIM and DMARC are not advanced settings - they are the minimum credentials mailbox providers check before deciding whether you exist. Unauthenticated mail is presumed guilty. Every sending domain needs all three configured correctly before the first email goes out, and misconfigurations need monitoring, because they fail silently.

Warm up before you show up

A new domain that starts sending hundreds of emails on day one looks exactly like a spammer, because that is exactly what spammers do. Inboxes earn trust gradually: weeks of low, human-looking volume with real engagement before a campaign ever launches. It is the least glamorous part of outbound and the one most often skipped - usually by the teams who later ask why nothing lands.

Volume discipline beats volume

Per-inbox daily volume is a reputation budget, and the market keeps teaching the same lesson: low and steady wins. A handful of sends per inbox per day across a properly sized pool of senders will outperform one inbox blasting hundreds - not by a little, but categorically. When a vendor promises scale from thin infrastructure, the spam folder is doing the receiving.

The list is half the battle

Providers read your bounce rate as a confession. Send to enough dead addresses and you have told them your data is scraped and your targeting is careless. Every list needs verification before launch and hygiene during it - invalid addresses purged, catch-alls treated with suspicion, bounces held to the low single digits. Precision targeting is not just a messaging virtue; it is a deliverability requirement.

Watch placement, not opens

Open rates stopped being a deliverability signal years ago - privacy proxies inflate them beyond use. What matters is placement: where the email actually arrives, per provider. That means seed-list placement testing, blocklist monitoring, and per-domain reply-rate forensics. When a domain degrades, you want to know that week - and retire it before it drags the campaign down with it.

• Dedicated sending domains, never your primary
• SPF, DKIM and DMARC on every domain, monitored
• Weeks of warmup before the first campaign send
• Low per-inbox daily volume across a sized sender pool
• Verified lists with bounce rates held to low single digits
• Placement testing and blocklist monitoring, continuously

None of this is secret. It is simply operational discipline that has to be maintained every week, which is why deliverability is where most in-house builds and volume agencies quietly fail. We run this layer as standard infrastructure for every engagement - because the best message in the world deserves to be read.