How eEvidence's Virtual Account Guarantees Delivery Even with DMARC-Failing Domains

The email ecosystem has changed radically in recent years. With the increase in spam, identity spoofing, and email-based scams, major providers like Google, Yahoo, iCloud, or Protonmail have tightened their authentication policies. In parallel, strict DMARC adoption has become widespread.

DMARC allows a domain owner to tell receiving servers how to treat emails that appear not to come from legitimate sources. And when a server detects an authentication failure—for example:

the consequence is usually direct rejection, or at best, delivery to spam.

This system protects users… but complicates life for those who send legitimate emails from external systems like a CRM, ERP, SMTP gateway, or certification services like eEvidence.

It especially affects users who use:

• Free domains (gmail.com, yahoo.com, outlook.com…)
• Domains over which they have no DNS control
• Domains with strict DMARC “quarantine” or “reject” policies

In these cases, even if the email is legitimate, recipients may reject it simply because the domain does not allow sending through alternative servers.

The Challenge for eEvidence: Certifying Using the Original FROM

eEvidence’s philosophy has always been clear:

The sender must appear as the real sender.

Therefore, we deliver certified emails using the user’s original FROM, keeping their digital identity intact.

The problem: if the sender uses a domain with DMARC policies that do not allow third parties to send on their behalf, authentication will fail… and delivery may be compromised.

When the client controls their domain, it’s enough to configure the necessary CNAMEs.
But what happens when it’s not possible to modify the DNS configuration?

This is where our solution comes in.

The Solution: eEvidence’s Virtual Account

The Virtual Account feature allows sending certified emails while maintaining the user’s identity, even when their domain does not allow DMARC alignment.

How does it achieve this?

1. Rewriting the FROM Domain While Maintaining the User’s Name

If the sender’s domain cannot be aligned (for example jsmith@gmail.com), eEvidence automatically generates a virtual address based on a secure domain controlled by us:

The visible name of the sender remains intact. The domain is replaced by one controlled by eEvidence, with guaranteed authentication and DMARC alignment.

2. Ensuring Replies Still Reach the User

To avoid disrupting the natural communication flow, we add the header:

So that if the recipient replies, the reply reaches the original sender.

3. Maintaining Transparency and Delivery Experience

• Most recipients will see their usual name as sender.
• DMARC, DKIM, and SPF mechanisms align correctly thanks to the virtual domain.
• The recipient receives a normal email, perfectly delivered and certified.

And most importantly:

The probative validity of the eEvid remains intact, because the content, sending, and delivery are certified, regardless of the virtual address used.

Why This Solution is Crucial

The Virtual Account feature solves a growing problem in the email world: the false perception that if a domain rejects a send due to DMARC, it’s spam or fraud.

But in most cases:

• The send is legitimate.
• The user simply has no control over the domain they use.
• The communication channel needs to meet strict authentication.

With Virtual Account, eEvidence guarantees:

• Deliverability even on restrictive domains
• Maintained identity
• Intact communication flow
• Complete probative certification
• No DNS configuration required

This makes eEvidence an especially useful solution for:

• Independent professionals
• Employees who use corporate domains managed by third parties
• Users of free domains
• Sales teams that send from CRMs where the domain cannot be configured
• Organizations that must certify communications without depending on the IT team

Conclusion

The global tightening of DMARC is good news for security, but poses real challenges for those who need to send certified communications from domains over which they have no control.

With the Virtual Account feature, eEvidence removes those obstacles, guaranteeing:

• Deliverability
• Identity
• Legality
• Operational continuity

All without requiring DNS changes or additional technical configurations.