# White Label Email Configuration

### Options for email delivery of log reports

#### Option A — Parent mail server (easiest set up)

* Emails are sent **from the OBC mail domain** (`obcbackup.com`) with default OBC branding (From name, domain, and logo).
* No setup required. Good for pilots or if you do not care about full custom branding yet.

#### Option B — Your SMTP server (full branding)

* Emails are sent **from your domain** with your **From name**, **product name**, and **logo**.
* Your **Header Image (228x40px)** is also used in the automated email reports—it appears as the logo at the top of those emails.
* Requires SMTP details (server, port, username, password and security mode)

{% hint style="info" %}
Recommendation: start with Parent mail to go live fast. When you are ready to brand emails end-to-end, switch to “Your SMTP” and set up your deliverability records (SPF, DKIM, and DMARC,).
{% endhint %}

### How to configure the custom mail server

1. In your client area, open **Partner Hub → White-label Tenants**.
2. Click **Manage** on a tenant → **Manage Branding** → **Email Reporting**.
3. Choose one of:
   * **Use parent mail server** (zero-setup), or
   * **Custom SMTP**: fill in **From Name**, **From Email**, **SMTP server**, **Port**, **Username**, **Password**, and **Security**.

{% hint style="info" %}
If you are not sure which security mode and port to pick, check what your mail service provider recommends. Many recommend implicit TLS on port 465, with STARTTLS on 587 as a compatible fallback.
{% endhint %}

### Deliverability (highly recommended for “Your SMTP”)

1. **Sender Policy Framework (SPF)**\
   Publish an SPF TXT record that lists the servers allowed to send for your domain. This helps receivers trust mail from you and reduce spoofing.
2. **DomainKeys Identified Mail (DKIM)**\
   Generate a DKIM key pair, publish the public key in your (DNS), and sign outbound mail so recipients can verify it was not altered in transit.
3. **Domain-based Message Authentication, Reporting & Conformance (DMARC)**\
   Add a DMARC TXT record to set your policy (none/quarantine/reject) and receive reports. DMARC builds on SPF and DKIM and tells receivers how to handle mail that fails alignment. 

{% hint style="info" %}
Many providers (Google, Microsoft, etc.) explicitly recommend setting up **SPF and DKIM** at a minimum and then adding **DMARC** for policy and reporting.
{% endhint %}

### FAQs

**Can I brand emails but still send through the parent mail server?**\
No. Parent mail always sends from `obcbackup.com` with OBC branding. To brand the **From name**, **sending domain**, and **logo** in the email itself, choose custom SMTP server.

**Which port should I use? 465 or 587?**\
Use whatever your mail provider recommends. Today’s best practice is implicit TLS on port 465 for submission, with STARTTLS on 587 as a common alternative.

**Do I really need SPF/DKIM/DMARC?**\
If you want good inbox delivery and protection from spoofing, you should set up **SPF and DKIM**, then add **DMARC** for policy and reporting. 

**Will the Header Image appear when I use Parent mail?**\
The Parent mail server uses standard OBC branding. The **Header Image** you upload is used in the report emails only when you use the custom SMTP mail server option**.**