Do I need to add Clio to my SPF or DMARC record?

Which address does Clio send from?

If you do not enable this feature, your bills will continue to send from [email protected].

Clio says in its own documentation that this email comes from [email protected]. That is Clio's own domain, so the email is checked against Clio's records, not yours.

Why does my DMARC record not cover these emails?

Author Domain: The domain name of the apparent author, as extracted from the RFC5322.From field.

DMARC is read for the domain in the From address a reader sees. When that domain is Clio's, the check uses Clio's records.

So your policy, from p=none to p=reject, has no effect on these emails. There is nothing to add to your SPF record for them.

Can Clio send from my own domain instead?

With this feature, you can send bills to clients from your Microsoft email address. This allows clients to see that you sent the bill rather than Clio.

Clio can send these emails from your own Google or Microsoft email address when you turn on email personalization.

If you turn that on, the email is sent as your domain, and your SPF, DKIM and DMARC records then apply to it. Publish the records Clio shows you before you raise your DMARC policy.

When you send from your own address through Clio, Clio recommends SPF and DKIM for your own mail domain.

What should I watch for with Clio email?

A forged email can copy the look of a Clio message from any address. Read the address it came from, not the name shown, before you open a link or make a payment.