Do I need to add PandaDoc to my SPF or DMARC record?

Which address does PandaDoc send from?

the recipient can whitelist or mark the following emails as safe senders: [email protected] [email protected] [email protected] [email protected] [email protected]

PandaDoc says in its own documentation that this email comes from [email protected], [email protected], [email protected], [email protected] and [email protected]. That is PandaDoc's own domain, so the email is checked against PandaDoc's records, not yours.

Why does my DMARC record not cover these emails?

Author Domain: The domain name of the apparent author, as extracted from the RFC5322.From field.

DMARC is read for the domain in the From address a reader sees. When that domain is PandaDoc's, the check uses PandaDoc's records.

So your policy, from p=none to p=reject, has no effect on these emails. There is nothing to add to your SPF record for them.

Can PandaDoc send from my own domain instead?

With white-labeling, PandaDoc emails come from your custom subdomain. DNS updates are needed for setup.

On Business and Enterprise plans, PandaDoc can send its delivery, reminder and completion emails from a subdomain of your own domain, which needs DNS records on your side.

PandaDoc support sends you a PDF with the records after you ask for white-labeling.

If you turn that on, the email is sent as your domain, and your SPF, DKIM and DMARC records then apply to it. Publish the records PandaDoc shows you before you raise your DMARC policy.

What should I watch for with PandaDoc email?

A forged email can copy the look of a PandaDoc message from any address. Read the address it came from, not the name shown, before you open a link or make a payment.