Email infrastructure decisions made in the first 6 months of a startup's life have long-lasting consequences. Authentication misconfiguration, wrong ESP choices, and poor list quality practices established at launch are significantly more expensive to fix at 2M monthly messages than at 20K monthly messages. This guide provides the infrastructure decisions a startup should make at each growth phase — before the decisions become expensive to change.

Day 1
When to set up DKIM, SPF, DMARC — before sending the first message
500K/mo
Typical volume threshold where dedicated infrastructure ROI turns positive
Own domain
Always sign with d=yourstartup.com from day one — never use ESP shared domains
8-10 weeks
IP warmup lead time — plan dedicated infrastructure migration 3 months before needing it

Phase 0 (Pre-Launch): Get Authentication Right From Day One

The single most important email infrastructure decision a startup makes is establishing correct authentication before the first message is sent. Authentication — DKIM, SPF, DMARC — is the reputation attribution system that determines whether Gmail Postmaster Tools tracks the sending domain's reputation history from the first message. Starting with correct authentication means building domain reputation from day one; correcting authentication later means starting domain reputation from zero at the point of correction, regardless of how many months of sending history exist before it.

The pre-launch authentication checklist:

▶ Pre-Launch Authentication Setup
1
DKIM — own domain signing: Configure the ESP (Postmark, SendGrid, Mailgun, or equivalent) to sign with d=yourstartup.com, not d=esp.com. All major ESPs support custom domain DKIM — it requires adding a TXT record to the startup's DNS zone. Do this before sending the first message.
2
SPF: Add the ESP's sending servers to the SPF TXT record for yourstartup.com. Use the ESP's published SPF include mechanism (e.g., include:sendgrid.net). Verify the record at mxtoolbox.com after publishing.
3
DMARC p=none: Publish a minimal DMARC record: v=DMARC1; p=none; rua=mailto:dmarc@yourstartup.com. This starts DMARC aggregate report delivery immediately, providing visibility into authentication completeness from the first send.
4
Gmail Postmaster Tools: Register yourstartup.com in Postmaster Tools before the first send. Data will appear once sufficient volume has been sent. Starting the registration early means the history begins from the first message rather than from the registration date.
5
Verification: Send a test message and check the full headers. Verify Authentication-Results shows spf=pass, dkim=pass (d=yourstartup.com). Fix any failures before sending to real users.

This pre-launch setup takes 2-3 hours for a developer familiar with DNS. The cost of skipping it — rebuilding domain reputation from zero after correcting authentication 6-12 months later — is 8-12 weeks of reduced deliverability at a time when the startup needs reliable email delivery for user activation, retention, and revenue. Do it right before launch; never revisit it.

Phase 1 (0-50K messages/month): The Right ESP Choices

At under 50,000 messages per month, shared ESP infrastructure is the economically rational choice. The per-message cost advantage of shared ESPs is clear at this volume, and the deliverability limitations of shared infrastructure — limited per-event accounting log access, shared IP pools — are less constraining at low volume where delivery problems are more manageable and less commercially damaging.

The ESP selection criteria that matter at Phase 1: (1) Custom DKIM signing from the startup's own domain (not all ESPs offer this on free or entry-tier plans). (2) Transactional email reliability — uptime and delivery latency for password reset and onboarding emails where delivery within 30 seconds matters. (3) Reasonable developer API for programmatic sending. (4) Clear per-event delivery feedback (webhook callbacks for each delivery status) even if full accounting log access is not available.

The ESPs that work well for Phase 1 startups: Postmark (optimised for transactional deliverability, excellent developer experience, custom domain DKIM included, strong reputation for inbox delivery), Mailgun (developer-friendly API, flexible pricing, custom domain DKIM), Amazon SES (lowest per-message cost, custom domain DKIM, requires more setup than other options). For marketing email at Phase 1 (newsletters, product announcements), Mailchimp, Klaviyo, and similar marketing ESP platforms add list management and campaign tools on top of the sending infrastructure.

The phase 1 mistake to avoid: using the same ESP for transactional and marketing email on shared IP pools without any separation. A Phase 1 startup with 200 daily active users generating 200 password resets per day and 10,000 marketing emails per week should keep these on separate infrastructure from the start. Even at low volume, marketing email complaint rates can contaminate the IP pool serving transactional email. Use a transactional-optimised ESP (Postmark, Mailgun) for product emails and a separate marketing ESP for campaigns from the first day of significant volume.

Phase 2 (50K-500K messages/month): When to Start Thinking About Dedicated

At 50,000-500,000 monthly messages, the startup is in the range where shared infrastructure limitations start becoming visible as delivery problems but where the per-message economics still often favour shared ESP over dedicated infrastructure. The Phase 2 evaluation question: are deliverability incidents occurring with enough frequency and commercial impact to justify the switch to dedicated infrastructure before the natural Phase 3 migration threshold?

The indicators that suggest early migration to dedicated infrastructure at Phase 2: (1) More than 2 significant deliverability incidents in the past 12 months (IP reputation events, domain reputation declines, ISP blocks) that required hours to diagnose and remediate due to limited accounting log access. (2) A single co-tenant reputation event that caused measurable campaign performance degradation. (3) Inbox placement below 85% at Gmail despite correct authentication and strong list quality. (4) Email-attributed revenue significant enough that a 10% inbox placement improvement would generate more than the annual cost of dedicated infrastructure. Any of these indicators suggests the Phase 3 migration timing should be moved forward.

The Phase 2 preparation work that should happen regardless of migration timing: implement per-source list quality tracking (complaint and bounce rate per acquisition channel), establish the Postmaster Tools daily review habit, set up Yahoo FBL enrollment, and document the complete authentication stack. This preparation work produces value on shared infrastructure and substantially reduces the time-to-value of a subsequent dedicated infrastructure migration when it occurs.

Phase 3 (500K+ messages/month): The Migration Decision

Above 500,000 monthly messages, dedicated infrastructure typically becomes the financially rational choice on total cost of ownership when all cost dimensions are included. The migration decision framework: calculate the monthly per-message cost on the current shared ESP at current volume; calculate the monthly cost of managed dedicated infrastructure at the same volume; then add the operational cost difference (investigation time, co-tenant risk, engineering workarounds) to the shared ESP total cost. In most cases above 500K monthly, dedicated infrastructure is both less expensive and operationally superior.

The migration timeline that avoids disruption: plan 3 months ahead. Month 1: select the dedicated infrastructure provider and begin the contractual and technical onboarding. Month 2: configure the new infrastructure (VMTA setup, authentication, domain block configuration), register in Postmaster Tools and SNDS, and begin warmup with the highest-engagement list segment. Month 3: gradually shift traffic from the shared ESP to the dedicated infrastructure as the warmup progresses. By the end of month 3, the dedicated infrastructure is handling full production volume at established reputation.

Startups that wait until they urgently need dedicated infrastructure — because a shared ESP co-tenant event has just degraded their delivery — are forced to migrate under time pressure with compressed warmup schedules that produce suboptimal reputation outcomes. Plan the migration proactively at the volume threshold, not reactively after the incident that demonstrates the need.

Authentication: The Non-Negotiable Foundation

Authentication is the one infrastructure decision where there is no acceptable startup shortcut. Every other infrastructure decision has a phase-appropriate option — shared ESP for Phase 1, managed dedicated for Phase 3 — but authentication has only one correct configuration from day one: DKIM with the startup's own domain, SPF for all sending sources, DMARC at p=none with reporting, and one-click unsubscribe for marketing email. These are not Phase 3 best practices — they are Phase 0 requirements.

The startup authentication mistake that is almost impossible to recover from cleanly: building significant domain reputation on an ESP's shared signing domain (d=sendgrid.net or d=mailchimp.com) for the first year of operation, then switching to custom domain DKIM (d=yourstartup.com) at scale. The domain reputation built under the ESP domain does not transfer to the startup's domain — the startup's own domain starts from zero while the sending volume has already reached the level where warmup from zero takes 8-12 weeks to complete. This migration under volume pressure consistently produces 8-12 weeks of degraded inbox placement at the worst possible time.

Verify authentication completeness quarterly using the pre-campaign header check: send a test message from the production infrastructure and verify Authentication-Results shows spf=pass, dkim=pass (d=yourstartup.com), dmarc=pass. Any failure in this check is a Priority 1 fix before the next production send.

The 5 Startup Email Mistakes That Kill Deliverability

  1. Signing with the ESP's shared domain instead of the startup's own domain. Every send builds reputation for the ESP's domain, not the startup's. When the startup switches to its own domain, reputation starts from zero.
  2. Sending transactional and marketing email from the same sending identity. A single bad marketing campaign complaint spike degrades the reputation serving password resets and onboarding emails. Separate them from day one.
  3. Using a purchased or scraped list for the first campaign. The first campaign sets the startup's reputation baseline. A first campaign to a low-quality purchased list generates a reputation baseline so poor that subsequent clean campaigns face inbox placement penalties that take months to recover from.
  4. Ignoring Postmaster Tools until something breaks. The startup that first opens Postmaster Tools in response to a delivery problem discovers it has no historical data to compare against. Register and check from the first week — the trend data is only available if monitoring started early.
  5. Growing the list faster than the sending infrastructure can handle. A startup that acquires 100K contacts via a viral giveaway and immediately sends them a welcome campaign may generate the complaint spike from non-brand-aware contacts that crashes domain reputation at the exact moment when email is critical for user activation. Introduce new large contact cohorts gradually, with warmup schedules proportional to the volume increase.

Monitoring on a Startup Budget

Startups do not need enterprise-grade monitoring tools to maintain deliverability visibility. The minimum effective monitoring stack for a Phase 1-2 startup costs zero dollars and requires 15 minutes per week:

  • Gmail Postmaster Tools (free): Check domain reputation and spam rate weekly. Set a weekly calendar reminder. Register the sending domain and check it every Monday before sending any campaigns.
  • MXToolbox Email Health (free tier): Run a blacklist check for all sending IPs monthly. MXToolbox checks 100+ blocklists simultaneously and shows which, if any, list the IP.
  • Mail-tester.com (free): Test each new campaign template before deployment. Check the spam score and authentication results. Any score below 9/10 warrants investigation before the campaign is sent.
  • DMARC reporting (free tools: dmarcanalyzer.com free tier): Review DMARC aggregate reports monthly. Verify all sending sources are authenticated and no unauthorised sources are appearing.

This zero-cost monitoring stack, applied consistently with a weekly discipline, catches 80% of deliverability problems before they escalate. The remaining 20% that requires paid tooling (seed testing platforms, advanced reputation monitoring) becomes worth investing in at Phase 2-3 volumes where the commercial impact of undetected problems justifies the tool cost.

The Startup Email Infrastructure Playbook

The startup that follows this playbook from day one will be in a fundamentally stronger deliverability position at every growth milestone than the startup that implements deliverability best practices reactively after encountering problems:

Day 1 (Pre-launch): Set up custom DKIM signing, SPF, DMARC p=none. Register in Gmail Postmaster Tools. Send test message and verify authentication headers.

Week 1: Choose a transactional ESP and a separate marketing ESP (even if initially one platform handles both). Configure List-Unsubscribe headers on all marketing emails. Build the suppression database for hard bounces and unsubscribes.

Month 1: Establish the weekly Postmaster Tools review habit. Enroll in Yahoo JMRP. Run first MXToolbox blacklist check. Build per-source list quality tracking in the contact database.

Month 6: Review DMARC aggregate reports. Review per-source complaint and bounce rates. Consider advancing DMARC to p=quarantine if all sending sources are showing 100% pass rate. Evaluate whether volume and commercial impact justify dedicated infrastructure planning.

Month 12+: If approaching 500K monthly messages, begin dedicated infrastructure evaluation. Plan migration 3 months ahead of when it becomes necessary. Continue weekly monitoring discipline indefinitely.

The startup that builds email infrastructure correctly from day one is the startup that never faces the deliverability crises that consume weeks of engineering time and months of degraded user experience at the worst possible growth moments. Build it right from the start; the compounding benefit of early correct infrastructure decisions is one of the highest-impact investments an early-stage startup can make in its technical foundation.

H
Henrik Larsen

Infrastructure Strategy Manager at Cloud Server for Email. Specialising in email deliverability, infrastructure architecture, and high-volume sending operations.