Apollo
Email Deliverability Updated 2026-05-03

Email Deliverability

Get more emails to the inbox, not the spam folder.

A complete guide to email deliverability on Apollo. Start with what you need today and drill into the details as you go.

Why deliverability matters

If your emails do not reach the inbox, your sales motion does not work. Period.

The simple truth: Mailbox providers (Gmail, Microsoft, Yahoo) are the actual gatekeepers of who receives your email. Apollo gives you the controls. Your team uses them. The mailbox provider decides what lands in the inbox.

The three failure modes

Most deliverability problems trace back to one of three things:

What Apollo does (operational and technical layer)

Apollo provides the platform-side guardrails. Your team owns the rest.

Apollo providesYour team controls
Sending infrastructure (shared IP pool, expanded for stability)Who you target
Authentication checks in Diagnostics (Sequences > Diagnostics)What you say
Inbox Placement Tests and Blocklist DetectionHow aggressively you send
Email Capacity and Utilization ReportingDomain and mailbox setup decisions
Waterfall Enrichment to reduce bounce riskContact data quality

What you will get from this guide

Self-Assessment
10checks
Self-Assessment
Decision Tree
4questions
Cold vs Warm
Capacity Math
2formulas
Capacity Calculator
Provider Guides
3paths
Email Provider Setup

Self-assessment: Safe Send Readiness checklist

Ten checks. Go through them honestly. The pattern reveals where to focus.

How to use: Click each item as you confirm it. Anything not checked is your starting work. Below 7 of 10 means do not increase volume until fixes ship.

Area 1: Domains and Authentication

Area 2: Mailboxes and Limits

Area 3: Warmup and Ramp

Area 4: Data Hygiene

Area 5: Monitoring

Your readiness: 0 / 10. Click items above as you verify them.
Apollo Knowledge Base:

Authentication: SPF, DKIM, DMARC

The three records that tell mailbox providers an email is really from you. Without them, you are sending suspicious mail.

Why this matters now: Modern mailbox providers (Gmail, Microsoft, Yahoo) increasingly require all three records to pass before they will even consider delivering your email to the inbox.
RecordWhat it doesWhat broken looks like
SPF
Sender Policy Framework
Tells mailbox providers which mail servers are authorized to send for your domain. Apollo's infrastructure not in the record. Emails get flagged or rejected.
DKIM
DomainKeys Identified Mail
Cryptographically signs every outbound message so mailbox providers can verify it has not been tampered with. No key published, weak key (under 2048-bit), or selector mismatch.
DMARC
Domain-based Message Authentication
Sets policy for what mailbox providers should do when SPF or DKIM fails. Missing entirely, no rua reporting address, or stuck at p=none with no plan to progress.

The recommended posture (every domain you send from)

  1. Every domain you use for outbound must have SPF, DKIM, and DMARC passing.
  2. Move DMARC progressively: p=none (monitoring) > p=quarantine > p=reject.
  3. Treat "unauthenticated but sending" as a must-fix before scaling any sequences.

How to verify each record

Run these from any terminal. No Apollo access needed.

Check SPF

dig TXT yourcompany.com +short

You should see a TXT record starting with v=spf1. It must include Apollo's sending domain. If Apollo is missing, the record is broken.

Check DKIM

dig TXT default._domainkey.yourcompany.com +short

You should see a TXT record starting with v=DKIM1; k=rsa; p= followed by a long key. Apollo will provide the specific selector to use (replace default with what Apollo gives you).

Check DMARC

dig TXT _dmarc.yourcompany.com +short

You should see a TXT record starting with v=DMARC1; p=.... The p value should progress from none to quarantine to reject as your auth posture matures.

Where to add or fix these records

The DNS records live with whoever manages your domain DNS. Common providers:

  • Cloudflare: Dashboard > DNS > Records
  • Google Domains: DNS > Custom records
  • GoDaddy: Domain settings > DNS Management
  • AWS Route 53: Hosted zones > your domain
  • Namecheap, Hover, etc.: Advanced DNS

Your IT admin owns these. They are the right person to make these changes. See the Stakeholders section for how to engage them.

How Apollo helps: Apollo surfaces domain authentication checks directly in the app. Red and yellow indicators show exactly what is failing. A guided setup flow walks through adding the right DNS records with examples for common DNS providers. Unhealthy domains are flagged before you ramp volume.

Where to find this in Apollo

Open Apollo Open Apollo
Apollo Knowledge Base (step-by-step guides):

Email provider setup

Apollo connects to mailboxes via three paths. Pick yours and follow the steps.

Apollo Knowledge Base (applies to all three paths):
Open Apollo

Google Workspace (Gmail)

Best for: most B2B teams. Simplest OAuth flow. Postmaster Tools support is critical for monitoring.

Connection steps

  1. In Apollo, go to Settings > Email Accounts > Add Mailbox
  2. Choose Google.
  3. Sign in with the mailbox you want to authorize. Grant the requested scopes.
  4. Confirm the mailbox appears in Apollo with a green status indicator.

DNS records you still need (Gmail does not exempt you)

Gmail handles the OAuth piece. SPF, DKIM, and DMARC still need to live on your sending domain. Even if Gmail signs your messages, your DMARC policy controls what mailbox providers do when SPF or DKIM fails.

RecordTypeValue
SPFTXT @ (root)v=spf1 include:_spf.google.com ~all (Google's documented include)
DKIMTXT (selector provided by Google)Generate via Google Admin > Apps > Google Workspace > Gmail > Authenticate email
DMARCTXT _dmarc.yourcompany.comv=DMARC1; p=none; rua=mailto:dmarc@yourcompany.com (start at p=none, progress)

Gmail-specific monitoring

  • Google Postmaster Tools at postmaster.google.com. Free. Verify your domain. Watch the Reputation, Spam Rate, and Authentication dashboards weekly.
  • Spam complaint rate target: under 0.1 percent. Gmail will hard-throttle above 0.3 percent.
  • If your Gmail domain reputation drops to "Bad," pause sending until it recovers. Continuing to send while in Bad state extends the recovery window.

Microsoft 365 (Outlook)

Best for: enterprises on Microsoft 365 / Exchange Online. Uses OAuth via Azure AD.

Connection steps

  1. In Apollo, go to Settings > Email Accounts > Add Mailbox
  2. Choose Microsoft 365.
  3. Sign in with the mailbox. If your tenant requires admin consent, your Microsoft admin must approve the Apollo app first.
  4. Watch for AADSTS error codes during connection. AADSTS50173 means the auth session expired or credentials need refresh; reconnect from scratch.
  5. Confirm green status in Apollo.

DNS records for Microsoft sending

RecordTypeValue
SPFTXT @ (root)v=spf1 include:spf.protection.outlook.com ~all
DKIMTwo CNAMEs (selector1 and selector2)Generate via Microsoft 365 Admin > Email Authentication. Microsoft uses dual-selector rotation.
DMARCTXT _dmarc.yourcompany.comv=DMARC1; p=none; rua=mailto:dmarc@yourcompany.com

Microsoft-specific monitoring

  • SNDS (Smart Network Data Services) at sendersupport.olc.protection.outlook.com. Free. Microsoft's equivalent of Postmaster Tools.
  • Spam complaint rate target: under 0.1 percent. Microsoft is generally stricter than Gmail on volume ramp.
  • If you see SNDS data showing red, pause and let reputation reset. Reconnect after 7 to 14 days of cleaner sending.

SMTP (any provider)

Best for: providers without OAuth (legacy hosted mail), private exchanges, or when OAuth is not available. Less common today; still supported.

What you need

  • SMTP host (example: smtp.fastmail.com)
  • SMTP port (587 with STARTTLS recommended; 465 with SSL/TLS as alternative)
  • Username (typically the full email address)
  • Password (often an app-specific password if 2FA is enabled)

Connection steps

  1. In Apollo, go to Settings > Email Accounts > Add Mailbox
  2. Choose SMTP / IMAP.
  3. Enter host, port, encryption, username, password.
  4. Apollo will test the connection. Resolve any errors before saving.

DNS records for SMTP sending

Records depend on your sending host. The SPF include and DKIM selector both come from the SMTP provider. Examples:

ProviderSPF includeDKIM notes
Fastmailinclude:spf.messagingengine.comProvider documents selector and key in admin panel
SendGridinclude:sendgrid.netSendGrid generates DKIM via Domain Authentication wizard
Postmarkinclude:spf.mtasv.netPostmark provides DKIM record on Server > Settings
Mailguninclude:mailgun.orgMailgun provides DKIM record per sending domain
Custom serverInclude the IP block: ip4:1.2.3.4Generate DKIM key with opendkim or your MTA's tooling

SMTP-specific risk

  • SMTP credentials with weak passwords get compromised and abused. Use app-specific passwords + 2FA on the underlying account.
  • If your SMTP provider shares IPs across many tenants, your reputation depends on those neighbors. Ask the provider whether you can move to a dedicated IP at scale.
  • SMTP without proper SPF + DKIM + DMARC will land in spam at much higher rates than OAuth-connected mailboxes through major providers.

Capacity calculator

How many mailboxes do you actually need? The math is simple. Use it before you buy infrastructure.

The formula: monthly_volume / 1100 = mailboxes_required. Then mailboxes_required / 3 = domains_required, rounded up. Add 20 to 30 percent buffer.
Why 1100? 50 emails per mailbox per day (cold cap) times 22 working days per month = 1,100 emails per mailbox per month at safe steady-state.

Inputs

Recommendation

Per-mailbox monthly cap1,100
Required mailboxes (math)5
Required domains (cousin)2
Buffer mailboxes (25%)2
Total recommended7
Mailbox gap vs current+5
Domain gap vs current+1
Ramp duration if new4-6 weeks

Reference table: per-rep monthly volume

Cross-check the calculator output against the playbook's published reference tables.

Contacts/repStepsMonthly emails/repMailboxes/repDomains/rep
2503~75011
5003~1,50021
1,0003~3,00031
1,0005~5,00052
2,0003~6,00062
2,0005~10,000104
5,0003~15,000145
5,0005~25,000238

Warmup and limits

Even with perfect authentication, sending too much too fast from a new domain triggers spam filters. Patience compounds.

Warmup duration: 4 to 6 weeks

Allow new domains and mailboxes time to establish a sending baseline before scaling cold outbound. 4 to 6 weeks is the floor for safe steady-state sending.

The ramp ladder (per mailbox)

PhaseDaily volume per mailboxGate to proceed
Start (Week 1)10 to 15 emails/dayBaseline established. No immediate bounces.
Week 225 emails/dayBounce rate under 2%. Spam blocks near zero.
Week 3-440 emails/dayEngagement healthy (opens, replies).
Steady state (Week 5+)50 emails/dayAll metrics consistently in safe range.

Per-mailbox limits

SettingCold outbound defaultWarm or CRM-sourced
Max emails per mailbox per day50Up to 200 (with ramp, see Cold vs Warm)
Max emails per hour66 to 10
Delay between sends600 sec (10 min)300 to 600 sec
New domain starting volume≤200/day total domain≤200/day total domain
Domain scaling rateMax 2x previous weekMax 2x previous week
For larger teams: Do not raise per-mailbox limits. Add more mailboxes per sender and use domain rotation to distribute load. That is how you scale volume safely.

Data hygiene targets

Bounce rate
<2%
across sequences
Spam complaint rate
<0.1%
target
Warmup minimum
4-6weeks
new domain or mailbox
Open Apollo

Cold vs warm: the decision tree

When you (or your team) want to raise sending limits, walk this tree. Top to bottom. Stop at the first NO and follow the branch.

This play exists because customers ask for higher caps. The right answer depends entirely on whether contacts are cold outbound or warm and CRM-sourced. The tree forces that distinction.

Step 1: Are the contacts warm / CRM-sourced (not cold outbound)?

Warm = recipients who have engaged with your brand: visited your site, filled out a form, been customers, replied to past outreach.
Cold = net new prospects with no prior relationship.

Talk tracks for common scenarios

Customer asks to raise limits

"Totally, let's figure out the right number together. The key question is where your contacts are coming from. If these are inbound leads or people from your CRM, higher limits can absolutely make sense. If there is any cold outbound in the mix, we would want to handle that differently to protect your domain. Can you walk me through how contacts are getting into your sequences?"

Answer is cold outbound

"For cold outbound, the better path to more volume is more mailboxes rather than higher limits per mailbox. That is how you scale safely without reputation risk. Apollo makes it straightforward to set that up. Want me to walk you through the infrastructure model?"

Customer pushes back on conservative limits

"I hear you, 50 per day can feel restrictive. The reason we are conservative by default is that it is a lot easier to ramp up from a healthy starting point than to recover from a spam complaint spike. Once we confirm your auth is clean and your ramp history looks good, we can move that number. Let me check a couple things and come back with a concrete plan."

Cannot confirm cold vs warm

"I want to make sure I am giving you the right recommendation. Can you confirm: are there any sequences running to contacts who have not engaged with your brand before? Even a subset? That will help me give you the right guidance on limits."

Monitoring: what to watch and where

Deliverability is not a set-and-forget. It is a weekly rhythm.

Inside Apollo

Apollo provides deliverability views showing health by domain and mailbox, bounce and spam metrics, and sequence-level risk signals.

Navigate to: Sequences > Diagnostics

Recommended weekly rhythm

The four monitoring tools

ToolWhat it doesWhen to use
Inbox Placement Tests (Apollo)Send to seed addresses to see where messages land (Inbox vs Spam vs Promotions)Before volume increases. After any sudden performance drop.
Blocklist Detection (Apollo)Check whether your domain or IPs appear on common blocklistsWeekly check. Any time bounce rate spikes unexpectedly.
Google Postmaster ToolsMonitor domain reputation and spam rate with GmailOngoing. Every customer sending to Gmail addresses should have this set up.
Microsoft SNDSMicrosoft equivalent of Postmaster Tools for Outlook recipientsOngoing. Set up alongside Postmaster Tools.
Open Apollo
Apollo Knowledge Base:

Sample weekly review checklist

  1. Pull bounce and spam-block rates per domain and per mailbox from Apollo.
  2. Pull sequence performance: opens, replies, unsubscribes per active sequence.
  3. Check Google Postmaster Tools dashboard for domain reputation status (Bad, Low, Medium, High).
  4. Check Microsoft SNDS for any red flags on recent sending IPs.
  5. Review templates for spam-triggering patterns: too many links, image-heavy signatures, "offer" language.
  6. Run weekly Apollo Blocklist Detection check.
  7. Document anything outside thresholds. Pause and remediate before it gets worse.

Stakeholders: who does what

Deliverability is a shared responsibility. Knowing who owns each piece prevents weeks of back-and-forth.

IT Admin

Owns: DNS records (SPF, DKIM, DMARC), domain provisioning, tracking subdomain CNAME setup, ongoing DNS hygiene.

Bring them in when: Day 1 of any Apollo setup. Before any new sending domain goes live. Immediately when an active deliverability issue surfaces.

How to engage: Lead with business risk ("your reps' emails may be landing in spam"). Come with specific pre-diagnosed fixes ("here are the three DNS records that need updating"). Hand them just what is needed and why.

RevOps / Sales Ops

Owns: Apollo platform configuration, mailbox authorization, sending policies, sequence enrollment rules, suppression management, pause and clean decisions.

Bring them in when: During setup and ongoing governance. Whenever sequences are added, modified, or paused. Whenever bounce or spam rates breach threshold.

How to engage: They live in Apollo daily. Share the metrics dashboard and the proposed changes; they will execute.

GTM Leadership / VP Sales

Owns: Budget for new domains and mailboxes. Org-wide policy decisions. Trade-off calls between volume targets and deliverability investment.

Bring them in when: Scaling significantly (new headcount, new motion). After a deliverability incident. When infrastructure investment requires approval.

How to engage: Frame in business terms (revenue at risk, time to recover, cost of new mailboxes vs cost of lost reach).

Routing matrix

ScenarioPrimary stakeholderWhen to engage
New Apollo setup or onboardingIT AdminDay 1, before any sequences run
Adding new sending domainsIT AdminBefore domains go live
Sending limits, mailbox config, sequence settingsRevOps / Sales OpsDuring setup and ongoing governance
Volume strategy, infrastructure investmentGTM Leadership / VP SalesWhen scaling significantly or after a deliverability incident
Active deliverability issue (auth failure, blocklist)IT Admin + RevOps jointlyImmediately, do not wait
Apollo Knowledge Base for IT routing:

Industry benchmarks

Where you should be. Where you are. The gap is your work.

The hard numbers

Cold cap
50/mailbox/day
cold sending baseline
Warm cap (with ramp)
200/mailbox/day
CRM-sourced or inbound
Bounce rate target
<2%
across sequences
Spam complaint target
<0.1%
across sequences
Warmup minimum
4-6weeks
new domain or mailbox
Domain scaling cap
2x/week
max ramp rate
Per-hour cap
6/mailbox/hr
throttle ceiling
Send delay
600sec / send
between messages

Provider-side hard ceilings

ProviderSpam complaint ceilingBehavior at ceiling
Gmail0.3% triggers hard throttling. 0.1% is the sustainable target.Domain reputation drops to "Bad." Recovery takes 30-90 days of cleaner sending.
Microsoft0.1% target. Microsoft is generally stricter than Gmail.SNDS shows red. Increased rejections, delivery to junk folder.
Yahoo / AOL0.1% target. Aggressive enforcement.IP and domain blocking common.

Provider ceilings shift over time. Verify current values via Postmaster Tools (Gmail) and SNDS (Microsoft).

How to use this

Pull your current numbers from Apollo Diagnostics, Postmaster Tools, and SNDS. Compare against the table. Anything off-target is your remediation list.

When to escalate

Some problems cross the line from "we can fix this" to "we need help right now." Knowing the line saves time.

Escalate to Apollo Solutions if any of:

What to bring to the escalation

  1. Apollo Account ID and Team ID
  2. Affected sending domains (full list)
  3. Current bounce, spam, and reputation metrics (screenshots from Apollo, Postmaster, SNDS)
  4. Recent change log (any sequence launches, mailbox additions, volume increases in last 30 days)
  5. What you have already tried
  6. The specific question or decision you need help with
Pro tip: The Apollo Solutions team is most effective when given context, not problems. The more diagnostic work you do upfront, the faster the resolution.

Domain Rehabilitation Protocol

If a domain has tipped into bad reputation, recovery follows a structured ramp protocol: pause active sequences, fix the underlying authentication or list-hygiene issue, then re-warm volume gradually under monitoring. Apollo Solutions can guide the specific recovery path for your account.

Open Apollo
Apollo Knowledge Base:

Glossary & further reading

Plain-English definitions of every term in this guide.

SPF (Sender Policy Framework)

A DNS record that tells mailbox providers which servers are allowed to send email for your domain. Lives as a TXT record at the root of your domain.

DKIM (DomainKeys Identified Mail)

A cryptographic signature added to every outbound email. Mailbox providers verify the signature against a public key in your DNS to confirm the message has not been tampered with and really came from your domain.

DMARC (Domain-based Message Authentication, Reporting and Conformance)

Tells mailbox providers what to do when SPF or DKIM fails. Policies progress from p=none (monitor only) to p=quarantine (send to spam) to p=reject (drop entirely).

Tracking subdomain

A subdomain like track.yourcompany.com connected to Apollo via CNAME, used to track opens and clicks. Without this, opens and clicks come from a generic Apollo domain, which hurts deliverability.

Cousin domain

A separate domain spelled similarly to your primary. Example: primary yourcompany.com, cousin tryyourcompany.com. Used for cold outreach to keep your primary domain reputation safe.

Bounce rate

Percentage of emails that fail to deliver. Hard bounces (permanent failures, like bad addresses) damage reputation. Soft bounces (temporary, like full mailboxes) are less serious.

Spam complaint rate

Percentage of recipients who mark your message as spam. Mailbox providers use this as a signal of unwanted mail. Above 0.1% is risky; above 0.3% on Gmail triggers throttling.

Inbox Placement Test

A test that sends to seed addresses across mailbox providers to measure where your messages land: Inbox, Spam, or Promotions. Apollo includes this as part of the Deliverability Protection bundle.

Blocklist (DNSBL)

A list of IPs or domains flagged as senders of spam. Many mailbox providers consult these. Apollo's Blocklist Detection checks your domain against common blocklists.

Postmaster Tools

Free Google service at postmaster.google.com showing your domain's reputation with Gmail, plus spam rate, authentication, and delivery error trends. Set up immediately if you send to Gmail addresses.

SNDS (Smart Network Data Services)

Microsoft's equivalent of Postmaster Tools, at sendersupport.olc.protection.outlook.com. Free. Set up alongside Postmaster Tools.

Warmup

The 4-6 week period of gradually increasing sending volume from a new domain or mailbox. Lets mailbox providers establish a baseline trust score for the sender.

Waterfall enrichment

Apollo's process of running a contact through multiple data providers in sequence to find the most accurate and verified email address before sending. Reduces bounce risk.

Shared IP pool

Apollo's outbound infrastructure shares IP addresses across many customer tenants. Apollo manages the pool's health by removing abusive senders. You inherit shared reputation: act safe, the pool stays healthy.

Apollo Knowledge Base (verified URLs)

Every customer-facing Apollo Help Center article relevant to this guide:

TopicApollo KB Article
Domain authentication (SPF, DKIM, DMARC) + Sequence Diagnostics tabDiagnose and Fix Domain Authentication on Apollo
Custom tracking subdomain CNAME setupSet Up a Custom Tracking Subdomain URL
Mailbox warmup processUse Email Warmup to Improve Email Deliverability
Mailbox connection (Google, Microsoft, SMTP)Link Your Mailbox to Apollo
Apollo-managed mailbox optionGenerate a Domain and Mailbox to Reach Prospects
Disconnect a mailboxUnlink a Mailbox from Your Apollo Account
Deliverability Suite (bounce, spam, sending issues)Use the Deliverability Suite to Identify and Resolve Sending Issues
Best practices overviewEmail Deliverability Best Practices

Inbox Placement Tests, Blocklist Detection, and Email Capacity and Utilization Reporting are recent shipping features. Coverage for those is currently folded into the Deliverability Suite article above.

Other source documents