Email Agent DNS records reference
Every DNS record Staffify asks you to add, and why. All records go on the subdomain you registered (e.g. `agent.yourdomain.com`). Your root domain is untouched.
_amazonses.agent.yourdomain.comSES domain verification token. Proves to Amazon that you own this domain and lets Staffify verify it as a sending identity.
<token>._domainkey.agent.yourdomain.comDKIM keys used by SES to sign every outbound email so receiving servers (Gmail, Outlook) can verify the mail really came from your domain. Without DKIM, replies land in spam.
agent.yourdomain.comInbound MX record. Points to `inbound-smtp.eu-north-1.amazonaws.com`. Any mail sent to *@agent.yourdomain.com is routed to Staffify's SES for the agent to process.
mail.agent.yourdomain.comMAIL FROM subdomain for SES bounce handling. Improves DMARC alignment. Points to `feedback-smtp.eu-north-1.amazonses.com`.
mail.agent.yourdomain.comSPF record on the MAIL FROM subdomain: `v=spf1 include:amazonses.com ~all`. Authorizes SES to send on behalf of this subdomain.
agent.yourdomain.comApex SPF record on the subdomain: `v=spf1 include:amazonses.com ~all`. Defense in depth for receivers that check SPF against the From-header domain instead of the envelope.
_dmarc.agent.yourdomain.comDMARC policy: `v=DMARC1; p=none; rua=mailto:[email protected]`. Starts in monitor-only mode; you can tighten to `quarantine` or `reject` later.
Root domain stays untouched
All records above are scoped to your subdomain. Your root domain (yourdomain.com) has its own MX, SPF and DMARC that stay in place, so they still route your normal business mail to your existing mailhost.
One account per domain
A domain can be verified by only one Staffify account at a time. If you see "This domain is not available", the domain is already in use by another account. Requests that are not verified within 7 days, or that failed, expire automatically, so you can simply add the domain again.