Email Deliverability for SaaS: A Practical Guide

Deliverability is boring until your password reset emails start landing in spam. Then it's suddenly very interesting.

This guide covers what actually matters for SaaS email deliverability, without the paranoia-inducing complexity that most articles pile on.

The Basics: DNS Authentication

Three DNS records matter. Set them up correctly once and mostly forget about them.

SPF (Sender Policy Framework)

SPF tells receiving servers which mail servers are allowed to send email for your domain. It's a TXT record that lists authorized senders.

Your email provider will give you the specific value. It looks something like:

v=spf1 include:_spf.provider.com ~all

Common mistake: Having multiple SPF records. You can only have one. If you use multiple email services, combine them into one record.

DKIM (DomainKeys Identified Mail)

DKIM adds a cryptographic signature to your emails. The receiving server can verify the email wasn't tampered with and actually came from you.

Your email provider generates DKIM keys. You add their public key as a DNS record. They sign outgoing emails with the private key.

Setup: Follow your provider's instructions. It's usually adding a CNAME or TXT record with a specific selector name.

DMARC (Domain-based Message Authentication)

DMARC tells receiving servers what to do when SPF or DKIM fail. It also enables reporting so you can see who's sending email as your domain.

Start with a monitoring-only policy:

v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com

After monitoring for a few weeks and confirming everything's working, move to enforcement:

v=DMARC1; p=quarantine; rua=mailto:dmarc@yourdomain.com

Or strict rejection:

v=DMARC1; p=reject; rua=mailto:dmarc@yourdomain.com

Sender Reputation

Email providers (Gmail, Outlook, etc.) track your sending reputation. Good reputation = inbox. Bad reputation = spam folder.

What builds good reputation:

• People open your emails. High open rates signal wanted mail.
• People click links. Engagement indicates value.
• People reply. Strongest signal of legitimacy.
• Low bounce rates. You're sending to valid addresses.
• Few spam complaints. People aren't marking you as junk.

What damages reputation:

• High bounce rates. Sending to invalid addresses looks spammy.
• Spam complaints. Even 0.1% complaint rate is concerning.
• Spam traps. Old addresses turned into honeypots.
• Sudden volume spikes. Going from 100 to 10,000 emails overnight looks suspicious.
• Inconsistent sending. Sporadic large bursts then silence.

Practical Guidelines

For transactional email

Transactional emails (password resets, receipts) have naturally high engagement. People expect and open them. Your main risks:

• Sending to bad addresses. Implement email verification at signup.
• Slow delivery. Use a provider known for speed (Postmark, Resend).
• Getting mixed with marketing. Consider separate infrastructure if you send high marketing volume.

For marketing email

Marketing emails face more scrutiny. Guidelines:

• Only email people who opted in. Never buy lists. Never scrape addresses.
• Make unsubscribe easy. One click. No login required.
• Clean your list regularly. Remove bounced addresses immediately. Remove chronically unengaged subscribers periodically.
• Warm up new sending domains. Start with small volumes to engaged subscribers, gradually increase.
• Send consistently. Regular sending patterns build reputation better than sporadic blasts.

Email Deliverability Platform Comparison

How Email Deliverability Works

Email deliverability operates on a reputation-based system similar to credit scores. Every sending domain and IP address accumulates reputation based on how email providers (Gmail, Outlook, Yahoo) perceive your sending patterns. High reputation means emails reach inboxes. Low reputation means spam folders or blocking. This reputation constantly updates based on recent engagement—today's performance matters more than last year's.

The reputation system works like this: when you send email, receiving servers check your domain's reputation before accepting the message. They look at authentication (SPF, DKIM, DMARC records), historical engagement rates (do subscribers open and click your emails?), complaint rates (how many mark you as spam?), and bounce rates (what percentage doesn't deliver?). Good reputation signals legitimacy—your emails are wanted and expected. Bad reputation signals spam—unwanted, unsolicited, or low-quality messages.

Engagement is the primary reputation driver. When subscribers open, click, and reply to your emails, providers learn your content is valued. This positive feedback loop improves deliverability. When subscribers ignore, delete, or report your emails as spam, providers learn your content isn't wanted. This negative feedback loop damages deliverability. This is why purchased lists destroy deliverability—disengaged subscribers who never opted in hurt your reputation even if they don't actively mark you as spam.

Modern platforms like Sequenzy ($19/mo + free trial) and Postmark actively manage infrastructure reputation on your behalf. They maintain IP addresses with strong reputations, process bounces and complaints automatically, and provide tools to monitor and improve deliverability. But platform quality only matters half as much as list quality—the best infrastructure can't overcome a permission-less list. Authentication, list hygiene, and engagement matter more than any technical optimization.

What Your Email Provider Handles

Good email providers (Sequenzy, Resend, Postmark, Customer.io) handle:

• IP reputation management
• Bounce processing
• Feedback loop processing (spam complaints)
• List-Unsubscribe headers
• Automatic suppression of problem addresses

You don't need to manage these yourself. Pick a reputable provider and let them handle the infrastructure.

Testing Deliverability

Before major campaigns:

1. Send test emails to your own Gmail, Outlook, Yahoo accounts
2. Check if they hit inbox or spam
3. Use tools like Mail-Tester.com for detailed analysis
4. Check your domain reputation at Google Postmaster Tools (if you send significant volume to Gmail)

Red Flags to Watch

• Open rates dropping suddenly. Might be deliverability, might be content. Investigate.
• Bounce rates above 2%. Something's wrong with your list hygiene.
• Spam complaints above 0.1%. Review your sending practices.
• Emails going to spam for specific providers. Check authentication and content for that provider's guidelines.

What Doesn't Matter Much

Things people worry about that rarely cause actual problems:

• Email length. Gmail doesn't penalize long emails.
• Images vs text ratio. Old spam filter logic, mostly irrelevant now.
• Certain "spam trigger words." "Free" in your subject line won't tank deliverability.
• Sending time optimization. Matters more for opens than delivery.

Frequently Asked Questions

The Bottom Line

1. Set up SPF, DKIM, and DMARC correctly
2. Use a reputable email provider
3. Only email people who want to hear from you
4. Make unsubscribe easy
5. Remove bad addresses promptly

That's 90% of deliverability. The remaining 10% is edge cases you'll handle as they come up.