Yes - you can use DMARC (Domain-based Message Authentication, Reporting and Conformance) with HubSpot. The domains DMARC policy should have SPF and DKIM both set to "relaxed" alignment, and you'll want to take the following steps:
- Connect the domain as an Email Sending Domain.
- Add include:shared.hubspot.com to that domain's SPF policy. Generally, this change can be made by updating a TXT or SPF record, depending on your nameserver. If possible, we strongly suggest consulting with your IT department to fully understand the ramifications this change will present.
As you may know, DMARC is used to tell receivers how to use existing authentication methods like SPF or DKIM to verify the owner of the domain. By default all HubSpot customers are on HubSpot's shared emailer servers, which are hosted on hubspot.com, so mail won't be in alignment with your own domain's policy by default.
Please note if you purchase a Dedicated IP, our Email Team can help configure it to be compatible with your DMARC specifications. If you would like to purchase HubSpot’s Dedicated IP Service, please contact your HubSpot Customer Success Manager.