Whatever your size,
the same rules apply.

Inboxes, regulators and your customers do not grade on company size. Find your situation below: what is at stake, the problems we see most often, and where to start.

Why it matters

Large or small, the rules and the stakes are the same

Inboxes, regulators and your customers do not grade on company size. What changes is what a mistake costs you.

Inboxes

Authentication required

Since February 2024, Gmail and Yahoo require SPF, DKIM and DMARC from bulk senders, and Outlook followed in 2025. Unauthenticated mail is filtered or rejected.

Accessibility

Accessibility required

Since 28 June 2025, the European Accessibility Act applies to many online stores in the EU, micro-enterprises aside. Every blocked customer is a lost sale.

Cookies

Article 82

The CNIL and its European counterparts check websites that drop trackers without consent (Article 82 of the French Data Protection Act, GDPR), and fine organisations of every size, from global groups to small businesses.

Six profiles

Where do you recognise yourself?

01

Large companies

Dozens of tools send email and drop tags in your name. One misconfigured service is enough to send a whole domain to spam, or to put your brand in front of the regulator.

Recommended

Typical situations
  • Several departments, tools and agencies sending email from the same domain
  • A DMARC policy stuck on "none" for years, with nobody reading the reports
  • Tags added by different teams that fire before consent

02

SMEs

No in-house expert, but the same obligations as the big players. A quote that lands in spam or a banner that tracks before consent costs you sales and exposes you.

Recommended

Typical situations
  • Quotes and invoices that land in your customers' spam folder
  • A cookie banner installed by a former provider and never checked since
  • No time to follow the new requirements of Gmail, Yahoo and Microsoft

03

Online stores

Accessibility is now expected at checkout, every conversion your ad tools miss weakens your campaigns, and every unanswered request is a cart that goes elsewhere.

Recommended

Typical situations
  • Checkout steps that cannot be completed with the keyboard alone
  • Purchases missing from your ad tools, so campaigns learn from partial data
  • Customer requests that wait hours before anyone answers

04

Freelancers & individuals

A showcase site, a portfolio, your own domain for email: your quotes and replies must arrive, and as soon as your site uses analytics or ads, visitor consent applies to you too.

Recommended

Typical situations
  • Emails from your own domain flagged as suspicious
  • Analytics or ads on your site without a proper consent banner
  • A contact form whose messages you see too late

05

Agencies

Your clients' compliance and deliverability reflect on you. Hand the technical part to a specialist and deliver a test report you can share with each client.

Recommended

Typical situations
  • Dozens of client domains to authenticate, each with its own DNS host
  • Clients asking for proof that consent and tracking are compliant
  • Technical tasks that eat into your team's billable time

06

Associations & startups

Donation calls, newsletters, sign-up forms: your messages must arrive and the people who trust you deserve proper consent, from day one, without hiring a team for it.

Recommended

Typical situations
  • Donation calls and newsletters that never reach the inbox
  • Sign-up forms that collect personal data from day one
  • A small team, without anyone in charge of technical topics

Not sure where to start?
Tell us about your site.