Guanacos Tech
ES
Book a Consultation
Google Workspace, email deliverability and Google Cloud
We fix
Paste your domain and in 30 seconds you’ll know exactly what’s broken. Then we fix it for good, and keep it fixed.
Free · 30 seconds · no signup
Book a 30-min call
InboxPrimaryInvoice #1042 is ready
Your Company 9:41 AM
Hi there, the October invoice is attached. Reply to this email with any questions.
Authentication spf=pass dkim=pass dmarc=pass
Q4 rollout checklist
Operations team 8:15 AM
Shared drives are mapped. 2-Step Verification becomes required on Monday.
Authentication spf=pass dkim=pass dmarc=pass
Ticket 3381 resolved
Support desk Yesterday
The shared sales calendar now shows for everyone on the team.
Authentication spf=pass dkim=pass dmarc=pass
October payroll approved
Finance Yesterday
Approved in Sheets. A PDF copy is saved in the Finance shared drive.
Authentication spf=pass dkim=pass dmarc=pass
Onboarding call notes
Client success Mon
Notes from the Meet call are in the shared doc, next steps at the top.
Authentication spf=pass dkim=pass dmarc=pass
Weekly report for yourcompany.com
DMARC reports 7:02 AM
Workspace, the billing tool and the newsletter platform all pass. Nothing unknown is sending as you.
Authentication spf=pass dkim=pass dmarc=pass
Your review call is booked
Guanacos Tech Tue
Thursday at 10:00. We walk through your DNS, your DMARC reports and your Workspace settings.
Authentication spf=pass dkim=pass dmarc=pass
MTA-STS is now enforced
IT admin Oct 2
Mail sent to yourcompany.com now has to arrive over TLS. Reports go to the admin mailbox.
Authentication spf=pass dkim=pass dmarc=pass
November newsletter
To: Customers 10:05 AM
Sent from news.yourcompany.com with a one-click unsubscribe header.
Authentication spf=pass dkim=pass
Re: Invoice #1042
To: Accounts payable 9:12 AM
Thanks, payment is scheduled for Friday.
Authentication spf=pass dkim=pass
Welcome to the team
To: New hire Yesterday
Your Workspace account is ready. Sign in and turn on 2-Step Verification first.
Authentication spf=pass dkim=pass
Nothing in spam
Mail that authenticates with SPF, DKIM and DMARC lands where it should.
Check your domainHow the inbox is actually decided
Authentication
SPF, DKIM and DMARC can all be published in your DNS and still not align on the mail you actually send. “We have DMARC” means nothing on its own. What counts is whether it passes in the live headers landing at Gmail.
Presence isn’t protection.
The 2024 rules
Since February 2024, Gmail and Yahoo reject bulk mail that isn’t authenticated with SPF, DKIM and DMARC, and they hold your spam-complaint rate under 0.3%. Setups that worked for years quietly started bouncing.
The bar is higher than your last audit.
Reputation
Rewriting subject lines won’t save a domain with no DMARC and a cold IP. Inbox placement is decided by authentication, sending reputation and list hygiene, long before a single word of content is scored.
Fix the plumbing, not the prose.
What we do
We rebuild SPF, DKIM, and DMARC from the ground up. Ramp DMARC from monitor-only to enforcement without losing a single legitimate send. Get off blocklists. Set up BIMI when you're ready. Then keep watching, so it stays fixed.
Shared drives cleaned up. External sharing under control. Super-admin hygiene. Onboarding and offboarding that actually runs. The kind of work you only notice when it stops being a fire. Moving off Microsoft 365 or cPanel? Here is how a Google Workspace migration runs.
Google Cloud setups for small teams: Cloud Run, Firestore, only the IAM you need. Gemini, Claude, or open-source models wired into Sheets, Slack, your support inbox. Built to run in production.
Migrations, admin and security hardening, email deliverability, and Gemini rollout. Done right, on schedule, with no surprises.
Gemini Enterprise, AI automations, infrastructure modernization, and on-prem to cloud migrations that keep running after we hand them over.
Selected work
Migration
Moved a professional services team into Google Workspace with staged cutover planning and verified mailbox data.
Outcome: zero mailbox data loss; users back to work Monday 9am.Deliverability
Resolved SPF, DKIM, and DMARC conflicts damaging inbox placement and domain reputation across outbound mail.
Outcome: DMARC p=reject in 6 weeks; bounce rate cut to under 0.5%.Cloud modernization
Refined a cloud deployment into a simpler, observable platform with secure service boundaries and automation-ready structure.
Outcome: release cadence weekly; cost down 40% in one quarter.Google Cloud
Certified Professional Cloud Architects who design, migrate and run Google Cloud for teams that cannot afford a science project. Small footprint, least-privilege access, a bill you can explain.
Enterprise AI
Search and assistants grounded on your own documents, on your tenant, with access controls that hold.
Automation
Document extraction, support-inbox agents and data pipelines wired into the tools your team already uses.
Infrastructure
Cloud Run, GKE and managed databases replacing hand-managed servers, with observability from day one.
Migration
Assessment, landing zone, lift-and-shift or re-platform per workload, and a phased cutover with minimal downtime.
Data
Operational data and SaaS exports modelled in BigQuery and served in Looker Studio, or answered by Gemini in plain language.
Governance
Least-privilege IAM, secure service boundaries, budgets and alerts, and rightsizing reviews that keep the bill small.
The work behind the work
A reply that lands in the inbox is worth more than any dashboard. We read your DNS, your headers, and your Admin logs before we touch a record. DMARC at p=reject is a milestone, not a setting you flip and walk away from. We don't hand over slide decks. We ship the thing, then stay until it holds.
What clients say
5.0 average rating across client reviews.
"Amazing work. The team knows everything about Google Workspace. They are very patient and clear when they explain the process and the steps that need to be taken."
"The team was fantastic to work with: knowledgeable, fast, efficient and excellent communicators."
"Happy with how the team handled this task. They split my GSuite accounts as requested and ensured everything transferred without hiccups. They took the time to explain the process and answer every question along the way."
"The team's proficiency in managing email systems was evident from the beginning. They approached the task with a level of expertise and attention to detail that was truly impressive. Every part of the process was in good hands."
From the blog
Gmail
Admin consoleAdd the two headers one-click unsubscribe needs, sign them so Gmail trusts them, and build an endpoint that ends a subscription on a single POST.
GmailAdmin consoleTell Gmail's 4.7.28, 4.7.27 and 450 4.2.1 deferrals apart, find which identifier got rate limited, and clear the queue without losing any mail.
GmailWork out how much of your open rate is machines, which numbers Apple and Gmail took away, and what to measure instead before you prune a list.
Run the free deliverability check. Two seconds to paste your domain, thirty seconds to know what's wrong.
Thanks for reaching out. We've sent a confirmation to . Check your inbox in the next few seconds. We'll personally reply within one business day.
Want a free deliverability check while you wait? → Run the troubleshooter
