If you're noticing your open rates dropping or emails landing in spam, pay attention. In 2026, Google has tightened its sender requirements again, and a new tool called the AI Security Add-on is becoming essential for Enterprise users.
The new AI Security Add-on
Launched recently, this add-on for Google Workspace uses privacy-preserving AI models to automatically classify and protect sensitive files in Google Drive. But more importantly for email admins, it enhances spam and malware defenses in Gmail.
It acts as a second layer of defense, identifying complex phishing attempts that standard filters might miss. If you handle sensitive financial or data assets, this add-on ($10/user/month) is a recommended upgrade.
DMARC is no longer optional
We've said it before, but it bears repeating: If you send bulk emails (5,000+ per day), you must have a DMARC policy in place.
- SPF & DKIM: Must be valid.
- DMARC: Must be set to at least
p=none(monitoring), but ideallyp=quarantineorp=reject. - One-Click Unsubscribe: Marketing emails must support RFC-compliant headers for easy unsubscribing.
Don't know your DMARC status? Use our Free Deliverability Troubleshooter to check your risk score instantly.