Asked how long this takes, the honest answer has two parts: the work is small, and the elapsed time is not, because most of it is waiting for evidence and for other people.
Effort against elapsed time
| Phase | Effort | Elapsed |
|---|---|---|
| Publish reporting across the estate | A day | A day |
| Protect non-sending domains | A day, generated | A day, plus a fortnight of confirmation |
| Read reports, build the sender inventory | A few hours a week | Four weeks minimum, a quarter if seasonal |
| Align each third-party sender | An hour of your time each | Weeks each, in parallel, gated on the vendor |
| Move to quarantine, observe, move to reject | An hour per step | Eight weeks, and not compressible |
| Total for a primary domain | Two to three weeks of work | One to two quarters |
The gap between those columns is the entire management problem. Two weeks of effort spread over two quarters reads as inactivity to anyone tracking it by the week, which is why the waiting periods have to be stated as plan items rather than as delays.
Money
- Reporting: free to low. A mailbox costs nothing. A processor is a modest annual subscription and saves real time on a large estate.
- Vendor tier upgrades: the real cost, and unpredictable. A platform that gates custom return-path or customer-domain DKIM behind an enterprise tier can cost more than everything else combined.
- MTA-STS: a certificate and a static host. Effectively free if you already run web infrastructure.
- BIMI: hundreds to thousands annually, plus a trademark you may not have. This is the one line item worth challenging.
What to say when asked for a date
"Reporting is live this week, and forty parked domains are protected by Friday. The primary domain reaches quarantine in about eight weeks and reject about eight weeks after that — assuming the marketing platform can align on our current contract, which I'll know by Thursday. If it can't, that date moves to the renewal."
The dependency is the estimate
A date given without naming what it rests on will be treated as a commitment and missed. Naming the single vendor that determines it converts a missed date into a known contract decision, which is somebody else’s to make and far easier to escalate.