# Email Outbound: register and verify sending domains

Register company domains for outbound email, verify SPF/DKIM/DMARC, and optionally share a parent entity’s domains.

Register your company’s domains for outbound email so Cortena can later send from **your** domain (SPF/DKIM). Child entities can share a parent’s domains instead of setting each one up again.

**Who this is for:** Workspace admins who manage integrations and want outbound mail domains ready for workflow and transactional sending from your brand.

## 1. Open Email Outbound

1. Go to **Settings → Integrations → Email**.
2. Open **Email Outbound**.
3. Click **Enable outbound email** until status shows **Connected**.

The panel explains: add domains for outbound email. Verified domains can later be used when sending from Cortena workflows.

You need permission to **Manage integrations**.

## 2. Add and verify a domain

1. Enter a **Domain** (for example `billing.example.com`) and click **Add domain**.
2. Status starts as **Pending DNS**. Expand **Show DNS setup (SPF, DKIM, DMARC)**.
3. At your DNS provider, create the records exactly as shown (**SPF (sender policy)**, **DKIM (message signing)**, **DMARC (policy)**). Use **Copy** for host and value.
4. Wait for propagation (minutes to 48 hours), then click **Verify**.
5. When checks pass, status becomes **Verified**. The row also shows `SPF ✓` / `DKIM ✓`.

Both **SPF** and **DKIM** must pass before the domain can send. If an apex SPF record already exists, merge Cortena’s include into it instead of replacing the whole record.

To remove a domain, use **Remove** (confirm: *Remove this outbound domain?*). **Disconnect** removes the Cortena connection; domains are not deleted from the mail platform.

## 3. Share domains from a parent entity

In multi-entity setups, a child that is not yet configured can reuse an ancestor:

1. Choose **Use parent outbound email**.
2. Pick the **Parent tenant** and click **Use shared connection**.
3. A banner shows that the workspace is using outbound email domains from the parent.

Inherited domains are view-only: no Add, Verify, or Remove on the child. Use **Remove shared connection** when you want to register local domains instead.

If the parent link breaks, Cortena asks you to remove the link and reconnect.

## 4. What this does today vs later

| Today | Later (with verified domains) |
| --- | --- |
| Platform mail (sign-in links, invitations, notifications) already sends through Cortena outbound mail on Cortena’s address | Workflow and product emails can send **from your verified domain** |

Registering domains now prepares DNS ownership. It does not change the From address of every Cortena email until your workspace uses those domains for sending.

## Tips and limitations

- No separate feature flag. Email Outbound appears in the Email integrations catalog when you can manage integrations.
- Child inherit is only offered when an ancestor already has Email Outbound connected.
- Verification can take up to 48 hours after DNS changes.

## Quick reference

| Task | Where |
| --- | --- |
| Enable | **Settings → Integrations → Email → Email Outbound** → **Enable outbound email** |
| Add domain | **Domain** + **Add domain** |
| DNS records | **Show DNS setup (SPF, DKIM, DMARC)** → **Verify** |
| Inherit parent | **Use parent outbound email** → **Use shared connection** |
| Disconnect local | **Disconnect** |
| Drop parent link | **Remove shared connection** |