Where nonprofit email marketing goes from here: what to know first

What to take away

Deliverability: DMARC, one-click unsubscribe, BIMI

In February 2024, Google and Yahoo began requiring bulk senders to authenticate their mail. The line they drew was 5,000 messages a day to Gmail accounts. A charity above it without SPF, DKIM and DMARC records risks rejection or the spam folder.

Check your sending domain in Google Postmaster Tools before your next campaign. It reports spam complaints and delivery errors by domain, free. Google asks senders to hold the complaint rate under 0.1% and enforces a hard limit at 0.3%. Microsoft SNDS covers Outlook.com addresses.

One-click unsubscribe followed in June 2024, spelled out in RFC 8058. Senders add List-Unsubscribe and List-Unsubscribe-Post headers, and Gmail and Yahoo render the link at the top. A donor who wants out gets out, whether or not your template offers the button.

BIMI is the next step for larger programs. Brand Indicators for Message Identification puts your logo beside the subject line, and it requires DMARC at enforcement plus a Verified Mark Certificate from DigiCert or Entrust. Certificates typically cost about $1,000 a year, quoted between roughly $900 and $1,500 depending on issuer and term.

Microsoft has published sender requirements for high-volume mail to Outlook.com, with enforcement phasing in during 2025. Record monitoring from dmarcian, Valimail or Postmark's free DMARC Digests catches a broken record early.

Opens stopped meaning what they meant

Apple Mail Privacy Protection, on by default since September 2021, preloads images in Apple Mail. Every preloaded message registers as an open. If most of your list reads on an iPhone, your open rate partly measures Apple's servers.

Apple's iOS 18.2, released in December 2024, sorted Mail into Primary, Transactions, Updates and Promotions. Mail in the Promotions pile waits. Apple Intelligence also writes a summary line above the message, so donors may read that before your first sentence.

Judge a campaign on clicks, gift completions, replies and unsubscribes. Those still require a person. Keep opens as a rough delivery signal and nothing more.

This matters for testing. A subject-line test judged on opens is close to a coin flip. Judge it on clicks, or move the test to the donation page where the outcome is money.

Gmail sorts most bulk mail into the Promotions tab, and Gemini, Google's assistant inside Gmail, can summarize a message before anyone opens it.

Consent rules: CASL, Law 25, Bill 96

Canada's Anti-Spam Legislation requires consent before a charity sends a commercial electronic message, and it sets a time limit on implied consent, commonly two years from a donation or inquiry. Track the date and the basis for each consent, not just a checkbox. Express consent does not expire on the same clock.

Quebec's Law 25 adds privacy duties for organizations operating in the province. The right to data portability and privacy-by-default settings took effect on September 22, 2024. Bill 96 raises French-language obligations for communications there. Both reach fundraising email.

In the United States, CAN-SPAM sets the floor: a working unsubscribe in every commercial message, honored within 10 business days. Charities get no blanket exemption.

This is not legal advice. Confirm your consent records and privacy practices with a qualified Canadian charity lawyer, or check the CRA's Guidance CG-013 on fundraising and receipting. Rules vary by jurisdiction and change.

Monthly giving is where retention lives

A monthly donor who stays three years gives more and costs less to keep than three annual donors acquired to replace them. The number to watch is monthly giving churn: how many recurring gifts stop each month.

Track churn by cohort, not in aggregate. A program losing 4% of monthly donors a month is not the same as one losing 1%, even if both raise the same total this quarter. Reactivation of lapsed monthly donors is usually cheaper than acquisition, so test a win-back sequence before you buy a new list.

For a fuller set of recurring questions, see common nonprofit email marketing questions.

Payment costs belong in that math. Stripe publishes a nonprofit rate of 2.2% plus 30 cents per successful card charge in the US, and PayPal's confirmed charity rate matches it. General commercial processing often runs near 2.9% plus 30 cents, so confirm which rate your account is on.

Software costs spread just as widely. Mailchimp's free tier covers 500 contacts, with paid plans from roughly $13 a month. Constant Contact's entry email plan starts near $12 a month. Klaviyo is free to 250 contacts, with paid plans from about $20 a month.

Donor CRMs such as Bloomerang, Neon One and Bonterra quote by contact count and modules, so ask for the annual figure. Salesforce's Power of Us program gives eligible nonprofits 10 free Sales Cloud licenses.

Accessibility and privacy are now procurement questions

The W3C's information and relationships guidance explains that visual structure must also exist in code, so a screen reader can read your donation form as a form. Test the live page, not the mockup.

The W3C's privacy principles warn against pushing privacy work onto the individual. Apply that to your data flows, then check the law that governs you. The European Accessibility Act's duties began applying to many digital services on June 28, 2025.

Keep event records for access, changes and failures, as CISA's logging guidance describes. Logs show what happened, not whether a campaign worked.

When you assess whether your own data is good enough to decide on, the GAO data reliability guide frames quality against intended use. It will not certify your dataset.

How to act on a trend without wasting a quarter

Run each candidate trend through the same short test before it touches production.

Watch one normal send path and one failure path. Preserve the inputs and the decision. Set a review date.

Common questions

Which trend should a small charity act on first?

Authentication. It is free to set up, it affects every message you send, and a rejected appeal email costs more than any subject-line test. Confirm your SPF, DKIM and DMARC records with whoever manages your domain, then move DMARC to enforcement once your reports look clean.

Do open rates still tell us anything?

Barely. Apple's preloading means many opens are automatic, and iOS 18.2 filed much of your mail under Promotions. Use opens to spot a sudden collapse in delivery, and use clicks, gifts and replies to judge whether a campaign worked.

How do we know if a trend applies to us?

Check the primary source and your own list size. Google's and Yahoo's bulk-sender rules apply above 5,000 messages a day, and CASL consent windows depend on how each donor relationship began. If the source does not clearly cover you, treat it as a watch item rather than a mandate.

Where do we find help if our program is stuck?

Some teams need an outside sender or strategist. Compare nonprofit email marketing agencies on named clients, deliverability experience and contract terms, and read our overview of nonprofit email marketing before you brief anyone.