All ESPs
Marketing
HubSpot
HubSpot Marketing Hub uses a connected email domain with DKIM CNAMEs (hs1, hs2) and an optional SPF include. The CRM ties email engagement directly to contact records.
DNS records to publish
| Type | Host | Value |
|---|---|---|
| CNAME | hs1-<id>._domainkey | <id>.dkim.hubspotemail.netDKIM key 1 |
| CNAME | hs2-<id>._domainkey | <id>.dkim.hubspotemail.netDKIM key 2 |
Authentication setup
SPF
Optional; HubSpot aligns DKIM by default once connected.
DKIM
Publish the two CNAMEs HubSpot generates in the connected-email setup.
DMARC
Standard ramp; HubSpot's DKIM aligns by default so reaching p=reject is straightforward.
Deliverability tips
- Use the HubSpot 'graymail' status to suppress unengaged contacts automatically.
- Avoid sending from an exact-match domain on day one — start with a subdomain to compartmentalise reputation.
- If you also send through Salesforce Marketing Cloud or another tool, separate the sending subdomains.