Your SendGrid authentication link
Your CSM will provide your SendGrid authentication link. Share it directly with your IT team — they’ll use it to complete the DNS setup.What is this?
Deeto sends emails on your behalf to invite customers and prospects into the platform — things like interview requests, feedback campaigns, and reference invitations. For these emails to come from your domain (e.g.,yourname@yourcompany.com) instead of a generic Deeto address, we need to verify that your company authorizes Deeto to send on your behalf.
This is done by adding a few DNS records to your domain — the same kind of setup you’d do for tools like HubSpot, Salesforce, or Mailchimp. It’s a standard, one-time process handled by your IT team.
Why does this matter?
- Better deliverability — emails are less likely to land in spam when they come from an authenticated domain
- Higher engagement — your contacts see a familiar sender address, not a third-party domain
- Brand trust — reference invitations look and feel official, which increases response rates
What needs to happen?
Your IT team needs to add 4 DNS records (CNAME and TXT records) to your domain’s DNS settings. These records tell email providers that Deeto (via SendGrid) is authorized to send email on behalf of your domain.You don’t need to understand DNS to complete this step. Simply share this page (or copy the IT ticket template below) with your IT or DevOps team, along with the SendGrid authentication link your CSM provides.
What your IT team will see
When they open the SendGrid authentication link:1
Review the DNS records table
They’ll see a table of DNS records — each row has a Type (CNAME or TXT), a Host value, and a Data value.
2
Add records to your DNS host
They add each record to your domain’s DNS host (e.g., GoDaddy, Cloudflare, AWS Route 53, Google Domains, etc.).
3
Verify
Once all records are added, they click “I’m Done” and SendGrid will verify the records.
DNS changes can take anywhere from a few minutes to 48 hours to propagate, though most complete within 1–2 hours.
Copy-paste IT ticket template
Use this template to submit a request to your IT or DevOps team:Frequently asked questions
Will this affect our existing email?
Will this affect our existing email?
No. These DNS records only authorize Deeto’s email provider (SendGrid) to send on your behalf. They do not change how your regular email works.
Is this secure?
Is this secure?
Yes. SPF, DKIM, and DMARC are industry-standard email authentication protocols used by virtually every SaaS platform that sends email. This is the same process used by tools like HubSpot, Salesforce, and Mailchimp.
What if we already have SPF/DKIM records?
What if we already have SPF/DKIM records?
That’s normal — most companies do. Your IT team can add the new records alongside existing ones. SendGrid’s records won’t conflict with what you already have.
What if our IT team has questions?
What if our IT team has questions?
They can reach out to your Deeto CSM directly, or refer to SendGrid’s documentation. Your CSM can also join a quick call with IT if needed.
How do I know it worked?
How do I know it worked?
Once your IT team clicks “I’m Done” on the SendGrid page and the records are verified, your CSM will confirm that authentication is complete and emails are ready to send from your domain.