Brand the recipient experience

Branding puts your logo, accent color, display name and support contact on the secure-message notification and the reading page, and serves both from a subdomain you own, so a patient or client who has never heard of PXCMail still recognizes the message as yours.

Before you start

Owner or Admin role, on Hosted Pro or Gateway with the branding add-on.
Your logo as PNG or SVG, ideally on a transparent background, and your brand’s accent color as a hex value.
A subdomain you can create a CNAME for, such as secure.yourfirm.com, and whoever manages your DNS.
A support phone number or address for recipients who cannot open a message.

Steps

Console → Organization → Branding. Upload the logo and set the display name recipients will see, usually your practice or firm name as it appears on your door.
Choose the accent color. The console checks contrast against the page background and the code-entry button and warns you if text would be hard to read; pick a darker shade if it does.
Enter the support contact. It appears on the notification, the reading page and the withdrawn and expired pages.
Enter your subdomain. The console shows the CNAME record to add at your DNS host; add it; the console re-checks every 5 minutes and issues the certificate automatically once the record is visible.
Preview the notification and the reading page in English and Spanish, then Save. New secure messages use the branding from that moment; the change is recorded in the audit log.

Verify

Send yourself a test message with [SECURE] in the subject. The notification arrives from your display name and domain, the “Open secure message” link points at your subdomain with a valid certificate, and the reading page shows your logo and color.

Troubleshooting

The CNAME check keeps failing. Cause: DNS has not propagated, or the record was created as an A record or with a trailing typo. Fix: compare the record with the one shown in the console; the DNS wizard re-checks every 5 minutes, so wait and check again.
The certificate stays pending. Cause: a CAA record at your domain restricts which authorities may issue certificates. Fix: ask your DNS admin to allow issuance for the subdomain.
The logo looks blurred or cropped. Cause: a small raster file scaled up, or a wide lockup squeezed into the header. Fix: upload SVG, or a larger PNG.
Recipients still see pxcmail.com links. Cause: they are opening a notification sent before you saved the branding, or the message was a resend of an older one. Fix: nothing to change; new messages use the new domain, and old links keep working until they expire.

Example

Lakeside Family Dental, a 12-person office on Google Workspace, set the display name to “Lakeside Family Dental”, uploaded its logo and entered the front desk number as the support contact. The office manager asked their IT provider to add the CNAME for secure.lakesidedental.com; the certificate was issued within the hour. Treatment plans and pre-authorizations sent from frontdesk@ and insurance@ now open on a page that matches the practice website, and the front desk no longer fields “is this email real?” calls.

FAQ

Does branding change how TLS-delivered mail looks?

No. Mail delivered with TLS lands in the recipient’s inbox unchanged. Branding applies to locked delivery notifications and the reading page only.

Can I brand each domain in my organization differently?

One branding profile applies to the organization. If you run two brands, use a neutral display name and logo, or contact support about a second organization.

What do recipients see without branding?

A notification from your name and domain, and a reading page with your organization name in PXCMail styling on a pxcmail.com address.

Is branding available on Gateway and Hosted?

It is included with Hosted Pro and available on Gateway as the branding add-on.

Still stuck? A human answers within 15 minutes on chat, 1 hour by email during business hours (24/7 for outages).