Additional service signals
Published SPF, DKIM and discovery records can reveal configured links to major platforms beyond incoming mail.
Mail-signing setup
Google Workspace
! Non-European provider
TXT google._domainkey DKIM key published
A provider-specific DKIM record is published for Google Workspace. This shows configured mail-signing infrastructure, but not that every message currently uses it.
Current DNS record ↗Provider setup guide ↗
Sender authorisation
Google Workspace
! Non-European provider
SPF include:_spf.google.com
Google Workspace is authorised to send email for this domain. The SPF entry can be unused or stale and does not reveal the configured data region.
Current DNS record ↗Provider setup guide ↗
Sender authorisation
Salesforce
! Non-European provider
SPF include:_spf.salesforce.com
Salesforce is authorised to send email for this domain. The SPF entry can be unused or stale and does not reveal the configured data region.
Current DNS record ↗Provider setup guide ↗
This is a targeted check, not a complete zone inventory. Generic Google and Microsoft verification tokens are ignored because they do not prove product use or a data flow. DNS normally cannot list arbitrary subdomains or customer-chosen DKIM selectors, including Salesforce selectors. Missing signals are not proof that a provider is unused.