Fixed-scope add-on · B2B

Professional email on your domain

We configure Cloudflare DNS + Microsoft 365 so you can send and receive as [email protected] — with DKIM, DMARC, and a Gmail deliverability check. You keep every account; we never ask for your passwords — scoped invites on a short kickoff call, then we finish async.

Tab through the offer — full text stays on the page for search engines.

What we deliver

One domain · one Microsoft 365 Business Basic mailbox · tested and documented.

DNS & domain

Connect your domain to Microsoft 365 (Domain Connect or manual DNS). MX, SPF, autodiscover — mail routes correctly.

Mailbox

Primary address on your domain (e.g. hello@, studio@). Display name set for professional outbound mail.

Deliverability

DKIM enabled, DMARC published, Gmail “Show original” triple-PASS (SPF + DKIM + DMARC) on a test send.

  • Handover note: where to sign in, default From address, and what we changed in DNS.
  • Typical client time: one 20–30 minute access call, then we finish setup async.
  • Not included: website build, migration of old mail archives, multiple mailboxes, Google Workspace, ongoing IT support.

Three-step process

1

Kickoff + access

20–30 min call · Cloudflare Member + temporary M365 admin for [email protected].

2

We configure

Same or next business day: DNS, mailbox, DKIM, DMARC, tests — no call while we work.

3

Handoff

Written summary · you revoke our access · 7-day good-faith fix if something’s wrong.

Full requirements checklist

We never ask for this

  • Your Microsoft or Cloudflare password (by email, chat, or form)
  • Your MFA / Authenticator backup codes or SMS codes sent to us offline
  • Permanent admin access after handoff (unless you explicitly buy managed support)
  • Payment card details for your subscriptions (you pay Microsoft and Cloudflare directly)

You must provide — shared access (default)

  • Cloudflare: invite [email protected] as Member on the zone (DNS edit).
  • Microsoft 365: add the same address as Global Administrator for up to 48 hours.
  • 20–30 min kickoff call — we walk you through the two invites live.
  • Deposit or signed quote paid before the kickoff call.

You must provide — accounts & ownership

  • Domain — registered; you are the legal owner.
  • Cloudflare account — DNS hosted there (you remain owner).
  • M365 tenant — Business Basic ×1 on your company card.
  • Billing country chosen correctly at signup (cannot change later).
  • Desired email address — e.g. [email protected].
  • Outbound display name — company legal or trading name.
  • Personal Gmail for deliverability test (private to us).

Fallback: screen-share setup

  • One 60–90 minute call — you stay logged in and approve MFA prompts.
  • €349 fixed fee — fewer scheduling slots.

MFA & access details

Your MFA stays on your accounts. Ours stays on ours.

  1. Kickoff call (20–30 min): Member invite + temporary Global Admin for [email protected].
  2. We accept invites using our own MFA — no prompts while we work later.
  3. Async setup: DNS, mailbox, DKIM, DMARC, tests.
  4. Handoff + revoke: summary email; you remove our access when satisfied.
MethodWhat you doOur access
Cloudflare memberDNS edit on your zone only.Add MX, DKIM, DMARC; remove after go-live.
M365 Global Admin (48 h)Time-boxed admin on studio@.Domain connect, mailbox, Defender DKIM.
Screen-shareYou drive; we guide.Same outcome; more calendar time.