Update for Vendor and Third-Party Email Services

March 4, 2026
To: University Employees
From: University Information Technology Services
Subject: Update for Vendor and Third-Party Email Services
Date: Mar 04, 2026

On March 10, the university will implement stronger email authentication (DMARC) protocols to help protect our community from phishing and other email-based cybersecurity threats.

This update allows only authorized systems to send email on behalf of the University of Arizona.

Using vendor email services

Units that use external vendors or software tools (e.g. Constant Contact, Eventbrite) to send email from an @arizona.edu or @email.arizona.edu address should confirm those accounts are properly configured to avoid delivery issues after March 10.

If this applies to you

UITS has worked with many university vendors to bring their systems into DMARC compliance in anticipation of this change. Units may confirm their systems are set up correctly by testing the external vendor’s system or registering an external vendor for DMARC. Step-by-step testing and registration instructions are available in the Email - DMARC Authentication knowledge article. Note: Units sending email through Trellis Marketing Cloud and Trellis Events (Salesforce) are not affected.

After March 10, any new vendors your unit engages to send email on behalf of the university will need to be properly configured through UITS.

Support and resources

For questions about DMARC, support is available through the following options: