Subdomain vs root domain for cold email: which one protects your main brand
Sending cold from mail.yourcompany.com instead of yourcompany.com is a real strategic call. Here is when each one wins.
Rejwan Nirob·May 23, 2026·6 min readMost cold-email teams default to the root domain - yourcompany.com - and never reconsider. This is the right call for some teams and the wrong call for others. The trade-off is about reputation isolation: who carries the risk if cold sends go sideways.
What sending from a subdomain actually changes
You publish separate SPF, DKIM, and DMARC records for the subdomain (cold.yourcompany.com), and cold-email reputation accrues to the subdomain independently from the root. If the cold campaign hits a blacklist, the root domain - and all the transactional mail going through it - is unaffected. The subdomain takes the hit alone.
The downside: subdomains start with no inherited reputation. The first 30 days are slower because mailbox providers treat the subdomain as a new sender, regardless of how long the root domain has been around.
When subdomain wins
- You also send transactional mail (receipts, notifications, password resets) from the root domain - subdomain isolates the cold risk
- Your root domain is your primary brand identity - "we are NotionLabs.com" - and reputation damage there is more expensive than to the subdomain
- You run multiple outbound experiments in parallel - one subdomain per campaign isolates results
- You have an existing root-domain reputation worth protecting - subdomain quarantines anything experimental
When root domain wins
- You do not send transactional mail from the root and have no other reputation to protect
- Your team is small enough that one domain serves all sending needs
- You want the slight initial-trust boost from sending from a brand-recognised domain
- You run cold-email outbound at low scale (under 50 mailboxes) and the isolation cost outweighs the benefit
The dedicated-domain alternative
The third option that most cold-email operators eventually adopt at agency scale: separate brand-aligned domains specifically for outbound. yourcompany-mail.com, yourcompany-team.com, outreach-yourcompany.com. Each one looks like a real company variant to receivers, while keeping cold reputation entirely separated from the main brand domain.
This is the pattern Inboxlee uses by default - we register dedicated outbound domains, not subdomains of customer brands. The brand association is preserved without the subdomain's slow ramp.
What about DKIM alignment if I use a subdomain?
DMARC alignment works across subdomains if you use relaxed alignment (aspf=r, adkim=r) - the default in Inboxlee's DMARC policy. Strict alignment (aspf=s, adkim=s) requires exact-match domains and is unusual. Relaxed is fine for cold email and lets the subdomain inherit parent-domain auth where it matters.
Inboxlee defaults to dedicated brand-aligned cold-email domains rather than subdomains of customer roots - same reputation isolation benefit without the subdomain cold-start penalty. The wizard surfaces all three options at checkout: root, subdomain, or dedicated.
Provision a domainFrequently asked
Should I send cold email from my root domain or a subdomain?
Subdomain (cold.yourcompany.com) if your root domain also sends transactional mail (receipts, notifications, password resets) that you cannot afford to put at risk. Subdomain isolates cold-sending reputation from the root. Root domain only if your team is small, there is no transactional reputation to protect, and cold scale is under 50 mailboxes.
Will sending from a subdomain hurt my cold-email deliverability?
Slightly, in the first 30 days. Mailbox providers treat subdomains as new senders regardless of how long the root domain has existed. You inherit no reputation. After the 14-day warmup the gap closes; by day 30 a subdomain performs identically to a root domain at the same volume. The trade-off is initial ramp time for permanent reputation isolation.
What is the difference between a subdomain and a dedicated outbound domain for cold email?
Subdomain (cold.yourcompany.com) shares the parent registration and SSL with the root. Dedicated outbound domain (yourcompany-mail.com) is a fully separate registration that looks like a brand variant. Dedicated outbound is what most cold-email operations use at agency scale - same reputation isolation, no subdomain cold-start penalty, and no risk of subdomain conflict with future product launches at the root.
Does DKIM alignment work across subdomains?
Yes, with relaxed alignment (aspf=r, adkim=r) - which is the default in Inboxlee's DMARC policy. Relaxed alignment treats the subdomain as aligned with the parent for DMARC purposes. Strict alignment (aspf=s, adkim=s) requires exact-match domains and is unusual for cold email. Relaxed is the operator-safe default.
Does Inboxlee provision subdomains or new dedicated domains for cold email?
Dedicated brand-aligned domains by default. The wizard registers domains like yourcompany-mail.com or yourcompany-team.com rather than subdomains of the customer root. This gives the same reputation isolation benefit as a subdomain without the subdomain cold-start penalty, and preserves the customer's root reputation for transactional and brand mail.