# Why a Company Email Signature Matters: Law, Trust and Setup Source: https://srvscripts.com/guides/company-email-signature-importance/ Updated: 2026-10-15 Publisher: srvScripts (https://srvscripts.com/) Every employee sends dozens of emails a day, and each one ends with a signature. Across a company that adds up to thousands of small documents a week carrying your name, your legal details and your contact routes. Done well, the signature is free, consistent branding and a quiet trust signal. Done badly, it can break company law in some countries, leave customers unsure who they are dealing with, and push mail towards the spam folder. This guide explains why the signature matters and how to set one up properly for everyone. **Short answer:** A company email signature matters for four reasons. In the UK and Germany, business emails must carry the company’s legal details (registered name, registration number, registered office and more). A consistent signature helps customers recognise genuine mail and gives them a known phone number for checking payment requests. It puts the right contact details in front of every recipient. And it is the most widely seen piece of branding a company has. Keep it short and text-based with one small hosted logo. Set it centrally with an Exchange Online mail flow rule, a Google Workspace footer or a signature service rather than leaving it to each user, and test it for size and deliverability before rollout. In short: why the signature matters and how to set it up. ## What a company signature actually does | Job | What it means | What goes wrong without it | | --- | --- | --- | | Legal identity | Shows the registered company name and registration details where the law requires them | Penalties or warning letters in some countries; recipients cannot tell which legal entity they are dealing with | | Contact and routing | Name, role, direct phone number and website on every message | Customers dig through old threads for a number, or call the wrong office | | Recognition and trust | The same layout on every genuine message from the company | Staff and customers have no “normal” to compare a fake message against | | Brand | Logo, colours and name in every conversation | Ten staff, ten different signatures, some with an old logo or a number that no longer works | | Required statements | Short regulatory lines your sector expects | A statement a regulator or contract requires is missing from customer emails | | Campaigns (optional) | A small banner for an event, a launch or a survey | Nothing breaks, but you miss the cheapest audience you have | ## The legal side: what some countries require This section is general information, not legal advice. The rules depend on your country and your company type, so check with your accountant or lawyer. ### United Kingdom The [Company, Limited Liability Partnership and Business (Names and Trading Disclosures) Regulations 2015](https://www.legislation.gov.uk/uksi/2015/17/contents) require a company to show its registered name on its business letters, notices and other official publications and on its websites (regulation 24). On business letters, order forms and websites it must also show the part of the UK where it is registered, its registered number and its registered office address (regulation 25). Regulation 29 says a reference to a type of document includes one in electronic form, which is why these rules are applied to business email. If a letter names any director other than in the text or as the person signing, it must name every director (regulation 26). These regulations replaced the Companies (Trading Disclosures) Regulations 2008, which many older guides still cite. ``` Jane Smith | Support Lead Example Hosting Ltd Registered in England and Wales, company number 01234567 Registered office: 1 High Street, London AB1 2CD ``` ### Germany German company law requires company details on business letters “of whatever form” sent to a specific recipient, and this is applied to business email. For a GmbH, § 35a GmbHG lists the legal form and registered seat, the register court and register number, all managing directors (Geschäftsführer) and, if there is one, the chair of the supervisory board. Registered traders (e.K.) have a similar rule in § 37a HGB, and public companies in § 80 AktG. The register court can enforce this with a penalty payment (Zwangsgeld) of up to €5,000 at a time (§ 79 GmbHG for a GmbH, § 37a(4) HGB for traders), and competitors may try a warning letter (Abmahnung). A link to your imprint page is not enough; the details belong in the email itself. ### Everywhere else Many countries have no specific signature rule, but sector rules (finance, legal, health) and contracts can still require identity or authorisation statements in correspondence. Whatever applies to you, the signature is the cheapest place to meet it, because a centrally managed signature is added to every message automatically. ## Trust: signatures and invoice fraud Business email compromise is one of the costliest online crimes. The FBI’s Internet Crime Complaint Center recorded 21,442 business email compromise complaints and close to $2.8 billion in reported losses for 2024 ([summary of the IC3 2024 report](https://www.nacha.org/news/fbis-ic3-finds-almost-85-billion-lost-business-email-compromise-last-three-years)). Most of these attacks are an email that looks like it came from a colleague or a supplier, asking for a payment or a change of bank details. Be clear about what a signature can and cannot do here: - **It does not prove who sent a message.** Anyone can copy a signature from a real email in a minute. Correctly configured SPF, DKIM and an enforced DMARC policy help receiving systems detect and reject unauthorised use of your exact domain, although each receiver decides how strictly to act on them. They do not stop look-alike domains or messages sent from a genuinely compromised mailbox. Check yours with the [DMARC checker](/tools/dmarc-checker/), the [DKIM checker](/tools/dkim-checker/) or the all-in-one [email domain health check](/tools/email-domain-health-check/). - **It does set a standard.** When every genuine message carries the same centrally managed signature, a message from a look-alike domain, with a slightly wrong layout or an unfamiliar mobile number, stands out more. - **It gives customers a way to check, if they use it correctly.** Payment and bank-detail changes should be confirmed by calling a number already on file, never a number taken from the email that asks for the change. Say so on your invoices. - **Central control matters when people leave or change roles.** A server-side signature updates as soon as the directory changes, so old job titles and phone numbers stop circulating. - **Leave out scanned handwritten signatures.** An image of a real signature in every email is easy to copy onto forged documents. ## Signatures and deliverability Spam filters read the whole message, signature included, and a signature repeats on every email the company sends. Most problems come from a few habits: - **URL shorteners.** Shortened links are common in spam and hide the real destination. Link to your own domain instead. - **Links to many different domains.** Every social icon adds another domain. Keep to the two or three that matter to your customers. - **Images attached to every message.** An embedded (inline attached) logo makes every reply carry an attachment and grows long threads. A small image hosted on your own HTTPS website is lighter. Some mail apps block remote images until the reader allows them, so the signature must still read well without the image. - **Image-only signatures.** A signature that is one big picture has no readable text, is invisible to screen readers and looks like a pattern spam filters dislike. Put the text in text. - **Size.** Gmail clips messages larger than about 102 KB and shows “Message clipped” ([MxToolbox explains what counts](https://mxtoolbox.com/dmarc/email/email-clipping)). Long threads in which every message repeats a heavy HTML signature get there faster. - **Tracking from signature marketing tools.** Click tracking and banner statistics can be useful, but they add redirect links and remote images. Turn off what you do not use. After changing a signature, send a message to the free [email deliverability test](/tools/email-deliverability-test/). It checks SPF, DKIM, DMARC, blocklists and content in one go. ## What to put in it, and what to leave out | Include | Notes | | --- | --- | | Full name and job title | As they appear in your directory, so a server-side signature can fill them in | | Company legal name | The registered name, not only the brand name, where the law requires it | | One direct phone number | In international format, for example +44 20 7946 0000 | | Website | Your own domain, with no shortener | | Registration details | Company number and registered office (UK), or register court, register number and managing directors (Germany) | | One small logo | Hosted on your HTTPS website, a few KB in size, with alt text | | A short required statement | Only if your sector or contracts require one | Leave out inspirational quotes, several fonts and colours, a row of every social network, scanned handwritten signatures, and long confidentiality disclaimers unless your lawyer asks for one. A simple HTML signature with inline styles works in Outlook, Gmail and Apple Mail, because many mail apps remove `