Year-end email marketing audit: a 30-point checklist for your program

What is an email marketing audit?

An email marketing audit is a once-a-year review of your whole email program — list, consent, deliverability, automations, templates, content, segmentation, compliance, tools and results — to find what is broken, what is costing you money and what to fix first. It is not a pre-send check of one campaign. It looks at twelve months of sending and asks whether the program as a whole is healthy.

The end of December is the natural moment to do it: the holiday peak is over, you have a full year of data, and anything you find can go straight into the January plan. This checklist gives you 30 checks with a clear pass mark for each, a scoring table to total your result, and a priority order for what to fix first in January.

Key takeaways

• Audit at program level once a year (large senders: every 6 months). Score each of the 30 checks 0, 1 or 2 for a total out of 60.
• Fix in this order: anything that blocks delivery or breaks the law, then list and consent, then broken automations, then segmentation, content and costs.
• Hard thresholds exist: Gmail and Yahoo expect a spam complaint rate below 0.3% (aim for under 0.1%), SPF, DKIM and DMARC for bulk senders, and one-click unsubscribe honored within 2 days.
• Since Apple Mail Privacy Protection (2021), open rates are inflated. Compare clicks, conversions and revenue per email year over year, not opens.
• Write down what you score this December. Next year's audit becomes a comparison instead of a guess.

How is an annual audit different from a campaign checklist?

A campaign checklist asks "is this email ready to send?"; an annual email marketing audit asks "is the program that sends it still working?". Both matter, and they should not be mixed. Rendering, links and typos in a single send belong in a pre-send routine such as our HTML email QA checklist. The audit below looks at patterns over a year: who you are mailing, with what permission, through which setup, at what cost and with what result.

How do you prepare for the audit?

Preparation takes about an hour and saves a day of guessing. Before you start the 30 checks, gather:

• A full contact export with subscription date, source and last activity (open or click) per contact.
• Campaign statistics for this year and last year: sends, deliveries, bounces, clicks, unsubscribes, complaints, and conversions or revenue if you track them.
• A list of every active automation, with its trigger and the date it last sent.
• Your DNS records for the sending domain (SPF, DKIM, DMARC) and any DMARC reports you receive.
• Invoices for every email-related tool, seat and add-on.
• One spreadsheet with a row per check and three columns: score (0, 1, 2), evidence, owner.

Scoring rule for every check: 2 = passes the threshold, 1 = partly or not measured, 0 = fails or does not exist.

The 30-point email marketing audit checklist

1. List health

1. Active share of the list. What percentage of contacts opened or clicked in the last 12 months? Pass: more than 60% engaged. Below 40% scores 0.
2. Bounce rate. Average hard bounce rate across the year's campaigns. Pass: under 2%, with hard bounces removed automatically after the first occurrence.
3. Inactive policy applied. Is there a written rule for contacts who never engage, and was it actually run this year? Pass: yes, with a re-engagement step before removal. Our guide to a sunset policy for inactive subscribers explains how to set one. For day-to-day hygiene, see how to keep your email list clean.

2. Consent records

4. Proof of consent per contact. For a random sample of 20 contacts, can you show when, where and how each one subscribed? Pass: 20 out of 20. GDPR article 7 requires you to be able to demonstrate consent.
5. Every signup source documented. List each form, checkout box, event import and API feed that adds contacts. Pass: all known, all with clear opt-in wording, none pre-ticked.
6. No unexplained imports. Were any lists uploaded this year without a recorded source (trade-show badges, purchased or "partner" lists)? Pass: none, or each one documented with a lawful basis.

3. Deliverability and authentication

7. SPF, DKIM and DMARC. All three published and aligned with the From domain. Pass: DMARC at least at p=none with reports read, ideally moving to quarantine. Gmail and Yahoo require all three from bulk senders (5,000+ messages a day) since February 2024, and Microsoft applies the same rule to Outlook.com since May 2025. See email authentication and the Gmail and Yahoo requirements.
8. Spam complaint rate. Pass: under 0.1% per campaign on average, never above 0.3%, the ceiling Google's sender guidelines say bulk senders must stay under.
9. Sending reputation over the year. Did delivery, bounces and complaints stay stable, or did they degrade after a peak such as Black Friday? Pass: stable or improving. For a deeper deliverability-only check, use our method to evaluate your email sending health.

4. Automations

10. Every automation still fires. For each active workflow, check the date of the last send. Pass: every trigger fired in the last 30 days, or has a known reason not to. A welcome series that stopped in June after a form change is the most common finding in any audit.
11. Content inside automations is current. Open every automated email. Pass: no past dates, old prices, discontinued products, expired codes or former employees' names.
12. Automation performance reviewed. Pass: you know the click rate and conversions of each workflow and have retired the ones nobody reads. In Mailpro™, automated emails come with statistics per scenario, which makes this check quick.

5. Templates and brand

13. Template inventory. How many templates are in use? Pass: a small, named set (newsletter, promotion, announcement, transactional) instead of dozens of one-off copies.
14. Brand consistency. Pass: current logo, colors, fonts, footer, legal address and social links in every template, including automated and transactional ones.
15. Mobile and dark mode. Pass: every template tested this year on a phone and in dark mode, with readable text and tappable buttons.

Most of the numbers in this audit — bounces, clicks, unsubscribes, complaints per campaign and per year — are available in one place with Mailpro's global emailing statistics.

6. Content performance

16. Top and bottom 10 campaigns. Rank the year's campaigns by click rate. Pass: you can explain what the top 10 have in common (topic, format, offer, day) and what the bottom 10 got wrong.
17. Clicks, not opens. Pass: your reporting uses click rate, click-to-open rate and conversions as main metrics, because Apple Mail Privacy Protection has inflated opens since September 2021.
18. Frequency matched to engagement. Pass: unsubscribe rate stays under about 0.5% per campaign even in your busiest month. A spike in November or December means the holiday cadence was too heavy for part of the list.

7. Segmentation

19. Segments in active use. Pass: at least three segments used regularly (for example customers vs prospects, engaged vs less engaged, by language or region).
20. Segmented sends outperform full-list sends. Compare click rates. Pass: segmented campaigns beat full-list blasts; if not, the segments are not meaningful.
21. Data fields still filled. Pass: the fields your segments rely on (country, language, last purchase, interest) are filled for most contacts and still updated by your forms and integrations.

8. Compliance (GDPR, CAN-SPAM)

22. Unsubscribe works everywhere. Pass: a visible link in every email, one-click unsubscribe headers for bulk mail, and opt-outs applied within 2 days (Gmail and Yahoo). CAN-SPAM sets a legal maximum of 10 business days.
23. Sender identification. Pass: a real From name, a valid postal address in the footer (required by CAN-SPAM) and subject lines that match the content.
24. Data processing in order. Pass: privacy notice up to date, data processing agreement signed with your email provider, and you know in which country your contact data is stored. GDPR fines can reach €20 million or 4% of worldwide annual turnover; CAN-SPAM penalties exceed $53,000 per email.

9. Tooling and costs

25. Cost per 1,000 emails sent. Divide the year's total email tool cost by sends. Pass: you know the number and compared it with last year.
26. Paying for people who never read. If your platform bills by contact, what share of the bill covers inactive addresses? Pass: under 20%, or a pricing model based on sends so that dormant contacts do not inflate the bill.
27. Overlapping tools and seats. Pass: no duplicate tools (two form builders, two SMS providers), no unused user seats, and every add-on used at least once in the last quarter.

10. KPIs vs last year

28. Net list growth. New subscribers minus unsubscribes, bounces and removals. Pass: positive, from documented opt-in sources.
29. Engagement trend. Click rate and click-to-open rate compared with last year. Pass: stable or up. A fall of more than 20% needs a cause on paper.
30. Business result. Revenue, leads or bookings attributed to email, per email sent or per subscriber. Pass: measured with UTM tags or your shop's attribution, and compared with last year.

How do you score your email marketing audit?

Add up your points per area: each area has three checks worth up to 2 points, so 6 points per area and 60 in total. The table shows what to look at first in each area.

How to read the total:

• 50–60: healthy. Keep the routine, pick two improvements for the year.
• 35–49: solid but leaking. Fix every 0 in the first quarter.
• Under 35: at risk. Delivery or compliance problems are likely costing you results already. Fix before you scale up sending in 2027.

One rule overrides the total: a 0 on checks 4, 7, 8 or 22 (consent proof, authentication, complaints, unsubscribe) is urgent whatever your overall score, because it can block delivery or create legal exposure.

What should you fix first in January?

Fix what blocks delivery or breaks the law first, then what quietly loses subscribers, then what improves results. A practical order for the first weeks of January:

1. Week 1 — blockers. Publish or correct SPF, DKIM and DMARC; repair any broken unsubscribe link or header; stop mailing any list without a recorded source.
2. Week 2 — list and consent. Remove hard bounces, run a re-engagement campaign for contacts inactive 6–12 months and apply your sunset rule to the rest. Fix forms that do not record source and date.
3. Week 3 — automations. Restart dead triggers, update content with old dates and prices, retire workflows nobody reads. Check the welcome series first: it reaches every new subscriber from the January signup wave.
4. Week 4 — segments, templates and costs. Rebuild two or three segments that matter, consolidate templates, cancel unused seats and duplicate tools.
5. Then — set 2027 targets. Turn this year's scores into three measurable goals and put them into your quarterly email marketing plan.

Keep the spreadsheet. Next December, the same 30 checks take half the time and show exactly what improved.

Frequently asked questions

How often should you do an email marketing audit?

Once a year is the standard for small and mid-size businesses, ideally in December or January. Large or high-volume senders often audit every six months, with deliverability and complaint rates watched monthly in between.

How long does an email marketing audit take?

For a small business with one list and a handful of automations, plan half a day for data gathering and half a day for the 30 checks. Larger programs with several brands or languages need two to three days.

What is a good score on this checklist?

50 or more out of 60 is a healthy program. Between 35 and 49, fix every check that scored 0 in the first quarter. Under 35, start with authentication, consent and unsubscribe before anything else.

Can I audit my email marketing myself or do I need an agency?

Most of the 30 checks need access and time, not specialist skills, so an in-house audit works well. An agency or deliverability specialist helps when complaint rates are high, DMARC reports show failures you cannot explain, or the program spans many brands.

Which metrics matter most in an email marketing audit?

Spam complaint rate, bounce rate and the share of engaged contacts tell you whether you can keep reaching the inbox. Click rate, conversions and revenue per email tell you whether the program is worth running. Open rates are the least reliable since Apple Mail Privacy Protection.