Your brand

Every page your customers land on — a public form, a booking page, an invoice, a document request, a signature, the client portal — can carry your identity instead of ours. Set it once in Brand; every public page uses it.

Set your brand

Open Brand in the sidebar (under Manage). It is a full page with live previews on the right, so you can see where each change lands before saving.

Identity

• Display name — used in page titles and, in future, client-facing email.
• Logo — upload an image (PNG, JPEG, GIF, WebP, AVIF, up to 10MB) or paste an https:// URL.
• Favicon — optional; falls back to your logo.
• Cover image — a banner for booking pages.

Look

• Accent colour — a #rrggbb hex, used for buttons, focus rings and links.
• Page background — light or dark.
• Font — chosen from a set we guarantee renders correctly everywhere.
• Page language — pin public pages to one language, or leave it to follow the visitor's own.

Contact & legal

• Support email — where replies to client-facing email go.
• Privacy policy / Terms — linked from consent fields.
• Links — up to five outbound links shown on booking pages.

One brand, three levels

Your brand is inherited, so you only ever set what differs:

1. Whole organisation — the default for everything.
2. A single venture — use the picker at the top of the Brand page. Fill in only the fields that differ; leave the rest empty and they inherit.
3. A single form or booking page — its own branding still wins over both.

So a multi-venture operator can set one logo for the business and override just the accent colour on one venture, without restating anything else.

Save before switching

The venture picker is disabled while you have unsaved changes, so a half-made edit can't be lost by switching layers.

What it changes

Every page your clients land on carries it — logo, colours, and intro copy:

• Public forms and booking pages.
• Invoice payment pages.
• Document requests — the checklist you send clients to upload things.
• E-signature pages.
• The client portal — both the sign-in page and the signed-in home.

Plus, on all of them:

• The browser tab title and the favicon.
• How a shared link previews in chat and email.
• "Powered by Kordox" — shown on the Free plan only. Any paid plan gets the page to itself.

Your own domain

Serve your forms and booking pages on your own hostname, so your customer sees forms.yourcompany.com rather than an address with our name in it. Available on Pro (one domain), Business (five) and Enterprise (unlimited).

Brand → Custom domains → add the hostname you want. We show you the exact DNS records to create at your own provider, each labelled with what it does:

Record	What it's for
CNAME	Points traffic at us
TXT	Proves you own the domain
TXT	Issues the HTTPS certificate

Add them, press Check again, and the status moves from Waiting for DNS to Issuing certificate to Live.

If your DNS is on Cloudflare, the CNAME must be DNS only

This is the one that catches everybody. A proxied record (orange cloud) is flattened to Cloudflare's own IP addresses, so the CNAME we are checking for is never visible to anyone — and nothing in the resulting "waiting for DNS" tells you that is the reason. Click the cloud until it is grey.

The same applies to any proxying DNS provider.

Two certificate records, added separately

You will usually see two _acme-challenge TXT records with the same name and different values. That is deliberate: we request a certificate from two authorities, so your pages keep working if one has an outage. DNS allows several TXT records under one name, and both must exist at the same time. Add them as two separate records — if you add one and then edit it to hold the other value, you end up with one token and validation waits forever. ::: DNS changes can take up to an hour to reach us; the certificate then usually takes a few minutes and needs nothing from you.

The status line always says what to do next. If something is wrong it names the record rather than telling you it is "pending".

We keep watching after it goes live

Certificates fail to renew and DNS records get tidied away during unrelated work. We re-check every fifteen minutes, and if a live domain stops working you get a Triage signal naming it — rather than finding out when a customer says your form is down.

Turnstile does not run on a custom domain

Turnstile can only appear on hostnames registered with us, so it is off there. Your forms stay protected by their submit token, proof-of-work and rate limiting. This is a deliberate trade, not an oversight.

Removing a domain stops those pages being served on it immediately.

Client emails

Booking confirmations, invoices, document requests, signature links and portal sign-in links carry your brand too — your logo, your colour, your name in the sign-off.

Who they come from depends on two things:

	Sent as
Verified sending domain + Business/Enterprise	Acme Consulting <noreply@acme.com>
Anything else	Acme Consulting via Kordox <noreply@kordox.com>

Brand → Client emails shows exactly which of these you are on, and what is missing if it is the second.

We will not send from an unverified domain

Sending as your domain without correct SPF/DKIM records is worse than sending as ours: it does not fail loudly, it lands in spam. So until a domain is verified, mail goes out as "via Kordox" rather than risk your client never seeing it. Add a domain under Settings → Email → Custom sending domain.

Replies go to your support email when you set one, and to the meeting host on booking mail.

Sign-in links and team invites for your own staff always come from Kordox — a login email should visibly come from the platform you are logging in to.