Set up for you, then re-checked
Search and buy a domain in the app, or connect one you own. SPF, DKIM, DMARC (p=none to start) and the MX that brings replies back are written for you, re-checked until they verify, and each domain sends through its own identity.