Email Setup — Google Workspace + Cloudflare

How to stand up @firstchoicelegalfunding.com mailboxes. Domain DNS = Cloudflare · Mailboxes = Google Workspace.

Big picture: You sign up for Google Workspace, prove you own the domain, then paste a handful of DNS records into Cloudflare so mail routes to Google. You pay only for real people's inboxes — the shared addresses (intake@, info@, etc.) are free. Total cost below: ~$14/month for two people.
⚠ Cloudflare gotcha — read first. In your Cloudflare dashboard go to Email → Email Routing. If it is enabled, disable it (and delete any MX records it added). Cloudflare Email Routing installs its own MX records that will override Google's and silently break incoming mail. Google must be the only MX.

The address plan

AddressTypeCostWho reads it
joseph@User mailboxPaid seatYou
devinsuarez@User mailboxPaid seatDevin
intake@GroupFreeYou + Devin (new applications)
underwriting@GroupFreeYou + Devin (case docs / UW)
docs@GroupFreeYou + Devin (signed contracts)
info@Alias on joseph@FreeYou
Two terms: An alias is just an extra name on an existing inbox (info@ → lands in your inbox). A Group is a shared address with members, so intake@ delivers to both you and Devin — better for anything you both need to see. Both are free; only real people cost money. The domain is .com — note the address you typed for Devin ended in .co, which is a different (someone else's) domain; use .com.

1 Start the Google Workspace signup

2 Verify you own the domain (Cloudflare TXT)

Google will show you a verification string that looks like google-site-verification=xxxxxxxx. Add it in Cloudflare under DNS → Records → Add record:
Type
TXT
Name
@ (means the root domain)
Content
google-site-verification=…paste the value Google gives you…
TTL / Proxy
Auto · DNS only (TXT can't be proxied — nothing to toggle)
Back in Google, click Verify. (DNS can take a few minutes to propagate.)

3 Add the MX record so mail reaches Google

In Cloudflare DNS → Records, add this one MX record (modern Google Workspace uses a single MX):
Type
MX
Name
@
Mail server
smtp.google.com
Priority
1
TTL
Auto
If Google's setup wizard instead shows you five MX records (ASPMX.L.GOOGLE.COM + four ALT… servers), that's the older format — just enter exactly what the wizard shows. Either way: delete any other/leftover MX records (e.g. from Cloudflare Email Routing or a prior host) so Google is the only mail destination.

4 Add SPF (stops your mail going to spam)

SPF tells the world that Google is allowed to send mail as your domain — critical so your offer/decline letters land in inboxes, not junk.
Type
TXT
Name
@
Content
v=spf1 include:_spf.google.com ~all
You may have only one SPF record per domain. If a v=spf1… TXT already exists, edit that one instead of adding a second.

5 Create the people and the shared addresses

In the Google Admin console (admin.google.com):
Keep intake@firstchoicelegalfunding.com exact — it's already wired into your Law-Firm Funding Intake Form.html, so applications will flow to that Group automatically once it exists.

6 Turn on DKIM (signs your outgoing mail)

Type
TXT
Name
google._domainkey
Content
v=DKIM1; k=rsa; p=…paste the long key from Google…
Then return to the Admin page and click Start authentication.

7 Add DMARC (ties SPF + DKIM together)

Start in monitor mode (p=none) so nothing of yours gets blocked while you confirm everything works. Tighten later.
Type
TXT
Name
_dmarc
Content
v=DMARC1; p=none; rua=mailto:joseph@firstchoicelegalfunding.com
In ~2 weeks, once mail is flowing cleanly, raise protection: change p=nonep=quarantine, and later p=reject. This stops scammers from spoofing your domain — worth doing for a business that sends money offers.

8 Test it

Cost summary

Business Starter ≈ $7 / user / month × 2 users (joseph + devin) = ~$14 / month (~$168/yr).
intake@ · underwriting@ · docs@ · info@ = $0 (aliases & Groups).
14-day free trial; a credit card is required to start. Adding staff later = one more seat each.
What I can't do for you: creating the mailboxes and editing DNS happens inside your Google and Cloudflare logins, so those steps are yours. Tell me when you're in Cloudflare and I can double-check each record value against this sheet as you add it.