In the mail path
Outbound mail is relayed through the platform, the sender is matched to a rule, and the signature is injected into the message itself. It cannot be forgotten, skipped or overwritten, because it does not depend on the sending device at all.