I am seeing the same issue. The domain's SPF is set up correctly, and DKIM / DMARC are failing because I think that Autocrat is sending emails a different way and not honouring the domain's DKIM / DMARC settings.
The issue is that Autocrat uses Google App Script to send emails. And without the DKIM private key for the domain, the App Script cannot send emails from the user domain without failing DKIM checks. The only option for Workspace users who have DKIM set up (correctly) is to use the anonymous send option (which is a different domain so should hopefully pass).