Starting 1 October 2026, the Austrian domain registry nic.at will introduce an automated registrant risk-assessment and verification process for .AT domains as part of Austria’s NIS2 compliance requirements.
This means that some .AT domain registrations and changes may require the registrant to verify their identity.
When is verification required?
nic.at may automatically assess the risk associated with:
- New .AT domain registrations
- Domain transfers
- Registrant changes
- Changes to registrant contact information
Most domain names will not necessarily require additional action. If a domain is selected for verification, the registrant will receive an email with instructions on how to complete the verification.
How does the verification work?
If your .AT domain is selected for verification:
- You will receive an email informing you that verification is required.
- The email will contain a secure link to the verification process.
- You will need to provide a valid identity document, such as a passport or national ID card.
- Complete the verification within the specified deadline.
If the registrant details are incorrect or outdated, they must first be corrected. After the contact information has been updated, the registrant must complete the verification using the link from the original verification email.
Verification timeline
The verification process follows this general timeline:
| Day | What happens |
| Day 0 | Verification is triggered. The registrant and reseller are notified. |
| Day 14 | If verification has not been completed, nic.at sends the registrant a reminder. |
| Day 21 | The normal verification period ends. |
| Days 24–51 | If verification remains incomplete, the domain is placed on serverHold. DNS and related domain services are disabled. Verification can still be completed to remove the suspension. |
| Day 51 | After the applicable grace period, a non-verification lock (SVN lock) is applied. Verification can no longer be completed through the registrar. |
| Day 110 | If the issue remains unresolved, nic.at permanently deletes the domain. |
The registry may allow a 3-day grace period at the end of the initial verification period and before the non-verification lock is applied.
What happens when a domain is placed on serverHold?
A domain placed on serverHold will stop resolving in DNS. As a result, services relying on the domain, such as websites and email, may become unavailable.
While a domain is under serverHold, the registrant can still complete the required verification and have the suspension lifted.
During this period, contact information can only be changed to an already verified contact.
What happens if verification is not completed?
If verification is not completed within the allowed period:
- The domain is suspended with serverHold.
- If the verification issue is still unresolved, a non-verification (SVN) lock is applied.
- Once the SVN lock is applied, the registrant can no longer complete the verification through the registrar.
- The domain is eventually deleted by nic.at if the issue remains unresolved.
After deletion, the domain may become available for registration again according to the .AT registry’s applicable rules and procedures.
What should I do if I receive a verification email?
If you receive a verification request for your .AT domain:
- Check that the email concerns your domain and registrant information.
- Use the secure verification link provided in the email.
- Prepare a valid identity document.
- Complete the verification as soon as possible rather than waiting until the deadline.
- If your registrant information is incorrect, contact Zone support so the details can be corrected.
Important: Make sure your registrant contact details are kept up to date. Incorrect contact information can make it difficult to receive verification notices and complete the process on time.
Does this affect every .AT domain?
No. The verification process is triggered only when nic.at’s automated risk assessment determines that additional verification is required.
The new process applies from 1 October 2026 to relevant .AT domain registrations and changes.