Domain allocation: Who allocates domains and under what rules?

What does domain allocation mean?

Domain allocation refers to the regulated process by which a unique domain name is assigned to an owner and entered into the responsible registration database. A domain is not purchased like a physical item. You receive the contractual right to use it for the paid registration period, provided you comply with the extension's rules and pay the renewal.

Which organisation is responsible and which rules apply depends on the Top-Level Domain. .de has different details than .com or .eu. You can check the availability of your desired address directly:

Who allocates domains?

Several roles are involved in a registration. They are often confused in everyday use, but they have distinct responsibilities.

ICANN and IANA: coordination at the top

ICANN coordinates key parts of the global Domain Name System and enters into contracts with registries and accredited registrars for generic TLDs. The IANA functions maintain, among other things, the root zone data. However, ICANN does not allocate your individual domain directly. Our guide What is ICANN and what does it do? provides more background.

Registry: central management of a domain extension

The registry maintains the authoritative database for a Top-Level Domain and publishes the zone data required for reachability. DENIC manages .de, EURid manages .eu and Verisign operates, among others, the registry for .com. The registry, together with statutory and contractual requirements, determines which names and owners are permitted.

Registrar and reseller: your contractual partner

You normally place the order with a registrar or a reseller. They check the details, forward the registration request to the registry and later manage renewal, transfer and DNS settings. A reseller operates through a registrar; for generic TLDs the accredited registrar remains responsible for the relevant ICANN obligations.

Registrant: the domain owner

The registrant is the person or organisation to whom the domain is registered. As the owner you are responsible for correct contact details, lawful use and timely renewal. Your hosting provider, technical contact and website operator can be other persons or companies.

How domain allocation works

1. Choose extension and name: You decide on a combination of second-level name and TLD.
2. Check availability: the registrar queries the responsible registry to see whether the name is registrable.
3. Submit registrant data: You provide the required contact and contractual data correctly.
4. Validate rules: Registrar and registry check technical requirements, blocklists and, where applicable, eligibility criteria.
5. Enter registration: the registry adds the domain to its database. For .de the domain agreement with DENIC is concluded upon successful registration.
6. Configure DNS: name servers or DNS records then connect the domain to the website and e‑mail. This is explained in our draft on Setting up a domain.

Does "first come, first served" always apply?

For freely available standard registrations the rule usually is: whoever first submits a technically and formally valid order receives the domain. DENIC explicitly names this principle for .de. However, this does not constitute a free pass. Trademark, name and company rights exist independently of whether the registry has technically accepted the order.

Exceptions are also possible. Registries can reserve or block names, provide allocation phases for rights holders, set premium prices or require a local or personal entitlement. For .eu, for example, the applicant must meet the published eligibility criteria; certain names are blocked or reserved.

Important rules using .de as an example

A .de domain is generally available to private individuals, companies and organisations even if they are not based in Germany. According to DENIC rules, among other things, the following applies:

• The part before .de must contain at least 1 and at most 63 characters.
• Allowed are letters, digits, hyphens and the IDN characters supported by DENIC.
• A hyphen must not appear at the beginning or at the end.
• Hyphens at both the third and fourth positions are not permitted.
• Uppercase and lowercase are not distinguished.
• Registrant data must be complete and correct.

For umlauts, the technically encoded A‑label form counts towards the maximum length. Practical advantages and disadvantages are discussed in the article Umlaut domains and special characters.

NIS‑2 and the BSI Act: why data are checked more thoroughly

The NIS‑2 requirements have been transposed in Germany into the new BSI Act. Section 49 of the BSI Act requires top‑level domain registries and domain name registry service providers to collect and maintain accurate and complete registration data with due diligence. This includes, in particular, the domain name, registration date and the registrant’s name, e‑mail address and telephone number; where applicable, contact details of an alternative administrative contact may also be recorded.

Affected parties must also maintain requirements and verification procedures for data quality. For you this means: use real, up‑to‑date details and respond to verification requests from your provider. False or unverified data may, depending on the TLD and the contract, lead to restrictions, deactivation or loss of the domain.

The law does not require that all personal registrant data be freely visible on the internet. Non‑personal registration data must be made publicly accessible; for legitimate access requests Section 50 of the BSI Act provides a specific procedure. Data protection and accountability thus coexist.

Why an available domain can still be legally problematic

The availability check only answers whether a name can be registered. It does not conclusively determine whether you would infringe third‑party rights. Before registration, research in particular:

• identical and similar trademarks in the DPMAregister and at EUIPO,
• company and association names,
• personal name rights of individuals and public bodies,
• confusingly similar spellings and typographical errors of well‑known offerings.

In a dispute over a .de domain, a rights holder can, under certain conditions, apply for a DENIC-DISPUTE entry. It prevents transfer to third parties, but does not itself determine who is legally in the right. If the domain is deleted, the DISPUTE holder becomes the new registrant in accordance with DENIC rules.

What happens on expiry or deletion?

Domains are registered for limited periods and are usually renewed. If payment is not made, or following termination or breach of contract, the registration can end. Many TLDs have protection phases during which the previous registrant can still restore the domain. Duration, costs and procedures vary by registry.

For .de, deletion is generally followed by a Redemption Grace Period. Only after the end of the protection phase can the name be reassigned, provided there is no DISPUTE entry or other impediment. The article on Expired Domains explains the opportunities and risks of addresses that become available.

Successfully register a domain: Checklist

1. check the appropriate TLD and the registry rules,
2. check domain availability via the Domain check,
3. carry out trademark and name searches,
4. compare domain providers,
5. enter the correct registrant and reachable contact details,
6. complete verification within the deadline,
7. enable automatic renewal and two‑factor authentication.

Frequently asked questions about domain allocation