ICANN Spec 11 Regulated TLD Compliance Tracker
Directory of ICANN Specification 11 "Regulated" and "Highly Regulated" top-level domains. Review mandatory credential verification audits, DNSSEC requirements, privacy bans, and annual compliance overhead.
Regulated Domain Extension Catalog
| TLD | Regulated Industry Sector | Category | Audit & Verification Agency | Wholesale Fee | Mandatory Security Profile |
|---|---|---|---|---|---|
| .bank | Banking & Financial Institutions | Highly Regulated | fTLD Registry Services / Bolder Regulatory | $750 - $1,000 / yr | Mandatory DNSSEC, Strict Verification, No Privacy Proxies, TLS 1.3 Only, DMARC Reject |
| .insurance | Insurance Carriers & Brokers | Highly Regulated | fTLD Registry Services | $750 - $1,000 / yr | Mandatory DNSSEC, Verified State/National Insurance License, Strict MFA Required |
| .pharmacy | Prescription Pharmaceuticals | Highly Regulated | National Association of Boards of Pharmacy (NABP) | $995 / yr | NABP Digital Pharmacy Accreditation, DEA License Audit, Continuous Monitoring |
| .law | Legal Profession & Attorneys | Regulated | Minds + Machines / Identity Digital (Bar Verification) | $60 - $120 / yr | Active Juris Doctor / Bar Association Credential Check |
| .cpa | Certified Public Accounting | Highly Regulated | American Institute of CPAs (AICPA) | $250 / yr | AICPA License Verification, State Accountancy Board Audit |
| .realtor | Real Estate Brokers & Agents | Regulated | National Association of Realtors (NAR) | $39 / yr | Active National Realtor Database System (NRDS) ID Check |
Frequently Asked Questions
What is ICANN Specification 11 and how does it regulate top-level domains?
ICANN Specification 11 (Public Interest Commitments - PICs) is incorporated into standard gTLD Registry Agreements. Section 3(b) designates specific strings in sensitive sectors (such as financial services, healthcare, legal, and professional licensing) as "Regulated" or "Highly Regulated" TLDs, imposing mandatory security and identity verification obligations on registry operators and registrars.
What additional security safeguards are required for Highly Regulated TLDs?
Highly Regulated TLDs (e.g. .bank, .insurance, .pharmacy) mandate: (1) upfront verification of national regulatory licenses before domain delegation, (2) mandatory DNSSEC implementation, (3) strict prohibition on proxy/privacy masking, (4) enforced multi-factor authentication (MFA) for domain management, and (5) continuous security scanning for unauthorized proxy operations.
What happens if a registrant loses their professional license or fails annual audits?
Registry operators for regulated extensions are legally obligated to perform periodic re-verification audits. If a registrant ceases to hold an active professional license (e.g. state bar license for .law or banking charter for .bank), the registry must suspend or revoke the domain name.
Why do regulated extensions command significantly higher registration prices?
Beyond standard registry profit margins, operators of regulated extensions must fund specialized third-party verification contractors (such as Bolder, LegitScript, or national professional boards) to audit legal credentials, corporate filings, and regulatory standing for every registered domain.