.de NIS2 update: Realtime Register is ready for Phase 2

Earlier this year, we informed you about the first NIS2-related updates for .de domains on our platform. These initial changes focused on improving registration data quality through holder e-mail validation, updated WHOIS / registration-data visibility, and clearer expectations around complete and accurate domain holder data. 

You can revisit these updates here:
https://realtimeregister.com/blogs/updates-to-nis2-regulations-for-de-extension

 

Moving forward: Phase 2 is now in place 

We have now completed the next step, we’re ready for DENIC’s Phase 2 requirements for .de domains. Phase 2 builds on the existing validation processes and introduces a stronger verification model for .de holder data. 

What’s new in Phase 2 

Where the initial updates focused mainly on e-mail validation and data quality, Phase 2 extends this approach to broader verification scenarios. 

This means that, where required, verification may now apply to: 

• Holder e-mail address
• Holder name
• Holder address

To support this, we have extended our platform with a structured verification model. This allows verification information to be stored and processed in a consistent and auditable way, including: 

• Verification methods and claims
• Proof types and results
• Timestamps and references

For e-mail verification, we continue to use the existing validation flow. When validation is required, the holder receives a confirmation e-mail, and the result is stored with a timestamp and audit reference. 

This ensures that e-mail reachability verification remains aligned with your current workflows, while enabling additional verification capabilities where needed. 

 

What this means for you 

Your core responsibilities remain the same, and maintaining accurate and complete data remains essential.
It is important to note that, if the verification deadline is missed, DENIC will first de-delegate the domain (remove it from the .de zone), and eventually delete it, without a Redemption Grace Period. Once deleted for this reason, the domain cannot be restored.

So please make sure that: 

• .de holder contacts contain accurate e-mail, phone, name, and address data
• Your validation e-mails are properly branded so customers recognise them and do not mistake them for phishing
• Your branding and validation templates are up to date
• You respond quickly if additional holder verification is requested
• Your processes for updating incorrect or outdated holder data are in place and effective

We support you in staying compliant 

We will continue to keep our platform aligned with .de NIS2 requirements and will communicate any changes that may affect your workflows. 

For more detailed information, you can refer to our Knowledge Base article: 
.DE NIS2 requirements - Realtime Register Knowledge Base 

If you have any questions or need support, our team is here to help. Don’t hesitate to contact us.