- Meaning
- The operator of a top-level domain
- Examples
- .de, .com, .eu
- Role
- A cornerstone of the DNS
- Link to NIS2
- Part of digital infrastructure
- Updated
- June 2026
- Editorial team
- Compliance Compass
What is a TLD name registry?
A TLD name registry – the wording the directive uses is top-level domain name registry – manages an entire domain ending, .de, .com or .eu for example. It maintains the authoritative central directory of every domain registered under that ending and runs the authoritative name servers that answer queries for those domains. That makes the registry a cornerstone of the DNS: without its zone working correctly, not a single domain under that ending can be resolved.
Registry, registrar, registrant
Three roles have to be kept apart: the registry runs the ending and the central register, the registrar is the accredited intermediary that sells and manages individual domains for customers, and the registrant is the actual domain holder. In Germany, for instance, DENIC runs the .de ending and holds a key position in the German internet infrastructure; every country code ending has an equivalent operator of its own. Where a DNS service provider provides services for individual domains, the registry answers for the ending as a whole.
Why is this critical?
If a TLD name registry fails or is compromised, the reachability of countless websites and services can be affected at a stroke – not just one organisation, but potentially millions of domains. That is why registries count as highly critical infrastructure, held to particularly strict requirements on availability, integrity and contingency planning.
TLD name registries and NIS2
Because TLD name registries are indispensable to the working of the internet, Annex I to the NIS2 Directive names them expressly under digital infrastructure, and Article 2(2) brings them into scope regardless of their size. A registry above the ceilings for medium-sized enterprises is an essential entity; a smaller one is still covered, as an important entity. From that follow the duty to register with the body designated in the Member State, appropriate risk management and observance of the reporting chain of 24 hours, 72 hours and one month. Article 34 sets a minimum ceiling for fines of EUR 10 million or 2 % of total worldwide annual turnover for essential entities, and Member States may set higher amounts.
For example: after a routine update, a registry discovers that its authoritative name servers have been tampered with, so that domains resolve to the wrong IP addresses for a time. Because the integrity of the central zone is affected, it classes the incident as significant, sends an early warning to its competent authority within 24 hours, supplies an assessment after 72 hours and files the final report within one month.
Further reading: DENIC – the registry for the .de domain
Frequently asked questions
What is a TLD name registry?
A TLD name registry is the central operator of a complete top-level domain such as .de, .com or .eu. It maintains the authoritative directory of every domain registered under that ending and runs the authoritative name servers that answer queries for those domains. That makes a TLD name registry a cornerstone of the Domain Name System: without its zone working correctly, not a single domain under that ending can be resolved.
Do TLD name registries fall under NIS2?
Yes. Annex I to the NIS2 Directive names TLD name registries expressly as digital infrastructure, and Article 2(2) brings them into scope regardless of their size – the usual thresholds of 50 employees or EUR 10 million turnover do not apply to them. A registry above the ceilings for medium-sized enterprises is an essential entity; a smaller one is still covered, as an important entity. Either way it has to register with the body designated in its Member State, run appropriate risk management and observe the reporting chain of 24 hours, 72 hours and one month. Article 34 sets a minimum ceiling for fines of EUR 10 million or 2 % of total worldwide annual turnover for essential entities, and Member States may set higher amounts.
What is the difference between a registry and a registrar?
The registry operates the whole domain ending and the central register – DENIC, for instance, runs the German ending .de, and every country has an equivalent of its own. The registrar, by contrast, is the accredited intermediary that sells and manages individual domains for end customers. The registrant, finally, is the actual domain holder. Three clearly separated roles, then: the registry runs the ending, the registrar acts as intermediary, and the registrant owns the individual domain.