.AT Domain Policies

.AT is the TLD for Austria, and is regulated by the nic.at registry. In addition to .AT names, OpenSRS offers domain name registrations for the following second level domains: .CO.AT and .OR.AT.

.AT is an open registry; you do not have to be an Austrian resident or business operator to register a .AT domain.

Registration Details

Registration details can be found in the TLD reference chart.

Renewals and Cancellations Renewal Policy

.AT domains renew automatically each year. To avoid an unwanted renewal, auto-renew must be disabled at least 3 days before the listed expiration date.

Before disabling auto-renew or initiating a deletion, resellers must obtain clear, explicit, and verifiable consent from the listed registrant. This ensures that the deletion of the domain is based on a clear and unambiguous instruction from the domain holder, which must be evidenceable at any time.

Registrant Consent for Deletion

Resellers now have more flexibility in how they collect the registrant’s consent to delete a .AT domain name.
A wet-signed (handwritten) form is no longer required. Consent can be collected electronically, provided that the registrant’s intent is explicit, verifiable, and traceable. Acceptable electronic consent methods include:

• An online form submission.
• A checkbox or toggle clearly labeled with text such as:
  “I am requesting the deletion of my domain name."
• Other digital mechanisms that directly capture and log the registrant’s explicit deletion request.

If an electronic consent process is used, resellers must be able to provide system logs or records of the consent within 2 business days of request by OpenSRS or the registry. If electronic collection is not feasible, resellers may still use the signed .AT cancellation formas an alternative.

Immediate Cancellations

For immediate deletions (outside the normal renewal cycle), the .AT Cancellation Form must still be signed by the registrant and submitted to help@opensrs.com. If the registrant is an organization, the form must include the company stamp.

Unresponsive Registrant

If the reseller cannot reach the registrant, or if the registrant refuses to pay, refuses to sign the form, or claims not to have heard of the reseller, a Domain Withdrawal can be processed.

To process this withdrawal, the reseller will have to contact OpenSRS support. They can state "I can not reach the registrant, please give the domain back to the registry".  Once OpenSRS support processes the withdrawal the registry will no longer point the domain at OpenSRS.  The registry will take over and contact the registrant.  If the registrant is still unresponsive, the domain is deleted by the registry.

There are no refunds for this process. 

Transfers

Registrar to registrar transfers require auth codes. The auth code is set by the sponsoring registrar and is foreseen for the domain holder only who can at any time ask his registrar for the AuthInfo.  With this AuthInfo a domain holder can transfer his domain to any ISP/registrar. 

For more information on transfers, see "Transferring domains and changing domain ownership"

Changes of ownership

.AT Registrant ownership changes require a form to be completed in addition to the standard request through our web interfaces. The Change of Holder form must be emailed to help@opensrs.com.

.AT Domain NIS2 Compliance

nic.at is updating .AT domain registration rules to comply with Austria's national implementation of the EU NIS2. These changes affect registrant data requirements, WHOIS publication, and identity verification, and apply to both new and existing .AT domains.

Key Dates at a Glance

What Registrant Data Is Now Required

For all new registrations, ownership changes, and contact updates, the following information must be accurate and complete:

• Full name (of the registrant)
• Organisation name (only where the registrant is a legal entity)
• Valid email address
• Valid, working phone number-no placeholder or dummy numbers
• Full postal address

What Is Published in WHOIS

Organisations (Type: "organisation")

• Name, address, email address, and phone number are published for all .AT domains held by a legal entity.

Private individuals (Type: "privateperson")

• Personal contact details are not published in the public WHOIS database.

Contact Data Changes

Fax number field removed

• The optional fax-number field is being removed completely. Transactions that still include a fax number will be rejected with an error.

Hide/disclose function removed

• The option to hide phone, email, or fax details is being discontinued. For registrants designated "organisation," all contact data will be visible in WHOIS.
• nic.at recommends avoiding personal addresses for legal entities-e.g., use info@yourcompany.com rather than firstname.lastname@yourcompany.com.

Registrant Verification Process

New registrations, transfers, owner changes, and contact updates on .AT domains are risk-assessed at the point of order. If a domain's data is classified as suspicious or high-risk, a verification process is triggered:

• OpenSRS contacts registrant directly to verify their name, postal address, and email address. The registrant receives a secure verification link, valid for 51 days.
• Nic.at (registry) will also contact the registrant directly, but only as part of its standard procedures – specifically on day 14 if verification is still outstanding, when domain name is set to serverHold, and when domain is locked (SNV locked applied for non-verification).
• Resellers are not cc’ed on any of these direct verification notifications, whether from us or from nic.at
• Phone numbers do not need to be explicitly verified through this process, but remain mandatory and must be correct and functional-an obviously false or non-functional number can still trigger verification.

Resellers will be notified-separately from the registrant's verification request when:

• a domain is flagged and up for verification,
• a domain has been suspended (serverHold) because verification wasn't completed in time, and
• an SNV (non-verification) lock has been applied.

Verification Timeline

Effect on Other Domains Linked to the Same Registrant

• If a domain fails verification and is placed on serverHold, other domains associated with the same registrant handle will also be selected for verification.
• Those other domains are not placed on serverHold immediately-each proceeds through its own complete verification process first.

Withdraw During Verification

• The "Withdraw" is blocked for a domain from Day 0 of the verification process until the domain is either successfully verified or deleted. This covers the pending, serverHold, and SNV stages.

Retention of documentation

• As per registry policy, we will retain the registrant documentation used for verification for 1 year. All documents will be deleted after 1 year.

Acceptable verification documents

Depending on the registrant type, nic.at may request supporting documentation:

Natural persons

• Passport or national ID
• Utility bill
• Bank statement
• Payment verification
• Video or on-site identity verification

Legal entities

• Commercial register extract
• Founding documents
• Federal Gazette entry
• VIES request
• Comparable official documentation.

List of Proofs

The table below lists the proofs:

If you have any questions or concerns, please reach out to us at support.opensrs.com.