Why .Insurance?
As a verified domain, exclusively for the insurance community, .Insurance is a more secure space for online insurance and communication. A web or email address ending in .Insurance quickly and easily confirms for customers and employees that they are communicating and transacting with your insurance company, and not a phisher or a spoofed site. A .Insurance domain is a visual cue anyone can look for and recognize, an online stamp of trust that will give your customers confidence in your online insurance platform, and help protect your company from bad actors collecting data for breaches, financial fraud and identity theft.

Can I redirect my current domain name to my .Insurance domain name?
Yes, you can redirect traffic and emails from your .com (or other TLDs) to your .Insurance domain name, enabling you to retain traffic and communication while you educate your customers about your move to a more secure domain. While there are many ways to redirect website visitors to a .Insurance domain name, an effective method to do this while maintaining your search engine ranking is by using the http ‘301 Moved Permanently’ response status code. Your .Insurance domain name must meet the HTTPS requirement by having a public key certificate (e.g., TLS certificate) installed to secure the domain name. Registrants are reminded that .Insurance is an HTTPS-only community and therefore any redirection must be made to the HTTPS version of the .Insurance website.

Is there a way I can check to see if my .Insurance domain name is in compliance with the Security Requirements?
IIABA has compiled a list of publicly available, free resources that can be helpful in understanding whether the implementation of a .Insurance domain name addresses the defined requirements. Although these resources are useful, they are not exact checks against the requirements so you may still receive compliance notices even if these resources do not identify any issues. Registrants may email IIABA at compliance@IIABA.com to check the compliance status of a specific domain. IIABA will work with you and your Registrar to address compliance issues.

How do I implement the .Insurance Security Requirements to move to my .Insurance domain?
IIABA has developed an .Insurance Implementation Hub to provide the necessary information, guides, resources and tools for implementing, testing, requesting assistance with and reporting on each of our Security Requirements. We also have guides for .Insurance domain eligibility and IIABA planning & communications that many .Insurance Registrants have found helpful in making the move to .Insurance.

What are the Security Requirements in .Insurance that make domain names more secure?
IIABA requires compliance with a set of Registrant Security Requirements that are not mandated by the operators of other commercially available gTLDs. Additionally, the IIABA Operations Pledge outlines the requirements we and our Registrars must follow to ensure the secure, stable and reliable operations of the .Insurance domain.

Eligibility

Who is eligible for a .Insurance domain name?
Only verified members of the global insurance community are eligible to register domain names. For insurance companies and brokers it includes license and supervision verification with the organization’s regulator. Please see the .Insurance eligibility requirements here.

Are holding or parent companies eligible to register a .Insurance domain name?
Holding or parent companies that are supervised by a relevant government authority are considered service providers as they have been pre-approved by IIABA’s Board of Directors. Further details are provided in the Registrant Eligibility Policy’s Implementation Guidelines (page 4).

Are associations eligible to register for a .Insurance domain name?
Associations in the United States do not meet the eligibility requirements for .Insurance and may be interested in .ASSOCIATION. As .Insurance serves the global insurance community, it is possible associations located outside of the United States who are licensed and supervised as an insurance entity by a government regulatory authority are eligible to register a .Insurance domain name.

Are companies with “Trust” or “Mutual” or “Cooperative” in their name eligible for a .Insurance domain name?
Having the word “Trust” or “Mutual” or “Cooperative” in the Registrant Organization name of an insurance company is not the deciding factor in determining eligibility. It is determined by whether the organization is an insurance entity that is licensed and supervised by a government regulatory authority or other eligibility category as defined in the Registrant Eligibility Policy.

Registering A Domain Name

Why isn’t my current Registrar on the list of IIABA-Approved Registrars?
All ICANN-accredited Registrars have the option to offer .Insurance domain names. IIABA Registrars must comply with the requirements in the IIABA Operations Pledge that contribute to .Insurance being a trusted, verified and more secure environment for domain name owners and their customers. As such, some Registrars may elect not to support the registration of .Insurance domain names. It may also be that your Registrar hasn’t yet determined whether or not they will support .Insurance. As new Registrars decide to support .Insurance, IIABA will update the list of Approved Registrars. Check with your Registrar to see if they are in the process of adding .Insurance registrations.

I’ve never registered a .Insurance domain name, what should I do?
This process can usually be completed within a few business days.

1. Step 1: Review the eligibility information here to confirm you qualify for .Insurance.
2. Step 2: Check the availability of the domain name(s) you want with the “Select My .Insurance Domain” feature and complete the verification application to get verified and approved by IIABA.
3. Step 3:Upon approval you will be emailed the approved registrant information. You must provide the information EXACTLY as specified to your IIABA-Approved Registrar of choice, so they can complete the registration process. The list of approved domain registrars is available here
4. Step 4: Your Registrar will submit the domain registration request.
5. Step 5: IIABA reviews and approves the registration.

Questions about the verification application should be emailed to verify@IIABA.com.

I already have a .Insurance domain name and would like to register more, what should I do?
Existing Registrants must first complete a new verification application each time additional names are registered. Upon approval you will be emailed verified registration data. You must provide the verified registration data to your Registrar so they can complete the registration process for you.

Since we already have a .COM address, are we automatically entitled to register the same domain name in .Insurance?
No, domain names are initially awarded on a first-come, first-served basis; there is no preference given to those that currently have a specific name in another TLD. Given .Insurance is available to eligible members of the global insurance community, there could be an organization with a domain name similar to yours that currently uses another TLD such as .NET, .CO, .UK, .FR, or .JP.

Is having a registered trademark a requirement to register a .Insurance domain name?
No, this is not necessary. Your organization may, for example, have a common law right arising from the actual use of a trademark and this is sufficient for registering a domain name. If IIABA is unable to verify your right to register a specific .Insurance domain name we will contact you and request additional materials to confirm eligibility for the domain such as proof of use of the mark.

Is there any limit on the number of domain names I can register?
No, you may register as many domain names as you like.

Can I register any domain name I want if I am an eligible Registrant?
You can register any domain name that corresponds to your company’s trademarks, trade names or service marks, provided it is not an IIABA or ICANN reserved name. For guidance on selecting domain names, please see the .Insurance Name Selection Policy and/or contact IIABA@IIABA.com.

What if I want to register a domain name in .Insurance associated with the geographic community (e.g., city, county, region, state) or area (e.g., New England, southern, midwest) my organization serves?
The domain name must correspond to your trademark, trade name or service mark as described in the Name Selection Policy. If the legal name of your organization does not include the geographic identifying domain name being sought, IIABA may require documentation to verify your organization’s right(s) to the generic geographic domain name to protect the interests of the global insurance community who may have one or more members with a legitimate right(s) to the domain name being sought.

What if I want to register a name IIABA has reserved in .Insurance?
IIABA reserved names are comprised of Common Community, Generic names and State Names of the United States, which are identified on the associated Reserved Names lists. If you believe your organization is eligible to register a name on one of these lists (i.e., you believe a name on IIABA’s Reserved Names list corresponds to your trademark, trade name or service mark), please see IIABA’s Reserved Names Challenge Policy, and review the Reserved Names Challenge information accessible here.

The outcome of a successful challenge to a name on IIABA’s Reserved Names list is the removal of the name from the respective Reserved Names list. A successful challenge does not result in the requestor being awarded the name, but rather gives them an opportunity to compete to receive it. IIABA will allocate the name via one or more of the allocation mechanisms listed in the Name Allocation Policy. A Reserved Name allocation will not take place until all IIABA-Approved Registrars have been provided notification of the change to the respective Reserved Names list.

Are there any premium domain names in .Insurance?
Yes, all single-character names (e.g., 1.Insurance), most two-letter names (e.g., AB.Insurance), and names IIABA has reserved for its potential use, indicated in bold on the list of Generic names, are identified as premium and subject to premium pricing. To determine if a domain name is available for registration as a premium name, use the “Select My .Insurance Domain” feature here.

Verification

How does the .Insurance verification process work?
To ensure that registrations are made only to organizations that meet and maintain the eligibility requirements, IIABA performs verification upon the initial registration of a .Insurance domain, annually thereafter and if certain registration information changes (e.g., Registrant Organization, Registrant Name, Registrant Email).IIABA’s Verification Process Overview is accessible here

Is the .Insurance verification by IIABA the same as the annual Whois verification required by ICANN?
No, the verification process is mandated for all .Insurance registrations.

In contrast, the Whois verification process is required by ICANN to be conducted annually by Registrars to confirm accurate contact information. Registrars are required to contact their Registrants to conduct this verification.

Registrants may risk having their domain name suspended or cancelled for failure to respond to either type of verification request. If you want to confirm whether the request is legitimate, please contact IIABA at verify@IIABA.com.

How long does the domain name verification and/or registration take?
For new Registrants, the verification process is usually completed in a few business days, and upon its completion, the registration process is a matter of a couple of business days from submission by your Registrar to IIABA’s approval. For existing Registrants, the verification is usually completed more quickly. However, because the verification process requires email and/or telephone contact with the Registrant’s organization to verify certain information (i.e., the requestor is a full-time employee of the company and is authorized to make registrations on their behalf), it may take longer to complete. Registrants can expedite verification by ensuring that all individuals that may be contacted are aware of the need to respond to these requests as quickly as possible.

My country does not have a specific license or charter document that is provided to us as a separate document. If this is requested by IIABA, what should we send?
IIABA recognizes that different countries may have differing regulations regarding insurance licensure/certification and will accept other materials applicable to an insurance company’s specific country of license and supervision by a government regulatory authority.

What information is checked during the verification process?
Security Check: IIABA will verify the Registrant Contact and Registrant Organization against government and restricted lists/blacklists.

Registrant Organization Eligibility: IIABA will verify the Registrant Organization is eligible as defined in the Registrant Eligibility Policy. New Registrants should be prepared to provide applicable copies of confirming documentation such as Licenses, Articles of Incorporation or Certifications of Formation, if requested.

Registrant Organization Address: IIABA will verify the address is valid for the Registrant Organization. This is performed using government/regulatory authority resources or other qualified third-party references (e.g., Dun and Bradstreet).

Name Selection: IIABA will verify the domain name(s) complies with the Name Selection Policy.

Registrant Contact Employment and Authority: IIABA will verify the Registrant Contact is a full-time, non-contracting employee of the Registrant Organization and is authorized to request domain name(s) on its behalf. This confirmation via email and/or telephone must be made by one of the following: the direct manager of the Registrant Contact, the department manager/director/lead of the Registrant Contact, an officer or executive of the Registrant Organization, or an HR representative of the Registrant Organization.

I have been notified that my domain name is pending verification. What should I do?
IIABA uses information provided by you to confirm your eligibility for a domain name. IIABA will contact you via email or telephone if specific additional information is needed. It is important that you respond to IIABA's request(s) promptly as your domain name cannot be registered until the verification process is completed and you have been provided verified registration data. Registrants should respond promptly to all verification requests from IIABA, and failing to respond could result in rejection of your application or inactivation of your domain name. Any questions you have about the verification process should be sent to verify@IIABA.com.

Is the Registrant Contact in WHOIS allowed to be a role-based designation instead of a natural person?
In line with ICANN policy, IIABA allows role-based designations for the Registrant Contact Name and role email accounts for the Registrant Email. However, a specific individual’s name must be provided to IIABA for the verification process. This individual must be a full-time employee and authorized to register domains for the Registrant Organization. The verification application permits you to provide both the individual’s name and the role-based name.

When does IIABA re-verify eligibility for a .Insurance domain name?
To ensure Registrants maintain eligibility for their domain name(s), IIABA conducts annual verifications or when certain registration information changes (e.g., Registrant Organization, Registrant Name, Registrant Email).

Security

What are the Security Requirement in .Insurance that make domain names more secure?
IIABA requires compliance with a set of Registrant Security Requirements that are not mandated by the operators of other commercially available gTLDs. Additionally, the IIABA Operations Pledge outlines the requirements we and our Registrars must follow to ensure the secure, stable and reliable operations of the .Insurance domain.

Can Security Requirements change? If so, how are these changes made and how will Registrars and Registrars know about them?
Yes, Security Requirements can change. The Security Requirements specify that IIABA will periodically review and amend the requirements to respond to changing needs in security or the community. The amendment process includes a review by IIABA’s Security Requirements Working Group (SRWG) and consideration and approval of its recommendations by IIABA’s Board of Directors. Any approved changes to the requirements will be communicated directly to Registrars and broadly announced to stakeholders via information posted to IIABA’s websites as well as other means for sharing such details. Adequate notification to stakeholders and time for implementation is provided when changes are required to processes and technical infrastructure by new or modified requirements. Please contact IIABA at IIABA@IIABA.com if you would like to participate in future efforts of the Security Requirements Working Group.

Who is responsible for enforcing the Security Requirements and Policies in .Insurance?
IIABA is ultimately responsible for enforcing all of the requirements and policies in .Insurance. Registrars will also play a role in enforcement as they have the direct relationship with the Registrant. IIABA always retains the right to take action if the Registrar fails to do so.

Is there a way I can check to see if my .Insurance domain name is in compliance with the Security Requirements?
IIABA has compiled a list of publicly available, free resources that can be helpful in understanding whether the implementation of a .Insurance domain name addresses the defined requirements. Although these resources are useful, they are not exact checks against the requirements so you may still receive compliance notices even if these resources do not identify any issues. Registrants may email IIABA at compliance@IIABA.com to check the compliance status of a specific domain. IIABA will work with you and your Registrar to address compliance issues.

Can my organization host a .Insurance website without encryption?
No, .Insurance is an HTTPS-only community to support privacy and integrity of web and other services by default. As .Insurance is on the HSTS preload list, websites that are not HTTPS compliant will not be accessible via browsers (like Chrome). As a global HSTS security policy becomes increasingly common, additional browsers are expected to block sites that are not HTTPS compliant.

What is a Proxy/Privacy Registration Service and why is it prohibited?
Proxy/Privacy Registration Services are used to conceal the true identity of the domain name owner and their contact information. IIABA prohibits this practice as it makes it difficult to identify and contact a Registrant that is alleged to be using their domain name for practices that are in violation of IIABA’s Acceptable Use / Anti-Abuse Policy.

What happens if my activated .Insurance domain name is not in compliance with IIABA’s Policies or Requirements?
IIABA is monitoring all domain names for compliance with the Policies and Requirements. IIABA will notify Registrars/Registrants of domain names that are not in compliance and failure of the Registrar/Registrant to provide a timely response and a remediation plan to IIABA can result in the domain name being removed from the .Insurance zone or more significant actions.

Implementation

How do I implement the .Insurance Security Requirements to move to my .Insurance domain?
IIABA has developed a .INSURANCE Implementation Hub to provide the necessary information, guides, resources and tools for implementing, testing, requesting assistance with and reporting on each of our Security Requirements. We also have guides for eligibility and planning & communications that many .Insurance Registrants have found helpful in making the move to .Insurance.

Once I move to our .Insurance domain name, what do I do with my existing domain?
You can continue using your current domain name (e.g., .com), and once you have your .Insurance domain in place you can redirect your traffic and emails to your new .Insurance site and email address. Maintaining your original domain and redirecting to your .Insurance domain will allow you to retain all customer traffic and communication while educating them about your move to a more secure domain. You can redirect your old domain indefinitely, though some companies deactivate the old domain when traffic to them becomes minimal.

Can I redirect my current domain name to my .Insurance domain name?
Yes, you can redirect traffic and emails from your .com (or other TLDs) to your .Insurance domain name, enabling you to retain traffic and communication while you educate your customers about your move to a more secure domain. While there are many ways to redirect website visitors to a .Insurance domain name, an effective method to do this while maintaining your search engine ranking is by using the http ‘301 Moved Permanently’ response status code. Your .Insurance domain name must meet the HTTPS requirement by having a public key certificate (e.g., TLS certificate) installed to secure the domain name. Registrants are reminded that .Insurance is an HTTPS-only community and therefore any redirection must be made to the HTTPS version of the .Insurance website.

Can I redirect my .Insurance domain name to my current domain name (e.g., .com)?
Yes, provided your .Insurance domain name meets the HTTPS requirement you may redirect to your current domain. Organizations that redirect from .Insurance to non-.Insurance domain names are strongly encouraged to inform visitors of this action via an explicit message to avoid confusion and to assure that visitors understand they are leaving a .Insurance domain name. Registrants are reminded that .Insurance is an HTTPS-only community and therefore any redirection must be made from the HTTPS version of the .Insurance website.

What is the reason there are use restrictions imposed on my .Insurance domain name?
As noted in IIABA’s Acceptable Use / Anti-Abuse Policy and the Implementation Guidelines annexed to the .Insurance Registrant Eligibility Policy, IIABA may impose additional use restrictions, at any time, on a Registrant’s use of a domain name to protect the integrity of the .Insurance gTLD and the community that it serves. IIABA will communicate any use restrictions on a .Insurance domain name to the Registrant before approving the initial registration request or at any time during the term of the registration of the .Insurance domain name, which must be accepted and complied with in order to maintain the registration.

Can I provide access to third-party content on my .Insurance domain name?
Yes, this activity is permitted.

Costs

What does a .Insurance domain name cost to register and why is it more expensive than my current domain name?
IIABA charges the same base price to Registrars for all .Insurance domains, which cover operating expenses such as the verification process, and monitoring of Security Requirements for .Insurance. Premium domains have a different base price. In addition, Registrars may include services and/or have their own operational expenses included in the final retail price of your .Insurance domain name.

Is there a difference in the cost between standard and premium domain names?
Yes, there is a difference in cost and Registrants should consult with their Registrar for this information.

Are there other costs associated with using my .Insurance domain name?
There will be other costs to your organization associated with the implementation of the Security Requirements. For example, complying with the DNSSEC, TLS, and name server requirements may require additional support and/or services from your Registrar, core processor, hosting provider, DNS provider, etc. As you consider which Registrar to use, you should ask about their ability to support the Security Requirements and the associated costs. See IIABA’s Third-Party Provider Program for who can assist you with meeting the requirements.

General Information

Where can I find all the .Insurance Policies mentioned in this FAQ?
All IIABA Policies for .Insurance are located here.

What is gTLD?
gTLD – or generic Top-Level Domain – refers to the letters to the right of the dot at the end of an internet web address. Examples of gTLDs are .Insurance, .COM, .ORG and .NET.

What is IIABA?
IIABA Registry Services, LLC was formed in 2011 by a coalition of insurance companies and insurance services trade associations from around the world. In 2012, IIABA submitted community-based applications to the Internet Corporation for Assigned Names and Numbers (ICANN) for the .Insurance gTLD. IIABA launched .Insurance in May 2016.

What is ICANN?
The Internet Corporation for Assigned Names and Numbers, or ICANN, is an oversight body responsible for the stability and unification of the internet. Its key responsibilities include policy development for existing and new generic Top-Level Domains (gTLDs). In June 2011, ICANN’s board of directors authorized the launch of the New gTLD Program. The program’s goals include enhancing competition and consumer choice, and enabling the benefits of innovation via the introduction of new gTLDs.

Trademarks

What is the Trademark Clearinghouse (TMCH)?
ICANN’s TMCH is a global repository for trademark data. Designed to meet global needs for the domain name system, the TMCH verifies trademark data worldwide and maintains a database with the verified trademark records. The TMCH is not a trademark office; it is a centralized database of verified trademarks.

There is a cost to use the TMCH. Learn more at the Trademark Clearinghouse website.

Why would I want to register our trademarks in the Trademark Clearinghouse (TMCH)?
The Trademark Claims period initially ran for the first 365 days of General Availability and has been extended several times. To check the date the period will close, search for .Insurance here. During the Trademark Claims period, anyone attempting to register a domain name matching a mark that is recorded in the TMCH will receive a notification displaying the relevant mark information.

If the notified party registers the domain name, the TMCH will send a notice to those trademark holders with matching records in the TMCH, informing them that someone has registered the domain name.

What trademarks does the Trademark Clearinghouse (TMCH) accept?
The TMCH will accept and verify registered trademarks, marks protected by statute or treaty or court validated marks as well as any other marks that constitute Intellectual Property (IP) rights that meet the eligibility requirements of the TMCH. Learn more about accepted marks at the Trademark Clearinghouse website.