# Disclosure policy: when we reveal who stands behind a domain

> NomineeName disclosure policy: data released only on a Panamanian court or prosecutor's order, or in a UDRP case. One verified email held per domain.

- URL: https://nomineename.com/disclosure-policy/
- Last updated: 2026-10-19
- Publisher: NomineeName (https://nomineename.com)

WHOIS and the registrant record show our company on every domain. This page explains who can learn the name of the beneficial owner behind it, and what we hold to give in the first place.

**Quick answer — When does NomineeName disclose who owns a domain?**

Under its disclosure policy, **NomineeName** releases the data it holds only when Panamanian law requires it (a Panamanian court or prosecutor's order), or in a UDRP case. As of October 2026, it holds one verified email per domain, and the registrant record names DomaineGoat LLC, not you. A lawyer's letter gets nothing.

## Disclosure at a glance

| Attribute | Value |
| --- | --- |
| Shown in the registrant record and WHOIS/RDAP | DomaineGoat LLC (Panama), on every domain, by default |
| Sent to a registry about you | Nothing: not your name, address, phone or email |
| What we hold about you | One verified email per domain, kept private |
| Release of the data we hold | Only when Panamanian law requires it (a Panamanian court or prosecutor's order), or in a UDRP case |
| Registration data at the registry and registrar | Names our company, not you |
| Notice to you | Part of Domain protection: you are told when the law allows |
| How to send a legal request | Email support@nomineename.com, subject line: Legal request |
| Public count of requests | Quarterly, by origin, first report in January 2027 |

## What do the registry and the registrar know about the owner of a NomineeName domain?

They know only our company. NomineeName is a nominee domain registration service from Panama: every domain is registered in the name of DomaineGoat LLC by default, so the registration record and WHOIS show the company, never you — no ID, no KYC, paid in crypto.

This matters for disclosure. With ordinary WHOIS privacy, the registrar, and registries that keep contact data, still hold the customer's name and address behind a mask, and a request can reach them there. With nominee registration, those records hold the company's details. The .com and .net registries (Verisign) are "thin": they receive no registrant contact data at all, and the registrar keeps the registrant record. Here, that record is our company's.

So a person who wants to know who uses the domain has one door: us. This policy is what stands behind that door.

## Which orders does NomineeName act on?

We release the data we hold only when Panamanian law requires it (a Panamanian court or prosecutor's order), or in a UDRP case. A Panamanian court order or a Panamanian prosecutor's order (Ministerio Público) must name the domain, say what data is ordered, and reach us in writing, by email to support@nomineename.com with the subject line Legal request. We check that the order is real and in force before we act. We hand over what the order covers and nothing more. Because we hold one verified email per domain and no ID, there is little to hand over: see [what data we collect](https://nomineename.com/data-we-collect/).

## Which requests does NomineeName refuse?

Every other request is refused. In practice we refuse:

- letters from lawyers, including cease-and-desist letters;
- requests from brand-protection firms and private investigators;
- requests from competitors, journalists or members of the public;
- requests from foreign police or foreign courts that have not gone through Panamanian legal process;
- requests sent through ICANN's Registration Data Request Service (RDRS) without a Panamanian order.

Refusing to disclose is not refusing to act on abuse. Phishing, malware, botnets and fraud that takes money from victims are acted on within 24 hours of a well-documented report, and child sexual abuse material immediately, under the [abuse policy](https://nomineename.com/abuse/). Suspension does not reveal anyone.

## Who answers for the domain if NomineeName does not disclose?

We do. The ICANN Registrar Accreditation Agreement (RAA, section 3.7.7.3) covers the case of a registrant who lets someone else use a domain. That registrant stays the Registered Name Holder. It accepts liability for harm caused by wrongful use, unless it discloses the user's contact data within 7 days to a party that provides reasonable evidence of actionable harm.

Our policy does not disclose on a third party's evidence alone, only under the rule above. So DomaineGoat LLC accepts that liability, as the RAA says. We write this openly because it is the honest cost of the model. It is also why the strict exceptions of the abuse policy exist.

## What happens to disclosure in a UDRP trademark dispute?

In a UDRP dispute, the dispute provider receives the data of the registrant of record, which is our company. The complaint names DomaineGoat LLC, the domain is locked within 2 business days of the dispute provider's request, and we tell you the same business day the dispute provider contacts us so that you can defend the domain.

Be aware of one fact. WIPO says panels often name both the privacy or proxy service and the underlying holder in the published decision, when that holder is revealed. If you answer the complaint in your own name, expect your name in the decision. The full process is on [UDRP and nominee domains](https://nomineename.com/udrp-and-nominee-domains/).

## Will ICANN rules on proxy services change this policy?

They may. ICANN's specification on privacy and proxy registrations has been extended until an accreditation programme for these services is in place. That programme, called PPSAI, targets a draft policy for public comment in December 2026 and a rollout in October 2027.

If binding new rules change what a nominee service must disclose, we will update this page and date the change. Until then, the rule is the one above. Prices and options are on the [pricing page](https://nomineename.com/pricing/).

This is not legal advice.

## Disclosure policy: FAQ

### Can a lawyer get my name from NomineeName?

Not with a letter. A lawyer needs a Panamanian court order that names the domain. We refuse cease-and-desist letters, brand agents and private investigators. For a trademark claim on the name, the usual path is the UDRP, where the provider receives our company's data as registrant of record.

### Can foreign police get my data?

Only through Panamanian legal process: we release the data we hold only when Panamanian law requires it (a Panamanian court or prosecutor's order), or in a UDRP case. A request that has not gone through Panama is refused and counted in the transparency report by origin.

### Will you tell me before you disclose my data?

Notice is part of the Domain protection option. With it, every complaint is read by a person before any action, and you are told when the law allows. A Panamanian court or prosecutor's order can forbid notice for a time. Without the option, the disclosure rule is the same, but notice is not promised.

### What would you hand over under a Panamanian order?

Only what the order covers, from what we hold. For each domain we hold one verified email and the service records of your account, such as your domains, their DNS settings and your balance. We hold no ID, no name, no address and no phone number, because we never ask for them.

### Does a suspension for abuse reveal my identity?

No. A suspension under the strict exceptions acts on the domain only. The person who reported the abuse gets the outcome, not your identity. Disclosure follows the separate rule on this page: data goes out only when Panamanian law requires it (a Panamanian court or prosecutor's order), or in a UDRP case.

### Does the registry hold my details somewhere?

No. Registries that keep contact data receive the details of DomaineGoat LLC, never yours, and keep their own copy under their own law. The .com and .net registries keep no contact data at all. Your verified email stays with us and is never sent to a registry. You can check what any registry shows with an RDAP lookup on lookup.icann.org.

## Sources

1. [Ley 478 de 4 de agosto de 2025 (cybercrime measures)](https://www.gacetaoficial.gob.pa/pdfTemp/30337/GacetaNo_30337_20250805.pdf) — Gaceta Oficial de Panamá, No. 30337 (5 August 2025)
2. [2013 Registrar Accreditation Agreement and specifications (section 3.7.7.3, data escrow)](https://www.icann.org/resources/pages/approved-with-specs-2013-09-17-en) — ICANN (checked 2026-10-19)
3. [ICANN Registration Data Policy now in effect for contracted parties](https://www.icann.org/en/announcements/details/icann-registration-data-policy-now-in-effect-for-contracted-parties-21-08-2025-en) — ICANN (checked 2026-10-19)
4. [ICANN's RDRS two-year pilot: what we learned and where we go next](https://www.icann.org/en/blogs/details/icanns-rdrs-two-year-pilot-what-we-learned-and-where-we-go-next-03-03-2026-en) — ICANN (checked 2026-10-19)
5. [Extension of the 2013 RAA Specification on Privacy and Proxy Registrations](https://new.icann.org/en/system/files/files/registrar-extension-2013-raa-specification-privacy-proxy-registrations-notice-29jul22-en.pdf) — ICANN (checked 2026-10-19)
6. [Privacy and Proxy Services Accreditation Implementation Review Team](https://icannwiki.org/Privacy_and_Proxy_Services_Accreditation_Implementation_Review_Team) — ICANNWiki (checked 2026-10-19)
7. [WIPO guidance on the GDPR and the UDRP](https://www.wipo.int/en/web/amc/domain-name-disputes/gdrp) — WIPO (checked 2026-10-19)

**Sending a legal request?** Email support@nomineename.com with the subject line Legal request and attach the Panamanian order. [See all contacts](https://nomineename.com/contact/)

---

NomineeName: NomineeName is a nominee domain registration service from Panama: every domain is registered in the name of DomaineGoat LLC by default, so the registration record and WHOIS show the company, never you — no ID, no KYC, paid in crypto.
