NIS-2 Disclosure Procedure
How legitimate authorities may request access to non-public domain registration data under the NIS-2 framework.
AIvikings provides domain name registration services and maintains a database of domain name registration data in accordance with Article 28 of Directive (EU) 2022/2555 (NIS-2), as given effect in Luxembourg by the Law of 5 May 2026 on measures to ensure a high level of cybersecurity and by the Directive.
Who may request access
Access under this procedure is available only to legitimate access seekers as defined under applicable law. Under the Luxembourg framework and the Directive, these typically include: - The competent national authority (in Luxembourg, the Institut Luxembourgeois de Régulation (ILR)) and the designated national CSIRTs (GOVCERT.LU and CIRCL), and any supervisory authority designated under NIS-2 - Law enforcement authorities - National police forces - National security and intelligence services - Other parties granted a right of access under applicable national law
Requests from parties outside this scope are handled under our separate third-party data request procedure.
How to submit a request
Send your request to: nis2@aivikings.ai
Your request must: - Identify the requesting authority and the individual submitting the request - State the legal basis on which you are entitled to access the data - Demonstrate a legitimate interest - Be necessary for the performance of your statutory duties - Specify the domain name(s) and the data elements requested
Our response
Where the legal requirements are met, we provide the requested registration data without undue delay, and in any case within 72 hours of receiving the request. Where the requirements are not met, we reject the request with a statement of reasons.