Trust and Compliance

AiVikings does not tolerate the use of domains registered through our service for unlawful or abusive activity, including phishing, malware distribution, botnet command and control, and distribution of illegal content.

How to report

Send reports to: abuse@aivikings.ai

Please include the domain name concerned, a description of the abusive activity, and any supporting evidence (URLs, headers, timestamps, log extracts). Reports including verifiable evidence are actioned fastest.

How we handle reports

We acknowledge reports and assess each one against this policy and applicable law. Where abuse is substantiated, we may take proportionate action, including notifying the registrant, suspending or locking the affected domain, and where appropriate, referring the matter to the relevant registry, our upstream registrar partner, or law enforcement. We retain records of reports and the actions taken.

This policy operates alongside the abuse-handling obligations of the relevant domain registry and our upstream accredited registrar partner, who may also act on reports independently.

Following the General Data Protection Regulation (Regulation (EU) 2016/679), personal data in public registration directories (WHOIS / RDAP) is redacted. Parties with a legitimate interest, such as intellectual property rights holders, security researchers, or their authorized representatives, may request disclosure of non-public registration data through this procedure.

This procedure is separate from disclosures to authorities under NIS-2 and from any disclosure processes operated by the relevant domain registry or our upstream accredited registrar partner.

Required information

A request will be rejected unless it contains all of the following.

• Identity of the applicant: full name, email address, telephone number, and postal address; and the nature of the organisation or individual making the request.
• Authorisation: where you act on behalf of another party, a power of attorney or equivalent proof of authorisation.
• Requested data: a specific list of the data elements requested (for example, registrant name, registrant email address).
• Legal basis: a description of your legal rights and the specific justification for the request, including why the data is necessary.
• Required statements: a statement that the request is made in good faith, and a statement that you will process all disclosed data lawfully and in accordance with applicable data protection law.

How to submit

Send your request to: data-requests@aivikings.ai

We assess each request against the applicable legal basis and the data protection rights of the data subject. We disclose data only where a valid legal basis exists and disclosure is lawful. We may reject or seek clarification on incomplete or insufficiently justified requests.

AiVikings provides domain name registration services and maintains a database of domain name registration data in accordance with Article 28 of Directive (EU) 2022/2555 (NIS-2), as given effect in Ireland by applicable Irish implementing law and by the Directive.

Who may request access

Access under this procedure is available only to legitimate access seekers as defined under applicable law. Under the Irish framework and the Directive, these typically include:

• The competent national authority and CSIRT (in Ireland, the National Cyber Security Centre) and any supervisory authority designated under NIS-2
• Law enforcement authorities
• National police forces
• National security and intelligence services
• Other parties granted a right of access under applicable national law

Requests from parties outside this scope are handled under our separate third-party data request procedure above.

How to submit a request

Send your request to: nis2@aivikings.ai

Your request must:

• Identify the requesting authority and the individual submitting the request
• State the legal basis on which you are entitled to access the data
• Demonstrate a legitimate interest
• Be necessary for the performance of your statutory duties
• Specify the domain name(s) and the data elements requested

Our response

Where the legal requirements are met, we provide the requested registration data without undue delay, and in any case within 72 hours of receiving the request. Where the requirements are not met, we reject the request with a statement of reasons.

Under the EU Digital Services Act, AiVikings provides a single point of contact for authorities and for recipients of the service. Contact: hello@aivikings.ai. Communication is accepted in English and Danish. Notices about allegedly illegal content tied to a domain registered through AiVikings can be submitted to the same address and are handled under our abuse procedure above.