Quick answer
When does TransferOffshore release registrant data?
As of October 2026, DomaineGoat LLC, which runs TransferOffshore, releases the data it holds only when Panamanian law requires it (a Panamanian court or prosecutor's order), or in a UDRP case. We hold one email per domain and notify you before any disclosure, unless the law or the order forbids it.
Disclosure policy at a glance
| When we release data | Only when Panamanian law requires it (a Panamanian court or prosecutor's order), or in a UDRP case |
|---|---|
| Foreign orders | Not enough on their own: a foreign judgment must first be recognised in Panama |
| What we hold | One email per domain, your account number, your domains and your balance |
| What we do not hold | No ID document, no name, no phone number, no postal address |
| Notice to you | We notify you before any disclosure, unless the law or the order forbids it |
| UDRP case | The dispute provider receives the registrant record on file |
| Registries | The .com and .net registries are thin and hold no contact data; others, such as .org (PIR) or .io (Identity Digital), keep the registrant record |
| Transparency report | First report January 2027 |
What counts as a valid request?
A valid request is an order of a Panamanian court or prosecutor that names the domain and the data asked for. A letter from a lawyer, a police email or a foreign court order is not enough on its own: a foreign judgment must first be recognised in Panama.
We check that the order is genuine and limited to what it names. We release only that data.
What data do we actually hold?
Very little, because we ask for very little. For each customer we hold one email per domain, the account number, the list of domains and the balance. The email is the only contact detail we collect: it is required and verified for each domain, as ICANN requires. We do not ask for a name, an ID document, a phone number or a postal address, so we cannot hand them over.
The full list is in the privacy policy. A no-KYC account limits what any order can reach. See transfer without KYC.
Who else holds registrant data?
The registry. What it holds depends on the extension. The .com and .net registries, run by Verisign, are thin registries: they receive no contact data about the registrant, only the registrar, the nameservers and the dates. Registries such as PIR (.org) or Identity Digital (.io) hold the registrant record under their own law. With Domain protection, the registry holds only the details of DomaineGoat LLC, never yours.
Our ICANN-accredited registrar partner, shown in the RDAP record, keeps its own legal duties. For a domain in your name, the record it holds is built from your verified email: no name, address or phone number is collected.
What happens in a UDRP trademark dispute?
The dispute provider receives the registrant record on file. When a UDRP complaint is filed, the provider asks the registrar to confirm who the registrant is and to lock the domain. Under the WIPO rules, this takes place within two business days.
For a domain in your name, that is the record built from your verified email. For a Domain protection domain, the registrant of record is DomaineGoat LLC, and we tell you about the complaint. The panel decision is applied in both cases.
Will I be told before my data is released?
Yes. We notify you before any disclosure, unless the law or the order forbids it. The notice goes to the email of the domain, so you have time to take legal advice.
Do you publish the number of requests?
Yes. Our first transparency report is due in January 2027. It will count the requests we received, by type, and how many we answered. Until then, there are no figures to publish.
Disclosure policy: FAQ
Will you release my data to a foreign police force?
No, not on a direct request. We release data only when Panamanian law requires it (a Panamanian court or prosecutor's order), or in a UDRP case. A foreign judgment must first be recognised in Panama.
Can a copyright holder get my details?
Not from a complaint alone. A copyright holder needs a Panamanian court order. Trademark claims are different: they go through the UDRP, and the dispute provider receives the registrant record on file. With Domain protection, that is DomaineGoat LLC.
What if the court order forbids you to tell me?
Then we follow the order and do not notify you. That is the only exception to our notice: we notify you before any disclosure, unless the law or the order forbids it.
Does Domain protection change what can be disclosed?
Yes, at the registry level. The registry and WHOIS show DomaineGoat LLC, so a request to the registry does not reach you. The data we keep about you stays minimal, one email, and follows the same disclosure rule.
Sources (4)
- 2013 Registrar Accreditation Agreement — ICANN (checked 2026-10-19)
- Registration Data Policy now in effect for contracted parties — ICANN (2025-08-21)
- Ley 478 de 4 de agosto de 2025 (Código Procesal Penal arts. 338-A, 338-C) — Gaceta Oficial No. 30337 (5 August 2025)
- Rules for Uniform Domain Name Dispute Resolution Policy — WIPO (checked 2026-10-08)
Keep what we hold to one email
No ID, no KYC · one email held per domain · paid in crypto.