A registry backend that gets your TLD ready to run.
ADG combines EPP/SRS and RDAP with optional DNS, DNSSEC, legacy WHOIS, data escrow coordination, and operations support. Scope and service targets are confirmed for your TLD, with relevant 2025 operating evidence available for review.
One technical partner for your entire TLD operation.
A Registry Service Provider (RSP) is the team and platform behind a Top-Level Domain (TLD). It keeps registration transactions and registration data services working, while additional services are assigned according to the operator's architecture.
ADG has cleared ICANN's Main RSP evaluation. Our offered stack can combine EPP/SRS and RDAP with Anycast DNS, DNSSEC, legacy WHOIS, data escrow coordination, monitoring, and operations support. The exact evaluated and contracted scope is confirmed before engagement.
Your team can then focus on policy, market development, and growth while responsibilities, targets, evidence, and escalation paths remain explicit.
What you gain with ADG
- One accountable team for the agreed registry scope
- ICANN Main RSP evaluation cleared
- A clear path for launch or migration
- Around-the-clock operations monitoring and incident handling
- Integrated data escrow, DNSSEC, and continuity planning
- English and Indonesian support for local and global teams
One backend, with a service scope built around your TLD.
Use ADG for the full offered stack or define a narrower scope. Responsibilities and service targets are documented before implementation.
Technical details
- 30+ Anycast nodes across 6 continents (via .id Registry global infrastructure)
- 2025 DNS SLA target: 99.9% · Actual result: 100%
- UDP & TCP DNS support (RFC 1035, RFC 7766)
- EDNS0 support with 4096-byte payload
- DNS query logging & analytics
- Automated zone management & propagation
- DDoS protection: 1 Tbps backbone capacity
Built to stay available, remain auditable, and grow.
Registry components are redundant, monitored, and connected through clear security controls.
Platform architecture
Designed for availability
Critical services use redundancy and failover. DNS runs across an Anycast network, while registry components include recovery systems.
Security from the start
Role-based access, MFA, encryption, HSMs, and audit logs protect the relevant parts of the system.
Ready for registry requirements
Data escrow, SLA reporting, service continuity, and ICANN technical requirements are part of daily operations.
Performance you can review, not just a promise.
Actual registry service results from 1 January to 31 December 2025 show that every measured service exceeded its SLA target.
| Service | 2025 SLA target | 2025 actual | Result |
|---|---|---|---|
| .id Domain DNS | 99.9% | 100% | Above target |
| WHOIS | 99.5% | 100% | Above target |
| Registry Service Provider (RSP) | 99.5% | 99.95% | Above target |
| RDAP | 99.5% | 100% | Above target |
These figures are historical performance for .id registry services in 2025. The SLA commitment for each ADG customer is defined in the service agreement according to the selected scope and architecture.
RPO < 1 Hour
Target limit for data loss in a worst-case recovery scenario
RTO < 4 Hours
Target time to fully restore service after a critical disruption
24/7 NOC
Monitoring and escalation paths are available around the clock
Clear incident response times
| Severity | Description | Initial Response | Update Frequency | Resolution Target |
|---|---|---|---|---|
| P1 — Critical | Entire service down or data loss | 15 minutes | Every 30 minutes | 4 hours |
| P2 — High | Significant degradation of one critical service | 30 minutes | Every 1 hour | 8 hours |
| P3 — Medium | Minor degradation, workaround available | 2 hours | Every 4 hours | 24 hours |
| P4 — Low | Cosmetic issue or enhancement request | 8 hours | Daily | 5 business days |
Pricing follows the scale and needs of your TLD.
We prepare a proposal around domain volume, integration needs, infrastructure model, support, and the selected service commitment.
"You pay for a service that matches the scale of your operation. Scope, SLA, support, and pricing are set out in the proposal so your team can assess total cost from the start."
Launch
For brand TLDs and new TLDs
- Agreed registry service scope
- Managed shared infrastructure
- SLA defined in the service agreement
- Operations monitoring and support
- Setup fee based on scope
- Ongoing fee based on domain volume
Growth
For growing TLDs
- Agreed registry service scope
- Dedicated infrastructure options
- Enhanced service commitments
- Account manager
- Custom EPP extension support
- Priority incident response
Dedicated
For large registries and ccTLDs
- Agreed registry service scope
- Dedicated infrastructure
- Custom SLA and governance
- Agreed operational support
- Custom integrations and APIs
- Implementation support
- Long-term partnership model
A clear path to go-live for every TLD.
We map the work, responsibilities, testing, and dependencies at the start, so every team knows the next step.
Pre-Engagement
Discuss requirements, conduct technical assessment, and compile proposal. We understand your TLD — domain policies, target market, registrar partners, and specific technical needs.
Environment Setup
Provision DNS zone on 30+ Anycast nodes, set up EPP/SRS instance, configure WHOIS/RDAP, and generate DNSSEC keys in HSM.
Configuration
Configure TLD-specific domain policies: pricing, grace periods, reserved names, premium domains. Onboard registrar partners.
OT&E Testing
Operational Test & Evaluation — registrars test EPP connections, domain operations, and DNSSEC validation in staging environment.
ICANN PDT
Coordinate Pre-Delegation Testing with ICANN: verify DNS, EPP, WHOIS/RDAP, DNSSEC, and Data Escrow compliance.
Go-Live
DNS delegation to root zone, production cutover, and full monitoring activation. Your TLD is now officially live on the internet.
Stabilization
Intensive monitoring, performance fine-tuning, knowledge transfer, and handover to regular operations mode.
Delivery time depends on policy readiness, registrar integrations, ICANN processes, data volume, and migration requirements. The final timeline is agreed after assessment.
Technical controls ready for review.
ADG has cleared ICANN's Main RSP evaluation. Technical implementation, operating procedures, and control evidence are prepared for review; any additional-service scope is confirmed against the official ICANN list and the agreement.
ISO/IEC 27001:2022 Certified
ADG's Information Security Management System for Main Registry Service Provider application operations is certified by Intertek.
Certificate 0232938 · Issued 15 December 2025 · Valid until 14 December 2028
Verify active status with KANReadiness and security
| Area | Reference | ADG implementation | Status |
|---|---|---|---|
| Governance & Organization | MAIN.1 | Formal organizational structure, complete SOP, documented security policies | Compliant |
| Personnel Security | MAIN.1.11–12 | 3-level background checks, penetration testing plan, key ceremony personnel clearance | Compliant |
| EPP/SRS Operations | MAIN.3–4 | EPP standards support, registrar connectivity, and 99.95% actual RSP performance in 2025 | Compliant |
| WHOIS/RDAP Service | MAIN.5 | Port 43 + RDAP, thick model, data protection-aware redaction | Compliant |
| Data Escrow | MAIN.6 | Daily incremental + weekly full, ICANN-approved agent, PGP encryption | Compliant |
| Data Protection | MAIN.7 | Local data protection compliance, breach notification within 72 hours, privacy policy | Compliant |
| Abuse Prevention | MAIN.8–9 | Documented abuse prevention policy, rights protection mechanisms | Compliant |
| Registry Continuity | MAIN.11 | EBERO plan, service transition plan, business continuity procedures | Compliant |
| Capacity Planning | MAIN.13 | Capacity planning document, scalability roadmap, load testing | Compliant |
| DNS Operations | DNS.1–4 | 30+ Anycast nodes, 100% actual DNS performance in 2025, and DDoS protection | Compliant |
| DNSSEC Operations | DNSSEC.1–4 | FIPS 140-2 HSM, KSK annual/ZSK quarterly rotation, DPS published | Compliant |
Launch, move, or strengthen your TLD operation.
Launch a new gTLD
Need
Your organization is preparing a new TLD and needs a backend ready for testing and operation.
ADG's role
ADG prepares the agreed registry services, supports testing, and coordinates technical readiness through delegation.
Move from another RSP
Need
You need service, support, or a cost model that better fits the direction of your registry.
ADG's role
We map data, integrations, parallel run, validation, cutover, and rollback to keep the transition controlled.
Operate a ccTLD backend
Need
A ccTLD operator wants to retain policy and registrar relationships while outsourcing technical operations.
ADG's role
ADG runs the backend and technical reporting while the operator retains control of TLD policy.
Run a brand TLD
Need
A company wants to use its own extension for identity, services, or digital communications.
ADG's role
ADG provides managed registry operations suited to limited domain volume and high security requirements.
What to know before selecting an RSP.
Let's map your TLD requirements.
Tell us whether you are preparing a new TLD, evaluating an RSP, or planning a migration. Our team will help define the technical path and estimate the scope.
Contact team
ADG RSP Team
Office
Icon Business Park Unit L3 BSD City, Sampora, Kec. Cisauk, Kabupaten Tangerang, Banten 15345.
Labs
Campton Blok E no 8, Jl. Raya Cisauk, Sampora, Kec. Cisauk, Kabupaten Tangerang, Banten 15345.
Service hours
Monday–Friday 09:00–18:00 WIB | NOC 24/7
Read next
Continue with guides that connect the concept to your operational needs