Our governance impact in 2025

In 2025, we therefore carried out a thorough analysis of our dependence on non-European suppliers. Based on the outcomes of this exercise, we decided to gradually migrate our critical cloud infrastructure from AWS to a European solution. To identify the most suitable partner, we launched a comprehensive Request for Proposal (RFP) that included both technical and strategic requirements. In doing so, we started from the conviction that Europe offers credible alternatives capable of meeting the stringent requirements we impose on our critical infrastructure.

We also consider it important to help shape the public debate on digital sovereignty. In 2025, we shared our vision through interviews and contributions in various media outlets and participated in events and panel discussions on the risks of digital dependency and the need for European alternatives. By sharing our experiences, we hope to inspire other organisations to make conscious choices regarding digital autonomy and critical digital infrastructure.

wijzijn.be / cestnous.be

In 2025, we launched wijzijn.be and cestnous.be to encourage citizens, entrepreneurs and organisations to invest in their own online presence. Having a dedicated domain name and website reduces organisations’ dependence on international platforms and algorithms, while at the same time contributing to a stronger, safer and more resilient Belgian internet ecosystem.

To support this ambition, we work closely with our registrar partners and invest in research into the factors that influence domain name retention and use. In 2025, our R&D team conducted research on renewal prediction, using machine learning to gain a better understanding of why domain names are or are not renewed, and how we can provide more targeted support to domain name holders.

In addition, through research, we also map how digitally active Belgian entrepreneurs are and how internet users perceive online trust and the .be domain name extension. These insights help us develop targeted initiatives that contribute to the continued growth and strengthening of the Belgian internet ecosystem.

Through these initiatives, partnerships and research projects, we aim not only to support the growth of the Belgian internet, but also to inspire organisations to make conscious choices that strengthen their digital autonomy.

1. Good governance

The non-profit organisation DNS Belgium was established in 1999 as the registry operator for .be domain names. DNS Belgium’s governance structure is designed to ensure transparency, accountability and effectiveness in its operational and strategic decision-making.

Organisational structure

The governance of DNS Belgium is structured around several bodies, each with specific roles and responsibilities. Read more about our organisational structure.

The governing body consists of fourteen members: three women and eleven men. All members are appointed by the founding and full members of DNS Belgium. Board members are selected autonomously by the members themselves, with due attention to diversity and inclusion. No conflicts of interest were identified with regard to the composition of the Board of Directors. ESG criteria are currently not explicitly taken into account in determining the remuneration of board members. They receive an expense allowance as laid down in the articles of association of the non-profit organisation.

The CEO, Philip Du Bois, is responsible for the day-to-day management of the association. He oversees the organisation’s operational activities and reports to the Board of Directors.

Corporate Governance Charter

Since 2023, we have had a Corporate Governance Charter, which formalises our governance guidelines. This charter describes the ten core principles we apply to ensure ethical and transparent governance. These principles cover aspects such as integrity, accountability and compliance with legal requirements.

Discover our Corporate Governance Charter.

Transparency

Transparent communication with all stakeholder groups is important to us. That is why we publish an annual report, a financial report and a sustainability report every year. All annual reports can be consulted on our website. Statistical data, such as the number of .be domain names per month, can be found in the statistics section of our website.

Ethical conduct

Ethical conduct is at the heart of our activities and is promoted among our employees, third parties and directors through our Guide to Ethical and Sustainable Conduct and our Corporate Governance Charter. As in previous years, DNS Belgium was not convicted or fined in 2025 for violations of anti-corruption or anti-bribery legislation.

2. Maximising cybersecurity

Maximising online security is one of our top priorities. First and foremost, we do everything possible to guarantee the technical performance of our own systems. At the same time, we maintain and continuously improve our ISO 27001 certification to ensure that our systems remain robust and operational.

Ensuring the technical performance of our own systems

At DNS Belgium, we are responsible for guaranteeing the availability and integrity of the .be zone, regardless of cyberattacks or other incidents. A specific setup with local name servers at the largest internet service providers (ISPs) in Belgium is one element of this approach. This ensures that .be domain names remain accessible at all times.

In addition, we place a strong focus on the availability of the registration platform. As a result, .be domain names can be consulted and registered at any time, and all information remains accurate and up to date.

In 2025, we further expanded our DNS infrastructure with additional anycast capacity. As a result, customers of Telenet, VOO, Proximus and Orange now benefit from local name servers dedicated exclusively to their networks. Thanks to this collaboration, we currently cover approximately 90% of the Belgian residential internet market.

These geographically distributed name servers contain exactly the same information and ensure that at least one fully operational name server always remains available. This infrastructure increases the availability and resilience of the .be zone. In the event of a disruption or cyberattack, internet traffic from customers of these internet operators can be handled locally without any noticeable impact on end users. In this way, we strengthen the DDoS resilience of our services and contribute to a more reliable and secure Belgian internet.

In addition, we expanded our global name server network with an additional node in Leuven. This extra location increases the redundancy of our infrastructure and provides additional robustness for our services.

In 2025, we achieved an availability rate of 100% for our name servers and 99.99% for our registration platform. The current status of our systems can be consulted via our status page.

Finally, we aim to ensure that the critical knowledge required to guarantee the performance and availability of our systems is safeguarded by at least two employees. Through an annual knowledge matrix, we identify potential knowledge risks and dependencies, after which we focus on targeted knowledge sharing and training initiatives. In 2025, we achieved a score of 88% on this KPI, compared with 84% in 2024. This reduces the risk of critical knowledge being held by only one employee.

ISO 27001 certification for cybersecurity

In 2025, DNS Belgium continued to comply with the requirements of the ISO/IEC 27001:2022 information security standard. Through interim internal and external audits, we monitored the effectiveness of our Information Security Management System (ISMS) and ensured its continuous improvement. By implementing the recommendations resulting from these audits, we met the cybersecurity Key Performance Indicators (KPIs) we had set for ourselves.

Cyber Fundamentals (CyFun)

In 2025, DNS Belgium participated in the Cyber Fundamentals (CyFun) research project of KU Leuven, the Centre for Cybersecurity Belgium (CCB), Agoria and Beltug. The project brought organisations together to exchange experiences on the implementation of cybersecurity measures and the application of the CyFun framework, which helps organisations strengthen their cyber resilience and prepare for their NIS2 obligations.

During the five project meetings held in 2025, we shared our own experiences and provided feedback through questionnaires on the practical feasibility, efficiency and effectiveness of the proposed measures. The project also gave us the opportunity to further review our existing approach, particularly in the areas of supply chain management, logging & monitoring, and asset management. In this way, we contributed to the further development of the Cyber Fundamentals framework while continuing to strengthen our own cyber resilience and compliance.

3. Combating internet fraud and illegal content

Combating illegal content and internet fraud in Belgium is an important societal responsibility of DNS Belgium. That is why we have embedded this objective in our sustainability policy.

DNS Belgium continuously invests in research and development in the field of cybersecurity. We implement strict registrant verification processes, including through our registrars , and work closely with numerous partners to actively detect, identify and take action against malicious domain names whenever necessary.

a. R&D in cybersecurity: innovative registrant verification through RegCheck

In 2025, we continued to invest in research into innovative methods and tools to detect fraudulent domain name registrations more quickly. Through the Baekeland mandate, we collaborate with KU Leuven on research into registrant verification and AI-driven fraud detection.

For suspicious domain name registrations, we perform an additional verification step to assess the reliability of the registrant. In this way, we aim to prevent domain names from being used for harmful activities such as phishing , malware distribution or other forms of online abuse. We have been continuously developing and refining this verification process for many years and continue to invest in research and development to make our approach even more effective.

In 2024, together with SIDN (the Foundation for Internet Domain Registration in the Netherlands), we introduced RegCheck, a solution that uses machine learning to identify suspicious registrations. Based on a combination of characteristics, RegCheck estimates which domain names present an elevated risk of abuse and which registrations require additional verification. This enables us to focus our verification efforts more effectively and intercept suspicious registrations more quickly.

In 2025, we continued to refine RegCheck and explored how additional data sources and new detection methods could contribute to an even more effective approach to fraud prevention. The results of this research are actively shared on international platforms, both within the academic community and across the internet industry. In this way, we contribute not only to a safer .be zone, but also to the further development of knowledge and best practices in fraud detection.

b. Identifying and monitoring fraudulent domain names

In total, we suspended 1313 domain names in 2025 that did not comply with our general terms and conditions because the registrant information was incorrect or because the domains may have been registered with the intention of carrying out fraudulent activities.

(Inter)national cooperation on internet security

Keeping the .be zone safe is part of our core mission. That is why we work closely with numerous partners in Belgium. As cyber threats do not stop at national borders, we also invest in strong international collaborations in which knowledge, data and expertise are shared. In this way, we strengthen our collective ability to combat online threats. Find the complete list of our partners.

Below is an overview of our initiatives within these partnerships in 2025.

Notice & Action procedures

To combat internet fraud and illegal content effectively, DNS Belgium works together with competent public authorities through Notice & Action procedures. Within this framework, government authorities can report websites that violate legislation to DNS Belgium, after which appropriate measures can be taken. Since 2018, we have been working with the FPS Economy, enabling fraudulent websites to be addressed quickly and efficiently.

In 2025, we further expanded this approach through a new cooperation agreement with the Belgian Gaming Commission. Under this agreement, .be websites offering illegal gambling services can be reported and addressed more rapidly.

In addition, in 2025 we worked together with the FPS Public Health on the preparation of a Notice & Action procedure for websites that fail to comply with regulations relating to, among other things, tobacco products, e-cigarettes, cosmetics and alcohol.

Cooperation with the Centre for Cybersecurity Belgium (CCB)

In 2025, we collaborated with the Centre for Cybersecurity Belgium (CCB) on guidelines that help organisations better secure their domain names, websites and email infrastructure. The guidelines include recommendations on SPF, DKIM and DMARC, secure website configurations and strong authentication. To support these efforts, our CISO delivered the webinar “Email Under Attack: How to Protect Your Inbox and Domain” for the CCB, providing further guidance on these recommendations. Through this initiative, we help organisations prevent phishing, email fraud and other forms of online abuse.

Our collaboration with the CCB was further strengthened through the creation of a feedback mechanism with the Belgian Anti-Phishing Shield (BAPS), an initiative of the CCB that protects internet users against phishing and other fraudulent websites. Data generated by BAPS helps DNS Belgium further refine its fraud detection processes and identify suspicious domain names more quickly. This cooperation complements the Notice & Action procedures established with public authorities.

Belgian Anti-Fraud Coordination Board

In 2025, DNS Belgium became a founding member of the Belgian Anti-online-fraud Coordination Board (BAC). By promoting structured cooperation between public authorities, regulators and private stakeholders, this platform brings together a broad alliance that strengthens Belgium’s resilience against online fraud. Through a shared vision, improved coordination and a proactive approach, the Board helps close existing gaps in the fight against online fraud, strengthen detection and prevention efforts, and provide strategic support to policymakers.

Cybersecurity Coalition

The Cybersecurity Coalition is a Belgian partnership between companies, public authorities and academic institutions with the following objectives: strengthening cybersecurity through knowledge sharing and collaboration, developing innovative solutions and influencing policy development at national level.

The Coalition is organised into several working groups, each focusing on a specific aspect of cybersecurity. Several colleagues actively participated in these working groups. In 2025, our Growth Lead served as co-chair of the Awareness Working Group, which organised four plenary sessions and several sub-working groups. Together with EURid (the registry operator of .eu), we also organised a crisis exercise within this working group focusing on preparedness for cyber incidents. In addition, DNS Belgium played an active role in the Governance, Risk and Compliance Focus Group.

European TLD ISAC

DNS Belgium was one of the founding members of the European TLD Information Sharing and Analysis Center (EU TLD-ISAC) in 2023, a collaboration between European ccTLD registries focused on cybersecurity. In 2024, we played a coordinating role within the organisation. We also continued to actively contribute to the further development of TLD-ISAC throughout 2025.

Our CISO, Kristof Tuyteleers, together with an external consultant, developed the EPP Security Best Practices Guidelines, which were published by TLD-ISAC in February 2025. These guidelines provide registries and registrars with practical recommendations to further strengthen the security of the Extensible Provisioning Protocol (EPP), the standard protocol used for the management of domain name registration data.

In addition, our General Manager served on the Steering Committee, and we actively participated in the Threat Intelligence Special Interest Group and the CISO Special Interest Group, where expertise and insights on cyber threats are shared across the sector.

Expertise for policy and regulation

DNS Belgium also actively contributes to national and European policymaking in the field of cybersecurity. In 2025, we provided feedback on the draft version of ENISA’s NIS360 report, which assesses the resilience of sectors covered by the NIS2 Directive. In addition, at the request of the CCB, we contributed input to Belgium’s position on the European Cyber Blueprint Council Recommendation, an initiative aimed at strengthening the coordination of responses to large-scale cyber incidents and enhancing the resilience of critical internet infrastructure.

By sharing our operational expertise as the operator of the .be zone, we help build an effective and practical policy framework for a secure and resilient internet.

Internet Watch Foundation

In 2025, we entered into a partnership with the Internet Watch Foundation (IWF) and Child Focus to help combat online child sexual abuse. Through the TLD Hopping List and Domain Alerts services, we identify suspicious domain names and take targeted measures, such as additional verification checks or notifications to Child Focus. In this way, we help keep illegal content out of the .be zone and contribute to the protection of children online.

4. Strong stakeholder relationships

At DNS Belgium, strong relationships with our stakeholders are essential to fulfilling our mission. In 2025, we actively engaged with a wide range of stakeholders, ranging from registrars within our value chain to international organisations, in order to achieve our objectives in the areas of sustainability, cybersecurity and digital inclusion.

1. Relationships with registrars and registrants

Structured dialogue with registrars

Our registrars are an important stakeholder group. They are organised through the Registrar Forum and the Belgian Registrar Association (Bereas). Our objective is to meet and consult with them twice a year, a target that was achieved in 2025. The forum met twice, once in a hybrid format and once in person in Leuven. After each meeting, we produce minutes that are shared with all registrars.

In addition, we continue to invest in our relationships with registrars throughout the year through one-to-one contacts, enabling us to involve them as closely as possible in our initiatives.

Customer satisfaction – registrars and registrants

Following contact with our support team, customers are invited to complete a satisfaction survey. We aim to achieve a score of at least 8.35/10 for registrars and 8/10 for non-registrars. In 2025, we achieved a score of 9.70/10 among registrars and 8.74/10 among non-registrars. The overall satisfaction score was 9.22/10.

2. Structured dialogue with public authorities

Public authorities are an important stakeholder for DNS Belgium in fulfilling our societal mission. As the registry operator of the .be, .brussels and .vlaanderen domain extensions, we maintain structured relationships with various federal, regional and local authorities and public institutions. These collaborations support our role as an operator of critical digital infrastructure, our efforts in cybersecurity, the fight against internet fraud and illegal content, digital inclusion, and the development of a future-oriented policy framework for domain names.

In 2025, we were in contact with, among others:

• the Belgian Institute for Postal Services and Telecommunications (BIPT) regarding oversight of our activities, NIS2 and developments in domain name regulation;
• the Centre for Cybersecurity Belgium (CCB), CERT.be, the National Crisis Centre (NCC) and the State Security Service (VSSE) regarding cybersecurity, critical infrastructure and national security;
• the Flemish Government and the Brussels-Capital Regional Government in the context of managing the .vlaanderen and .brussels domain extensions;
• various public authorities with whom we cooperate in combating online fraud and illegal content, including the FPS Economy, the Data Protection Authority, the FPS Public Health, the Belgian Gaming Commission, the FSMA, the FASFC and the FAMHP;
• the Department of Culture, Youth and Media, Digitaal Vlaanderen and Agence du Numérique in relation to digital inclusion, media literacy and cybersecurity awareness;
• policymakers, public administrations and ministerial cabinets regarding legislative and policy developments related to domain names and digital infrastructure.

Several of these collaborations are formalised through cooperation agreements and Notice & Action procedures, which are explained in the chapters on user privacy protection and combating internet fraud and illegal content.

3. Participation in and leadership of various networks and partnerships (CENTR, ICANN, CSC, VCDO)

To achieve our strategic objectives and ambitions, DNS Belgium actively participates in a range of networks and partnerships. In several of these, we also take on a leading role.

Within CENTR , DNS Belgium plays an active role. In 2025, our Business Development Manager served as co-chair of the Marketing Working Group. Together with Afnic (.fr), we also took the initiative to establish a Corporate Social Responsibility (CSR) Working Group, for which our Sustainability Manager was appointed co-chair. In addition, our CISO assumed a leadership role as a member of the steering committee of the EU TLD ISAC.

We also actively participate in CENTR working groups and task forces. We regularly contribute to meetings and working group sessions through presentations in which we share our knowledge and experience with other registries.

Furthermore, we are members of and actively involved in numerous federations and associations, including: CENTR, ICANN /ccNSO, ICANN/RySG, GeoTLD Group, IVZ, VSDC, Beltug, RIPE NCC, Cyber Security Coalition, Voka, Unizo, Digital for Youth, Leuven 2030, DigitAll, DNS-OARC, APWG and The Shift.

These engagements help us achieve our mission while also contributing to the sustainability objectives of these collaborative networks.

5. SDG Ambassadorship

As an SDG Ambassador, DNS Belgium has a leading role to play in the field of sustainability. For us, this recognition is more than a title; it represents a commitment to embedding sustainability structurally within our organisation and operations. We therefore intend to continue actively promoting this role in the years ahead and have committed ourselves to carrying out at least 10 successful sustainability actions each year that contribute to the Sustainable Development Goals (SDGs).

Concretely, this means that we aim to obtain the Voka Charter for Sustainable Entrepreneurship (VCDO) every year. In 2025, we implemented 20 successful sustainability actions, for which we were once again awarded the VCDO certificate by Voka Chamber of Commerce Flemish Brabant.

As an SDG Ambassador, however, we do not only aim to make progress within DNS Belgium itself. We also want to contribute to a broader positive impact on society.

In July 2025, DNS Belgium participated in the United Nations High-Level Political Forum on Sustainable Development (HLPF) in New York in its capacity as an SDG Ambassador. There, we shared our efforts in the areas of internet security, digital inclusion and sustainable digitalisation, and demonstrated how a small organisation can contribute to the Sustainable Development Goals (SDGs). Being part of the official Belgian delegation to the HLPF confirmed that the private sector is a valuable partner for the United Nations in promoting and advancing the 2030 Agenda.

Many of the initiatives highlighted in this report are developed in collaboration with a broad network of partners. In this way, we aim to contribute, beyond DNS Belgium itself, to progress on the societal challenges in which we play an active role as an organisation.

Finally, through presentations, interviews and podcasts, we actively share our knowledge and experience of sustainable entrepreneurship to inspire others in their own sustainability journey. In this way, we use our SDG Ambassadorship as a lever to further amplify the impact of our sustainability initiatives.