Internet Corporation for Assigned Names and Numbers (ICANN) Due Diligence
Run due diligence on Internet Corporation for Assigned Names and Numbers (ICANN): check compliance and get alerts when suppliers or ownership change.
United States · owned by Independent (United States) · www.icann.org · 10 vendors
ICANN (Internet Corporation for Assigned Names and Numbers) is a nonprofit organization responsible for coordinating the maintenance and procedures of several databases related to the namespaces and numerical spaces of the Internet, including the management of the Domain Name System (DNS), IP address allocation, and protocol identifier assignment. It operates as a multi-stakeholder governance body that ensures the stable and secure operation of the Internet's unique identifier systems. ICANN was incorporated in California in 1998 and operates under a contract with the U.S. Department of Commerce, though it functions as an independent, internationally representative body.
Resilience scores
- Digital Sovereignty: 60
- Digital Resilience: 9
- Financial Resilience: 8
Technology vendors
- Have I Been Pwned — Technology — Australia
- INOC — United States
- Yahoo Inc. — Media & Marketing — United States
- and 7 more
Services catalogue
6 services in catalogue across 3 categories; runs on 10 sub-vendors.
- Registrar Accreditation
- Personal Data Processing
- Domain Name System Governance
Insights
Last updated 2026-08-14 · revision 2
10 direct vendors, 117 subvendors
Direct vendors by controlling owner country (sample)
- United States: 6
- Canada: 1
- Australia: 2
Subvendors by controlling owner country (sample)
- Japan: 1
- Denmark: 2
- France: 4
Compliance
10 in-scope frameworks identified; showing 3.
IANA Functions Oversight & US Government Regulatory Framework — Evidence found
Evidence: https://www.icann.org/en/governance, https://www.icann.org/en/news/in-focus/accountability/mechanisms, https://www.icann.org/ec, https://www.icann.org/en/about/agreements, https://pti.icann.org
NIS2 (source) — No public evidence
Evidence: https://www.icann.org/en/ssac, https://www.icann.org/en/rssac, https://www.icann.org/locations, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022L2555
OFAC Sanctions Compliance — No public evidence
Evidence: https://www.icann.org/en/about/agreements, https://www.icann.org/en/governance
Financials
Three-year financials
- 2025: revenue $155M, EBIT -$20M, equity $556M
- 2024: revenue $149M, EBIT -$36M, equity $541M
- 2023: revenue $150M, EBIT -$13M, equity $546M
Financial Resilience Score: 8/10
ICANN exhibits very strong financial resilience despite operating deficits in recent years. The organization holds $556M in unrestricted net assets and ~$535M in funds under management against only ~$59M in liabilities, resulting in an essentially unlevered balance sheet with total assets exceeding liabilities by roughly 10:1. A Reserve Fund of ~$201M provides well over a year of operating expenses, significantly above the internal minimum target of three months. Revenue is highly stable and contractually locked in, with ~95% coming from long-term agreements with gTLD registry operators and ICANN-accredited registrars, based on fees tied to domain registrations, renewals, and transfers. Fee increases (registry operators in January 2025 and registrars in July 2025) are designed to align funding with inflation. Additionally, $236M in New gTLD Auction Proceeds is earmarked for the ICANN Grant Program off the operating balance sheet. However, ICANN posted structural operating deficits (net assets before other income) of −$13M, −$36M, and −$20M in FY23–FY25, with positive changes in net assets in FY23 and FY25 depending on investment gains ($20M and $35M respectively). Management responded with a cost-reduction program (33 positions eliminated in May 2024) that cut operating expenses by ~$14M in FY25. Revenue concentration among two constituencies (registries and registrars) and heavy dependence on the .com Registry Agreement with VeriSign represent additional structural risks.
Key strengths: Very strong balance sheet: $556M unrestricted net assets vs ~$59M liabilities, Reserve Fund of ~$201M covering well over a year of operating expenses, ~95% of funding is contractually recurring from registries and registrars, Fee increases activated in Jan 2025 (registries) and July 2025 (registrars), Successful FY25 cost reduction (~$14M) restoring positive change in net assets, $236M off-balance-sheet New gTLD Auction Proceeds earmarked for Grant Program, Investment portfolio generated $20M-$35M gains in FY23 and FY25
Risk factors: Structural operating deficits of −$13M, −$36M, and −$20M in FY23–FY25, Positive net assets change depends on volatile investment gains, Revenue concentration: ~95% from just two constituencies (registries and registrars), Heavy dependence on .com Registry Agreement with VeriSign, Multi-year cost pressure from New gTLD Program: Next Round through 2026, Geopolitical exposure including WSIS+20 review and UN Global Digital Compact, Investment portfolio exposed to global financial market volatility, Grant Program execution risk in distributing ~$200M+ over program lifetime
Revenue by geography
- Global (not disclosed by geography): 100%
Revenue by product/service
- Registry operators: 58%
- Registrars: 37%
- Contributions: 5%
Workforce by country
- North America: 324
- Europe: 59
- Asia Pacific: 32
- Middle East and Africa: 27
- Latin America and the Caribbean: 9
Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.