What kind of proceeding this is
The UDRP is an administrative proceeding under a policy that domain name registrants agree to when they register. It is not a court, the provider is not a court, and the panel is not a judge.
Three consequences follow, and they set everything else on this page. The panel decides on the basis of the statements and documents submitted, and applies no formal rules of evidence — it determines the admissibility, relevance, materiality and weight of what it receives. There is no discovery, no hearing and no cross-examination. And remedies are limited to cancellation of the registration or transfer of the registration to the complainant.
Because there is no hearing, nothing gets explained later. Whatever a filing does not say, the panel does not learn. That is why a technical declaration submitted in a UDRP has to be self-contained, and why the useful question when preparing one is not "is this correct" but "is this readable and checkable by someone who will never ask a question about it".
Nothing here is legal advice; every filing decision is counsel's.
Filing, and what the complaint has to carry
A complaint is filed with an ICANN-approved dispute-resolution provider, chosen by the complainant. That choice matters to an expert deliverable, because each provider's supplemental rules set the word, page, file-size and format limits the filing has to fit.
The Rules require the complaint to describe the grounds on which it is made, addressing the three elements, and to discuss the applicable circumstances the Policy enumerates on the second and third elements. Separately, and importantly for expert work, the Rules require the complainant to annex the documentary or other evidence relied on together with a schedule indexing it. The index is a rule requirement, not a courtesy, and it is the natural place to label each exhibit to the element it addresses.
Word limits apply to the grounds section, not to annexes — at one provider the figure is five thousand words. The practical consequence is well defined: the technical explanation does not fit in the body and should not be attempted there. It belongs in the annex, written to stand alone, because that is where it will survive and where the panel may read it on its own.
Registrar verification and the lock
This step generates evidence that exists nowhere else, and it happens fast.
The provider submits a verification request to the registrar, including a request to lock the domain name. Within two business days of receiving it, the registrar must provide the full registration data and confirm that a lock has been applied, and must not notify the respondent until the lock is in place (UDRP Rules, paragraph 4).
Post-2018, that verification response is routinely the first point at which the party behind a privacy or proxy service is identified — without a subpoena, and without any request from the complainant. Provider guidance addresses the sequencing directly: updates to the respondent's data, including disclosure of an underlying customer by a privacy or proxy provider, are expected to be made before the two-business-day period concludes or before verification and lock confirmation, whichever comes first, and later modifications may be addressed by the panel in its decision.
An expert's attribution work is usually re-run against that disclosure, and any divergence between the pre-disclosure record and the verified data is noted rather than silently replaced.
What the lock actually freezes
The lock is defined in the Rules as a set of measures a registrar applies to a domain name which prevents, at a minimum, any modification to the registrant and registrar information by the respondent — and which does not affect the resolution of the domain name or its renewal.
Read that second half carefully, because a great deal of lost evidence sits in it. The website can be rewritten. DNS records can be repointed. Mail configuration can change. A redirect can be added or removed. A parked page's advertising rotates on its own. None of that is restricted by the lock, and a respondent who has just received notice is precisely the party most likely to change it.
Which is why the practical rule is: capture before filing, not after. The state of the site before notice is independently important, since one of the enumerated circumstances demonstrating a holder's rights or legitimate interests turns on use, or demonstrable preparations to use, the name before any notice of the dispute. That is a dated documentary question for both sides, and the pre-notice state is the first thing to stop being observable.
The Policy separately bars transferring the registration to another holder during the proceeding and for fifteen business days afterwards.
Commencement and the response window
The provider forwards the complaint to the respondent within three calendar days of receiving the fees, and the case commences.
From commencement the respondent has twenty days to submit a response, and may expressly request an additional four calendar days, which the provider grants automatically. In exceptional cases the provider may extend the period further. The response carries the same annex duty as the complaint: documentary evidence annexed together with a schedule indexing it, with the substantive part subject to the provider's word limit.
Twenty days is the entire investigation window for a respondent, and it is short for anything that depends on a third party's cooperation. It is also usually the only period in which records that only the holder possesses can be assembled — the acquisition invoice, the marketplace or broker confirmation, the registrar account history, hosting and email invoices. A registry creation date survives transfers and says nothing about when the current holder acquired the name; establishing that requires transfer events plus the holder's own documents.
Failing to respond is not a concession: the Rules have the panel proceed to a decision, and the complainant's three-element burden does not disappear.
Panel appointment and decision
Where a single-member panel is used, appointment follows five calendar days after the response is received or the response period lapses. Where the respondent elects a three-member panel, fees are shared and candidate selection follows its own five-day steps, which moves the timetable.
The panel decides on the basis of the statements and documents submitted and in accordance with the Policy, the Rules and any rules and principles of law it deems applicable. A decision is due within fourteen days of appointment absent exceptional circumstances, and the provider communicates the full decision to the parties within three business days of receiving it.
Two features are worth an expert's attention. Panels may undertake limited factual research into matters of public record, and they do — which cuts both ways, since a panel may find the part of the record a filing left out. And panels are not bound by precedent: an annex arguing that a line of decisions supports a result is doing the panel's job while adding nothing the panel can verify. What an annex can supply is its own records and its stated method.
Decisions are published in full, so anything annexed may end up publicly quoted.
After the decision
Where a decision requires cancellation or transfer, the registrar waits ten business days after being informed before implementing it, and will not implement if it receives official documentation that a lawsuit has been commenced against the complainant in a jurisdiction to which the complainant submitted.
That window is the point at which an expert engagement most often becomes time-critical, and the work in it is triage: capture the current state of the registration, the status codes, the DNS and the site before anything moves; preserve the proceeding's own artifacts, including the decision and the verification-derived registration data; and identify which custodians hold what, with their retention windows, so counsel can decide what to serve.
Where the panel declares that a complaint was brought in bad faith, that declaration is required once the finding is made, and it is declaratory only — the Policy attaches no monetary consequence. The evidence supporting such a finding is documentary and has to be in the response annexes, because the response window is the only window; there is no later stage for it.
Whether anything is filed anywhere after a decision is entirely for counsel.
What the proceeding cannot do
Four limits, all of them structural rather than incidental.
It cannot obtain records. There is no subpoena power. Hosting logs, registrar account access records, payment records and advertising revenue reports are unavailable, and the registrar verification response covers the disputed names and what the registrar holds — a snapshot, not a history.
It cannot award money. Remedies are limited to cancellation or transfer. A finding that a complaint was abusive carries no monetary consequence under the Policy.
It cannot preserve the live record. The lock reaches registrant and registrar information only and expressly leaves resolution untouched.
It cannot test an opinion. With no hearing and no cross-examination, a method that is not explained is not challenged — it is discounted. That is a harder problem than being challenged, because nothing in the decision will say it happened.
And a decision does not end the subject: the Policy preserves court proceedings before the administrative proceeding is commenced and after it concludes.