How ISINs Are Assigned: NNAs, ANNA and the ISO 6166 Process

Last updated: July 2026 · 10 min read

Every ISIN is issued by an official body, not generated by a computer at random. Behind each 12-character code sits a decentralized but coordinated network: a National Numbering Agency (NNA) in the issuer's home country, an overarching coordinator called ANNA, and a formal ISO 6166 process that turns a brand-new security into a globally recognized identifier. This guide walks through who does the assigning, how the process actually runs for a new issue, and when — if ever — an existing ISIN changes.

1. National Numbering Agencies (NNAs)

ISO 6166 does not create a single global issuing office. Instead, it delegates assignment to a National Numbering Agency (NNA) in each participating country or jurisdiction. Each NNA is the sole authority for assigning the 9-character National Securities Identifying Number (NSIN) that sits inside every ISIN issued for securities domiciled in its market, and for prefixing it with the correct 2-letter country code.

NNAs are not a single type of organization — some are commercial data companies, some are stock exchanges, and some are central securities depositories. A few examples:

Because CUSIP Global Services is the US NNA, every US-domiciled ISIN literally contains a CUSIP: the ISIN is built by prepending US to the 9-character CUSIP and appending a check digit. In the UK, the NSIN portion of a GB-domiciled ISIN is typically a padded SEDOL, since the LSE (which also runs the SEDOL scheme) is the NNA. This is why ISIN structure often looks different from one country to the next — each NNA re-uses whatever national numbering scheme it already ran before ISO 6166 existed.

2. ANNA and the ASB Database

With more than 100 NNAs operating independently, something has to keep the system consistent — making sure no two agencies assign the same code, that every new ISIN is published somewhere central, and that market participants have one place to check whether an ISIN is real. That coordinating role belongs to ANNA, the Association of National Numbering Agencies.

ANNA is a not-for-profit association whose members are the NNAs themselves. It does not assign individual ISINs — that stays with each national agency — but it:

• Sets and maintains the operating procedures that all member NNAs follow under ISO 6166
• Admits and recognizes new NNAs, including substitute agencies for countries that don't have one of their own
• Operates the ANNA Service Bureau (ASB), the consolidated global database of ISINs (and increasingly, related identifiers such as FISN and CFI codes) fed daily by every member NNA
• Coordinates reserved prefixes for supranational and cross-border instruments (such as XS)

The ASB is effectively the closest thing to a single global ISIN lookup point, aggregating what would otherwise be over a hundred separate national registries into one reference source.

3. Substitute Agencies & the XS Prefix

Not every country has set up its own NNA. For jurisdictions without one, ANNA designates a substitute numbering agency to issue ISINs on that country's behalf, using that country's ISO 3166 code as the prefix.

A related but distinct situation is securities that are inherently international rather than domiciled in a single country — most notably Eurobonds and other instruments cleared internationally. These are not assigned through a national agency at all. Instead, XS is a reserved, non-country prefix administered jointly by the international central securities depositories Euroclear and Clearstream, who act as the numbering agency for these cross-border instruments. That's why bond ISINs beginning with XS show up across markets with no single national home.

4. The Assignment Flow for a New Issue

When a company or government prepares a new security — an IPO, a new bond issue, a new share class — getting an ISIN follows a fairly consistent sequence, regardless of which NNA is involved:

1. Issuer (or its agent/underwriter) applies to the
   relevant NNA for its home jurisdiction
       │
       ▼
2. NNA validates the application and assigns a unique
   9-character NSIN (reusing or generating a national
   code such as CUSIP, SEDOL, WKN, VALOR, etc.)
       │
       ▼
3. NNA prepends the 2-letter ISO 3166 country code
   for the issuer's jurisdiction
       │
       ▼
4. Check digit is calculated from all 11 preceding
   characters using the Luhn (modulus 10) algorithm
       │
       ▼
5. Completed 12-character ISIN is published to the
   NNA's national database and reported to the ASB
       │
       ▼
6. ISIN becomes available to exchanges, clearing
   houses (Euroclear, DTCC, Clearstream) and data
   vendors ahead of or at the time of listing/issuance

In practice, the application is almost always made by the issuer's lawyers, underwriters, or a listing agent rather than the issuer directly — and for exchange-listed equities the ISIN request is usually bundled into the listing paperwork so the code exists before the first trade. For details on how that final check digit is computed, see our ISIN Check Digit Validation Guide.

5. When ISINs Change — and When They Don't

An ISIN is meant to be a stable, permanent identifier, and in the vast majority of cases it never changes for the life of the security. But it isn't literally immutable — certain corporate actions require the NNA to retire the old ISIN and assign a new one.

A frequently cited real-world example is Shell plc, whose ISIN changed when the group re-domiciled its parent company from the Netherlands to the United Kingdom in 2022 — the country code itself had to change from NL to GB, which is only possible by retiring the old ISIN and assigning a new one.

6. The Cost & Licensing Debate

Because several NNAs are commercial, for-profit organizations, ISIN and related identifier data has been the subject of a long-running licensing debate — most visibly around CUSIP.

CUSIP Global Services, operated by S&P Global under an arrangement with the American Bankers Association, has faced criticism and litigation over the years — including scrutiny from US regulators and market participants — regarding licensing fees charged for bulk or commercial use of CUSIP (and by extension US-domiciled ISIN) data, even though individual securities identifiers are widely considered essential market infrastructure. Supporters of the current model argue the fees fund the ongoing maintenance and quality control of the numbering system; critics argue that a number required for basic market participation and regulatory reporting shouldn't carry a commercial toll.

This tension is part of why alternative, openly licensed identifiers have gained traction. The best-known example is the Financial Instrument Global Identifier (FIGI), created by Bloomberg and standardized as ISO 24802-2, which is distributed under an open, royalty-free license with no attribution or usage fee required. FIGI and ISIN serve overlapping but not identical purposes — FIGI was designed from the outset for unrestricted redistribution, while ISIN's cost structure varies by NNA and by how the data is accessed (individual lookups are typically free; bulk commercial feeds often are not).

7. Structure Recap: The Check Digit

Whichever NNA assigns the code, the final structural step is always the same: a single check digit computed with the Luhn algorithm, appended to the 2-letter country code plus 9-character NSIN.

Note the distinction: the country code and NSIN are assigned by human/institutional decision (jurisdiction and NNA choice), while the check digit is purely calculated — anyone can derive it deterministically from the first 11 characters, which is exactly what makes it useful for catching transcription errors. For the full step-by-step calculation with worked examples, see the Check Digit Validation Guide, and for the complete structural breakdown, see What Is an ISIN Number?.

8. Frequently Asked Questions