baningo cards

baningo cards comes from baningo GmbH in Vienna, which has been on the market since 2015 and focuses on digital solutions for companies. Unlike many purely single-user apps, baningo cards has been geared toward teams from the outset: there is a central admin console for creating teams, inviting and managing members and for central corporate branding with a logo, colors and several team designs.

The cards are shared flexibly via NFC card (made of recycled PVC), QR code, URL and vCard as well as through Apple Wallet and Google Wallet, entirely without forcing the recipient to install an app. This positions baningo cards as a B2B-oriented competitor with a particularly strong data protection profile.

When it comes to data protection, baningo cards is among the more convincing providers in the comparison (GDPR score 87 out of 100). According to the provider, data processing takes place in ISO 27001-certified data centers in Germany, and the hosting itself is handled by a German hosting provider.

However, the subprocessor list published by the provider shows that not all processors are located exclusively in the EU, but that US service providers are also involved; the criterion of exclusively European subprocessors is therefore not met. According to the provider, these US services are used exclusively for monitoring (error and system metrics) and do not process customer data; Grafana in particular is listed only for technical system metrics.

For the binary criterion, however, the US location of the services remains decisive. A data processing agreement (AVV) is available as a PDF (as of 31.10.2025), and with Martin Meinl there is a named in-house data protection officer.

Technically, the provider cites TLS 1.2 encryption during transmission, encrypted storage of customer data as well as encrypted, isolated backups; the solution also describes itself as DORA- and EAA-ready. For context, note: a SOC 2 attestation is not mentioned.

Development and operation lie with baningo GmbH in Austria, while the hosting itself takes place in Germany.

In the B2B context, baningo cards presents a mixed picture. On the plus side: there is a genuine teams offering with a central admin console (team management, member invitations, central branding), complemented by white-labeling, a custom domain and granular role and permission management; this is reflected in the team/admin score of 80.

On the topic of enterprise integration, baningo reaches 54 out of 100: SSO is available on request in the Business and Enterprise plans; according to the provider, it supports SAML and OIDC with common identity providers (Microsoft Entra ID/Azure AD, Okta, Google Workspace) for login. An Entra ID connection beyond pure SSO login (directory sync / provisioning of employee data), SCIM provisioning and MDM support, by contrast, are not evidenced.

A public, documented API or native CRM integrations are also missing; HubSpot or Salesforce can only be embedded as linkable elements, and genuine data synchronization is not evidenced. On top of that, the Enterprise plan only kicks in from 500+ users; a dedicated intermediate tier with extended admin and security features for medium-sized teams is not apparent.

For larger IT organizations with identity management requirements, these are relevant gaps.