digitale-visitenkarten.de

Guide: digital business cards in the enterprise

Basics, how they work and the decisive selection criteria, fact-based and without the marketing.

What is a digital business card for companies?

A digital business card is an electronic representation of a person's or organization's professional contact details that can be updated at any time. Instead of a printed card, name, position, company, phone number, email address, postal address, website as well as, optionally, profile picture, logo, social media profiles and calls to action (such as appointment booking or vCard download) are bundled into a digital profile and shared via a permanent link, a QR code or an NFC data carrier.

In the corporate context (B2B), a digital business card differs from a private individual card through central manageability: using an administration dashboard, an administrator creates uniform templates (corporate design, mandatory fields, legal notice), rolls out cards for entire teams or departments, updates data centrally and deactivates the cards of departing employees. This turns the digital business card into a managed identity and contact instrument that ensures brand consistency, data protection compliance and traceability (such as contact/lead capture) across the entire workforce.

Technically, the format builds on the open vCard standard. The vCard (file extension .vcf, "Virtual Contact File") has been specified since the 1990s; the current version, vCard 4.0, is defined in the IETF's RFC 6350 and mandates UTF-8 encoding, while in practice vCard 3.0 (RFC 2426) continues to be used most frequently because of its broadest compatibility with iOS, Android, Outlook and CRM systems. This standard ensures that shared contact details can be imported across devices.

How does a digital business card work? (NFC, QR code, wallet)

A digital business card can usually be shared via three channels that all address the same underlying profile: NFC, QR code and wallet pass. In addition, a direct profile link always works and can be embedded in email signatures, chats or on printed materials.

NFC (Near Field Communication): An NFC business card (as a plastic card, sticker, key fob or badge holder) contains a passive chip. When it is held to an NFC-capable smartphone, the chip transmits the data stored on it contactlessly, without the recipient needing an app or registration. The chip is programmed via an NDEF record (NFC Data Exchange Format); the most common method stores not the contact details themselves but a URL that opens the online profile. Alternatively (the offline variant), a complete vCard can be stored directly on the chip. The URL variant has the advantage that content can be changed centrally at any time, while the link on the chip remains unchanged.

QR code: The QR code is the most device-independent channel, as it can be read by any smartphone camera without NFC hardware. It either points directly to the online profile or encodes the vCard data itself. QR codes can be output on cards, displays, trade fair stands, roll-ups and in email signatures.

Wallet integration (Apple Wallet / Google Wallet): The digital business card can be stored as a pass in the smartphone's native wallet app, comparable to boarding passes or tickets. The pass typically contains the QR code and the core data, can be accessed without a separate app and without an internet connection, and updates the stored data as soon as a connection is available again. On NFC-capable devices, the wallet pass can additionally be shared by tapping.

Shared principle: In the online-based approach, every channel (NFC, QR, wallet, link) points to the same cloud-hosted profile. When the card holder or administrator updates the data, it is immediately current across all channels, without cards having to be reprinted or redistributed. The recipient can add the contact details to their address book as a vCard with a single click.

Key B2B selection criteria for digital business cards

For corporate use, alongside design and range of functions, it is above all data protection, integration and administration criteria that are decisive. The following points form the usual evaluation grid of a B2B selection:

GDPR compliance: The provider processes personal contact data and is therefore a processor within the meaning of the GDPR. A prerequisite is a data processing agreement (DPA) pursuant to Art. 28 GDPR, a transparent privacy policy as well as processes for data subject rights (access, erasure). When exchanging third-party contact data (for example via contact/lead capture), the legal basis for the processing must be clarified.

Server location and hosting: For many companies, hosting in Germany or the EU as well as the avoidance of data transfers to third countries is a key criterion for avoiding legal uncertainties (for example with third-country transfers). The specific data center location and the processor chain (subcontractors) are relevant.

Single sign-on (SSO): Connection to the company's own identity provider via standards such as SAML 2.0, OAuth 2.0 or OpenID Connect (OIDC). SSO enables logging in with existing company credentials and reduces the number of separate passwords.

SCIM (automated user provisioning): SCIM (System for Cross-domain Identity Management) automatically synchronizes user accounts and groups with the directory service. New employees automatically receive a card, role/group assignments are adopted, and on departure access is automatically deprovisioned, without manual invitations. SSO governs authentication, SCIM the lifecycle of the accounts; the two complement each other.

MDM (Mobile Device Management): Support for the central rollout of the application or of wallet cards via an MDM solution on managed company devices, including configuration profiles.

API and integrations: Programming interfaces (REST API) as well as connectors to CRM, marketing and HR systems enable the automatic handover of captured leads and the synchronization of employee master data.

Signature management: Central administration and uniform rollout of email signatures with an embedded profile link or QR code, consistent with the corporate design and legally compliant (mandatory information).

Admin administration: A central dashboard with templates, mandatory fields, a role and permission concept (RBAC), team/department structure, blocking/reactivating of cards as well as reporting (views, shared cards, leads).

Scalability: Suitability for large numbers of users, multi-tenant structures for corporate groups with several companies or locations, multilingual profiles as well as robust service levels (availability, support).

Frequently asked questions

What is the difference between a digital and a classic (printed) business card?

A printed business card is a static paper medium that can no longer be changed after printing and must be handed over physically. A digital business card is an electronic profile that is shared via NFC, QR code, wallet pass or link and updated centrally at any time; changed data is immediately current across all channels, without reprinting.

In addition, contact details can be added directly to the address book as a vCard with a single click, and in corporate use central administration, corporate design specifications and contact/lead capture are possible.

Does the recipient need an app to receive a digital business card?

No. With the common online-based approach, the recipient needs neither an app nor a registration. When tapping an NFC card or scanning the QR code, the smartphone opens the profile in the browser; from there the contact details can be added to the address book as a vCard.

For NFC, the recipient's device merely needs to be NFC-capable and have the function activated; QR codes work with any camera and are therefore device-independent.

Are digital business cards GDPR-compliant?

Digital business cards can be operated in a GDPR-compliant manner if certain prerequisites are met. Since the provider processes personal contact data on behalf of the customer, it is a processor; required are a data processing agreement (DPA) pursuant to Art. 28 GDPR, a transparent privacy policy and processes for data subject rights.

If data of third parties is stored via contact/lead capture, the legal basis for the processing must be clarified. To minimize risk, hosting in Germany or the EU and the avoidance of data transfers to third countries are also advisable.

Why is the server location relevant for companies?

The server location determines which legal framework the data processing is subject to. Hosting in Germany or the EU avoids the legal requirements and uncertainties of a third-country transfer (for example to the USA), which would require additional safeguards.

The specific data center location as well as the chain of subprocessors are decisive for the assessment. Providers that operate exclusively on German or EU servers and exclude third-country transfers reduce the compliance effort for the company using them.

What do SSO and SCIM mean in the context of digital business cards and why are they important in B2B?

SSO (single sign-on) enables logging in with existing company credentials via standards such as SAML 2.0, OAuth 2.0 or OpenID Connect and does away with separate passwords. SCIM (System for Cross-domain Identity Management) automates provisioning: user accounts and groups are synchronized with the directory service, new employees automatically receive a card including a role assignment, and on departure access is automatically revoked.

SSO governs authentication at login, SCIM the lifecycle of the accounts afterwards. Together the two reduce manual administrative effort and the security risk of remaining access, and are therefore central to scaled corporate use.

How does updating the contact details work after sharing?

In the online-based approach, the NFC chip, QR code, wallet pass and link all point to the same cloud-hosted profile. If the profile is changed by the card holder or centrally by an administrator, the new data is immediately available across all channels, without cards having to be reprogrammed or redistributed.

Wallet passes that have already been shared update the stored data as soon as an internet connection is available again. If, on the other hand, a recipient has already imported the data into their address book as a vCard, this local address book entry is not automatically updated as well.

What is the vCard format and what role does it play?

vCard is the open standard for digital contact data that has existed since the 1990s and structures fields such as name, company, phone and email. The associated file carries the extension .vcf (Virtual Contact File).

The current version, vCard 4.0, is specified in the IETF's RFC 6350 and mandates UTF-8 encoding; in practice, vCard 3.0 (RFC 2426) remains the most widespread because of its broadest device compatibility. The standard ensures that shared contact data can be imported correctly across devices, from iPhone and Android to Outlook and CRM systems.

How can cards be managed and rolled out centrally for entire teams?

Using an admin dashboard, an administrator creates uniform templates with corporate design, mandatory fields and legal notice information and rolls out cards for teams, departments or the entire company. A role and permission concept (RBAC) controls access.

Via SCIM, users can be automatically provisioned from the directory service and deactivated on departure; via MDM, the application or wallet cards can be distributed on managed company devices. APIs and CRM connectors take over captured leads and synchronize master data, and reporting functions deliver metrics on views and shared cards.

For corporate groups with several companies, multi-tenant structures are relevant.