B2B guide & comparison
In large organizations, digital business cards rarely fail because of the card itself, but because of the rollout: anyone who wants to deploy an app or a wallet pass to hundreds of managed corporate devices can hardly avoid Mobile Device Management (MDM) – typically Microsoft Intune in combination with Entra ID (Azure AD). This is exactly where the market divides: almost all providers document SSO and SCIM cleanly, but a verifiable MDM rollout is the exception.
In this comparison, we show which providers can genuinely distribute digital business cards via MDM, how Intune, Entra ID, SSO and SCIM differ from one another, and what IT and data protection managers in the DACH region should look out for. The order (oneVcard, Spreadly, Lemontaps) follows our weighted methodology based on enterprise capabilities, GDPR compliance and documented MDM support.
Sorted by overall score; the category-relevant sub-score is also shown per provider.
Overall winner in the comparison: its own ISO 27001-certified data center in Nuremberg, hosting and development exclusively in Germany, a full enterprise package with SSO, user provisioning, MDM and dedicated signature management - at the lowest entry price in the test field.
Enterprise Integration (SSO/SCIM/MDM/API): 92/100
Customer data on Hetzner in DE per the vendor, delivery via EU infrastructure (incl. Bunny CDN), ISO 27001:2022, full enterprise provisioning (SSO/SCIM/HRIS) - second-highest GDPR score in the test (92), but a young company without independently verified user reviews.
Enterprise Integration (SSO/SCIM/MDM/API): 84/100
German enterprise competitor from Stuttgart with its own ISO 27001 certification (TÜV SÜD) and hosting on AWS Frankfurt.
Enterprise Integration (SSO/SCIM/MDM/API): 82/100
B2B-strong provider with Frankfurt hosting and a broad enterprise feature set – but company headquarters and development are located outside Germany
Enterprise Integration (SSO/SCIM/MDM/API): 78/100
Australian market leader with top ratings and strong enterprise technology, but without guaranteed EU hosting.
Enterprise Integration (SSO/SCIM/MDM/API): 80/100
US provider with a deep enterprise feature set and top ratings, but pure US hosting.
Enterprise Integration (SSO/SCIM/MDM/API): 76/100
Privacy-focused digital business card from Bavaria: own German hosting under ISO 27001, SAML SSO and API, with limited price transparency.
Enterprise Integration (SSO/SCIM/MDM/API): 64/100
Austrian SME all-rounder with Munich hosting, a genuine team offering, and an affordable entry point
Enterprise Integration (SSO/SCIM/MDM/API): 42/100
US provider with strong integration and enterprise depth, but data hosting in the USA/Canada and USD pricing.
Enterprise Integration (SSO/SCIM/MDM/API): 80/100
Privacy-focused team solution from Austria with hosting in German ISO 27001 data centers
Enterprise Integration (SSO/SCIM/MDM/API): 32/100
US enterprise platform (formerly Beaconstac) with SOC 2, ISO 27001 and SCIM - but no EU hosting
Enterprise Integration (SSO/SCIM/MDM/API): 82/100
US provider with a strong sales focus and an EU-hosting option, but a thin GDPR and reviews picture
Enterprise Integration (SSO/SCIM/MDM/API): 72/100
German NFC business-card provider from Hamburg with Frankfurt hosting and a BMW reference - strong on data protection, weak on the enterprise IT stack.
Enterprise Integration (SSO/SCIM/MDM/API): 32/100
US provider with strong user reviews, but no EU hosting and with an unclear product future
Enterprise Integration (SSO/SCIM/MDM/API): 50/100
German NFC card provider with a free cloud profile – strong hardware, weak enterprise maturity
Enterprise Integration (SSO/SCIM/MDM/API): 25/100
British NFC card pioneer with a strong feature set, but without EU hosting and enterprise features
Enterprise Integration (SSO/SCIM/MDM/API): 36/100
Mobile Device Management (MDM) is the central management of corporate devices by the IT department. Via an MDM solution – in the Microsoft environment, Intune in combination with Entra ID (formerly Azure AD) – apps, configuration profiles and access policies can be rolled out automatically to managed smartphones and tablets, without employees having to install anything manually.
For digital business cards, this specifically means: the associated app or the Apple/Google Wallet pass is distributed centrally via the MDM portal to entire teams or departments and pre-configured. This is different from SSO or SCIM: MDM concerns the device and software distribution, SSO the sign-in, SCIM the user lifecycle.
In practice, many providers document MDM only vaguely or not at all – a cleanly described Intune/Entra rollout is therefore a genuine differentiator and not a standard.
oneVcard (operator: oneVcard GmbH) leads this comparison because the MDM rollout is explicitly supported here and documented as Microsoft-based: wallet cards and app distribution can be rolled out centrally to managed corporate devices via Microsoft Intune or Entra ID/Azure. This is complemented by genuine enterprise identity management – SSO via SAML 2.0, Microsoft Entra ID/Azure AD and Google Workspace, as well as automatic user provisioning (SCIM-like via Entra ID or HR sync).
On the data side, oneVcard hosts and develops exclusively in Germany: its own ISO 27001-certified data center in Nuremberg, no transfer to third countries, a data processing agreement (DPA) under Art. 28 GDPR on request, an external data protection officer, daily backups, 2FA and regular penetration tests. For mixed Microsoft environments, there is also dedicated email signature management with a certified Outlook add-in and more than 20 integrations (including Entra ID, SAP, Personio, BambooHR, Salesforce).
Pricing: Lite free, Premium a paid plan (billed annually), Teams and Teams Enterprise on an individual basis (SLA 99.5%).
Spreadly (2nd place, Spreadly GmbH from Baierbrunn near Munich) impresses with a clear "Made in Germany" profile: customer-data hosting with Hetzner in Germany per the vendor (CDN/edge incl. Bunny), ISO 27001:2022, a data processing agreement (DPA) under Art. 28 GDPR, TLS 1.3 and AES-256.
For enterprise use, SSO (SAML 2.0, OAuth 2.0), SCIM and bulk provisioning via Azure AD/Google Workspace are available; a dedicated MDM/Intune rollout is, however, not stated in the public information. Lemontaps (3rd place, Stuttgart) is certified by TÜV SÜD according to ISO/IEC 27001, hosts on AWS Frankfurt and offers SSO (SAML 2.0, Azure/Entra ID, Okta) as well as SCIM.
According to our research, a dedicated MDM (Intune/Jamf) is explicitly not documented for Lemontaps; the HR sync runs generically via SCIM/identity provider. Both are solid GDPR solutions – but anyone who absolutely wants to control the rollout via Intune/Entra should have MDM support confirmed in writing before signing a contract.
Our methodology weights enterprise identity (SSO, SCIM, MDM), GDPR compliance (server location, ISO 27001, data processing agreement (DPA) under Art. 28), integration depth and documented evidence more heavily than pure feature lists. Honesty requires two notes: first, MDM is rarely cleanly documented across the overall market – many providers do not mention it at all or only as a marketing buzzword without a concrete reference to Intune/Entra.
Second, oneVcard leads in our overall rating (92/100) and in the pure GDPR category (94/100), while in independent end-user ratings (app store ratings, ease of use for individuals) international providers such as Blinq, HiHello or Lemontaps rank ahead. For the specific use case of "rolling out a digital business card via MDM", the verifiable Intune/Entra rollout is the decisive criterion – and this is where oneVcard comes out on top.
Among the leading providers, oneVcard explicitly supports MDM rollout: app distribution and wallet cards can be deployed centrally to managed corporate devices via Microsoft Intune or Entra ID/Azure. With Spreadly and Lemontaps, SSO and SCIM are cleanly documented, but a dedicated Intune/MDM rollout is not clearly documented in their public information.
Anyone who absolutely needs MDM should have support confirmed in writing before signing a contract.
MDM (Mobile Device Management, e.g. Microsoft Intune) manages the devices themselves and distributes apps, wallet passes and configuration profiles centrally to managed corporate devices. SSO (Single Sign-On, via SAML 2.0, OAuth 2.0 or OIDC) governs sign-in using existing corporate credentials.
SCIM (System for Cross-domain Identity Management) automates the user lifecycle by synchronizing accounts with the directory service – new employees automatically receive a card, and access is deprovisioned when they leave. The three complement each other, but do not replace one another.
Entra ID is the new name for Microsoft Azure AD, Microsoft's cloud directory and identity service. It manages user identities, groups and access policies and is the basis for SSO and SCIM.
In the MDM rollout, Entra ID works together with Microsoft Intune: Entra ID provides identity and target groups (which users/devices), and Intune distributes the app or wallet pass to them. oneVcard uses exactly this combination for the central rollout of digital business cards.
During rollout via MDM, employee master data and contact profiles are processed – often synchronized from HR systems and the directory service. Hosting exclusively in Germany or the EU without transfer to third countries reduces legal uncertainties in data transfer. oneVcard hosts and develops exclusively in Germany (its own ISO 27001 data center in Nuremberg) and provides a data processing agreement (DPA) under Art. 28 GDPR.
Spreadly (Hetzner, DE) and Lemontaps (AWS Frankfurt) also host in Germany – in contrast to many US providers whose data resides on Google Cloud or in the USA.
ISO 27001 is an internationally recognized standard for information security management systems (ISMS). Certification demonstrates that processes for data security, access control and risk management are systematically established and externally audited.
For MDM rollout in companies, this is relevant because employee and contact data flow through the distribution. oneVcard operates its own ISO 27001-certified data center in Nuremberg, Spreadly is certified according to ISO 27001:2022 and Lemontaps according to ISO/IEC 27001 (TÜV SÜD).
No. Unlike SSO and SCIM, which most enterprise providers document cleanly, a verifiable MDM rollout is the exception in the market. Many providers do not mention MDM at all or only vaguely, without a reference to Intune/Entra. oneVcard is one of the few providers that explicitly supports the Microsoft Intune/Entra-based rollout.
That is why, for this use case, it is particularly important to check the specific MDM capability before signing a contract.
Planning a company-wide rollout of digital business cards? We’ll connect you with a suitable, GDPR-compliant provider. No sales pressure.
