digitale-visitenkarten.de

Guide: digital business cards in the enterprise

Basics, how they work and the decisive selection criteria – fact-based and without the marketing.

What is a digital business card for companies?

A digital business card is an electronic, always-updatable representation of the professional contact details of a person or organization. Instead of a printed card, the name, position, company, phone number, email address, postal address and website, plus optionally a profile picture, logo, social media profiles and calls to action (such as appointment booking or vCard download), are bundled into a digital profile and shared via a permanent link, a QR code or an NFC data carrier.

In a corporate context (B2B), a digital business card differs from a private individual card through its central manageability: an administrator sets up standardized templates (corporate design, mandatory fields, legal notice/imprint) via a management dashboard, rolls out cards for entire teams or departments, updates data centrally and deactivates the cards of departing employees. This turns the digital business card into a managed identity and contact instrument that ensures brand consistency, data protection compliance and traceability (such as contact/lead capture) across the entire workforce.

Technically, the format builds on the open vCard standard. The vCard (file extension .vcf, "Virtual Contact File") has been specified since the 1990s; the current version, vCard 4.0, is defined in the IETF's RFC 6350 and mandates UTF-8 encoding, while in practice vCard 3.0 (RFC 2426) remains the most commonly used version due to its broadest compatibility with iOS, Android, Outlook and CRM systems. This standard ensures that shared contact data can be imported across devices.

How does a digital business card work? (NFC, QR code, Wallet)

A digital business card can generally be shared via three channels that all reference the same underlying profile: NFC, QR code and Wallet pass. In addition, a direct profile link always works and can be embedded in email signatures, chats or on printed materials.

NFC (Near Field Communication): An NFC business card (as a plastic card, sticker, key fob or ID badge holder) contains a passive chip. When held against an NFC-capable smartphone, the chip transmits the data stored on it contactlessly – without the recipient needing an app or registration. The chip is programmed via an NDEF record (NFC Data Exchange Format); the most common method stores not the contact data itself, but a URL that opens the online profile. Alternatively (the offline variant), a complete vCard can be stored directly on the chip. The URL variant has the advantage that content can be changed centrally at any time, while the link on the chip remains unchanged.

QR code: The QR code is the most device-independent channel, as it can be read by any smartphone camera without NFC hardware. It either points directly to the online profile or encodes the vCard data itself. QR codes can be output on cards, displays, trade show booths, roll-ups and in email signatures.

Wallet integration (Apple Wallet / Google Wallet): The digital business card can be saved as a pass in the smartphone's native Wallet app – comparable to boarding passes or tickets. The pass typically contains the QR code and the core data, is accessible without a separate app and without an internet connection, and updates the stored data as soon as a connection is available again. On NFC-capable devices, the Wallet pass can additionally be shared by tapping.

Common principle: In the online-based approach, every channel (NFC, QR, Wallet, link) points to the same cloud-hosted profile. When the cardholder or administrator updates the data, it is immediately current across all channels, without cards having to be reprinted or redistributed. The recipient can add the contact data to their address book as a vCard with a single click.

Key B2B selection criteria for digital business cards

For corporate use, in addition to design and range of features, it is above all the data protection, integration and administration criteria that are decisive. The following points form the usual evaluation framework of a B2B selection:

GDPR compliance: The provider processes personal contact data and is therefore a data processor within the meaning of the GDPR. A prerequisite is a data processing agreement (DPA) under Art. 28 GDPR, a transparent privacy policy, and processes for data subject rights (access, deletion). When exchanging third-party contact data (for example via contact/lead capture), the legal basis for the processing must be clarified.

Server location and hosting: For many companies, hosting in Germany or the EU and refraining from data transfers to third countries is a key criterion in order to avoid legal uncertainties (for example with third-country transfers). The specific data center location and the data processor chain (subcontractors) are relevant.

Single sign-on (SSO): Connection to the company's own identity provider via standards such as SAML 2.0, OAuth 2.0 or OpenID Connect (OIDC). SSO enables login with existing corporate credentials and reduces the number of separate passwords.

SCIM (automated user provisioning): SCIM (System for Cross-domain Identity Management) automatically synchronizes user accounts and groups with the directory service. New employees automatically receive a card, role/group assignments are applied, and upon departure access is automatically deprovisioned – without manual invitations. SSO governs authentication, SCIM the lifecycle of the accounts; the two complement each other.

MDM (Mobile Device Management): Support for the central rollout of the application or of Wallet cards via an MDM solution on managed company devices, including configuration profiles.

API and integrations: Programming interfaces (REST API) as well as connectors to CRM, marketing and HR systems enable the automatic handover of captured leads and the synchronization of employee master data.

Signature management: Central management and standardized rollout of email signatures with an embedded profile link or QR code, consistent with the corporate design and legally compliant (mandatory details).

Admin management: A central dashboard with templates, mandatory fields, a role and permissions concept (RBAC), team/department structure, blocking/reactivating cards, and reporting (views, shared cards, leads).

Scaling: Suitability for large user numbers, multi-tenant structures for corporate groups with multiple entities or locations, multilingual profiles, and robust service levels (availability, support).

Frequently asked questions

What is the difference between a digital and a classic (printed) business card?

A printed business card is a static paper carrier that can no longer be changed after printing and must be handed over physically. A digital business card is an electronic profile that is shared via NFC, QR code, Wallet pass or link and can be updated centrally at any time – changed data is immediately current across all channels, without reprinting.

In addition, contact data can be added directly to the address book as a vCard with a single click, and in corporate use, central management, corporate design requirements and contact/lead capture are possible.

Does the recipient need an app to receive a digital business card?

No. In the common online-based approach, the recipient needs neither an app nor a registration. When tapping an NFC card or scanning the QR code, the smartphone opens the profile in the browser; from there, the contact data can be added to the address book as a vCard.

For NFC, the recipient's device merely needs to be NFC-capable and have the function activated; QR codes work with any camera and are therefore device-independent.

Are digital business cards GDPR-compliant?

Digital business cards can be operated in a GDPR-compliant manner if certain conditions are met. Since the provider processes personal contact data on behalf of the client, it is a data processor; what is required is a data processing agreement (DPA) under Art. 28 GDPR, a transparent privacy policy, and processes for data subject rights.

If third-party data is stored via contact/lead capture, the legal basis for the processing must be clarified. To minimize risk, hosting in Germany or the EU and refraining from data transfers to third countries are also advisable.

Why is the server location relevant for companies?

The server location determines which legal framework the data processing is subject to. Hosting in Germany or the EU avoids the legal requirements and uncertainties of a third-country transfer (for example to the USA), which would require additional safeguards.

For the evaluation, the specific data center location as well as the chain of sub-processors are decisive. Providers that operate exclusively on German or EU servers and exclude third-country transfers reduce the compliance effort for the company using the service.

What do SSO and SCIM mean in the context of digital business cards, and why are they important in B2B?

SSO (single sign-on) enables login with existing corporate credentials via standards such as SAML 2.0, OAuth 2.0 or OpenID Connect and eliminates the need for separate passwords. SCIM (System for Cross-domain Identity Management) automates provisioning: user accounts and groups are synchronized with the directory service, new employees automatically receive a card including a role assignment, and upon departure access is automatically revoked.

SSO governs authentication at login, SCIM the lifecycle of the accounts thereafter. Together, they reduce manual administrative effort and the security risk of lingering access, and are therefore central to scaled corporate use.

How does updating contact data work after sharing?

In the online-based approach, the NFC chip, QR code, Wallet pass and link all point to the same cloud-hosted profile. When the profile is changed by the cardholder or centrally by an administrator, the new data is immediately accessible across all channels, without cards having to be reprogrammed or redistributed.

Wallet passes that have already been shared update the stored data as soon as an internet connection is available again. If, however, a recipient has already imported the data into their address book as a vCard, this local address book entry is not automatically updated as well.

What is the vCard format and what role does it play?

vCard is the open standard for digital contact data that has existed since the 1990s and structures fields such as name, company, phone and email. The associated file has the extension .vcf (Virtual Contact File).

The current version, vCard 4.0, is specified in the IETF's RFC 6350 and mandates UTF-8 encoding; in practice, vCard 3.0 (RFC 2426) remains the most widespread due to its broadest device compatibility. The standard ensures that shared contact data can be imported correctly across devices – from iPhone and Android to Outlook and CRM systems.

How can cards be centrally managed and rolled out for entire teams?

Via an admin dashboard, an administrator sets up standardized templates with corporate design, mandatory fields and legal notice/imprint details, and rolls out cards for teams, departments or the entire company. A role and permissions concept (RBAC) controls access.

Via SCIM, users can be automatically provisioned from the directory service and deactivated upon departure; via MDM, the application or Wallet cards can be distributed to managed company devices. APIs and CRM connectors take over captured leads and synchronize master data, and reporting functions provide metrics on views and shared cards.

For corporate groups with multiple entities, multi-tenant structures are relevant.