Security · GDPR · accessibility
Your data and your contacts’ data, kept safe.
A business card holds personal data: yours and that of anyone who leaves theirs. Here is how we protect it, and what we can’t claim yet.
Technical and organisational measures
Hosted in the EU
Servers in the European Union. Service data does not leave the European Economic Area, except what you send to the optional automatic AI reading, if you use it.
Encryption in transit
All traffic between your browser and TARJE2ME is encrypted over HTTPS.
Roles and permissions
Super-admin, entity admin, editor and employee. Each person sees and manages only what is theirs.
Passwordless sign-in
You sign in with a one-time code sent to your email: there are no passwords to steal or reuse.
Backups
Regular backups, also stored in the European Union.
Audit log
Every change in an organisation is logged: who, what and when.
Privacy by design
- Whoever opens your card stays anonymous. We measure channel, device and date; never who they are, unless they leave their details.
- Explicit consent every time someone leaves their details, recorded with date and wording.
- Your data is yours: download or delete it whenever you like.
- We comply with the GDPR and Spanish data protection and e-commerce law. With organisations we sign a data processing agreement, which includes the list of sub-processors.
Accessible to everyone
The public card, the app and the dashboard are designed to meet WCAG 2.2 level AA: sufficient contrast, keyboard navigation, alternative text and screen reader support. Details are in the accessibility statement.
Certifications: what we have and what we don’t
Today we do not hold certification under Spain’s National Security Framework (ENS) or ISO 27001. We use the ENS measures as a design reference and have mapped out a roadmap towards certification. When we get it, we will say so here, with its number.
Need more technical detail?
We’ll walk you through it in a demo or in writing for your IT department or data protection officer.