Frequently asked questions about CardIQ

What is the Identity Dashboard?

The Identity Dashboard provides administrators with a real-time overview of their organization's identity health, including verification status, trusted domains, QR protection, security alerts, meeting readiness, and employee identity metrics.

How is the Identity Health Score calculated?

The CardIQ Identity Health Score combines verified employee coverage, trusted domain configuration, meeting readiness, signature configuration, LinkedIn connection coverage, and penalties for reviews, frozen identities, and open security alerts. The dashboard shows the exact contribution of each signal.

What is CardIQ?

CardIQ is a company-controlled employee identity verification platform, not just a digital business card app. It helps companies manage profiles marked Verified by CardIQ, support company domain verified workflows, protect brand identity, and reduce impersonation and social engineering risks.

What does LinkedIn connection mean in CardIQ?

Employees can connect their LinkedIn profile. CardIQ may show “LinkedIn profile connected,” display name, and optional public LinkedIn URL. This adds professional context and supports admin review, but it is not official LinkedIn employee verification.

What are Company Highlights?

Company Highlights are professional announcements published by an authorized company administrator. They may include company news, product launches, partnerships, awards, certifications, or important updates, and appear on employee CardIQ profiles according to the selected target audience.

What are Verified Highlights?

Verified Highlights are professional achievements such as completed projects, certifications, promotions, awards, or events submitted by employees and approved by an authorized company administrator before appearing on the public CardIQ profile.

How does CardIQ help reduce impersonation and social engineering risks?

CardIQ uses signature verification links, QR validation, company-controlled employee profiles, branded virtual meeting backgrounds with active employee QR, and admin review to help recipients confirm identity details and reduce risk.

How do company email signature templates work?

Company Admins can publish a controlled email signature template that uses approved employee and company information. The same design is then generated automatically for eligible employees, while employee-specific details such as name, title, contact information, QR code, and profile link remain personalized.

What is signature verification?

Email signatures can include a CardIQ verification link or QR code so recipients can validate the employee profile through CardIQ.

How do I report a suspicious identity?

Use Report suspicious identity on the public profile or signature verification page. CardIQ sends the report for admin review when available.

Why do I need to enter the sender email?

CardIQ asks you to compare the sender email from your email app with the CardIQ signature profile. This helps confirm that the email sender matches the company-controlled employee identity linked to the signature.

What does signature risk assessment mean?

CardIQ signature verification checks whether the signature links to an active company-controlled profile and whether key trust signals, such as company domain verification, are available. If the company/domain is verified and the profile is active, the risk assessment can show low risk. If signals are missing, it recommends review.

What is a branded virtual meeting background?

Companies can use branded meeting backgrounds with active employee QR or validation links to add a company-controlled verification layer during online meetings.

What is Employee Identity Freeze?

Employee Identity Freeze lets authorized admins temporarily place an employee profile under review. During the freeze, CardIQ avoids presenting the profile, signature, or meeting QR as low risk and hides sensitive actions such as booking or vCard download.

How do I clear QR Under Review?

Authorized admins can open the related QR abuse alert and use Resolve and clear QR review after completing their investigation. This clears the review state without deleting the QR or deactivating the employee.

What is Trusted Domain Policy?

Trusted Domain Policy lets a company define which email domains are approved for employee identities. After a company admin verifies their registration email, CardIQ can automatically add that email domain as a trusted domain. If an employee email does not match the trusted domain policy, CardIQ can show Review recommended instead of presenting the identity as low risk.

What is an inactive trusted domain?

An inactive trusted domain is retained for audit history but is not used by CardIQ to trust employee email addresses or determine identity status.

Why does my workspace show Review recommended?

Review recommended means one or more identity trust signals need admin attention, such as domain verification, trusted domain policy mismatch, inactive workspace, or frozen employee identity. Admins can review the reason in the workspace header or Company Configuration.

Does this prove domain ownership?

No. A trusted domain created from a verified admin email means the admin verified an email address on that domain. Full domain ownership verification requires a separate DNS verification step.

What is Meeting Identity Check?

Meeting Identity Check is a short CardIQ guidance section on the employee QR/profile page. It explains safe signals such as active employee status, company-controlled profile, QR/profile validity, company domain verification when available, and whether admin review is recommended. It does not analyze video/audio or prove the meeting participant is real.

How does CardIQ protect online meetings?

CardIQ helps reduce meeting impersonation risk with branded virtual meeting backgrounds, active employee QR validation, company-controlled employee profiles, inactive-profile warnings when an employee is deactivated, and admin review.

Can CardIQ detect deepfakes?

No. CardIQ does not analyze video/audio, does not detect deepfakes, and does not guarantee the meeting participant is real. It adds a company-controlled verification layer through branded meeting backgrounds, active employee QR validation, inactive-profile warnings, and admin review.

Can CardIQ generate Teams or Zoom links automatically?

In the current setup, CardIQ can show employee or company booking links, or generate an email meeting request from the verified employee profile. Automatic Teams or Zoom meeting creation requires calendar/meeting API integration and admin consent, which is a future integration option.

What does the meeting QR prove?

The meeting QR proves that the QR links to a CardIQ employee profile and can show whether that profile is active and company-controlled. It does not prove the person in the video is physically the same person or guarantee they are real. If the employee is deactivated, the profile shows an inactive warning.

How does CardIQ protect employee data?

CardIQ uses company scoping, RBAC, audit logging, security alerts, admin MFA foundation, manual universal logout/session revocation, and safe metadata handling. Sensitive values like secrets, tokens, API keys, OAuth payloads, cookies, session IDs, and raw diagnostic data should never be exposed.

What is RBAC in CardIQ?

Role-based access control limits access based on role and company scope, such as Super Admin, Company Admin, staff, and employee access.

Does CardIQ support business card OCR?

Yes, the mobile app supports business card OCR on Android to help capture lead/contact details from physical cards. Users can review and edit details manually before saving. Business card OCR is available on Android. You can still enter lead details manually.

What security features are available or being added?

CardIQ includes or is adding a tamper-evident identity audit ledger, Enterprise security alerts, security alert email notifications, impossible travel detection foundation, manual universal logout/session revocation, admin MFA foundation, LinkedIn coverage report, and review messaging such as “Potential identity risk. Admin review recommended.”

What plans does CardIQ offer?

CardIQ offers Free, Pro, and Enterprise plans. Free supports up to 3 active employee profiles with essential digital card and identity-sharing features, Pro adds advanced CardIQ tools with annual pricing, and Enterprise adds full CardIQ and AttendanceIQ capabilities.

What is included in the Free plan?

The Free plan supports up to 3 active employee profiles with essential digital card and identity-sharing features. Advanced branding, integrations, analytics, and enhanced identity governance require Pro or Enterprise.

How much does Pro cost?

Pro is currently offered internationally at $3.99 per user per month, billed annually at $47.88 per user. The standard displayed price is $9.99 per user per month. In Egypt, local Pro pricing is EGP 49.99 per user per month, billed annually at EGP 599.88 per user.

Compare Free, Pro & Enterprise.

Free supports up to 3 users with essential digital identity and card sharing. Pro adds advanced branding, identity controls, analytics, leads, integrations, and company-managed employee profiles at the current annual Pro pricing. Enterprise is contact sales for enterprise controls, custom limits, and full AttendanceIQ.

Who is CardIQ built for?

CardIQ is built for HR, IT, Sales Operations, Compliance teams, and company admins that need a consistent way to manage employee-facing identity and contact details.

Can admins control employee profile updates?

Yes. Company admins manage employee profiles, company branding, templates on eligible plans, and profile approval workflows so public information stays aligned with company policy.

What happens when an employee leaves the company?

Admins can disable or control employee profiles, QR profiles, and company-issued cards when an employee leaves or changes roles. If an employee is deactivated, the public profile and meeting QR flow will not be presented as active and will show a clear inactive-profile warning.

Can CardIQ capture leads from digital business cards?

Yes. CardIQ employee profiles can include lead capture so visitors can send inquiries from a digital business card to the company workflow.

Does CardIQ support CRM integrations?

Yes. CardIQ supports secure webhook delivery for lead data so eligible company workspaces can route captured leads toward CRM tools and internal sales workflows.