Frequently asked questions about CardIQ

What is CardIQ?

CardIQ is a company-controlled employee identity verification platform, not just a digital business card app. It helps companies manage profiles marked Verified by CardIQ, support company domain verified workflows, protect brand identity, and reduce impersonation and social engineering risks.

What does LinkedIn connection mean in CardIQ?

Employees can connect their LinkedIn profile. CardIQ may show “LinkedIn profile connected,” display name, and optional public LinkedIn URL. This adds professional context and supports admin review, but it is not official LinkedIn employee verification.

How does CardIQ help reduce impersonation and social engineering risks?

CardIQ uses signature verification links, QR validation, company-controlled employee profiles, branded virtual meeting backgrounds with active employee QR, and admin review to help recipients confirm identity details and reduce risk.

What is signature verification?

Email signatures can include a CardIQ verification link or QR code so recipients can validate the employee profile through CardIQ.

How do I report a suspicious identity?

Use Report suspicious identity on the public profile or signature verification page. CardIQ sends the report for admin review when available.

Why do I need to enter the sender email?

CardIQ asks you to compare the sender email from your email app with the CardIQ signature profile. This helps confirm that the email sender matches the company-controlled employee identity linked to the signature.

What does signature risk assessment mean?

CardIQ signature verification checks whether the signature links to an active company-controlled profile and whether key trust signals, such as company domain verification, are available. If the company/domain is verified and the profile is active, the risk assessment can show low risk. If signals are missing, it recommends review.

What is a branded virtual meeting background?

Companies can use branded meeting backgrounds with active employee QR or validation links to add a company-controlled verification layer during online meetings.

What is Employee Identity Freeze?

Employee Identity Freeze lets authorized admins temporarily place an employee profile under review. During the freeze, CardIQ avoids presenting the profile, signature, or meeting QR as low risk and hides sensitive actions such as booking or vCard download.

What is Trusted Domain Policy?

Trusted Domain Policy lets a company define which email domains are approved for employee identities. After a company admin verifies their registration email, CardIQ can automatically add that email domain as a trusted domain. If an employee email does not match the trusted domain policy, CardIQ can show Review recommended instead of presenting the identity as low risk.

Does this prove domain ownership?

No. A trusted domain created from a verified admin email means the admin verified an email address on that domain. Full domain ownership verification requires a separate DNS verification step.

What is Meeting Identity Check?

Meeting Identity Check is a short CardIQ guidance section on the employee QR/profile page. It explains safe signals such as active employee status, company-controlled profile, QR/profile validity, company domain verification when available, and whether admin review is recommended. It does not analyze video/audio or prove the meeting participant is real.

How does CardIQ protect online meetings?

CardIQ helps reduce meeting impersonation risk with branded virtual meeting backgrounds, active employee QR validation, company-controlled employee profiles, inactive-profile warnings when an employee is deactivated, and admin review.

Can CardIQ detect deepfakes?

No. CardIQ does not analyze video/audio, does not detect deepfakes, and does not guarantee the meeting participant is real. It adds a company-controlled verification layer through branded meeting backgrounds, active employee QR validation, inactive-profile warnings, and admin review.

Can CardIQ generate Teams or Zoom links automatically?

In the current setup, CardIQ can show employee or company booking links, or generate an email meeting request from the verified employee profile. Automatic Teams or Zoom meeting creation requires calendar/meeting API integration and admin consent, which is a future integration option.

What does the meeting QR prove?

The meeting QR proves that the QR links to a CardIQ employee profile and can show whether that profile is active and company-controlled. It does not prove the person in the video is physically the same person or guarantee they are real. If the employee is deactivated, the profile shows an inactive warning.

How does CardIQ protect employee data?

CardIQ uses company scoping, RBAC, audit logging, security alerts, admin MFA foundation, manual universal logout/session revocation, and safe metadata handling. Sensitive values like secrets, tokens, API keys, OAuth payloads, cookies, session IDs, and raw diagnostic data should never be exposed.

What is RBAC in CardIQ?

Role-based access control limits access based on role and company scope, such as Super Admin, Company Admin, staff, and employee access.

Does CardIQ support business card OCR?

Yes, the mobile app supports business card OCR on Android to help capture lead/contact details from physical cards. Users can review and edit details manually before saving. Business card OCR is available on Android. You can still enter lead details manually.

What security features are available or being added?

CardIQ includes or is adding a tamper-evident identity audit ledger, Enterprise security alerts, security alert email notifications, impossible travel detection foundation, manual universal logout/session revocation, admin MFA foundation, LinkedIn coverage report, and review messaging such as “Potential identity risk. Admin review recommended.”

What plans does CardIQ offer?

CardIQ offers Free, Pro, and Enterprise plans. Free supports Basic CardIQ for one employee, Pro adds advanced CardIQ tools, and Enterprise adds full CardIQ and AttendanceIQ capabilities.

Who is CardIQ built for?

CardIQ is built for HR, IT, Sales Operations, Compliance teams, and company admins that need a consistent way to manage employee-facing identity and contact details.

Can admins control employee profile updates?

Yes. Company admins manage employee profiles, company branding, templates on eligible plans, and profile approval workflows so public information stays aligned with company policy.

What happens when an employee leaves the company?

Admins can disable or control employee profiles, QR profiles, and company-issued cards when an employee leaves or changes roles. If an employee is deactivated, the public profile and meeting QR flow will not be presented as active and will show a clear inactive-profile warning.

Can CardIQ capture leads from digital business cards?

Yes. CardIQ employee profiles can include lead capture so visitors can send inquiries from a digital business card to the company workflow.

Does CardIQ support CRM integrations?

Yes. CardIQ supports secure webhook delivery for lead data so eligible company workspaces can route captured leads toward CRM tools and internal sales workflows.