Encrypted in transit
Everything on card1.net runs over HTTPS with strict transport security — taps, scans, uploads, logins, all of it.
Trust & security
Your card is public. Everything else is yours.
A business card is meant to be shared — your private documents, your leads and your account are not. Here's exactly how we treat each.
How your data is protected
Private files stay private
Vault documents are stored outside the public web space and streamed only after permission checks. A private document has no public URL at all.
Share links that die
Sharing a private document mints a one-off link that expires after a set time and a capped number of opens — send it instead of emailing the file.
Access logs
Every document access is recorded — when, how and from where — and shown to you in your vault. You always know if something was opened.
No ad trackers
Your card pages carry no third-party advertising trackers. Your visitors are your contacts, not our product.
Passwords done properly
Passwords are stored as strong one-way hashes — we couldn't read them if we wanted to. Sessions are protected against fixation and forgery.
Your rights, in plain English
Card1 is a UK service and follows UK GDPR. You can export your leads to CSV at any time, download your documents, and delete what you've uploaded. Your contact data belongs to you — we don't sell it, rent it or mine it. The full detail lives in our privacy policy, and if you have a question a human answers at hello@card1.net.
Found something?
If you believe you've found a security issue in Card1, tell us directly at hello@card1.net with "SECURITY" in the subject line. We read those first and we fix fast.
Confidence you can hand to a client
Encryption on, documents in the vault, everything logged.
Create my free card