Data privacy & Security

Roles and permissions define what each type of user — such as admins, exhibitors, or staff — can see and do in the platform. This helps prevent unauthorized access to sensitive data and keeps workflows efficient.

Swapcard allows you to create exhibitor groups with tailored permissions, control lead access, and even restrict editing to specific fields. This ensures partners only manage their own content and contacts.

Using group-based permissions, you can limit who can view sessions, exhibitor profiles, or specific content. This is often used for premium programming or sponsor-exclusive sessions.

Organizers set a default timezone for the event, which applies across schedules, meeting times, and communications. For virtual events, Swapcard automatically adjusts times to the attendee’s local timezone.

You can set a default language, enable multiple additional languages, and translate content directly in Studio. This helps you deliver a localized experience for international audiences.

SSO lets attendees and staff log in with existing credentials from your organization’s identity provider, reducing password fatigue and improving security. It also streamlines access across multiple event apps or services.

Organizers can configure SSO directly from Studio’s Application tab, including uploading metadata, arranging login options, and testing authentication flows before going live.

Swapcard uses SOC 2 Type 2 and ISO 27001 certified processes, AES-256 encryption, continuous monitoring, and protections against data scraping and malicious traffic.

MFA can be enabled for organizer accounts to add an extra layer of security, helping prevent unauthorized logins even if a password is compromised.

Verified organizations gain access to enhanced communication tools and reduced impersonation risk. Verification is requested and managed through Studio with documentation review by the Swapcard team.