Replace the paper visitor book with a 60-second check-in for visitors, deliveries and contractors. Documented safety inductions, a live evacuation list, DSGVO retention — EU-hosted in Frankfurt, no hardware lock-in, from a flat €99/month.

The same flow runs at every reception. Identical UX in German and English, identical evidence trail — what your auditor sees in Linz is what they see in Graz.
Visitor approaches the iPad kiosk; idle screen wakes on motion.
Pre-registered guests scan invite QR — no typing on shared glass.
Per-site safety quiz with passing score and validity window.
Front-camera capture; SVG signature stored with timestamp.
Branded badge prints via AirPrint or Zebra ZPL direct IP.
AI is a tool here, not a tagline. Two concrete features ship today — safety-induction translation and anomaly-based login monitoring. Both run on EU infrastructure (Microsoft Azure, Westeurope), both are auditable, both can be disabled per tenant.
Quizzes and induction PDFs are translated into 12 European languages with Azure Neural MT, including span-aware PDF rewriting that preserves the original layout, fonts and diacritics. Tenant admins review every translation before it goes live.
Each authenticated request runs through an impossible-travel + new-device check (UA-family + OS + country fingerprint, MaxMind GeoIP). Suspicious patterns email the affected user, log to the security dashboard, and feed the NIS2 audit trail.
No LLM training on visitor data. Translation runs through Microsoft Azure (EU region, no logging), not third-party generative APIs. No biometric capture by default, no facial-recognition, no automated decisions on visitors. Every AI feature is opt-out by tenant policy.
We don't use AI to score visitors, predict risk, or make binding decisions on entry. Where AI runs (translation, anomaly detection), the engine, the inputs, and the outputs are documented and reviewable in the dashboard. AI Act Art. 6 / Annex III: none of these are high-risk uses.
One backend, three surfaces. Visitors check in at the kiosk. Hosts run their day from the phone. Compliance and IT live in the dashboard. Every event flows through one Postgres in Frankfurt.

Pre-register, sign in, sign out, and trigger evacuation — without leaving the floor.

Touchscreen check-in with NDA signature, photo capture, QR self-checkout, and delivery mode.

Below is the controls sheet your compliance team will ask for. Each card maps a regulation to the concrete mechanism in the product.
Per-tenant audit log: actor, role, tenant_id, IP, user-agent, country (MaxMind GeoIP), endpoint, response code. Retention configurable; 21 days default for connection logs.
Per-tenant retention window (e.g. 90 days). A nightly job purges visits, induction answers, signatures and badge artefacts older than the window.
Fernet (AES-128-CBC + HMAC-SHA256) on Twilio tokens, SMTP credentials, Entra client secrets, Outlook refresh tokens. TLS 1.3 in transit.
Report engine emits PDF/A with detached signature placeholder. Sign with any EU-listed QTSP — activated per deployment, not by us.
Adib VMS implements the controls; your DPO certifies the workflow. We're not formally ISO 27001 or SOC 2 certified — we ship the mechanisms, send the AVV, and let your auditor close the loop. If a vendor claims to be NIS2-certified, ask which body issued the certificate. There isn't one yet.
Adib VMS plugs into the Microsoft 365 office your team already runs — least-privilege scopes, no shadow IT, full audit by your workspace admin.
scope = openid · profile · email · User.ReadDelegated only. No app-only Graph. No Mail.*, no Files.*, no Directory.Read.All.
scope = Calendars.ReadWrite · offline_accessSame Azure app as SSO. Pushes pre-registration as a 60-min event with the visitor as required attendee.
transport = incoming webhook · channel-scopedNo Graph permissions on our side. Workspace admin retains revocation. Card on every check-in.
transport = incoming webhook · per siteOne webhook URL per site. No chat:write, no channels:history, no users:read.
transport = HTTP webhook · signed · SSRF-guardedEvery event (check-in, check-out, evacuation, induction passed/failed) can fan out to any HTTP endpoint.
byo = account_sid · auth_token · messaging_service_sidBring-your-own Twilio for SMS invites. Tokens encrypted at rest (Fernet). Or use our global default.
Compiled from publicly listed pricing and documentation, May 2026. Cells marked "—" mean the feature is not advertised on the provider's public site.
| Criterion | Adib VMS | Proxyclick | Envoy | SwipedOn | Vizito |
|---|---|---|---|---|---|
| Monthly price | €99 | from €100/loc | from $149/loc | from $69/loc | from €25 |
| EU hosting | Frankfurt · FRA1 | EU available | US default | AU/NZ default | EU |
| Contract partner | AT · UID ATU82628756 | FR · Letsbuildit | US · Envoy Inc. | NZ · SwipedOn | BE · Vizito |
| M365 SSO + Outlook calendar | Both · one Azure app | SSO only | SSO only | limited | limited |
| Teams / Slack / Power Automate | All events · signed | partial | partial | partial | partial |
| NIS2 audit log + GeoIP | Built-in | ||||
| AVV / DPA before signature | Yes | Yes | Yes | Yes | Yes |
| Signed PDF reports (eIDAS) | Activatable · any EU QTSP |
Forever-free plan available. No credit card required. Upgrade anytime.
Perfect for small sites
Approval within 24 hours
✓ No setup fees • ✓ Cancel anytime • ✓ GDPR compliant • ✓ EU data hosting
Prices excl. VAT. Invoiced by Adib Solutions, Linz, Austria — UID ATU82628756. Stripe (card, SEPA Direct Debit) or SEPA bank transfer with proper Austrian USt. line item. Annual plans do not auto-renew without your confirmation.
Tap to expand each answer. If we missed yours, the phone and email below are real and we answer in DE or EN.
We provision your dedicated tenant in 24 hours. Use it on your live site for 30 days. Cancel by email before day 30 if it isn't right — no card on file, no recurring charge.