Automotive event management softwareConfidentiality that holds at the door.
Launches, prototype previews and driving events that stay confidential through check-in, run on a TISAX-assessed platform. The NDA and photo consent sit on the guest record, the invitation is closed, and the scan checks both.
- 1NDA before entry
The confidentiality agreement is signed digitally at registration.
- 2Access by zone
The scan shows whether permission and signature are in place.
- 3Allocations per region
Each region invites against its allocation; headquarters sees the status.
What decides what is allowed at automotive events
Four rules that apply before any launch or driving event, what each means for the event, and where it comes from. German automakers apply them to suppliers and agencies worldwide.
VDA ISA chapter 8.5: events and shootings
Showing prototypes requires a security concept for the event, photo approval, NDAs and a visitor policy with a documented camera ban. Incomplete NDA registers and camera bans that are not enforced are among the most common audit findings.
Source: Prototype protection under VDA ISA 6 (secjur, German)The vendor’s TISAX label
The automaker sets the assessment level (AL1 to AL3); results are shared through the ENX Association portal and are valid for three years. Agencies and event software that handle prototype information need the required label. AirLST is TISAX-assessed.
Source: ENX Association: TISAXProtection classes for prototypes
The German automotive association VDA sets minimum requirements for prototype protection with classes up to “very high”. The automaker assigns the class; the measures at every presentation follow from it, from who is invited to how they get in.
Source: VDA: Minimum requirements for prototype protectionDriving events: license and liability waiver
Automakers set a minimum age, a license held for several years, original license and ID, and a signed liability waiver for driving events. Porsche in Germany, for example, requires drivers to be 25, licensed for three years and at zero blood alcohol.
Source: Porsche: liability waiver (German PDF)These summaries are not legal advice; what counts are the requirements of your company and your information security team. How AirLST processes data is described in the Trust Center.
Who invites, who checks, and what each one needs
How does the model stay secret until the embargo lifts?
With a closed invitation: the event site and registration are built for invited guests only, and the embargo date and photo consent sit on each guest record.
Event websitesHow do I allocate seats across hundreds of dealers?
Each dealer is a guest group with an allocation; head office sees uptake, returned seats and the waitlist by region and reallocates before seats go unused.
Guest listWhat do I have to prove to the automaker?
Your own TISAX label and software that is assessed too, plus NDAs and photo consents per attendee that are ready for the audit.
TISAX at AirLSTWho was allowed into which hall?
Access control checks permission and signature at the scan; the entrance sees in real time who is in and who is not.
Event access controlTypical events in the automotive industry
How each event runs in AirLST is on the linked page. Here is why it comes up in this industry.
What the industry requires and how AirLST delivers it
Standard means it is in the product and documented on the feature page. Custom build means AirLST builds it for you in the project; scope and effort are part of the conversation.
| Requirement | Standard | Custom build | More |
|---|---|---|---|
| Sign NDAs digitallyEvery guest signs the confidentiality agreement digitally; it is stored on the guest record and checked at the scan. | – | Event access control | |
| Confirm camera ban and photo consentCamera ban and photo consent are signed consents on the guest record, not a sign at the door. | – | Event access control | |
| Closed invitationEvent site and registration are built for invited guests only, not for the public. | – | Event websites | |
| Embargo date and protection class per guestCustom registration fields store the embargo date, protection class or attendee group for each guest. | – | Event registration | |
| Allocations by dealer and regionAllocation management and waitlist: uptake, returned seats and open seats per dealer in one list. | – | Guest list | |
| Access control at the doorQR scan online and offline, badges printed in near real time, smart gates for large events. | – | Event access control | |
| Driving events: license, companions, waiverLicense check, companions and the signed liability waiver are steps of registration. | – | Ride-and-drive events | |
| NDA register as audit exportAn export of all NDAs and photo consents per event in the format of your TISAX audit is a custom build by AirLST. | – | Custom development | |
| A login for each dealershipIf each dealership should see only its own guests and invite them itself, AirLST builds that as a custom build. | – | Custom development | |
| Vehicles as bookable time slotsSlots per vehicle without double bookings and a driving log on the guest record are a custom build by AirLST. | – | Custom development | |
| Escort duty with a logA log of who escorted whom through which zone, for plant security, is a custom build by AirLST. | – | Custom development |
Security and data protection
- TISAX-assessed
AirLST has been assessed under TISAX, the information security standard of the automotive industry.
TISAX at AirLST - Hosted in Germany
The platform runs on Amazon Web Services in Germany. The AWS infrastructure holds ISO/IEC 27001, SOC 2 and BSI C5; these are certifications of our hosting provider, not of AirLST.
Data hosting - GDPR and DPA
Processing follows the GDPR, with a data processing agreement; the current list of subprocessors is provided with it.
GDPR - Signed at the guest
Consents and NDAs are signed digitally and stored with the guest record; the entrance sees at the scan whether the signature is there.
Event access control
Tickets and fees are paid in the registration form through Stripe, Mollie or PayPal. Revenue goes straight to your account; card data stays with the provider.
Event ticketingHow automakers and agencies typically set up AirLST
- 01
Closed invitation
Event site and registration for the guest list only, in the brand’s design.
- 02
Required fields for the attendee group
Company, role, dealer number, embargo date or protection class as registration fields.
- 03
NDA and photo consent before entry
Digital signature in registration; the scan at the entrance shows whether it is on file.
- 04
Allocations and waitlist
An allocation per dealer or region; returned seats go to the waitlist.
- 05
Driving program in registration
License check, companions and liability waiver as registration steps.
Used by automakers, suppliers and consultancies
Supplier Award with separate registration per group
Attendee groups with their own registration, delegates, surveys before and after the event, badges in three seconds each.
Read the case studyLaunch or dealer event with figures
Mercedes-Benz, Audi, BMW, Bentley and Daimler Truck are confirmed customers on our logo wall; a second case study with approved figures is pending.
All customer storiesDealer events get bigger while networks shrink
Automakers bring their dealers to fewer, larger formats that run over several weeks: Volkswagen invited about 11,000 dealers from 86 countries to its 2025 Brand Experience (autohaus.de, German). At the same time networks are consolidating; Germany counted 14,120 franchised dealerships in 2024 (autohaus.de, German). For the event this means few dates, many guests per date, allocations per dealership and a head office that reallocates returned seats fast.
Prototype protection gets audited at events
Since VDA ISA 6.0, prototype protection is its own assessment module, and events and shootings are covered in chapter 8.5. Auditors check whether the security concept, photo approval, NDAs and camera ban are not just decided but documented (secjur, German). Event agencies and photo studios are explicitly in scope (Dr. Datenschutz, German).
A sign at the door is not evidence. A signature on the guest record is.
TISAX decides who gets shortlisted
Automakers and suppliers require a TISAX label at the level they specify from every service provider that handles confidential information (secjur on assessment levels, German). A guest list for a model premiere is exactly that. AirLST is TISAX-assessed; scope and evidence are listed under TISAX at AirLST, hosting and data protection under information security.