Public sector event managementProcurement-ready and documented.
Procurement-ready attendee management for European public bodies: hosted in Germany, with evidence for the contracting authority, from conferences to members’ meetings. Accessibility of the registration flow we audit and document in the project.
- 1Registration without an account
Participants sign up without creating an account and without payment.
- 2Needs as a field
Wheelchair space or companion is part of the registration and visible on site.
- 3Hosted in Germany
GDPR-compliant, with a data processing agreement.
What decides what is allowed for European public bodies
Four rules that apply before purchasing and before every event, what each means, and where it comes from.
Procurement thresholds 2026
From 140,000 euros (central government) and 216,000 euros (other contracting authorities), contracts are tendered EU-wide; below that, national rules apply.
Source: CMS: new EU thresholds 2026 (German)Web Accessibility Directive
Websites and mobile apps of public sector bodies must be accessible, assessed against EN 301 549, with an accessibility statement. Germany implements it in the BITV 2.0.
Source: Directive (EU) 2016/2102European Accessibility Act
Since June 28, 2025 for e-commerce services to consumers, online ticketing included; pure B2B offerings are not covered.
Source: Directive (EU) 2019/882BSI C5 for cloud services (Germany)
The German federal administration uses external cloud services only with evidence based on the C5 criteria catalog and IT-Grundschutz.
Source: BSI: minimum standard for external cloud services (German)These summaries are not legal advice; what counts are your contracting authority and your accessibility and data protection officers. How AirLST processes data is described in the Trust Center.
Who invites, who checks, and what each one needs
Which evidence goes into the procurement file?
Hosting in Germany, GDPR with a data processing agreement, the TISAX assessment and the certifications of the hosting provider AWS, BSI C5 among them.
Trust CenterHow do citizens register without creating an account?
Registration on the event website without an account, a waitlist when the room is full, and confirmation by email.
Event registrationHow do I prove there is a quorum?
Registration with proxies, QR scan at the entrance, attendance register and online voting for the meeting.
Annual general meetingsWhere is attendee data stored?
On AWS in Germany, processed under the GDPR; the privacy notice belongs in every registration.
GDPRTypical events of public bodies, chambers and associations
How each event runs in AirLST is on the linked page. Associations account for 16.3 percent and public institutions for 9.1 percent of all event organizers in Germany.
What the public sector requires and how AirLST delivers it
Standard means it is in the product and documented on the feature or solution page. Custom build means AirLST builds it for you in the project; scope and effort are part of the conversation.
| Requirement | Standard | Custom build | More |
|---|---|---|---|
| Registration without account or paymentCustom forms with standard and additional fields; payment only if you include it. | – | Event registration | |
| WaitlistWhen the room is full, further registrations go to the waitlist and move up. | – | Event registration | |
| Privacy notice per eventNotice and consent sit in registration; consents are signed digitally and stored on the guest record. | – | Event access control | |
| Event website in several languagesPages for program, travel and FAQ, language versions and your own domain. | – | Event websites | |
| Meetings with attendance and votingNotice with deadline, registration with proxies, QR scan at the entrance, attendance register, online voting. | – | Annual general meetings | |
| APIREST API to connect your systems. | – | Integrations | |
| Accessibility audit of the registration flowAn audit of registration form, event website and emails against WCAG 2.1 AA with an accessibility statement is a custom build by AirLST. | – | Custom development | |
| Certificate of attendance as PDFA certificate per attendee after the event is a custom build by AirLST. | – | Custom development | |
| Separate areas per departmentSeparate areas for departments or units with their own permissions are a custom build by AirLST. | – | Custom development |
Security and data protection
- TISAX-assessed
AirLST has been assessed under TISAX, the information security standard of the automotive industry.
TISAX at AirLST - Hosted in Germany
The platform runs on Amazon Web Services in Germany. The AWS infrastructure holds ISO/IEC 27001, SOC 2 and BSI C5; these are certifications of our hosting provider, not of AirLST.
Data hosting - GDPR and DPA
Processing follows the GDPR, with a data processing agreement; the current list of subprocessors is provided with it.
GDPR - Signed at the guest
Consents and NDAs are signed digitally and stored with the guest record; the entrance sees at the scan whether the signature is there.
Event access control
Tickets and fees are paid in the registration form through Stripe, Mollie or PayPal. Revenue goes straight to your account; card data stays with the provider.
Event ticketingHow public bodies and associations typically set up AirLST
- 01
Registration without an account
Through the event website, with confirmation by email and no payment.
- 02
Privacy notice in every registration
Notice and consent per event, stored on the guest record.
- 03
Waitlist
When the room is full, further registrations go to the waitlist.
- 04
Member number and voting rights
As registration fields, for the attendance register and voting.
- 05
Language versions
Event website and registration in several languages.
Used by chambers, ministries and public companies
Graduation ceremony with photo upload and badge printing
900 attendees, 900 photo uploads at registration, 900 check-ins at the entrance and automated badge printing.
Read the case study Case study · Munich Airport80,000attendeesSummer festival, Music Days and Airport Days with QR tickets
80,000 attendees, QR code tickets and 20 check-in points, with AirLST on site.
Read the case studyA quarter of all organizers
According to the Meeting- und EventBarometer 2025, associations make up 16.3 percent, public institutions 9.1 percent and science 6.1 percent of all event organizers in Germany (EVVC, German PDF). Each of these events runs on a registration that has to pass procurement and data protection law.
What tenders for attendee management ask for
Tenders of the past two years repeatedly ask for software as a service hosted in Germany, accessibility to WCAG 2.1 AA, an API, multiple languages and separate areas for several units, for example at IT.NRW (TED 240097-2025) and DAAD (TED 323636-2024). For the German federal administration, evidence based on C5 and IT-Grundschutz comes on top.
Procurement-ready means every requirement has evidence.
Document accessibility, do not just claim it
An accessibility statement needs an audit of the actual registration flow: form, event website, confirmation email (Directive (EU) 2016/2102). AirLST carries out this audit in the project through custom development; how accessible this website itself is, see accessibility.