Captello

AI is a recent layer over a product that worked for a decade without it, which is the established platform pattern this axis was written to catch. The marketed AI is an intelligent scanner, assistance identifying the best leads for follow up, and scoring models that prioritise high engagement prospects.

Remove all of it and a complete, saleable and heavily used product remains: badge scanning, customisable capture forms, offline capture with sync, gamification, registration and badge printing, meeting scheduling, enrichment, routing and 9,000 plus connectors. The vendor dates itself in its own copy, ten plus years of real world event experience on top of fifteen plus years in sales and marketing SaaS, which is the vintage the removal test reflects.

Automation here is workflow triggered rather than generative, which lowers the stakes without answering the question. A badge scan can fire real time outreach, automated email and SMS follow up and even a gift card reward, plus automatic assignment to a follow up workflow and AI assisted scoring that decides which leads get prioritised attention. That is a message leaving on a machine trigger with no human between the scan and the send.

Nothing published describes an approval step, a review queue, a suppression check at the moment of trigger, or an audit trail. The mitigating structure is that the trigger is a person physically presenting their badge rather than a model deciding to contact a stranger, and that the content is templated rather than invented, so the failure modes are smaller than in the agent products graded alongside it.

The AI features are named and described at the level of what they do rather than how. An AI powered scanner, AI that helps identify the best leads for focused follow up, and scoring models that prioritise prospects showing high engagement. No model provider, family or version is named, nothing states where inference runs, and no accuracy or error rate is published for any of the AI features.

The 98 percent figure that appears in the marketing belongs to the enrichment match rate, which is a database lookup measure rather than a model performance measure, and the two should not be read together.

Top of band, and stronger than most C grades in this index. Real third party standing exists and it is on point rather than generic: G2 category leader in Lead Retrieval, which is the category the product actually competes in, alongside published awards, testimonials and a substantial body of verified reviews including critical ones. A trade show ROI calculator and an events dashboard reporting return on investment show the vendor is at least arguing on outcome terms.

What is missing is a named customer with a measured result: no case study with a basis, no attributed pipeline or conversion figure, and the quantified claims that do appear carry no method, notably the enrichment match rate stated at up to 98 percent. Recorded as observed: the connector count is inconsistent across the vendor's own pages, appearing as 6,000 plus on some and 9,000 plus on others.

Compliance is claimed at the corporate level and absent at the outreach level. The vendor states plainly that it is SOC 2 Type 2 and ISO 27001 certified and complies with HIPAA and GDPR, which is more than most vendors here assert and the HIPAA claim in particular implies healthcare event work with a higher bar. None of it addresses the outreach the product performs.

A badge scan triggers automated email and SMS to the person scanned, and nothing published sets out the lawful basis for that follow up, whether the scan itself constitutes consent to subsequent marketing, how opt outs are handled, or how SMS consent is captured and evidenced. Consent at a trade show stand is a genuinely contested GDPR question and this vendor is squarely in it without taking a position.

Recorded as observed rather than concluded: GDPR and HIPAA compliance are asserted alongside SOC 2 Type 2 and ISO 27001, and the vendor names Drata as the compliance platform underpinning them, but the privacy policy body was not read this pass and no data subject rights section, lawful basis enumeration, controller or processor designation or DPA offering has been verified.

The specific question worth naming is created by the product itself: a person at a trade show hands over a badge, and the platform then appends data drawn from a network of 125 plus enrichment providers to build a fuller profile of them. The individual consented to a scan. Nothing published addresses whether they consented to the append, or how they would find out it happened. Re verify against the privacy policy and any published DPA.

Upper band, because the architecture is disclosed even though the sources are not. The vendor describes a five layer enrichment engine drawing on 125 plus enrichment providers in what it calls the Captello Enrichment Network, and stating both the layer structure and the provider count is more structural candour than most enrichment vendors offer. It stops there.

Not one provider is named, no licensing arrangement or collection method is described, no accuracy basis is given for the 98 percent match claim, and no route exists for an enriched individual to see, correct or remove the appended record. The primary data has clean provenance by construction, since it comes from a person handing over their own badge, so the whole provenance question here concerns the second layer that gets bolted onto it.

Structurally low and for once the interesting dependency is not a social network. There is no LinkedIn or social automation, no scraping, no browser extension and no credential custody; the integration surface is native connectors to CRMs and marketing automation platforms plus 300 plus registration platforms, which is supported access to systems that publish interfaces for exactly this. The dependency that does bite is on show organisers.

Badge scanning at a given conference requires that organiser to supply an API kit, and a verified reviewer states that the product does not always work where a conference does not provide one, so the buyer's capability at any specific show sits in a third party's gift and is charged for again each time.

That is a commercial and operational exposure rather than a terms of service one, and it is why this is a clean B rather than an A: the vendor never states a conformance position on the organiser relationship it depends on.

Recorded as observed rather than concluded: nothing located addresses whether captured lead data trains models, how one customer's event data is separated from another's, what is retained after an event or a licence period ends, or where inference runs. The certification set, SOC 2 Type 2 and ISO 27001 with Drata underneath, evidences a governance programme and says nothing about model data specifically.

The question has real weight here because the platform holds identified individuals captured at named events, enriched with third party data and scored, which is a richer profile than most tools in this index assemble. Re verify at whatever trust documentation the certifications sit behind.

The cleanest position on this axis of any vendor graded so far, and it comes from the product shape rather than from a policy. Every other vendor in this index manufactures something the recipient is meant to believe: research that was not done, a voice that is not real, a location that is not true, attention no human paid.

Here the prospect walks up to a stand and hands over their own badge, so first contact is initiated by them, the identity on both sides is real, and nothing in the product impersonates a human or simulates effort. Two things keep it off A. The five layer enrichment append means the follow up can reference things the person never disclosed, which is a quieter version of the same problem.

And gamification uses prizes and leaderboards to induce disclosure, which is an incentive trade the participant broadly understands but which shifts what they hand over. No Article 50 position exists for the AI scanner or the scoring.

The strongest part of the record and the vendor's genuine differentiator. Native connections to every major CRM and marketing automation platform with Salesforce, Marketo, HubSpot and Eloqua named specifically, 300 plus registration platform connections, a stated 9,000 plus system connectors, and a published developer kit alongside product documentation and a client certification programme.

Data pushes in real time in the shape the receiving system expects rather than as an export, which is the difference between an integration and a CSV. Cross platform device support across iOS, Android and Windows, and offline capture that syncs on reconnect, which matters more than it sounds on a trade show floor.

Not A because the count is inconsistent on the vendor's own pages, 6,000 plus in some places and 9,000 plus in others, and because no integration was verified at object level on a third party marketplace, which is the standard this index has applied elsewhere.

Recorded as observed rather than concluded: no hosting region, residency option, sub processor list or infrastructure provider was located, and no corporate address or jurisdiction was established with confidence this pass, so both are deliberately left unset on the vendor record rather than guessed.

The product runs as a cloud platform with mobile applications and an offline capture mode that holds data on the device until connectivity returns, which is an architectural detail worth noting because it means lead data sits on a phone or tablet on a show floor for a period. Nothing published addresses how that local cache is protected or purged. This is a failure to locate, not a finding of absence.

Specific where most vendors are vague. The certifications are named with their type rather than asserted loosely, SOC 2 Type 2 and ISO 27001, with HIPAA and GDPR compliance claimed alongside, and the vendor names the compliance automation platform it runs the programme on, Drata. Naming the type is the distinction that separates this from Aloware, which asserted SOC 2 with no type, no period and no report and took a C for it.

Not A because the evidence stops at the claim: there is no trust centre, no self service or even gated access to a report, no audit period or date, no auditor named, no control set enumerated and no penetration test published. ActiveCampaign holds the bar on this axis for serving its current SOC 2 report self service, and this is several steps short of that.

One real number exists and the model around it makes budgeting hard. The vendor supplies two editions to G2, a free event engagement package covering a single event licence and Premium Lead Capture at 500 USD for one event licence per year, with a free trial, and describes the shape of the model honestly: lead capture priced per event with no user restrictions, engagement solutions per event or as unlimited use packages. Its own site publishes no rate card and routes to a discovery call.

Two things hold this at C. The per event structure means total cost tracks event count almost one for one, so a sticker price of 500 tells a buyer running fifteen shows very little. And the load bearing add on exceeds the base: a named verified reviewer reports paying between 700 and 1,200 USD for the API kit required every time a show involves lead scanning, describing it as having become costly, with third parties also reporting extra fees for API kits and advanced gamification and enterprise licences exceeding 1,000 USD per event. Above D because a vendor supplied number and an explicit pricing model do exist.

The structural position is good and nothing contractual backs it. Because captured, enriched and scored leads push into the buyer's own CRM or marketing automation platform in real time, the operative output already lives in a system the customer owns, and the vendor argues exactly this, that there are no exports and no data trapped in a separate app. That is the same architectural portability that Boomerang and Bindago earn credit for from very different directions.

What is absent is every stated commitment: no post termination data rights, no deletion timeline or confirmation, no retention period, and no export path for the material that does not flow downstream, meaning event configurations, game and activation setups, engagement scores and historical event analytics. The per event licence model raises a question nothing answers, which is what happens to lead data captured under a licence that has since lapsed.

The product sends automated email and SMS on capture and at post event volumes, and nothing published addresses the disciplines that govern either. No sending domain authentication guidance, no warmup, no bounce or complaint handling, no reputation monitoring, and on the SMS side no throughput, carrier registration or consent evidencing position.

What materially lowers the risk relative to the cold outbound tools graded alongside it is the list: these are people who handed over their own contact details minutes earlier, so engagement is high, complaint rates should be low, and volumes are bounded by attendance rather than by a database. That is why this is a C rather than lower, but a favourable list is a circumstance, not a discipline.

Segmented deliberately and published in two dimensions. By persona: exhibitor, salesperson, event organiser, college event manager, workplace manager and retail manager, each with its own material. By programme type: exhibitor lead capture, organiser side premium lead capture and sponsorship monetisation, and full corporate event management for companies running their own conferences, seminars, road shows and product launches. Format coverage spans virtual, live and hybrid.

The delivery model is genuinely enterprise shaped, with onboarding, a named client success manager and platform certification included for every client plus 24/7 support, and the current positioning targets enterprise event programmes explicitly. Not A because no geographic coverage is evidenced anywhere, and because the persona list reaches into workplace and retail management, which sits outside the revenue buyer this index grades and dilutes rather than widens the claim.