Cal.com GDPR and EU Hosting: Deployment Options Compared

Key Takeaways

• The EU-hosted Cal.com platform closes on 1 November 2026. Cal.eu is being folded into the international platform (checked 2026-10-13), so the replacement shortlist is meetergo first, then Doodle and Microsoft Bookings.
• EU hosting is an enterprise arrangement, not a plan checkbox. Cal.com ties European hosting to a 50-user minimum and an early-access waitlist.
• Self-hosting removes four capabilities. The MIT-licensed community edition excludes SAML SSO, Organizations, Teams and Booking Audit.
• GDPR compliance and EU jurisdiction answer different questions. A certified processor can still sit under US lawful-access law, so meetergo, Doodle and Microsoft Bookings each answer differently on where the company itself is incorporated.

A scheduling tool is a small purchase with an awkward paper trail: it holds names, email addresses and meeting subjects for everyone who books. That is enough to put it inside a data-protection review, and reviews ask what marketing pages rarely answer directly, which is where the data sits and under whose law.

Cal.com Hosting and EU Alternatives at a Glance

Six scheduling products, sorted by what each one documents publicly about data location. Prices are the lowest paid tier, checked 2026-10-13 unless noted. For a wider market sweep, the European scheduling software roundup covers twelve tools.

What Cal.com Actually Documents About EU Hosting

Cal.com is an open-core scheduling platform with a developer-facing API, built-in video and a public codebase, and it has more deployment shapes than any other tool in this comparison. That is a genuine advantage and also the reason the hosting question needs four separate answers.

The international cloud

The default product is the hosted platform the company calls its international platform. Its pricing page advertises US and EU hosting as a feature for regional residency requirements without naming the tier it belongs to, and does not state where a standard cloud account's data sits. Compliance posture is SOC 2, ISO 27001 and GDPR, and the data processing agreement comes on request through a conversation rather than as a public download.

Cal.eu, closing 1 November 2026

Cal.eu was the separate EU platform, described in its own material as storing and processing all data within EU borders, open to European enterprises from a 50-user minimum in early-access waves. A migration notice carrying a July 2026 byline says Cal.eu stays available until 1 November 2026, that enterprise customers keep access for their full contracted period beyond that date, and that running two platforms held back the pace of improvement on both (checked 2026-10-13). The move off cal.eu is now a dated project rather than an optional one.

Cal.diy, the self-hosted community edition

Self-hosting runs through Cal.diy, the MIT-licensed community edition. You supply PostgreSQL, Node, cron jobs for reminder and workflow triggers, and your own API keys for each app in the store. The licence is permissive, but SAML SSO, Organizations, Teams and Booking Audit sit outside the community edition, so a self-hosted install answers the data-location question completely and reopens the team-features question. An on-premises deployment with those features restored is arranged through enterprise sales.

Key features

Cal.com covers unlimited event types, round-robin and collective team events, attribute-based routing, Cal Video as an included meeting room, a documented API and roughly 100 app integrations. Cal.ai adds voice agents that place and answer scheduling calls at $0.29 per minute. SSO, role-based access control and audit logs begin on the Organizations plan.

Pricing

All figures checked 2026-10-13; the plan-by-plan breakdown tracks what each tier gates.

Where Cal.com shines

• An open codebase you can audit line by line before buying anything.
• Video included in the booking rather than bolted on through a separate subscription.
• An API and webhook surface built for embedding scheduling inside another product.

Where Cal.com falls short

• European hosting is gated behind a 50-user minimum and enterprise sales, not a plan you select.
• The EU platform's closure date arrives before many annual renewal cycles do.
• The data processing agreement is request-only, which slows a review expecting a download.
• Four team and security features sit outside the self-hosted community edition.

Customer reviews

Cal.com holds 4.7 out of 5 across 428 Trustpilot reviews, with support responsiveness and the free video option as recurring praise, and billing or trial confusion as the recurring complaint. On G2 it sits at 4.6 out of 5 across 154 reviews (checked 2026-10-13).

Who Cal.com is best for

• Developer teams embedding scheduling into their own product through the API.
• Organisations above 50 users that can negotiate hosting terms directly.

1. meetergo: Best for Teams That Need an EU Jurisdiction on Paper

meetergo is a German scheduling and revenue-pipeline platform covering sales, talent acquisition, consulting, healthcare and other verticals from one booking flow. Its differentiator is corporate rather than functional: meetergo GmbH is incorporated in Monheim am Rhein with no US corporate parent, so neither the CLOUD Act nor FISA 702 reaches the data, and its security page puts the servers in Nuremberg with data that does not leave the EU.

Key features

EU-only data path with signed GDPR liability

Data is stored exclusively in Europe on ISO 27001 certified infrastructure, encrypted in transit with TLS 1.3 and at rest with AES-256. Data processing agreements carry actual GDPR liability, and enterprise buyers can negotiate a custom DPA.

Round-robin and host selection

The round-robin engine distributes incoming bookings across a team by availability, and host selection lets the booker pick a named colleague instead. Both arrive on the Suite tier rather than a top-end enterprise plan.

Built-in video, payments and e-signatures

Video booking runs on meetergo's own 1080p encrypted meeting rooms with no Zoom licence attached, payments collect a deposit through Stripe or PayPal at the moment of booking, and eIDAS-aligned signatures with email OTP verification and SHA-256 tamper detection close contracts inside the same flow.

Mira, the AI scheduling assistant

Mira handles the email thread that scheduling usually generates, reading replies, proposing slots and rebooking cancellations without a human in the loop, with starter credits included on the free plan.

Pricing

Checked on the pricing page 2026-10-13. Paid tiers carry a 7-day trial, and the free plan is free forever rather than a trial: 3 meeting types with unlimited bookings, meeting polls, unlimited AI notes, 10 CRM deals, 1:1 video up to 45 minutes and REST API access.

Where meetergo shines

• Jurisdiction and hosting are the same answer, so there is no sub-processor chain to map before a data-protection review closes.
• 90+ integrations across CRM, automation and telephony, with a published REST API and SAML SSO for identity-managed rollouts.
• Scheduling, video, payments, signatures and a Kanban CRM sit in one contract, which removes four separate processor assessments.
• 40,000+ users across 40+ countries, rated 4.8 on OMR Reviews and 4.7 on G2.

Where meetergo falls short

• There is no self-hosted or on-premises edition, so air-gapped and sovereign-cloud requirements fall outside what the product can meet.
• Suite at €29.90 per user per month costs more per seat than several schedulers in this comparison, and the all-apps bundle only pays off if you retire the tools it replaces.

Customer reviews

meetergo holds 4.5 out of 5 across 87 Trustpilot reviews. Reviewers lead with EU hosting and GDPR compliance, several describing a move away from a US scheduler for that reason, and praise having scheduling, video and invoicing in one tool. The sample is smaller than Cal.com's, which is worth weighing.

Who meetergo is best for

• European teams whose review asks about jurisdiction, not only server location.
• Teams replacing a scheduler, a video tool and a payment link with one contract.

Want the jurisdiction question settled before you shortlist? Start scheduling free in 30 seconds, no credit card required.

2. Doodle: Best for Group Polls Under Swiss Ownership

Doodle is the Swiss-founded group-poll tool, built around finding one slot that works across many participants, with SOC 2 Type II, GDPR, CCPA and HIPAA attestations and AWS infrastructure in the Republic of Ireland and across the EU. The scope stays close to polls and booking pages: video depends on a separate Zoom, Teams or Meet subscription, there are no e-signatures and no payments with deposits, no CRM sits behind the scheduler, and the AWS and Cloudflare layers underneath are US-incorporated sub-processors even when the racks are in Ireland.

Key features

• Group polls that collect availability from dozens of participants and surface the overlap.
• Booking pages with calendar sync for one-to-one meetings.
• Sign-up sheets for slot-based events like parent evenings or office hours.

Pricing

All figures checked 2026-10-13.

Where Doodle shines

• Poll-first scheduling for groups where nobody holds authority over the calendar.
• A Swiss parent company, which puts the corporate entity outside US jurisdiction.

Where Doodle falls short

• The free tier carries advertising, and ad removal starts on Pro.
• Scheduling is the whole product, so the meeting, payment and contract stay elsewhere.

Customer reviews

Doodle sits at 4.0 out of 5 across 281 Trustpilot reviews, though 62% of those are one-star. Recent complaints cluster on tightened free-plan limits, a redesign reviewers find harder to navigate, and billing after a downgrade. The G2 picture is milder at 4.4 out of 5 across 2,070 reviews (checked 2026-10-13), and the gap between the two samples is the clearest signal here: Trustpilot catches people who arrived to complain, G2 catches a broader install base.

Who Doodle is best for

• Teams whose main scheduling problem is consensus across many participants.
• Buyers who want a non-US parent company without running their own server.

3. Microsoft Bookings: Best for Tenants Already Inside the EU Data Boundary

Microsoft Bookings is the booking page bundled into Microsoft 365, and its hosting answer is inherited rather than chosen: Microsoft completed the EU Data Boundary for the Microsoft Cloud in February 2025, covering customer data and pseudonymised personal data for core Microsoft 365 services. Bookings is not named individually there, Microsoft remains a US entity subject to the CLOUD Act, and tighter residency guarantees sit in the separately licensed Advanced Data Residency add-on. It does not sell standalone either, and there are no payments with deposits, no e-signatures and no CRM behind the booking.

Key features

• Staff booking pages mapped to Exchange calendars and Teams meeting links.
• Service definitions with buffers, lead times and staff assignment.
• Tenant-level governance through the same admin centre as the rest of Microsoft 365.

Pricing

Figures checked 2026-06-03; Microsoft's plan pages did not respond on 2026-10-13, so re-verify before quoting.

Where Microsoft Bookings shines

• No new processor to assess if the tenant already holds the data.
• Admin controls, retention and identity come from the existing Microsoft 365 setup.

Where Microsoft Bookings falls short

• The parent company sits under US lawful-access law regardless of the EU Data Boundary.
• Advanced capabilities arrive through a per-staff add-on many buyers discover after rollout.

Customer reviews

Bookings has no standalone Trustpilot profile, because it ships inside Microsoft 365 rather than as a product you buy on its own. On G2 it carries 3.8 out of 5 across 33 reviews (checked 2026-10-13), the lowest rating and the smallest sample in this comparison, which fits a product most people inherit rather than choose.

Who Microsoft Bookings is best for

• Organisations already standardised on Microsoft 365 with no appetite for a new vendor.
• Teams whose booking needs stop at staff appointments on an internal calendar.

4. SimplyBook.me: Best for Service Businesses Watching Booking Volume

SimplyBook.me is a booking system for service businesses, priced by booking volume and provider count rather than seats. Its privacy policy says data for EU-based businesses, backups included, is stored in the EU while allowing that it may be transferred outside, and data-location selection appears only as an Enterprise capability listing the UK, US and Australia as examples. Beyond the booking engine there is no CRM pipeline, no e-signature step and no built-in video, and advanced capabilities arrive as individually enabled custom features.

Key features

• Volume-based plans that cap monthly bookings rather than charging per user.
• Provider and resource management for multi-staff, multi-location services.
• Custom feature catalogue covering memberships, coupons, intake forms and packages.

Pricing

All figures checked 2026-10-13.

Where SimplyBook.me shines

• Pricing that tracks appointment volume, which suits seasonal service businesses.
• Deep configurability for salons, clinics and studios with many providers.

Where SimplyBook.me falls short

• EU storage is described with a transfer caveat rather than as an absolute.
• Choosing your data location is an Enterprise feature, and the published examples are not EU regions.

Customer reviews

SimplyBook.me holds 4.5 out of 5 across 801 Trustpilot reviews and 4.4 out of 5 across 113 G2 reviews (checked 2026-10-13), which is an unusually consistent pair. Support responsiveness is the dominant praise theme; the dominant criticism is a configuration learning curve, with one reviewer describing the backend setup as not always intuitive before it worked well.

Who SimplyBook.me is best for

• Appointment-heavy service businesses with many providers and locations.
• Buyers whose residency requirement is directional rather than contractual.

5. Calendly

Calendly is the scheduling link most people have clicked, with calendar sync, reminders, routing forms and a long integration list. It is US-headquartered and US-hosted, holds SOC 2, ISO, GDPR and CCPA attestations, and publishes no EU data-residency option, so the certification answer and the jurisdiction answer diverge. Standard runs $10 per seat per month and round-robin distribution moves you to Teams at $16 per seat per month (checked 2026-10-13). It sits at 4.1 out of 5 across 698 Trustpilot reviews, where slow escalation past automated support and unexpected renewal charges are the loudest complaints. Best for US-based teams with no residency constraint.

6. zcal

zcal is a lighter booking-link tool with an unusually generous free tier: unlimited links, unlimited calendar accounts, meeting polls, group events, Stripe payments and no ads. Pro is $7 per user per month annually and Business $12 (verified 2026-10-09). Its own security documentation puts the application on Google Cloud in the us-central1 region, states that EU data sent to zcal is a transfer to the United States under standard contractual clauses, and confirms it holds neither SOC 2 nor ISO 27001 certification. For a European data-protection review that is three unfavourable answers in a row, so zcal fits personal and low-sensitivity scheduling rather than regulated work.

How to Choose a Scheduler When Hosting Is a Requirement

Three questions separate the shortlist faster than a feature matrix does.

Ask where the company is incorporated, not only where the servers are

A processor can hold ISO 27001, run EU racks and still answer a US production order, because lawful-access law follows the corporate parent. That is the distinction behind the data sovereignty argument, and the legal detail per jurisdiction is where a review lands.

Treat the DPA as a document you can download

A data processing agreement available only after a sales conversation adds days to a review and tells you little in advance. Published subprocessor lists, retention settings and signed GDPR liability are what a reviewer actually wants. In a 100-comment thread in r/AZURE, an EU-regulated buyer opened their vendor shortlist with GDPR and ISO 27001 as the framing constraint rather than a later check.

Price the whole requirement, including the parts hosting does not cover

Self-hosting answers residency completely and hands you upgrades, backups and the features the community edition withholds. Managed EU hosting answers it with a minimum seat count. Both are real prices. A 50-comment vendor discussion in r/msp puts it from the operator side, noting how residency rules quietly break cross-border integrations that looked fine on the diagram, and a five-comment residency thread in r/LLMDevs shows the same filter applied before features are compared.

Put Scheduling, Video and Contracts Under One EU Jurisdiction

If the Cal.eu closure brought you here, the choice is narrower than a full migration: an enterprise hosting negotiation, a server you maintain yourself, or a vendor whose default answer is already European. Developer teams embedding scheduling into their own product keep the strongest reason to stay on an open-core platform, and the head-to-head comparison sets out that trade-off.

For everyone else, list the three facts your review will ask for, which are storage location, corporate jurisdiction and the DPA, then count how many each vendor publishes without a sales call. Create a booking page at no cost to check one of them in minutes.

FAQs

Is Cal.com GDPR compliant?

Cal.com states SOC 2, ISO 27001 and GDPR compliance, discloses its subprocessors and provides a data processing agreement on request. Compliance as a processor is separate from jurisdiction: the company is US-incorporated, so a data-protection review that is specifically about lawful access will also weigh the corporate entity.

Is Cal.eu shutting down?

Yes. A migration notice from the company says Cal.eu remains available until 1 November 2026, with enterprise customers keeping access for their full contracted period even if that runs past the date, and users moving to the international platform (checked 2026-10-13).

Can I choose EU hosting on a normal Cal.com plan?

Not as a self-serve setting. The pricing page lists US and EU hosting as a feature without naming a tier, and the compliance material ties European hosting to enterprise arrangements with a 50-user minimum.

Does self-hosting Cal.com make it GDPR compliant?

Self-hosting puts you in control of where data sits, which answers the residency question. It also makes you the operator responsible for security updates, backups and breach handling, and the MIT-licensed community edition leaves out SAML SSO, Organizations, Teams and Booking Audit.

Which scheduling tools store data only in the EU?

meetergo states servers in Nuremberg with data that does not leave the EU. Doodle runs AWS infrastructure in Ireland and across the EU under a Swiss parent. SimplyBook.me stores EU-business data in the EU while allowing transfers. Microsoft Bookings sits inside the EU Data Boundary under a US parent.

What is the difference between GDPR compliance and EU data sovereignty?

GDPR compliance describes how a processor handles personal data: lawful basis, security measures, subject rights and a signed DPA. Sovereignty describes which state can compel access. A US-parented vendor can satisfy the first while still falling under US lawful-access law, which is why both questions sit on the same procurement form.

Nuremberg-hosted

Stop worrying about US data access. Switch to EU scheduling.

GDPR by design.DPA included.ISO 27001 infrastructure.

Start GDPR-compliant

Sarah NowakManaging Director · Intro call · 30 min09:0010:3014:00

Nuremberg-hosted

Stop worrying about US data access. Switch to EU scheduling.

GDPR by design.DPA included.ISO 27001 infrastructure.

Start GDPR-compliant

Sources

• Cal.com hosting, compliance and plan pricing: the vendor's own pricing page, compliance material, Cal.eu migration notice and Cal.diy self-hosting documentation (checked 2026-10-13). Vendor pages of other schedulers are named rather than linked.
• meetergo plans, hosting and compliance: meetergo pricing and meetergo security (checked 2026-10-13)
• Doodle, SimplyBook.me and Calendly plan pricing and data-location statements: each vendor's pricing and security pages (checked 2026-10-13). zcal pricing and security documentation (verified 2026-10-09)
• Microsoft 365 plan pricing: Microsoft's business plan pages (checked 2026-06-03, not reachable on 2026-10-13). EU Data Boundary scope: Microsoft's published completion statement of February 2025
• Trustpilot ratings and review counts, checked 2026-10-13: Cal.com, meetergo, Doodle, SimplyBook.me, Calendly
• G2 ratings and review counts, checked 2026-10-13: Cal.com, Doodle, Microsoft Bookings, SimplyBook.me
• Community threads cited above: r/msp, r/LLMDevs, r/AZURE