Appointment Scheduling
Cal.com
Rest of world Report an errorPanel rating · 6 judges · How to read the stars
Category median
Sovereignty: 1 of 6 dimensions proven
0–5 in half steps. 5 means the rubric's top anchor is met on the evidence.
by Cal.com, Inc. · cal.com
Compare with Calendly → Report an error on this page Is this your product? →
Link to this page
Add ?theme=dark to the image address for dark backgrounds.
The badge shows the category and the month of the latest evaluation, and EU-Made where
that is the product’s provenance. It never shows a score.
Cal.com at a glance
- Vendor
- Cal.com, Inc.
- Headquarters
- Incorporated in United States source, captured 28 Oct 2026
- Data hosting
- Not stated on the vendor’s pages as of 1 Nov 2026
- Free plan
- Yes, per the vendor’s own page source, captured 28 Oct 2026
- Panel verdict
- The AI panel rates Cal.com 3.5/5, the mean of 6 judges. Cal.com is open-source scheduling infrastructure that can also be self-hosted, sold by Cal.com, Inc., a Delaware corporation. how scores are made
- As of
- Vendor pages captured 28 Oct 2026 to 1 Nov 2026; evaluated by the panel 29 Oct 2026. all sources
Read this page as one judge. Each weighs the same scores by what they care about.
The panel's verdict
Cal.com is open-source scheduling infrastructure that can also be self-hosted, sold by Cal.com, Inc., a Delaware corporation. The scores cluster in narrow ranges, and no criterion showed a real split among the judges. Team scheduling sits at 8 on round-robin distribution over availability, weights and priority rules, collective and managed event types, and routing forms; integrations and data run 8-9 on a documented v2 API, webhooks across 31 trigger types, two-way Salesforce and HubSpot sync, and self-serve export of customer data at any time. Sovereignty is the low point at 4: the pages state data is processed in the United States, EU data residency is offered only on contact, and judges describe the published transfer machinery — a data processing agreement on every account, standard contractual clauses, an EU representative in Germany — as real but running through a US company. Pricing transparency scores 5-6, with yearly figures only (Teams at $12 per user/month, Organizations at $28 per user/month) and no public information on SMS credit or payment-fee costs. Booking, calendar and reminders clustered at 6-7.
Speaks for it
- Team scheduling scores sit at 8 on round-robin over availability, weights and priority rules, collective and managed event types, and routing forms
- Integrations and data scores run 8-9 on a documented v2 API, 31 webhook trigger types, two-way Salesforce and HubSpot sync, and self-serve customer-data export at any time
- Self-hosting under an MIT licence and embeddable booking components are documented
- A free-forever plan for one user includes Stripe and PayPal payments, email and SMS notifications, and 100+ app integrations
- The compliance stack is public — ISO 27001, SOC 2 Type II, a HIPAA Business Associate Agreement on Teams plans and up, and a data processing agreement on every account
Held against it
- Sovereignty scores sit at 4 — the contracting party is Cal.com, Inc., a Delaware corporation, data is processed in the United States, and EU data residency comes only on contact
- Pricing transparency scores run 5-6, with only yearly figures shown and no public information on SMS credit costs or payment fees
- The captured pages give different figures for payment providers — the pricing page names Stripe and PayPal, the event-type documentation says only Stripe is supported
- We found no public information on enforced cancellation deadlines, no-show fees, deposits or waiting lists, which kept reminders and no-show scores at 6-7
- We found no public information on rooms or equipment being checked for conflicts alongside a person's calendar
Best for
- You run a distributed sales or service team that needs round-robin distribution, routing forms and managed booking queues
- Your developers want a documented API, webhooks across 31 trigger types, and an MIT-licensed self-hosted fallback
- You want to start free — the free-forever plan for one user includes payments, notifications and 100+ apps, with no credit card required at signup
Avoid if
- You must keep booking data in Europe by default — the pages state data is processed in the United States, with EU residency available only on contact
- You need to budget the full cost upfront — the public pages show yearly prices only, with SMS credit and payment fees left unstated
- Your booking flow depends on PayPal — the captured pages give different figures for supported payment providers, so confirm with the vendor before relying on it
The scores
| Criterion | Panel median |
|---|---|
| Booking page & client experience | 3.5 of 5 |
| Calendar sync & availability rules | 3.5 of 5 |
| Team, staff & location scheduling | 4 of 5 |
| Reminders, payments & no-show protection | 3 of 5 |
| Integrations, API & data export | 4.5 of 5 |
| European sovereignty | 2 of 5 |
| Pricing transparency | 3 of 5 |
Booking page & client experience
Show reasoningHide reasoning
How this is scored
What the person booking sees and can do: a booking page with the services or meeting types on offer, their durations and prices, booking questions, an embed or widget for the business's own website, time zones and languages, group or class bookings, and links to reschedule or cancel without calling.
0 — Not a booking product: no page or widget where a customer picks a slot; appointments are entered by staff only.
3 — A booking page or form exists, but the pages say little about how it works: types of appointment, booking questions, embedding and rescheduling are not described.
5 — A booking page with several appointment or service types of their own duration, custom booking questions, and a way to put it on the business's website (link, embed or widget); confirmations carry a link to reschedule or cancel.
8 — In addition: group or class bookings with seat limits, booking pages in several languages with automatic time-zone handling, branding without the vendor's logo, multi-step selection of service, staff member and location, and a booking flow the vendor states is accessible or mobile-optimised.
10 — Booking as a finished storefront: packages, memberships or recurring bookings, intake forms with conditional questions, booking from Google or other directories, a customer account with booking history, and an accessibility statement for the booking pages published.
The Practice Owner
Patients can book and reschedule without phoning us: event types carry their own duration and location, custom booking questions appear on the booking page, and confirmations let bookers reschedule with ease. Four embed formats put booking on our own website, embeds are stated to be responsive and mobile-optimized, and the widget can be white-labelled so our brand leads. We found no public information on class bookings with seat limits or booking pages in several languages. 1 4 9 10
The Salon Owner
Every event type carries its own title, description, duration and a price you set, plus custom booking questions, four embed options for my salon's site, and confirmations that let a client reschedule without calling — that is the services-on-one-page setup I want. Embeds are stated responsive and mobile-ready, branding removal comes with the Teams plan, and seat-based group bookings appear among the webhook events. We found no public information on booking pages in several languages, automatic time-zone handling, or a step-by-step flow where the client chooses service, stylist and location. 1 4 9 10 18
The Sales Team Lead
Custom booking questions, per-event titles, durations, slugs and prices, four embed formats including an inline widget, a white-label booker component, mobile-optimised embeds, and confirmations bookers can reschedule from give my prospects a proper self-serve page. We found no public information on booking pages in several languages, seat-limited class bookings, or a published accessibility statement, which keeps it below the top band. 1 4 9 10
The Independent Consultant
The booking pages are documented with event types carrying their own title, description, duration, slug and location, custom booking questions, optional email verification for bookers, and four embedding options — inline, floating button, element-click pop-up and email — so clients can book without leaving my site. The embed pages describe colours and styles I can match to my brand, a white-labelled widget, mobile-optimised responsive embeds, pre-filled booking forms and bookers who can reschedule with ease. I found no public information on booking pages in several languages, a multi-step choice of service, person and location, or a published accessibility statement. 1 9 10 4
The Data Protection Officer
Event types carry their own title, duration and location, custom booking questions and email verification for bookers are configurable, a short custom booking link is offered, and four embed options put booking on the practice's own site, stated to be mobile-optimised and white-labellable, with confirmations that let bookers reschedule with ease. Dynamic group links combine several people into one link. We found no public information on booking pages in several languages, seat limits for group classes, or an accessibility statement for the booking flow. 1 4 9 10
The Skeptic
Event types carry their own title, duration, location and price, custom booking questions and email verification are configurable, and four embed styles — inline, floating button, element-click pop-up and email — put the booking form on the business's own site, with bookers receiving confirmations and the ability to reschedule with ease; the booker atom white-labels the widget and every embed is stated responsive across screen sizes. We found no public information on seat-limited group or class bookings, booking pages offered in several languages, or a customer account with booking history, so this sits above a plain booking page but short of a finished storefront. 1 4 9 10
Calendar sync & availability rules
Show reasoningHide reasoning
How this is scored
How the product knows when someone is free: two-way sync with Google, Microsoft 365 and Outlook, iCloud or CalDAV, conflict checks across several calendars, working hours and exceptions, buffers, minimum notice and booking windows, daily limits, and rooms or equipment that must be free as well.
0 — No calendar: no availability is kept and no sync with any calendar is offered.
3 — An internal calendar or a one-way export (iCal feed), but no stated two-way sync and few availability rules beyond opening hours.
5 — Two-way sync with Google and Microsoft calendars that blocks booked times, working hours with exceptions, and buffers or minimum notice per appointment type.
8 — In addition: several calendars per person checked for conflicts, iCloud or CalDAV, booking windows and daily or weekly limits, holidays and absences, and resources (rooms, equipment, chairs) that must be free alongside the person.
10 — Availability that runs a multi-site business: per-location and per-resource schedules, capacity rules across staff and rooms, sync behaviour and latency documented, and changes in any connected calendar reflected without double bookings, as stated in the documentation.
The Practice Owner
The availability rules are genuinely deep — buffers before and after, a minimum notice period, booking frequency and horizon limits, daily, weekly or monthly caps, and date overrides to block a specific day — with Google, Microsoft Outlook, Apple/CalDAV and Zoho calendars connected through free/busy data so existing booked times feed availability. That covers my therapists' diaries well. We found no public information on rooms or equipment that must be free alongside a person, which for my two treatment rooms is the make-or-break question. 1 4 5 10 12
The Salon Owner
Named connections to Google Calendar, Microsoft Outlook, Apple/CalDAV and Zoho pull event details and free/busy data, and the availability tooling is built to avoid double bookings, with working hours, date overrides for holidays or a day off, buffers, minimum notice, booking horizon and daily, weekly or monthly limits all documented. We found no public information on resources such as chairs or rooms that must also be free, which is the piece a two-salon week needs most. 1 4 5 10 12
The Sales Team Lead
Buffers, minimum notice, booking windows, daily, weekly and monthly limits, date overrides for absences, and named connections to Google Calendar, Microsoft Outlook, Apple/CalDAV and Zoho with free/busy data cover most of what my reps need. The captured pages do not state two-way sync explicitly, and we found no public information on rooms or equipment being checked for conflicts alongside the person. 1 5 10 12
The Independent Consultant
Calendar connections to Google Calendar, Microsoft Outlook, Apple/CalDAV and Zoho are documented, sharing event details and free/busy data, and the limits give me buffer time before or after every event, a minimum notice period, a booking horizon and daily, weekly or monthly booking limits. Availability schedules with date overrides let me mark specific dates unavailable, and the free plan page states unlimited event types and calendars. I found no public information on rooms or equipment that must also be free. 5 10 12 1 4
The Data Protection Officer
Calendar connections are named — Google, Microsoft Outlook, Apple/CalDAV and Zoho — with the privacy page stating exactly which fields are read, including free/busy data, which is the scope limitation I look for; availability rules run deep with buffers, minimum notice, booking frequency and horizon limits, and date overrides that mark a day unavailable. The captured pages do not state that sync works in both directions or that several calendars per person are checked together for conflicts, and we found no public information on booking rooms or equipment alongside the person. 1 5 10 12
The Skeptic
Google Calendar, Microsoft Outlook, Apple/CalDAV and Zoho connections are named — and the privacy policy is frank that the integration sees full event titles, descriptions and attendee names, not just free/busy — while the availability tooling covers working hours, date overrides, buffers, minimum notice, booking frequency and booking horizon, plus daily, weekly or monthly booking limits. We found no public information stating that the sync is two-way, on conflict checks across several of one person's calendars, or on rooms or equipment that must be free alongside the person. 1 5 10 12
Team, staff & location scheduling
Show reasoningHide reasoning
How this is scored
How bookings are shared out across more than one person: staff profiles and the services each offers, round-robin and collective (all-hands) meetings, routing forms that send a booking to the right person, several locations, roles and permissions for admins and staff, and single sign-on for larger teams.
0 — A single-user tool with no way to add staff or a team.
3 — Several users or staff calendars can be added, but how bookings are distributed among them and who may change what is not described.
5 — Several staff or team members with their own availability, the customer choosing a person or the system assigning one (round-robin or "any available"), and an admin role that manages the team.
8 — In addition: weighted or priority round-robin, collective bookings that need several people at once, routing by form answers, several locations with their own staff, granular roles and permissions, and reporting per staff member.
10 — Scheduling as a team system: SSO and user provisioning (SAML, SCIM), routing that takes ownership from a CRM, managed templates the organisation pushes to every member, audit logs of changes, and distribution fairness reported.
The Practice Owner
Round-robin distributes bookings across a team by availability, weights or priority rules, and collective and managed event types exist, so six therapists can share workload fairly without the front desk routing calls. Routing forms send a booking to the right person based on form answers, team admin and owner roles gate who creates or changes team event types, and the Organizations tier adds SAML SSO and SCIM with role-based permissions. We found no public information on several locations each with their own staff. 4 10 13 14 17
The Salon Owner
Teams get shared availability or per-host schedules, round-robin distribution described as based on availability, weights and priority rules, collective events for several people at once, routing forms that send a booking down the right route in evaluation order, and owner or team-admin control over team event types; the Organizations plan adds SAML single sign-on and SCIM provisioning with role-based permissions. We found no public information on several locations each with their own staff or reporting per stylist. 4 10 13 14 17
The Sales Team Lead
This is what I buy for: round-robin distributed on availability, weights and priority rules, collective and managed team events, routing forms whose conditions evaluate in order plus routing by custom variables, SAML SSO with SCIM, and role-based permissions down to team admin and owner, all public. We found no public information on several locations with their own staff, audit logs of changes, or reported distribution fairness, so I cannot check the round-robin is fair the way I'd want. 4 10 13 14 17 18
The Independent Consultant
Round-robin distributed based on availability, weights and priority rules, managed and collective event types, shared or per-host availability, and routing forms with conditions evaluated in order are documented, with team admin and owner the only roles allowed to create or change team event types. The organizations tier adds SAML SSO, SCIM and role-based permissions. I found no public information on several locations with their own staff, reporting per staff member, or audit logs. 4 10 14
The Data Protection Officer
Team scheduling is close to complete for a multi-practitioner group: round-robin by availability, weights and priority rules, collective and managed event types, routing forms evaluated in order, team admin and owner roles enforced down to the API permissions, and SAML SSO with SCIM provisioning on the organizations tier. We found no public information on several locations with their own staff, audit logs of changes, or fairness reporting on how bookings are distributed. 4 10 13 14
The Skeptic
Team event types run round robin based on availability, weights and priority rules, offer collective and managed assignment, and routing forms whose routes are evaluated in order — including routing by custom variables — with team admin/owner gates on creating and changing team event types; the Organizations tier lists SAML SSO, SCIM, role-based permissions and unlimited sub-teams. We found no public information on scheduling by location with its own staff, audit logs of changes, or reporting that shows distribution fairness. 4 10 13 14
Reminders, payments & no-show protection
Show reasoningHide reasoning
How this is scored
How the product keeps a booked slot from turning into an empty one: confirmations and reminders by email and SMS, payment or deposit at booking, cancellation and late-cancellation policies, fees for no-shows, waiting lists that refill cancelled slots, and follow-ups after the appointment.
0 — No notifications to the person booking: no confirmation, no reminder.
3 — Email confirmations are sent, but reminders, payments and cancellation rules are not described.
5 — Automatic email reminders with configurable timing, SMS reminders (included or as a paid add-on), and payment at booking through at least one named provider such as Stripe or PayPal.
8 — In addition: deposits or partial prepayment, a cancellation deadline the system enforces, no-show or late-cancellation fees, a waiting list that fills freed slots, and follow-up or review messages after the appointment.
10 — No-show protection as a measured process: no-show rates reported, card-on-file or pre-authorisation charged by policy, reminder channels per customer (email, SMS, messenger), refunds and vouchers handled in the product, and the cancellation and payment terms shown to the customer configurable per service.
The Practice Owner
Automated workflows send email, SMS or WhatsApp reminders minutes, hours or days before the appointment, with custom templates and triggers on confirmation, cancellation and reschedule — this is precisely what would cut my no-show rate. Payments are configured per event with a custom price, currency and a setting for when to charge; the captured pages give different figures for payment providers (the payments tab says "we only support payments via Stripe", the pricing page lists Stripe and PayPal). We found no public information on enforced cancellation deadlines, late-cancellation or no-show fees, or a waiting list that refills a freed slot. 2 3 4 10 15
The Salon Owner
Automated workflows send email, SMS and WhatsApp messages at minutes, hours or days before the appointment, with follow-ups after it ends, and payment is collected before the meeting through Stripe with a charge amount, currency and payment option set per event type — enough to stand a colour deposit on. But we found no public information on a cancellation deadline the system enforces, no-show or late-cancellation fees, or a waiting list that refills a cancelled chair. 2 3 4 10 15 18
The Sales Team Lead
Email, SMS and WhatsApp reminders with timing down to minutes before an event, custom templates, post-call follow-up emails, and Stripe or PayPal payment before the meeting starts hit the mid band solidly, and there are even webhook triggers that fire after a host or guest no-shows a Cal Video call. We found no public information on deposits, a cancellation deadline the system enforces, no-show fees, or waiting lists that refill cancelled slots. 1 2 3 15 18
The Independent Consultant
Automatic reminders by email and SMS with timing set in minutes, hours or days before an event, WhatsApp messaging, default or fully custom templates, and post-event follow-up emails are documented, triggered by confirmations, cancellations and reschedules — reminders I would never have to send myself. Payment before the meeting through Stripe is described with per-event charges and the charging moment configurable, though the pricing page also names PayPal while the event-type documentation says only Stripe is supported, so the captured pages give different figures for payment providers. I found no public information on enforced cancellation deadlines, no-show or late-cancellation fees, deposits, or a waiting list that refills cancelled slots. 2 15 3 4 10
The Data Protection Officer
Reminders are strong: workflows send email, SMS or WhatsApp at configurable minutes, hours or days before an event, with custom templates, follow-up messages after the call, and payment at booking through Stripe or PayPal with per-event charge amounts. No-show detection exists as event triggers, but we found no public information on enforced cancellation deadlines, no-show or late-cancellation fees, deposits, or a waiting list that refills cancelled slots. 1 2 3 4 10 15
The Skeptic
Workflows trigger on confirmations, cancellations, reschedules or a set time before or after a meeting, fire email and SMS to host, attendee or a specific number, add WhatsApp messaging, custom templates and post-call follow-up emails; per-event Stripe payment with a configurable charge timing is documented, and webhook triggers exist for Cal Video no-shows. The captured pages give different figures for supported payment providers — the pricing page names Stripe and PayPal, the event-type documentation says only Stripe is supported — and we found no public information on enforced cancellation deadlines, no-show or late-cancellation fees, waiting lists or deposit amounts. 1 2 3 4 10 15 18
Integrations, API & data export
Show reasoningHide reasoning
How this is scored
What the product connects to and how the data gets out again: video-meeting links (Zoom, Teams, Google Meet), CRM and marketing tools, automation platforms (Zapier, Make), a documented API and webhooks, website and app-store integrations, and an export of bookings and customer records.
0 — No integrations and no export; bookings stay in the product.
3 — A few named integrations or an export of bookings, but no API or webhooks described.
5 — Video-meeting links created automatically for at least one named tool, a connection to an automation platform or a few named CRM or marketing tools, and an export of bookings or customers.
8 — In addition: a documented public API and webhooks, native CRM integrations named (HubSpot, Salesforce or similar), an integrations directory, and a full export of bookings, customers and booking-form answers.
10 — Built to be connected and left: an API covering every object with its documentation and rate limits published, embeddable components or an SDK, a self-hosting or open-source option or a stated migration path, and the complete account data exportable in a documented format.
The Practice Owner
A documented v2 API with Bearer-key auth and OAuth scopes covers webhooks (31 trigger types, including booking, payment and no-show events), routing forms, teams and conferencing, plus an embeddable atoms SDK and a self-hosted open-source option under the MIT licence — that is rare flexibility. Zoom, Google Meet, Microsoft Teams and Cal Video links are created automatically, and Salesforce, HubSpot and Pipedrive sync, Zapier and an app store of 100+ apps are named. Customer data export is available any time, self-serve, with at least a 30-day export window after termination; we found no public information on published API rate limits. 4 5 6 10 17 18
The Salon Owner
There is a documented v2 API with OAuth scopes and team-level endpoints, webhooks with 31 trigger types including booking created, paid, rescheduled and no-show events, native Salesforce, HubSpot and Pipedrive connections in a 100-plus app directory with Zapier, embeddable atoms as an SDK, and an open-source self-hostable version under an MIT licence. Export is self-serve at any time with at least 30 days after termination and deletion covering subprocessors; we found no public information on published API rate limits or a documented export format. 4 5 6 7 10 17 18
The Sales Team Lead
Every booking gets a location by default with Cal Video, plus Zoom, Teams and Google Meet connections; two-way Salesforce and HubSpot sync; a documented v2 API with webhooks across 31 event types; embeddable atoms; self-hosting under an MIT-licensed open-source option; and self-serve export of my data. We found no public information on published API rate limits or an export format documented end to end, which is the only thing holding it off the top band. 4 5 6 10 17 18
The Independent Consultant
A documented public API with Bearer-key authentication and OAuth scopes, webhooks with 31 trigger types covering bookings, payments, no-shows and recordings, video locations for Cal Video, Zoom, Google Meet and Microsoft Teams, native Salesforce, HubSpot and Pipedrive connections, an app store of 100+ apps including Zapier, and customer-data export at any time, self-serve or by email, are all documented. An open-source embeddable component package and a self-hosted option under an MIT licence are published. I found no public information on API rate limits or a documented format for the complete export. 18 17 5 4 6 10
The Data Protection Officer
A documented v2 API with Bearer-key or OAuth authentication, webhooks with thirty-one trigger types and versioned payloads, Zoom, Teams and Google Meet links created automatically, native two-way HubSpot and Salesforce sync, Zapier and an app store of a hundred-plus apps give the connections a practice needs. Bookings and customer data are exportable at any time self-serve, deletion is stated to reach subprocessors, and self-hosting under an MIT-licensed open-source option plus embeddable components are documented. We found no public information on published API rate limits or the format of the account export. 4 5 6 10 17 18
The Skeptic
The exit story is unusually strong: a documented v2 API with API keys, OAuth scopes and access-control rules, 31 webhook trigger types with versioned payloads carrying generated calendar files, native two-way Salesforce and HubSpot sync, Pipedrive, Zapier and a 100+ app store, video locations for Cal Video, Zoom, Google Meet and Teams, export of customer data any time self-serve with at least 30 days after termination, and an embeddable atoms package on top of a MIT-licensed self-hostable codebase. We found no public information on published API rate limits or on a documented format for the account export, and the organization-level Zoom flow carries a candid warning that overlapping meetings can fail to start. 4 5 6 10 17 18
European sovereignty
panel opinion
Show reasoningHide reasoning
How this is scored
Who the contracting entity and the parent company are, where booking and customer data is hosted, and who the subprocessors are: hosting, the SMS gateway, email delivery, payment providers, video tools and analytics. Independently sourced by the sovereignty pipeline; booking data names who sees a doctor, a lawyer or a therapist and when, so the whole chain counts, not only the database.
0 — Non-EU vendor and contracting entity, no data processing agreement offered, and neither hosting location nor subprocessors stated.
3 — A privacy policy and a data processing agreement exist, but the vendor and hosting are outside the EU (or hosting is unstated) and subprocessors are not listed.
5 — A data processing agreement and a subprocessor list are published, and either EU hosting or an EU contracting entity is stated, while parts of the chain (SMS, email, analytics, support) run through non-EU providers.
8 — EU contracting entity and EU hosting on named infrastructure, subprocessors listed with their locations, a data processing agreement published, and security certifications (ISO 27001, SOC 2) stated.
10 — Sovereign end to end and evidenced: European ownership, entity, hosting and every subprocessor including SMS and email, data export and deletion documented, and certifications published with their scope rather than implied.
The Practice Owner
The contracting party is Cal.com, Inc., a Delaware corporation in San Francisco, and the privacy policy states data is processed in the United States, with EU data residency offered only as "contact us at privacy@cal.com" — so I cannot show my patients a European-hosted chain by default. The GDPR machinery is real and public: a data processing agreement binding every account, a subprocessor list at trust.cal.com covering hosting, email, SMS, video and payments, EU Standard Contractual Clauses with the UK Addendum and Swiss amendments, Data Privacy Framework certification, a named EU representative in Germany, and ISO 27001 and SOC 2 Type II stated. That is well above a bare US privacy policy, but the chain still runs through a US company processing in the US, short of what a European practice needs before entrusting it with who sees a therapist and when. 5 6 7 8
The Salon Owner
The contracting party is Cal.com, Inc., a Delaware corporation, and the privacy policy states data is processed in the United States with some subprocessors elsewhere, so the chain is American end to end; EU data residency is only offered on contact. It does publish a data processing agreement for every account, a subprocessor list at its Trust Center covering hosting, email, SMS, video and payments with prior notice and objection rights, plus ISO 27001 and SOC 2 Type II certifications and an EU representative in Germany — good disclosure, wrong hemisphere. 5 6 7 8
The Sales Team Lead
Cal.com, Inc. is a Delaware corporation that states data is processed in the United States, yet it publishes a DPA covering every account, Standard Contractual Clauses, Data Privacy Framework certification, an EU representative in Germany, a subprocessor list at its trust center, and ISO 27001 plus SOC 2 Type II. There is no EU contracting entity, EU data residency appears only as available on contact, and the captured pages do not show where each subprocessor sits, so the chain stays US-anchored. 5 6 7 8
The Independent Consultant
Cal.com, Inc. is a Delaware corporation and states that data is processed in the United States with some subprocessors elsewhere, so my German, Austrian and Swiss clients' booking details would cross the Atlantic under the published data processing agreement, standard contractual clauses with the UK Addendum and Swiss amendments, and the EU-US Data Privacy Framework — though the Swiss-US framework does not apply. A subprocessor list is published at the trust centre covering hosting, email, SMS, payments, video, AI and analytics, with prior notice and an objection right before new subprocessors start, and ISO 27001 and SOC 2 Type II certifications are downloadable. EU data residency is offered only on contact, and no EU contracting entity is stated. 5 6 7 8
The Data Protection Officer
The contracting entity is named — Cal.com, Inc., a Delaware corporation — and the pages state plainly that data is processed in the United States, with EU residency only on request; a data processing agreement binds every account, transfers rest on the Data Privacy Framework and Standard Contractual Clauses under Irish law, and a subprocessor list covering hosting, email, SMS, payments, video and analytics is published with prior notice and objection rights on any change. For the medical and legal practices I sign off, that transparency is real but the chain runs through US providers by default, and we found no public information naming the hosting infrastructure or the individual SMS gateway and email delivery services behind the published categories. 5 6 7 8
The Skeptic
The contracting party is Cal.com, Inc., a Delaware corporation, and data is processed in the United States, with EU data residency available only on contact; the transfer machinery is real — SCCs under Irish law, the EU-U.S. Data Privacy Framework, an Art. 27 representative in Germany, a DPA applying to every plan, a subprocessor table at the trust centre covering hosting, email, SMS, video and payments, and ISO 27001 with SOC 2 Type II. That is a well-documented American operation, not a European one: entity and primary processing region are US, and subprocessor locations are not itemised on the pages we read, so the reminder and payment chain is one a European buyer must chase through the trust centre. 5 6 7 8
Pricing transparency
Show reasoningHide reasoning
How this is scored
Whether a buyer can compute the real annual cost from public pages alone: price per user, staff member, location or calendar, what the free plan covers, which features (SMS reminders, payments, round-robin, SSO, branding removal) sit in which tier, the cost of SMS credits and payment fees, setup and minimum term.
0 — No public prices at all; every customer is a sales call.
3 — A starting price or a free plan is published, but what scales the cost (users, staff, bookings, SMS) and what each tier includes is unclear.
5 — Tiers are public with their prices per user, staff member or location and their main features, while at least one commonly needed piece (SMS credits, payment fees, an enterprise tier) is unpriced or "on request".
8 — Every tier priced publicly with its scaling unit, add-ons and SMS credits priced, monthly and annual prices both shown, and VAT treatment and minimum term stated.
10 — Complete price computability: annual cost derivable for a given team size, location count and SMS volume, with every add-on, setup, support and payment fee and the cancellation and data-return terms published.
The Practice Owner
Tiers are public with their scaling unit and detailed feature lists — Individuals "Free forever" for 1 user, Teams "YEARLY $12 per user/month Save 25%", Organizations "YEARLY $28 per user/month Save 25%", Enterprise "Custom" on sales — so I can see where round-robin, routing forms, branding removal and SSO land before paying. VAT treatment is stated (business fees exclusive of taxes), billing runs monthly or annual in advance with automatic renewal, and signup needs no credit card. We found no public information on SMS credit costs, payment fees or a separately quoted monthly price, so the real annual cost for six therapists plus reminders stays an estimate. 1 4 6
The Salon Owner
Tiers are public — a free individual plan, Teams at "$12 per user/month" billed yearly with a 14-day trial, Organizations at "$28 per user/month" billed yearly, and Enterprise as custom pricing on request — with the scaling unit (users), each tier's features, no card needed to sign up, automatic renewal and VAT-exclusive fees stated. But per-user pricing is exactly the bill that grows with every chair I add, and we found no public information on SMS credit costs, payment processing fees, or the monthly price behind the stated yearly figures. 1 4 6
The Sales Team Lead
Tiers are public with per-user scaling and per-tier feature lists: a free plan for one user, Teams at $12 per user/month billed yearly, Organizations at $28 per user/month billed yearly, and Enterprise on request, with fees stated as exclusive of taxes and automatic renewal in the terms. The captured pages show yearly billing prices only, and we found no public information on SMS credit costs or payment processing fees, so I cannot compute a full year for fourteen reps. 1 4 6
The Independent Consultant
The tiers are public with per-user prices: a free-forever plan for one user that already includes Stripe and PayPal payments, email and SMS notifications, round-robin and 100+ apps; Teams at $12 per user/month on yearly billing; Organizations at $28 per user/month; and Enterprise only as Custom with Talk to sales. Business fees are stated to be exclusive of taxes, plans are billed in advance and renew automatically, fees are non-refundable, and signup needs no credit card. I found no public information on the price of SMS credits or payment fees, and only the yearly figures with a 25% saving noted are shown. 4 6 1
The Data Protection Officer
Prices are public with their scaling unit — free forever for one user, Teams at $12 per user/month and Organizations at $28 per user/month on yearly billing with "Save 25%" stated, a 14-day free trial, and no credit card at signup — and the tax treatment and non-refundable default are stated in the terms. Enterprise is custom via a sales call, only yearly figures are shown, and we found no public information on SMS credit costs, monthly-billing prices or a minimum term, so a practice cannot compute its full annual cost from public pages alone. 1 4 6 16
The Skeptic
The tiers are public with a clear per-user scaling unit and their features listed — a free-forever plan for one user that even includes Stripe and PayPal payments and email and SMS notifications, Teams at $12 per user/month on yearly billing with a 14-day free trial, Organizations at $28 per user/month on yearly billing, and Enterprise at custom pricing through sales. A buyer still cannot compute the full cost: monthly prices are not shown beyond a 'Save 25%' note on yearly billing, SMS credits and payment fees are unpriced, custom domains and email sit on a waitlist tied to the organizations plan, and only the tax treatment (fees exclusive of taxes), automatic renewal and the non-refundable default are stated. 1 4 6 16
European sovereignty — proven facts
1 of 6 dimensions provenBuilt only from facts shown on the vendor's own pages. A dimension we could not prove is left open, not scored as zero.
| Legal entity | Incorporated in US | 0/2 pts | 6 Report an error |
|---|---|---|---|
| Hosting location | Not determined ⚠ unverified | — | uncited Report an error |
| Hosting options | Not determined ⚠ unverified | — | uncited Report an error |
| Open source | Not determined ⚠ unverified | — | uncited Report an error |
| Data processing agreement | Not determined ⚠ unverified | — | uncited Report an error |
| Transfer impact assessment | Not determined | — | uncited Report an error |
Questions about Cal.com
Is Cal.com European?
No. whats-best.ai classifies Cal.com as Rest of world. Its vendor, Cal.com, Inc., is incorporated in United States, per the vendor’s page captured 28 Oct 2026.
Where does Cal.com store data?
Not stated on the vendor’s pages as of 1 Nov 2026.
Does Cal.com have a free plan?
Yes. Cal.com has a free plan, per the vendor’s page captured 28 Oct 2026.
What are the best alternatives to Cal.com?
As of 3 Nov 2026, the panel rates zeeg (3.5/5), YouCanBookMe (3.5/5) and SimplyBook.me (3.5/5) highest among the other 18 Appointment Scheduling products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is zeeg (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: how scores are made. The full list, with European products first: Cal.com alternatives.
Where this could be wrong
- Evidence ages. The oldest capture behind this page is from 28 Oct 2026. Vendors change pricing and policies without notice; every fact reflects its source as of the capture date shown in the registry.
- Weak sourcing — Data processing agreement, Open source, Hosting location, Hosting options. Not confirmed on the vendor’s own pages as captured.
- AI can misread a source. Extraction and judgement are automated; a citation guarantees traceability, not infallibility. If something here is wrong, say so — no account needed, every report is decided within 5 business days, and accepted corrections are published.
What we left out
A claim that does not survive our checks costs us the claim, not the page. This is what was taken off this one.
- 17 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 7 integrations facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 5 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 2 hosting facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 2 support facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 1 legal fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. Know more? Tell us
- 1 pricing fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. Know more? Tell us
- 4 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown. Know more? Tell us
- 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement. Know more? Tell us
Sources (20)
The pages every claim on this page was read from — each one checked, dated, and kept verifiable.
- 1 Vendor homepage cal.com Checked 28 Oct 2026 Details →
- 2 Product features: reminders and workflows cal.com Checked 28 Oct 2026 Details →
- 3 Product features: payments cal.com Checked 28 Oct 2026 Details →
- 4 Pricing page cal.com Checked 28 Oct 2026 Details →
- 5 Privacy policy cal.com Checked 28 Oct 2026 Details →
- 6 Terms of service cal.com Checked 28 Oct 2026 Details →
- 7 Data processing agreement cal.com Checked 28 Oct 2026 Details →
- 8 Security / trust page cal.com Checked 28 Oct 2026 Details →
- 9 Booking page & client experience — found from sitemap cal.com Checked 28 Oct 2026 Details →
- 10 Booking page & client experience — found from sitemap cal.com Checked 28 Oct 2026 Details →
- 11 Calendar sync & availability rules — found from sitemap cal.com Checked 28 Oct 2026 Details →
- 12 Calendar sync & availability rules — found from sitemap cal.com Checked 28 Oct 2026 Details →
- 13 Team, staff & location scheduling — found from sitemap cal.com Checked 28 Oct 2026 Details →
- 14 Team, staff & location scheduling — found from sitemap cal.com Checked 28 Oct 2026 Details →
- 15 Reminders, payments & no-show protection — found from sitemap cal.com Checked 28 Oct 2026 Details →
- 16 Reminders, payments & no-show protection — found from sitemap cal.com Checked 28 Oct 2026 Details →
- 17 Integrations, API & data export — found from sitemap cal.com Checked 28 Oct 2026 Details →
- 18 Integrations, API & data export — found from sitemap cal.com Checked 28 Oct 2026 Details →
- 19 Self-hosting / on-premises installation docs — found from the homepage cal.com Checked 1 Nov 2026 Details →
- 20 Code repository (open-source licence) — found from the homepage github.com Checked 1 Nov 2026 Details →