whats-best.ai
Search Sign in

Appointment Scheduling

Cal.com

Rest of world Report an error

Panel rating · 6 judges · How to read the stars

Category median

Sovereignty: 1 of 6 dimensions proven

0–5 in half steps. 5 means the rubric's top anchor is met on the evidence.

by Cal.com, Inc. · cal.com

Compare with Calendly → Report an error on this page Is this your product? →

Link to this page

Cal.com: AI-assisted analysis on whats-best.ai Cal.com: AI-assisted analysis on whats-best.ai (dark)

Add ?theme=dark to the image address for dark backgrounds. The badge shows the category and the month of the latest evaluation, and EU-Made where that is the product’s provenance. It never shows a score.

Cal.com at a glance

Vendor
Cal.com, Inc.
Headquarters
Incorporated in United States source, captured 28 Oct 2026
Data hosting
Not stated on the vendor’s pages as of 1 Nov 2026
Free plan
Yes, per the vendor’s own page source, captured 28 Oct 2026
Panel verdict
The AI panel rates Cal.com 3.5/5, the mean of 6 judges. Cal.com is open-source scheduling infrastructure that can also be self-hosted, sold by Cal.com, Inc., a Delaware corporation. how scores are made
As of
Vendor pages captured 28 Oct 2026 to 1 Nov 2026; evaluated by the panel 29 Oct 2026. all sources

Cal.com alternatives, European ones first →

Read this page as one judge. Each weighs the same scores by what they care about.

The Data Protection Officer

Weighted verdict

Signs off booking tools for a group of medical and legal practices, where an appointment alone reveals who is a patient or a client. Wants the contracting entity and hosting named, every subprocessor listed down to the SMS gateway and the email service, calendar access limited to what booking needs, and bookings and customer records that can be exported and deleted on request.

Same scores as the panel view — this lens weights them the way this judge cares.

Scored by The Data Protection Officer

Panel median The Data Protection Officer This judge’s scores over the panel median. Each label opens its reasoning below.
Scores per criterion, in stars out of 5
Criterion Panel median The Data Protection Officer
Booking page & client experience 3.5 of 5 3 of 5
Calendar sync & availability rules 3.5 of 5 3 of 5
Team, staff & location scheduling 4 of 5 4 of 5
Reminders, payments & no-show protection 3 of 5 3 of 5
Integrations, API & data export 4.5 of 5 4.5 of 5
European sovereignty 2 of 5 2 of 5
Pricing transparency 3 of 5 3 of 5

Booking page & client experience

How this is scored

What the person booking sees and can do: a booking page with the services or meeting types on offer, their durations and prices, booking questions, an embed or widget for the business's own website, time zones and languages, group or class bookings, and links to reschedule or cancel without calling.

0 — Not a booking product: no page or widget where a customer picks a slot; appointments are entered by staff only.

3 — A booking page or form exists, but the pages say little about how it works: types of appointment, booking questions, embedding and rescheduling are not described.

5 — A booking page with several appointment or service types of their own duration, custom booking questions, and a way to put it on the business's website (link, embed or widget); confirmations carry a link to reschedule or cancel.

8 — In addition: group or class bookings with seat limits, booking pages in several languages with automatic time-zone handling, branding without the vendor's logo, multi-step selection of service, staff member and location, and a booking flow the vendor states is accessible or mobile-optimised.

10 — Booking as a finished storefront: packages, memberships or recurring bookings, intake forms with conditional questions, booking from Google or other directories, a customer account with booking history, and an accessibility statement for the booking pages published.

Report an error

The Data Protection Officer

Event types carry their own title, duration and location, custom booking questions and email verification for bookers are configurable, a short custom booking link is offered, and four embed options put booking on the practice's own site, stated to be mobile-optimised and white-labellable, with confirmations that let bookers reschedule with ease. Dynamic group links combine several people into one link. We found no public information on booking pages in several languages, seat limits for group classes, or an accessibility statement for the booking flow. 1 4 9 10

Report an error

Calendar sync & availability rules

How this is scored

How the product knows when someone is free: two-way sync with Google, Microsoft 365 and Outlook, iCloud or CalDAV, conflict checks across several calendars, working hours and exceptions, buffers, minimum notice and booking windows, daily limits, and rooms or equipment that must be free as well.

0 — No calendar: no availability is kept and no sync with any calendar is offered.

3 — An internal calendar or a one-way export (iCal feed), but no stated two-way sync and few availability rules beyond opening hours.

5 — Two-way sync with Google and Microsoft calendars that blocks booked times, working hours with exceptions, and buffers or minimum notice per appointment type.

8 — In addition: several calendars per person checked for conflicts, iCloud or CalDAV, booking windows and daily or weekly limits, holidays and absences, and resources (rooms, equipment, chairs) that must be free alongside the person.

10 — Availability that runs a multi-site business: per-location and per-resource schedules, capacity rules across staff and rooms, sync behaviour and latency documented, and changes in any connected calendar reflected without double bookings, as stated in the documentation.

Report an error

The Data Protection Officer

Calendar connections are named — Google, Microsoft Outlook, Apple/CalDAV and Zoho — with the privacy page stating exactly which fields are read, including free/busy data, which is the scope limitation I look for; availability rules run deep with buffers, minimum notice, booking frequency and horizon limits, and date overrides that mark a day unavailable. The captured pages do not state that sync works in both directions or that several calendars per person are checked together for conflicts, and we found no public information on booking rooms or equipment alongside the person. 1 5 10 12

Report an error

Team, staff & location scheduling

How this is scored

How bookings are shared out across more than one person: staff profiles and the services each offers, round-robin and collective (all-hands) meetings, routing forms that send a booking to the right person, several locations, roles and permissions for admins and staff, and single sign-on for larger teams.

0 — A single-user tool with no way to add staff or a team.

3 — Several users or staff calendars can be added, but how bookings are distributed among them and who may change what is not described.

5 — Several staff or team members with their own availability, the customer choosing a person or the system assigning one (round-robin or "any available"), and an admin role that manages the team.

8 — In addition: weighted or priority round-robin, collective bookings that need several people at once, routing by form answers, several locations with their own staff, granular roles and permissions, and reporting per staff member.

10 — Scheduling as a team system: SSO and user provisioning (SAML, SCIM), routing that takes ownership from a CRM, managed templates the organisation pushes to every member, audit logs of changes, and distribution fairness reported.

Report an error

The Data Protection Officer

Team scheduling is close to complete for a multi-practitioner group: round-robin by availability, weights and priority rules, collective and managed event types, routing forms evaluated in order, team admin and owner roles enforced down to the API permissions, and SAML SSO with SCIM provisioning on the organizations tier. We found no public information on several locations with their own staff, audit logs of changes, or fairness reporting on how bookings are distributed. 4 10 13 14

Report an error

Reminders, payments & no-show protection

How this is scored

How the product keeps a booked slot from turning into an empty one: confirmations and reminders by email and SMS, payment or deposit at booking, cancellation and late-cancellation policies, fees for no-shows, waiting lists that refill cancelled slots, and follow-ups after the appointment.

0 — No notifications to the person booking: no confirmation, no reminder.

3 — Email confirmations are sent, but reminders, payments and cancellation rules are not described.

5 — Automatic email reminders with configurable timing, SMS reminders (included or as a paid add-on), and payment at booking through at least one named provider such as Stripe or PayPal.

8 — In addition: deposits or partial prepayment, a cancellation deadline the system enforces, no-show or late-cancellation fees, a waiting list that fills freed slots, and follow-up or review messages after the appointment.

10 — No-show protection as a measured process: no-show rates reported, card-on-file or pre-authorisation charged by policy, reminder channels per customer (email, SMS, messenger), refunds and vouchers handled in the product, and the cancellation and payment terms shown to the customer configurable per service.

Report an error

The Data Protection Officer

Reminders are strong: workflows send email, SMS or WhatsApp at configurable minutes, hours or days before an event, with custom templates, follow-up messages after the call, and payment at booking through Stripe or PayPal with per-event charge amounts. No-show detection exists as event triggers, but we found no public information on enforced cancellation deadlines, no-show or late-cancellation fees, deposits, or a waiting list that refills cancelled slots. 1 2 3 4 10 15

Report an error

Integrations, API & data export

How this is scored

What the product connects to and how the data gets out again: video-meeting links (Zoom, Teams, Google Meet), CRM and marketing tools, automation platforms (Zapier, Make), a documented API and webhooks, website and app-store integrations, and an export of bookings and customer records.

0 — No integrations and no export; bookings stay in the product.

3 — A few named integrations or an export of bookings, but no API or webhooks described.

5 — Video-meeting links created automatically for at least one named tool, a connection to an automation platform or a few named CRM or marketing tools, and an export of bookings or customers.

8 — In addition: a documented public API and webhooks, native CRM integrations named (HubSpot, Salesforce or similar), an integrations directory, and a full export of bookings, customers and booking-form answers.

10 — Built to be connected and left: an API covering every object with its documentation and rate limits published, embeddable components or an SDK, a self-hosting or open-source option or a stated migration path, and the complete account data exportable in a documented format.

Report an error

The Data Protection Officer

A documented v2 API with Bearer-key or OAuth authentication, webhooks with thirty-one trigger types and versioned payloads, Zoom, Teams and Google Meet links created automatically, native two-way HubSpot and Salesforce sync, Zapier and an app store of a hundred-plus apps give the connections a practice needs. Bookings and customer data are exportable at any time self-serve, deletion is stated to reach subprocessors, and self-hosting under an MIT-licensed open-source option plus embeddable components are documented. We found no public information on published API rate limits or the format of the account export. 4 5 6 10 17 18

Report an error

European sovereignty

How this is scored

Who the contracting entity and the parent company are, where booking and customer data is hosted, and who the subprocessors are: hosting, the SMS gateway, email delivery, payment providers, video tools and analytics. Independently sourced by the sovereignty pipeline; booking data names who sees a doctor, a lawyer or a therapist and when, so the whole chain counts, not only the database.

0 — Non-EU vendor and contracting entity, no data processing agreement offered, and neither hosting location nor subprocessors stated.

3 — A privacy policy and a data processing agreement exist, but the vendor and hosting are outside the EU (or hosting is unstated) and subprocessors are not listed.

5 — A data processing agreement and a subprocessor list are published, and either EU hosting or an EU contracting entity is stated, while parts of the chain (SMS, email, analytics, support) run through non-EU providers.

8 — EU contracting entity and EU hosting on named infrastructure, subprocessors listed with their locations, a data processing agreement published, and security certifications (ISO 27001, SOC 2) stated.

10 — Sovereign end to end and evidenced: European ownership, entity, hosting and every subprocessor including SMS and email, data export and deletion documented, and certifications published with their scope rather than implied.

Report an error

The Data Protection Officer

The contracting entity is named — Cal.com, Inc., a Delaware corporation — and the pages state plainly that data is processed in the United States, with EU residency only on request; a data processing agreement binds every account, transfers rest on the Data Privacy Framework and Standard Contractual Clauses under Irish law, and a subprocessor list covering hosting, email, SMS, payments, video and analytics is published with prior notice and objection rights on any change. For the medical and legal practices I sign off, that transparency is real but the chain runs through US providers by default, and we found no public information naming the hosting infrastructure or the individual SMS gateway and email delivery services behind the published categories. 5 6 7 8

Report an error

Pricing transparency

How this is scored

Whether a buyer can compute the real annual cost from public pages alone: price per user, staff member, location or calendar, what the free plan covers, which features (SMS reminders, payments, round-robin, SSO, branding removal) sit in which tier, the cost of SMS credits and payment fees, setup and minimum term.

0 — No public prices at all; every customer is a sales call.

3 — A starting price or a free plan is published, but what scales the cost (users, staff, bookings, SMS) and what each tier includes is unclear.

5 — Tiers are public with their prices per user, staff member or location and their main features, while at least one commonly needed piece (SMS credits, payment fees, an enterprise tier) is unpriced or "on request".

8 — Every tier priced publicly with its scaling unit, add-ons and SMS credits priced, monthly and annual prices both shown, and VAT treatment and minimum term stated.

10 — Complete price computability: annual cost derivable for a given team size, location count and SMS volume, with every add-on, setup, support and payment fee and the cancellation and data-return terms published.

Report an error

The Data Protection Officer

Prices are public with their scaling unit — free forever for one user, Teams at $12 per user/month and Organizations at $28 per user/month on yearly billing with "Save 25%" stated, a 14-day free trial, and no credit card at signup — and the tax treatment and non-refundable default are stated in the terms. Enterprise is custom via a sales call, only yearly figures are shown, and we found no public information on SMS credit costs, monthly-billing prices or a minimum term, so a practice cannot compute its full annual cost from public pages alone. 1 4 6 16

Report an error

European sovereignty — proven facts

1 of 6 dimensions proven

Built only from facts shown on the vendor's own pages. A dimension we could not prove is left open, not scored as zero.

Hosting location Not determined ⚠ unverified — uncited Report an error
Hosting options Not determined ⚠ unverified — uncited Report an error
Open source Not determined ⚠ unverified — uncited Report an error
Data processing agreement Not determined ⚠ unverified — uncited Report an error
Transfer impact assessment Not determined — uncited Report an error

Questions about Cal.com

Is Cal.com European?

No. whats-best.ai classifies Cal.com as Rest of world. Its vendor, Cal.com, Inc., is incorporated in United States, per the vendor’s page captured 28 Oct 2026.

Where does Cal.com store data?

Not stated on the vendor’s pages as of 1 Nov 2026.

Does Cal.com have a free plan?

Yes. Cal.com has a free plan, per the vendor’s page captured 28 Oct 2026.

What are the best alternatives to Cal.com?

As of 3 Nov 2026, the panel rates zeeg (3.5/5), YouCanBookMe (3.5/5) and SimplyBook.me (3.5/5) highest among the other 18 Appointment Scheduling products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is zeeg (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: how scores are made. The full list, with European products first: Cal.com alternatives.

Where this could be wrong

What we left out

A claim that does not survive our checks costs us the claim, not the page. This is what was taken off this one.

Do you know more about Cal.com? Tell us Report an error on this page

Sources (20)

The pages every claim on this page was read from — each one checked, dated, and kept verifiable.

  1. 1 Vendor homepage cal.com Checked 28 Oct 2026 Details →
  2. 2 Product features: reminders and workflows cal.com Checked 28 Oct 2026 Details →
  3. 3 Product features: payments cal.com Checked 28 Oct 2026 Details →
  4. 4 Pricing page cal.com Checked 28 Oct 2026 Details →
  5. 5 Privacy policy cal.com Checked 28 Oct 2026 Details →
  6. 6 Terms of service cal.com Checked 28 Oct 2026 Details →
  7. 7 Data processing agreement cal.com Checked 28 Oct 2026 Details →
  8. 8 Security / trust page cal.com Checked 28 Oct 2026 Details →
  9. 9 Booking page & client experience — found from sitemap cal.com Checked 28 Oct 2026 Details →
  10. 10 Booking page & client experience — found from sitemap cal.com Checked 28 Oct 2026 Details →
  11. 11 Calendar sync & availability rules — found from sitemap cal.com Checked 28 Oct 2026 Details →
  12. 12 Calendar sync & availability rules — found from sitemap cal.com Checked 28 Oct 2026 Details →
  13. 13 Team, staff & location scheduling — found from sitemap cal.com Checked 28 Oct 2026 Details →
  14. 14 Team, staff & location scheduling — found from sitemap cal.com Checked 28 Oct 2026 Details →
  15. 15 Reminders, payments & no-show protection — found from sitemap cal.com Checked 28 Oct 2026 Details →
  16. 16 Reminders, payments & no-show protection — found from sitemap cal.com Checked 28 Oct 2026 Details →
  17. 17 Integrations, API & data export — found from sitemap cal.com Checked 28 Oct 2026 Details →
  18. 18 Integrations, API & data export — found from sitemap cal.com Checked 28 Oct 2026 Details →
  19. 19 Self-hosting / on-premises installation docs — found from the homepage cal.com Checked 1 Nov 2026 Details →
  20. 20 Code repository (open-source licence) — found from the homepage github.com Checked 1 Nov 2026 Details →