# Microsoft Bookings — Appointment Scheduling

Microsoft Bookings by Microsoft Corporation holds a panel rating of 2/5 from 6 AI judges (category median 3/5), as of 2026-10-29. Provenance: Rest of world; sovereignty: not determined.

- Vendor: Microsoft Corporation (https://learn.microsoft.com/en-us/microsoft-365/bookings/bookings-overview?view=o365-worldwide)
- Category: [Appointment Scheduling](https://whats-best.ai/software/appointment-scheduling.md)
- Provenance (editorial classification): Rest of world
- Canonical page: https://whats-best.ai/software/appointment-scheduling/microsoft-bookings
- Alternatives: https://whats-best.ai/software/appointment-scheduling/microsoft-bookings/alternatives ([markdown](https://whats-best.ai/software/appointment-scheduling/microsoft-bookings/alternatives.md))
- Data as of: 2026-11-04 · evaluated 2026-10-29 · oldest source captured 2026-10-28

**AI-generated.** Every score, rationale and verdict here is written by a panel of AI judges from public evidence — an analysis, not a hands-on test. Every fact quotes the vendor page it was read from. No score can be bought. How scores are made: https://whats-best.ai/methodology

## At a glance

- Vendor: Microsoft Corporation
- Headquarters: Not stated on the vendor’s pages as of 1 Nov 2026
- Data hosting: Not stated on the vendor’s pages as of 1 Nov 2026
- Free plan: Not stated on the vendor’s pages as of 1 Nov 2026

## The panel's verdict

Microsoft Bookings, the appointment scheduler inside Microsoft 365, scores strongest where that ecosystem already runs: integrations and data at 5-6, on a unique Teams meeting link for each online appointment and a documented Microsoft Graph API with SDKs and samples. The four core criteria — booking experience, calendar and availability, team scheduling, reminders and no-shows — clustered at 4: a web-based booking page, personal or shared, up to 100 staff with per-person working hours and roles, plus email reminders; SMS requires a Teams Premium licence and reaches only United States, Canada and United Kingdom numbers. Judges repeatedly found no public information on client self-service rescheduling, how bookings are distributed among staff, deposits, enforced cancellation deadlines or waiting lists. Sovereignty scored 4-5: judges weighed a documented EU Data Boundary for tenants signed up in the EU or EFTA against the privacy statement's reservation of storage in the United States and any jurisdiction where Microsoft or its affiliates operate facilities. No genuine splits appeared among the judges. Pricing transparency scored 2-3; the pages list plan names but no prices.

**Speaks for it:**
- Each appointment booked as an online meeting creates a unique Teams meeting link.
- Microsoft Graph provides a documented public API with SDKs, code samples and change notifications.
- Shared booking pages support up to 100 staff with per-person working hours and four named roles.
- Availability can follow free/busy from staff Microsoft 365 calendars alongside business hours.
- A documented EU Data Boundary covers Microsoft 365 tenants signed up in the EU or EFTA, with a public subprocessor list.

**Held against it:**
- SMS notifications require a Teams Premium licence and reach only United States, Canada and United Kingdom phone numbers.
- We found no public information on how bookings are distributed among staff, such as round-robin or any-available assignment.
- We found no public information on client self-service reschedule and cancel links, embedding the booking page, or custom booking questions.
- We found no public information on payments or deposits at booking, enforced cancellation deadlines, or waiting lists.
- The privacy statement says personal data may also be stored in the United States and any jurisdiction where Microsoft or its affiliates operate facilities, and the EU Data Boundary allows some transfers outside it.

**Best for:**
- You already run on Microsoft 365 and want each online appointment to carry a Teams meeting link automatically.
- You manage up to 100 staff who need their own working hours and assigned roles on a shared booking page.
- Your developers need a documented public API with SDKs and change notifications for custom tooling.

**Avoid if:**
- Your customers are outside the United States, Canada and the United Kingdom and expect SMS reminders.
- You want SMS reminders without adding a Teams Premium licence.
- Your staff keep their calendars outside Microsoft 365 or outside your tenant, since free/busy works through Microsoft 365 and external staff cannot share it.
- You must pin personal data to the EU Data Boundary in every respect, given the privacy statement's reservation of storage in the United States and other jurisdictions.

## Scores by judge and criterion

Scores out of 5, each judge scoring independently against the published rubric (v1). "n/r" = not rated: the vendor publishes no price, or the judge found no public information on that criterion.

| Criterion | The Practice Owner | The Salon Owner | The Sales Team Lead | The Independent Consultant | The Data Protection Officer | The Skeptic |
| --- | --- | --- | --- | --- | --- | --- |
| Booking page & client experience | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 |
| Calendar sync & availability rules | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 |
| Team, staff & location scheduling | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 |
| Reminders, payments & no-show protection | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 |
| Integrations, API & data export | 3/5 | 3/5 | 3/5 | 2.5/5 | 3/5 | 3/5 |
| European sovereignty | 2.5/5 | 2.5/5 | 2/5 | 2.5/5 | 2.5/5 | 2.5/5 |
| Pricing transparency | n/r | n/r | n/r | n/r | n/r | n/r |
| **Weighted verdict** | **2/5** | **2/5** | **2.5/5** | **2/5** | **2.5/5** | **2.5/5** |

### The judges

- **The Practice Owner** (v1.0): Runs a physiotherapy practice with six therapists, two treatment rooms that must not be double-booked, and a front desk that spends its mornings on the phone. Wants patients to book and reschedule online, SMS reminders that cut the no-shows, rooms and therapists checked together, and patient data that stays in Europe under a data processing agreement the practice can show.
- **The Salon Owner** (v1.0): Owns two hair and beauty salons with eleven stylists and a Saturday that is booked out by Wednesday. Wants every service with its own duration and price on one booking page, clients who pick their stylist, a deposit for colour appointments, a fee when someone does not show, and a monthly bill that does not grow with every chair.
- **The Sales Team Lead** (v1.0): Leads fourteen account executives in three time zones and gets every demo request from the website. Wants inbound demos routed by company size and region, round-robin that is fair and can be checked, two-way sync with Outlook and Google so nobody is double-booked, a video link in every invite, and the booking written into the CRM before the call starts.
- **The Independent Consultant** (v1.0): Sells coaching sessions and workshop days on her own and books clients from Germany, Austria and Switzerland. Wants a booking page that looks like her own website, payment taken when the session is booked, a buffer after every call, her private calendar respected, reminders she never has to send herself, and a price that makes sense for one person.
- **The Data Protection Officer** (v1.0): Signs off booking tools for a group of medical and legal practices, where an appointment alone reveals who is a patient or a client. Wants the contracting entity and hosting named, every subprocessor listed down to the SMS gateway and the email service, calendar access limited to what booking needs, and bookings and customer records that can be exported and deleted on request.
- **The Skeptic** (v1.0): Has seen "free forever" booking pages that put the vendor's logo in front of every client, SMS reminders that turn out to be credits sold separately, round-robin and payments locked in the top tier, and calendar sync that reads far more than free and busy. Reads the price list for what scales per seat, the subprocessor list for where the reminders are sent from, and asks how the bookings get out again.

## European sovereignty — proven facts

Built only from facts on the vendor's own pages; a dimension we could not prove is left open, never scored as zero. Headline: not determined.

| Dimension | Finding | Points | Source |
|---|---|---|---|
| Legal entity | Not determined | — | — |
| Hosting location | Not determined | — | — |
| Hosting options | Not determined | — | — |
| Open source | Not determined | — | — |
| Data processing agreement | Not determined | — | — |
| Transfer impact assessment | Not determined | — | — |

## Key facts

Each fact is the vendor's own statement, cited to the source page it was read from ([S*n*] → Sources).

**Compliance**
- Defending your data: business customers · public sector customers · Defending Your Data · yes [S6]
- Dpf: yes · yes · yes [S5]
- Encryption at rest: AES-256 [S6]
- Encryption in transit: TLS · IPsec [S6]
- Encryption layers: 2 [S6]
- EU data transfer: yes [S6]
- GDPR iso27018: yes · yes [S6]
- Gdvo financial compensation: business and public sector customers · yes [S6]
- Law enforcement notification: yes · yes [S6]
- Log pseudonymization: yes [S7]
- Log retention: retention policies set at minimum retention time per log type [S7]
- No direct government access: no [S6]
- Professional services data at rest: yes [S7]
- Pseudonymization methods: encryption · masking · tokenization · data blurring [S7]
- Transparency reports: US national security request counts · yes [S6]

**Data**
- Collection sources: direct user input · interactions and usage · affiliates · subsidiaries · third parties [S5]
- Disclosure: affiliates · subsidiaries · vendors acting on Microsoft's behalf · legal authorities when required [S5]
- Privacy report: aggregated metrics on privacy rights requests · yes [S5]
- Storage regions: user's region · United States · any jurisdiction where Microsoft or affiliates operate facilities [S5]
- Usage AI training: yes [S5]
- User tools: Microsoft privacy dashboard · contacting Microsoft [S5]

**Hosting**
- Data storage: Exchange Online · Microsoft 365 [S1]
- Datacenter choice: Microsoft Azure · Microsoft Dynamics 365 · Power Platform · Microsoft 365 · yes [S6]
- Datacenter countries: Austria · Belgium · Denmark · Finland · France · Germany · Greece · Ireland · Italy · Netherlands · Norway · Poland · Spain · Sweden · Switzerland [S7]
- Global data residency: worldwide data residency support [S6]
- Shared mailboxes: shared mailboxes in Exchange · yes [S1]

**Integrations**
- APIs covered: REST APIs on OneNote and Outlook endpoints [S9]
- Bicep templates: yes [S8]
- Code samples: yes [S8]
- Deprecation notice: no [S9]
- Graph explorer: Graph Explorer · yes [S8]
- Graph platforms: .NET · PHP · Java · Python · Ruby on Rails · UWP · iOS · Android [S9]
- Graph services: OneNote · Outlook · Excel · OneDrive · Microsoft Teams · Planner · SharePoint [S9]
- Last updated: 2018-08-28 [S9]
- New app recommendation: Microsoft recommends Microsoft Graph for new apps [S9]
- Outlook teams access: yes · yes [S1]
- Replacement API: Microsoft Graph, unified API endpoint for Microsoft 365 [S9]
- Sdks: yes [S8]
- Section list: OneNote · Outlook REST API (v2.0) · Outlook REST API (beta) · Outlook REST API (v1.0) · Discovery Service APIs · Video APIs · Office 365 API endpoints for China [S9]
- Web access URL: book.ms [S1]

**Legal**
- Contractual framework: Microsoft-Produktbedingungen · Microsoft Datenschutz-Nachtrag · Standardverträge (Standard Contractual Terms) [S6]
- Document: Microsoft privacy statement · September 2026 [S5]

**Pricing**
- Dev program: yes · yes [S8]
- Subscriptions: A3 · A5 · E1 · E3 · E5 · F1 · F3 · G1 · G3 · G5 · A3 · A5 · E1 · E3 · E5 · F1 · F3 · Business Basic · Business Standard · Business Premium · Teams Essentials · Teams Premium [S1]

**Product**
- Advertising optout: Personalisierte Werbung und Angebote · Einstellungen für Werbung von Drittanbietern · yes [S5]
- AI copilot: Copilot is a family of services, products and solutions using generative AI; Microsoft AI use governed by its AI principles and Responsible AI Standard [S5]
- Azure regional services: yes [S7]
- Azure resource manager config: configure Azure Resource Manager to the EU Data Boundary [S7]
- Business hours setting: Use business hours option limits bookable times to business hours; deselection allows custom staff hours [S3]
- Calendar freebusy setting: Events on Microsoft 365 calendar affect availability; free/busy from staff calendars impacts availability [S3]
- Change notifications: yes [S8]
- Children data: yes · 13 [S5]
- Cookies: store preferences · sign-in · personalized advertising · fraud prevention · performance analysis · via 'Cookies verwalten' link on website [S5]
- Customer managed keys: Azure Key Vault supported [S6]
- Data control promise: Microsoft promises customers retain control over their data in the cloud, backed by contractual commitments [S6]
- Data ownership: yes · yes · yes · yes · yes [S6]
- Dynamics powerplatform requirements: tenant and all environments in EU/EFTA Macro Region Geography · billing address in EU Data Boundary country [S7]
- Enterprise developer: yes [S5]
- Entertainment: XBOX · Microsoft Store · MSN [S5]
- Eudb countries: EU · EFTA [S7]
- Eudb definition: Azure · Dynamics 365 · Power Platform · Microsoft 365 [S7]
- External staff limitation: External (outside tenant) staff cannot share free/busy information with Bookings [S3]
- Graph toolkit: login · people picker · person card · yes [S8]
- Last updated: February 26, 2025 [S7]
- Mail API: Mail API with change notifications for processing and responding to email messages. [S8]
- Microsoft365 scope: scope determined by tenant sign-up location in EU or EFTA [S7]
- Microsoft account: sign-in credentials · contact and payment data · device and usage data · activity information · yes [S5]
- Multi geo exclusion: no [S7]
- No advertising data use: no · no [S6]
- Notifications: yes · yes [S1]
- Overview: Scheduling and appointment management tool for customers, clients, or colleagues [S1]
- Personal bookings: individual personal booking pages and meeting types [S1]
- Powershell automation: PowerShell for provisioning users, groups, Teams; M365 usage reports; security alerts. [S8]
- Productivity comms: Microsoft 365 · Microsoft Teams · OneDrive · time · date · communication participants [S5]
- Region assignment: customer location · billing address · customer decision [S7]
- Shared bookings: yes · yes · yes · yes [S1]
- Single endpoint: Access rich, people-centric data in the Microsoft Cloud via a single endpoint with the Microsoft Graph REST APIs and SDKs. [S8]
- Sms configuration teams app: yes [S4]
- Sms configuration webapp: yes [S4]
- Sms forecasting period: SMS notification telemetry can be used during the promotional period to forecast and budget for SMS after April 3, 2023 [S4]
- Sms notifications: Bookings can send SMS text notifications to the person booking an appointment [S4]
- Sms supported countries: United States · Canada · United Kingdom [S4]
- Sms teams link: yes [S4]
- Sms teams premium: Teams Premium license [S4]
- Sms usage reports: time and date sent · origin number · message type · event type · delivery status · Teams admin center · Teams admin role [S4]
- Sms usage reports admin role: Teams admin [S4]
- Staff email notifications: Option to notify staff via email when a booking assigned to them is created or changed [S3]
- Staff email requirement: yes · no [S3]
- Staff limit: 100 [S3]
- Staff page: Staff page is where you create staff list, manage details (name, phone, email) and set working hours [S3]
- Staff roles: Team member · Scheduler · Viewer · Guest [S3]
- Super user powershell: Super user gets full access and send-as permissions to booking mailbox without appearing as bookable staff [S3]
- Teams bots: Teams bots that interact with users, conduct surveys, send notifications. [S8]
- Teams outlook app: yes · yes [S1]
- Teams virtual meetings: yes · yes [S1]
- Transfers outside boundary: yes [S7]
- Web booking page: yes · yes [S1]
- Windows scope: Windows 10 · Windows 11 [S5]

**Subprocessors**
- Contractor restrictions: yes · yes [S6]

## Questions

### Is Microsoft Bookings European?

No. whats-best.ai classifies Microsoft Bookings as Rest of world.

### Where does Microsoft Bookings store data?

Not stated on the vendor’s pages as of 1 Nov 2026.

### Does Microsoft Bookings have a free plan?

Not stated on the vendor’s pages as of 1 Nov 2026.

### What are the best alternatives to Microsoft Bookings?

As of 3 Nov 2026, the panel rates [zeeg (3.5/5)](https://whats-best.ai/software/appointment-scheduling/zeeg), [YouCanBookMe (3.5/5)](https://whats-best.ai/software/appointment-scheduling/youcanbookme) and [SimplyBook.me (3.5/5)](https://whats-best.ai/software/appointment-scheduling/simplybook-me) highest among the other 18 Appointment Scheduling products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is [zeeg](https://whats-best.ai/software/appointment-scheduling/zeeg) (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: [how scores are made](https://whats-best.ai/methodology#ordering). The full list, with European products first: [Microsoft Bookings alternatives](https://whats-best.ai/software/appointment-scheduling/microsoft-bookings/alternatives).

## What this page leaves out

- 36 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 4 data facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 3 integrations facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 2 pricing facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 1 compliance fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 1 support fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 3 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown.
- 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement.

## Sources

- [S1] Product documentation: https://learn.microsoft.com/en-us/microsoft-365/bookings/bookings-overview?view=o365-worldwide (checked 2026-10-28)
- [S2] Product FAQ: https://learn.microsoft.com/en-us/microsoft-365/bookings/bookings-faq?view=o365-worldwide (checked 2026-10-28)
- [S3] Product documentation: staff: https://learn.microsoft.com/en-us/microsoft-365/bookings/add-staff?view=o365-worldwide (checked 2026-10-28)
- [S4] Product documentation: SMS reminders: https://learn.microsoft.com/en-us/microsoft-365/bookings/bookings-sms?view=o365-worldwide (checked 2026-10-28)
- [S5] Privacy policy: https://www.microsoft.com/de-de/privacy/privacystatement (checked 2026-10-28)
- [S6] Security / trust page: https://www.microsoft.com/de-de/trust-center/privacy (checked 2026-10-28)
- [S7] EU data boundary: https://learn.microsoft.com/en-us/privacy/eudb/eu-data-boundary-learn (checked 2026-10-28)
- [S8] Integrations, API & data export — found from sitemap: https://developer.microsoft.com/en-us/graph/rest-api (checked 2026-10-28)
- [S9] Integrations, API & data export — found from sitemap: https://learn.microsoft.com/en-us/previous-versions/office/office-365-api/ (checked 2026-10-28)
- [S10] Code repository (open-source licence) — found from the homepage: https://github.com/MicrosoftDocs/microsoft-365-docs (checked 2026-11-01)

---

Cite as: whats-best.ai, "Microsoft Bookings — Appointment Scheduling", AI panel analysis, as of 2026-11-04. https://whats-best.ai/software/appointment-scheduling/microsoft-bookings

Corrections: https://whats-best.ai/correct/1098?target=page