# Zoho Bookings — Appointment Scheduling

Zoho Bookings by Zoho Corporation Pvt. Ltd. holds a panel rating of 3/5 from 6 AI judges (category median 3/5), as of 2026-10-29. Provenance: Rest of world; sovereignty: not determined.

- Vendor: Zoho Corporation Pvt. Ltd. (https://www.zoho.com/de/bookings/)
- Category: [Appointment Scheduling](https://whats-best.ai/software/appointment-scheduling.md)
- Provenance (editorial classification): Rest of world
- Canonical page: https://whats-best.ai/software/appointment-scheduling/zoho-bookings
- Alternatives: https://whats-best.ai/software/appointment-scheduling/zoho-bookings/alternatives ([markdown](https://whats-best.ai/software/appointment-scheduling/zoho-bookings/alternatives.md))
- Data as of: 2026-11-04 · evaluated 2026-10-29 · oldest source captured 2026-10-28

**AI-generated.** Every score, rationale and verdict here is written by a panel of AI judges from public evidence — an analysis, not a hands-on test. Every fact quotes the vendor page it was read from. No score can be bought. How scores are made: https://whats-best.ai/methodology

## At a glance

- Vendor: Zoho Corporation Pvt. Ltd.
- Headquarters: Not stated on the vendor’s pages as of 1 Nov 2026
- Data hosting: Not stated on the vendor’s pages as of 1 Nov 2026
- Free plan: Yes, per the vendor’s own page [S1]

## The panel's verdict

Zoho Bookings is AI-powered appointment scheduling within the Zoho suite. Strongest are the booking experience and integrations and data, each 7 at both ends of the range: the captured pages document white-label booking pages on a custom domain, self-service rescheduling and cancellation, two-way calendar sync with Google and Microsoft 365, buffers and booking limits, plus APIs, webhooks and named video, CRM and automation links. Reminders and no-shows holds at a uniform 6 — automated email and SMS reminders and payment at booking via PayPal and Stripe are stated, and we found no public information on waiting lists, no-show fees or follow-ups. The genuine split is sovereignty, spanning 5 to 7, the widest spread: higher scores credit the homepage's EU data-centre statement, the GDPR addendum and a published list of 41 sub-processors, while lower scores weigh the privacy policy's disclosure of processing in the USA, EWR and other Zoho countries and certifications stated only as generic industry standards. Pricing transparency spans 5 to 6 — tiers are public but the Flex tier is contact-only and SMS credits are unpriced.

**Speaks for it:**
- Booking pages in workspace, service and staff variants, white-labelled on a custom domain with automatic language and time-zone detection.
- Two-way calendar sync with Google, Microsoft 365 and Zoho calendars, with working hours and breaks, buffer times, a booking window and booking limits per day, person or event type.
- Public APIs, webhooks and custom functions plus Zapier and Zoho Flow, with meeting links for Zoom, Google Meet and GoToMeeting and CRM links to Zoho CRM and Bigin.
- Team members get their own logins and calendar views, with granular user roles, SAML single sign-on and audit logging of updates and deletions.
- Public per-user pricing — a permanently free tier for one user, Basic at €6 per user per month and Premium at €9 per user per month, both annual-billed with VAT added, plus a 15-day Premium trial that requires no credit card.

**Held against it:**
- No-show protection stops at reminders, deposits or partial payment and enforced cancellation time limits — we found no public information on waiting lists, no-show or late-cancellation fees, or follow-up messages.
- The captured pages give different statements on where data rests: the homepage states storage in a data centre within the EU, while the privacy policy says personal information may be processed, transferred and stored in the USA, EWR and other Zoho countries.
- Certifications appear only as a generic statement of being certified to industry standards — we found no public information naming ISO 27001 or SOC 2, and sub-processor locations are not shown.
- Data export appears only as a right to request export or deletion — we found no public information on a self-service export of bookings, customer records and booking-form answers in a documented format.
- The full bill is not computable from the captured pages: only annual-billed prices are shown, the Flex tier is contact-only, and SMS credits, payment fees and workspaces beyond the three included in Premium carry no published price.

**Best for:**
- You run a salon, therapy practice or coaching business and want branded booking pages that customers can book, reschedule and cancel from on their own.
- You manage a team where each staff member needs their own login, calendar view and revenue reporting, with single sign-on.
- You want to start free — the permanently free tier covers one user with online meetings, notification emails and reminders.
- You already use the Zoho suite or Zapier and want bookings flowing into Zoho CRM or Bigin.

**Avoid if:**
- You require EU-only data handling end to end — the privacy policy discloses processing in the USA, EWR and other Zoho countries, and the published sub-processor list includes OpenAI, Amazon CDN and Kaleyra.
- You must know your total cost before committing — only annual-billed prices are published, and SMS credits, payment fees, extra workspaces and the Flex tier carry no public price.
- Missed appointments are a major cost for you — the documented protections are reminders, deposits or partial payment and cancellation time limits, and we found no public information on no-show fees or waiting lists.

## Scores by judge and criterion

Scores out of 5, each judge scoring independently against the published rubric (v1). "n/r" = not rated: the vendor publishes no price, or the judge found no public information on that criterion.

| Criterion | The Practice Owner | The Salon Owner | The Sales Team Lead | The Independent Consultant | The Data Protection Officer | The Skeptic |
| --- | --- | --- | --- | --- | --- | --- |
| Booking page & client experience | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 |
| Calendar sync & availability rules | 3/5 | 3.5/5 | 3.5/5 | 3/5 | 3/5 | 3/5 |
| Team, staff & location scheduling | 3.5/5 | 3.5/5 | 3/5 | 3.5/5 | 3.5/5 | 3.5/5 |
| Reminders, payments & no-show protection | 3/5 | 3/5 | 3/5 | 3/5 | 3/5 | 3/5 |
| Integrations, API & data export | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 |
| European sovereignty | 2.5/5 | 3/5 | 2.5/5 | 3.5/5 | 3/5 | 2.5/5 |
| Pricing transparency | 2.5/5 | 2.5/5 | 2.5/5 | 3/5 | 3/5 | 2.5/5 |
| **Weighted verdict** | **3/5** | **3/5** | **3/5** | **3.5/5** | **3/5** | **3/5** |

### The judges

- **The Practice Owner** (v1.0): Runs a physiotherapy practice with six therapists, two treatment rooms that must not be double-booked, and a front desk that spends its mornings on the phone. Wants patients to book and reschedule online, SMS reminders that cut the no-shows, rooms and therapists checked together, and patient data that stays in Europe under a data processing agreement the practice can show.
- **The Salon Owner** (v1.0): Owns two hair and beauty salons with eleven stylists and a Saturday that is booked out by Wednesday. Wants every service with its own duration and price on one booking page, clients who pick their stylist, a deposit for colour appointments, a fee when someone does not show, and a monthly bill that does not grow with every chair.
- **The Sales Team Lead** (v1.0): Leads fourteen account executives in three time zones and gets every demo request from the website. Wants inbound demos routed by company size and region, round-robin that is fair and can be checked, two-way sync with Outlook and Google so nobody is double-booked, a video link in every invite, and the booking written into the CRM before the call starts.
- **The Independent Consultant** (v1.0): Sells coaching sessions and workshop days on her own and books clients from Germany, Austria and Switzerland. Wants a booking page that looks like her own website, payment taken when the session is booked, a buffer after every call, her private calendar respected, reminders she never has to send herself, and a price that makes sense for one person.
- **The Data Protection Officer** (v1.0): Signs off booking tools for a group of medical and legal practices, where an appointment alone reveals who is a patient or a client. Wants the contracting entity and hosting named, every subprocessor listed down to the SMS gateway and the email service, calendar access limited to what booking needs, and bookings and customer records that can be exported and deleted on request.
- **The Skeptic** (v1.0): Has seen "free forever" booking pages that put the vendor's logo in front of every client, SMS reminders that turn out to be credits sold separately, round-robin and payments locked in the top tier, and calendar sync that reads far more than free and busy. Reads the price list for what scales per seat, the subprocessor list for where the reminders are sent from, and asks how the bookings get out again.

## European sovereignty — proven facts

Built only from facts on the vendor's own pages; a dimension we could not prove is left open, never scored as zero. Headline: not determined.

| Dimension | Finding | Points | Source |
|---|---|---|---|
| Legal entity | Not determined | — | — |
| Hosting location | Not determined | — | — |
| Hosting options | Not determined | — | — |
| Open source | Not determined | — | — |
| Data processing agreement | Not determined | — | — |
| Transfer impact assessment | Not determined | — | — |

## Key facts

Each fact is the vendor's own statement, cited to the source page it was read from ([S*n*] → Sources).

**Compliance**
- Certifications: yes [S4]
- Dnt not honored: no [S4]
- DPA available: yes · yes [S4]
- Employee background checks: yes [S7]
- Ewr rights all users: yes [S4]
- GDPR breach notification: 72 [S7]
- GDPR faq: yes [S3]
- Internal and third party audits: yes [S7]
- ISMS: Informationssicherheitsmanagementsystem (ISMS) · yes [S7]
- Marketing opt out: yes [S4]
- No ads ever: yes [S4]
- No third party tracking: yes [S4]
- Owasp framework: OWASP [S7]
- Transfer mechanism scc: EU-Mustervertragsklauseln (SCC), Gruppenunternehmensvereinbarung [S4]

**Data**
- Children min age: 16 [S4]
- Credit card storage: no [S4]
- Deletion schedule: 6 · 3 [S7]
- Device disposal: HDDs entmagnetisiert und geschreddert; SSDs Crypto Erase und Schredder [S7]
- Export delete right: yes · yes [S4]
- Free account inactivity: 120 [S7]
- Inactive account deletion: yes · 120 · yes [S5]
- Ownership customer: yes [S5]
- Privacy policy applies: Zoho Privacy Policy [S5]
- Retention after cancellation: 6 · 3 [S4]
- Service data ownership: yes [S4]
- Tracking own tools: yes · no · no [S5]

**Hosting**
- Colocation model: Co-Location-Anbieter für Gebäude/Kühlung/Strom/physische Sicherheit; Zoho stellt Server und Speicher [S7]
- Data residency: yes [S1]
- Datacenter assignment: yes · assigned_by_region_at_signup [S5]
- International transfers: USA · EWR · andere Zoho-Länder [S4]
- Local copy: yes [S5]

**Integrations**
- API: yes [S2]
- Federated auth: LinkedIn · Microsoft · Google [S4]
- List: calendars · meeting tools · Zapier · Zoho Flow · Zoho CRM · Zoho SalesIQ · Zoho Assist · Zoho Bigin · SMS providers · payment providers [S3]
- Marketplace data sharing: yes [S4]
- Named: Google Calendar · Teams · Zoom · PayPal · Stripe · Google Analytics · WhatsApp · Zoho MCP · Zoho CRM · Bigin · Zoho Books · Zoho SalesIQ [S1]
- Third party applications: yes · no [S5]
- Workflows webhooks: yes · yes [S2]

**Legal**
- Complaint forwarding disclosure: 10 · yes [S5]
- Entity nl: Zoho Corporation BV · Niederlande [S4]
- Governing law: based on customer's billing address (paying customers) or state/country otherwise [S5]
- Last updated: 02. März 2022 [S4]
- Liability cap: fees paid in the 12 months preceding · 1000 · yes [S5]
- Suspension appeal window: legal@zohocorp.com · 30 · 30 [S5]
- Termination pro rata refund: yes · yes [S5]
- Terms change notice: 30 · yes · yes [S5]
- Terms last updated: 2022-03-02 [S5]
- Warranty disclaimer: as-is, as-available · yes [S5]

**Pricing**
- Annual savings: 25 [S3]
- Basic: annual · 6 [S3]
- Beta service disclaimer: yes · yes [S5]
- Flex: yes · yes [S3]
- Free tier: 1 · yes · yes [S3]
- Free tier: yes · yes [S2]
- Free trial data loss: yes · upgrade_to_paid · export_data [S5]
- Free version: yes [S1]
- Ngo discount faq: yes [S3]
- Plan change: yes [S3]
- Premium: annual · 9 [S3]
- Price change notice: yes [S5]
- Sub year card only: subscriptions under one year · credit_card_only [S5]
- Subscription auto renewal: yes · 7 [S5]
- Taxes: local taxes such as VAT added · yes [S3]
- Taxes VAT: MwSt./VAT · yes [S5]
- Trial: 15 · Premium · trial [S1]
- Zoho one faq: yes [S3]

**Product**
- AI booking page generation: yes [S1]
- AI branding: yes [S1]
- AI scheduling: AI-powered appointment scheduling [S1]
- AI usage disclosure: anonymisierte Service-Datensätze und kundeneigene Unternehmensdaten für eigene Modelle [S4]
- Anti malware: yes [S7]
- Audit logging customers: yes [S7]
- Backup encryption retention: tar.gz · AES-256 · 3 [S7]
- Backup schedule: yes · yes [S7]
- Book on behalf: yes [S2]
- Booking limits: yes [S1]
- Booking page customization: yes [S2]
- Booking page types: workspace · service · staff [S2]
- Booking types: one-on-one · collective · group · resource [S3]
- Booking window: yes [S2]
- Branding: customizable booking page · customizable emails · white labeling · custom domain [S3]
- Buffer times: yes [S2]
- Bug bounty: https://bugbounty.zohocorp.com/ · yes [S7]
- Business continuity plan: yes [S7]
- Calendar sync: Google · O365 · Zoho Calendars [S2]
- Cancellation limits: yes · yes [S2]
- Change management sdlc: yes [S7]
- Conversational AI: yes [S1]
- Core features: timezone/language auto conversion · browser extension and mobile app · user roles · automated notifications and reminders · appointment reports · revenue reports [S3]
- CRM integration: yes [S1]
- CRM integration: yes [S2]
- Custom domain: yes · yes [S2]
- Customer portal: yes [S3]
- Customer portal: yes [S2]
- Customer selfservice: yes [S2]
- Data isolation: logical isolation [S7]
- Data ownership: yes [S7]
- Datacenter two factor biometric access: yes [S7]
- Ddos protection: yes [S7]
- Disaster recovery replication: yes · yes [S7]
- Dmarc: yes [S7]
- Employee access logged: yes [S4]
- Encryption at rest: 256 · AES [S7]
- Encryption in transit: TLS · 1.2 · 1.3 [S7]
- Endpoint encryption: Workstations verschlüsseln Daten im Ruhezustand, sperren bei Inaktivität [S7]
- Enterprise admin roles: yes · yes [S5]
- Enterprise features: event types, workspaces, granular user roles, scheduling APIs, workflow automation [S1]
- Features modules: My Space · Appointments · Event Types · Schedules · Users · Booking Pages [S1]
- Firewall review schedule: Tägliche Prüfung von Firewall-Änderungen; vierteljährliche Überprüfung der Regeln [S7]
- Free tier calendar sync: two-way calendar sync with Zoho, Google, Microsoft 365/Outlook.com [S3]
- Google analytics: yes [S1]
- Key management: Eigener Key Management Service; Master-Schlüssel und Datenverschlüsselungsschlüssel getrennt gespeichert [S7]
- Language timezone autodetect: yes [S2]
- Meeting tools: Zoho Meeting · Zoom · Google Meet · GoToMeeting [S2]
- MFA: Touch-ID · Face-ID · Push · QR-Code · TOTP · yes [S7]
- Mobile app: iOS · Android [S1]
- Mobile app permissions: Kamera · Anrufverlauf · Kontakte · Fotobibliothek [S4]
- Mobile apps: yes · yes [S2]
- Network redundancy: yes [S7]
- Network segregation: yes [S7]
- No credit card: no [S3]
- Notifications: email · sms [S2]
- Online payments: PayPal · Stripe [S2]
- Opportunistic tls email: yes [S7]
- Pfs hsts: yes · yes [S7]
- Premium workspaces: yes · 3 [S3]
- Production access controls: yes [S7]
- Push notification providers: Apple Push Notification Service, Google Cloud Messaging, Windows Push Notification Services [S4]
- Redirect forms email widgets: yes [S1]
- Reminders: yes [S2]
- Reports: day · week · month [S2]
- Revenue reports: Revenue by service and staff reports [S2]
- Security contact: security@zohocorp.com [S7]
- Security strategy components: Unternehmenssicherheit, Physische Sicherheit, Infrastruktursicherheit, Datensicherheit, Identitäts- und Zugriffskontrolle, Betriebssicherheit, Incident Management, Verantwortungsvolle Offenlegung, Anbieterverwaltung, Kundenkontrollen zur S… [S7]
- Service description: cloud software and applications for business · offline applications · mobile applications [S5]
- Sme features: workspaces, white-label, custom domain [S1]
- Sms providers: Twilio · Clickatell [S2]
- Solo users: booking links via email, WhatsApp, social media; one-step booking and payment; mobile app [S1]
- SSO: yes · SAML · LDAP · ADFS [S7]
- Team management: yes [S2]
- Terms acceptance: yes [S2]
- Two way sync: yes · yes · yes [S1]
- Usage restrictions: yes · yes · yes · yes [S5]
- Vendor management: yes [S7]
- Vulnerability management: yes · yes [S7]
- Waf: yes [S7]
- Whatsapp integration: yes [S1]
- Workflows: email · SMS · custom workflows [S3]
- Working hours: yes [S2]
- Yubikey support: yes [S7]

**Subprocessors**
- AI providers definition: third-party providers delivering AI features; may process prompts, content, or other inputs [S6]
- Amazon cdn services: Amazon CDN · 13 [S6]
- Bundle note: bundle suites like Zoho One apply sub-processors of each respective product in the bundle [S6]
- Change notifications: yes [S6]
- Count: 57 · 11 · 41 [S6]
- Default enablement: yes · yes [S6]
- Definition: third party data processor engaged by Zoho with access to or processing of Service Data which may contain Personal Information [S6]
- Disable choice: critical requirements such as fraud prevention · yes [S6]
- Kaleyra services: Kaleyra · 24 [S6]
- Last updated: 2026-10-08 [S6]
- Onboarding: yes · yes [S6]
- Openai services: OpenAI · 18 [S6]
- Tfa note: SMS-method TFA for Zoho Account uses the Zoho Account SMS sub-processor regardless of services used [S6]
- Third party providers definition: recipients of personal information not strictly sub-processors; Zoho may be controller or provider is independent controller [S6]

**Support**
- Customer count: 29000 [S3]
- Newsletter unsubscribe: yes · no [S5]
- Privacy contact: privacy@zohocorp.com [S4]

## Questions

### Is Zoho Bookings European?

No. whats-best.ai classifies Zoho Bookings as Rest of world.

### Where does Zoho Bookings store data?

Not stated on the vendor’s pages as of 1 Nov 2026.

### Does Zoho Bookings have a free plan?

Yes. Zoho Bookings has a free plan, per [the vendor’s page captured 28 Oct 2026](https://whats-best.ai/evidence/11738).

### What are the best alternatives to Zoho Bookings?

As of 3 Nov 2026, the panel rates [zeeg (3.5/5)](https://whats-best.ai/software/appointment-scheduling/zeeg), [YouCanBookMe (3.5/5)](https://whats-best.ai/software/appointment-scheduling/youcanbookme) and [SimplyBook.me (3.5/5)](https://whats-best.ai/software/appointment-scheduling/simplybook-me) highest among the other 18 Appointment Scheduling products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is [zeeg](https://whats-best.ai/software/appointment-scheduling/zeeg) (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: [how scores are made](https://whats-best.ai/methodology#ordering). The full list, with European products first: [Zoho Bookings alternatives](https://whats-best.ai/software/appointment-scheduling/zoho-bookings/alternatives).

## What this page leaves out

- 6 legal facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 3 subprocessors facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 2 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 1 product fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 3 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown.
- 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement.

## Sources

- [S1] Vendor homepage: https://www.zoho.com/de/bookings/ (checked 2026-10-28)
- [S2] Product features: https://www.zoho.com/de/bookings/features.html (checked 2026-10-28)
- [S3] Pricing page: https://www.zoho.com/de/bookings/pricing.html (checked 2026-10-28)
- [S4] Privacy policy: https://www.zoho.com/de/privacy.html (checked 2026-10-28)
- [S5] Terms of service: https://www.zoho.com/de/terms.html (checked 2026-10-28)
- [S6] Subprocessor list: https://www.zoho.com/privacy/sub-processors.html (checked 2026-10-28)
- [S7] Security / trust page: https://www.zoho.com/de/security.html (checked 2026-10-28)
- [S8] Imprint — found from the homepage: https://www.zoho.com/de/impressum.html (checked 2026-11-01)

---

Cite as: whats-best.ai, "Zoho Bookings — Appointment Scheduling", AI panel analysis, as of 2026-11-04. https://whats-best.ai/software/appointment-scheduling/zoho-bookings

Corrections: https://whats-best.ai/correct/1101?target=page