
Doodle
Partially CompliantSwiss meeting-scheduling and polling platform used by 30M+ people a month, from Doodle AG in Zürich, with EU-hosted infrastructure but Swiss (not EU/EEA) legal jurisdiction.
Subject to the US CLOUD Act: a US parent company can be compelled to disclose data it holds, including data stored in the EU.
Freemium
GDPR Compliance Data
Not independently verified| GDPR Status | Partially Compliant |
| HQ Country | Switzerland |
| Ownership | Non-European |
| Foreign Disclosure Exposure | US CLOUD Act / FISA 702 |
| Data Hosting Location | European Union"Amazon Web Services, Inc | Cloud Hosting Provider | Germany, Ireland" and "MongoDB Atlas | Cloud Database | Germany, Ireland" (doodle.com/en/data-subprocessors/, read raw 2026-09-07). The same list also names Chargebee (USA, payments), Intercom (Ireland), Google Analytics (USA), Growthbook (Germany, Ireland, USA), Microsoft (Germany, Ireland), Mailgun (USA) and Zapier (USA). |
| EU Servers Available | |
| Data Processing Agreement | View DPA |
| Sub-processor List | View sub-processors |
| Schrems II Risk | Medium Risk |
| SCCs in Place | |
| Last Verified | 7 September 2026 |
How we reached this
Swiss legal entity: Doodle AG, Werdstrasse 21, 8004 Zürich, Switzerland, named in the Data Processing Addendum appended to the General Terms and Conditions, read raw 2026-09-07. GTC governed by Swiss law, courts of Zurich as venue. The privacy policy states the Swiss FADP is the basic applicable principle, with GDPR applying only 'in certain circumstances' (e.g. access from an EU member state) and CCPA where relevant. ownershipOrigin is NON_EU: Switzerland is not an EU/EEA member, notwithstanding its European Commission adequacy decision, and the schema's EU_OWNED/EU_HQ_FOREIGN_PARENT values are both defined around EU/EEA HQ. gdprStatus PARTIAL rather than COMPLIANT because the entity's own governing framework is Swiss law with GDPR applying only conditionally, even though the documentation itself (published DPA as GTC Appendix 1, separate General Data Processing Terms page, and a public sub-processor list) is thorough. dataHostingLocation EU on the sub-processor list's explicit 'Germany, Ireland' for both AWS and MongoDB Atlas. extraterritorialExposure US_CLOUD_ACT: AWS is a US company and the CLOUD Act reaches data it physically holds regardless of region, the same reasoning applied throughout this directory (e.g. Vainu, SEO.AI); several other named sub-processors (Chargebee, Google Analytics, Mailgun, Zapier) are US-only with no region given. sccInPlace true on the Privacy Policy's statement that where a destination country's protection is lower than Switzerland's, Doodle ensures an equivalent level 'by concluding EU Model Clauses with the appointed service providers ... or through the appointed service providers having in place Binding Corporate Rules'. dpaEvidence PUBLISHED: the DPA is Appendix 1 of the publicly readable General Terms and Conditions, and a separate 'General Data Processing Terms' page restates the same processor obligations. schremsIIRisk MEDIUM: safeguards are named (SCCs/BCRs) but applied generically across an unnamed set of 'appointed service providers' rather than case by case.
About Doodle
The Original Scheduling Poll, Still Running
Doodle predates almost everything else in this category. It launched in 2007 as a simple way to poll a group for a meeting time, and that core "group poll" feature is still there, alongside the booking-page and 1:1 scheduling tools that came later to compete with Calendly.
What It Does
- Group Poll: find the time that works for everyone, still Doodle's signature feature
- Sign-up Sheet: let people choose which of several sessions or slots to attend
- 1:1: offer a list of available times for a client to pick from
- Booking Page: a persistent, shareable link, set up once
- Calendar and payment-collection integrations, plus enterprise security features
Scale and Customers
Doodle states 30M+ monthly users and lists Cisco, Google and HP among its clients, scale that very few scheduling tools in this directory can match. That scale is also why its documentation is unusually thorough for a scheduling tool: a published Data Processing Addendum (as Appendix 1 of the General Terms and Conditions), a separate General Data Processing Terms page, and a public sub-processor list.
Swiss, Not EU
Doodle AG is registered at Werdstrasse 21, 8004 Zürich, Switzerland. Its Terms of Service are governed by Swiss law with Zurich as the agreed venue, and its privacy policy states plainly that the Swiss Federal Data Protection Act (FADP) is "the basic principle" applying to processing, with GDPR applying only "in certain circumstances", for example when a user accesses the service from an EU member state.
Switzerland is not an EU or EEA member. It does hold a European Commission adequacy decision, meaning the EU treats Swiss data protection law as equivalent for the purposes of moving data between the two, but a Swiss company is still outside the EU's own jurisdiction and enforcement structure. For a directory built around "does this tool actually behave like an EU-jurisdiction vendor", that distinction matters more than the adequacy decision papering over it: Doodle should be evaluated as a well-regarded, GDPR-aware Swiss company, not folded into "EU" by default.
Where the Data Actually Sits
Doodle's published sub-processor list names its infrastructure explicitly:
Amazon Web Services, Inc. | Cloud Hosting Provider | Germany, Ireland MongoDB Atlas | Cloud Database | Germany, Ireland
Both of Doodle's core infrastructure providers are hosted in Germany and Ireland, EU territory. But AWS itself is an American company, and the CLOUD Act reaches data a US company physically holds regardless of which region it sits in, so this listing carries US_CLOUD_ACT exposure even though the servers are in the EU and the operating company is Swiss. The same sub-processor list also names several US-only vendors handling specific functions: Chargebee (payments), Google Analytics, Mailgun (email delivery) and Zapier.
Pricing
Doodle runs on a freemium model with paid Doodle Business plans layered on top; live per-seat pricing was not published on a page this review could locate, so check doodle.com directly before comparing tiers.
Where It Fits
Against Calendly, Doodle's differentiator is the group-poll format it invented and still leads on, plus a genuinely large enterprise customer base. For a fully EU-jurisdiction alternative, see TuCalendi in meeting scheduling.
Key Features
Pros & Cons
Categories
Replaces
Company Info
| Founded | 2007 |
Doodle GDPR & data protection: common questions
Is Doodle GDPR compliant?
Partly. Doodle meets some of the requirements, with caveats worth reading before you commit. Doodle is based in Switzerland, outside the EU/EEA, data is hosted within the European Union, and a Data Processing Agreement is published.
Where does Doodle store data?
Doodle states: ""Amazon Web Services, Inc | Cloud Hosting Provider | Germany, Ireland" and "MongoDB Atlas | Cloud Database | Germany, Ireland" (doodle.com/en/data-subprocessors/, read raw 2026-09-07). The same list also names Chargebee (USA, payments), Intercom (Ireland), Google Analytics (USA), Growthbook (Germany, Ireland, USA), Microsoft (Germany, Ireland), Mailgun (USA) and Zapier (USA).". Data is hosted within the European Union.
Does Doodle offer a Data Processing Agreement (DPA)?
Yes. Doodle publishes a DPA at https://doodle.com/en/general-data-processing-terms/. A DPA is required under Article 28 GDPR whenever a provider processes personal data on your behalf.
What a DPA has to cover →Is Doodle a European company?
No. Doodle is based in Switzerland, outside the EU/EEA. It may still be a sound choice (EU hosting and a signed DPA matter more than a flag) but the ownership is not European.
Is Doodle subject to the US CLOUD Act?
Yes. US authorities can compel disclosure of data held by a US company or its subsidiaries, regardless of the country the servers sit in. EU hosting alone does not remove this, the question is who controls the data, not where the disk is. Standard Contractual Clauses are in place for transfers, which is the required safeguard but does not override a lawful US order.
Schrems II compliance checklist →Who are Doodle's sub-processors?
Doodle publishes its sub-processor list at https://doodle.com/en/data-subprocessors/. Worth reading: a vendor hosting in the EU can still route data through non-EU sub-processors, which is where residency claims usually come apart.
Related Tools

meetergo
GDPR-compliant scheduling platform with calendar sync and team routing, built in Germany.

Calenso
Swiss appointment scheduling platform with strict GDPR compliance and European data residency.

Vyte
French meeting scheduling tool with group scheduling and calendar integration.
Spotted something wrong?
Martech moves fast. Vendors change hosting regions, get acquired, publish a new DPA or rewrite their pricing, and they rarely announce it. We check what we publish and date every compliance review, but some of what you see here will be out of date before we catch it.
If you work at Doodle and something on this page is wrong, tell us and we will fix it. Readers, same invitation. Pointing us at the page that proves it gets it changed fastest.