Back to Tools
Doodle logo

Doodle

Partially Compliant

Swiss meeting-scheduling and polling platform used by 30M+ people a month, from Doodle AG in Zürich, with EU-hosted infrastructure but Swiss (not EU/EEA) legal jurisdiction.

🇨🇭Switzerland🇪🇺EU HostedEU-hosted · non-EU owned

Subject to the US CLOUD Act: a US parent company can be compelled to disclose data it holds, including data stored in the EU.

Freemium
Doodle website screenshot

GDPR Compliance Data

Not independently verified
GDPR Status
Partially Compliant
HQ CountrySwitzerland
OwnershipNon-European
Foreign Disclosure ExposureUS CLOUD Act / FISA 702
Data Hosting Location
European Union"Amazon Web Services, Inc | Cloud Hosting Provider | Germany, Ireland" and "MongoDB Atlas | Cloud Database | Germany, Ireland" (doodle.com/en/data-subprocessors/, read raw 2026-09-07). The same list also names Chargebee (USA, payments), Intercom (Ireland), Google Analytics (USA), Growthbook (Germany, Ireland, USA), Microsoft (Germany, Ireland), Mailgun (USA) and Zapier (USA).
EU Servers Available
Data Processing AgreementView DPA
Sub-processor ListView sub-processors
Schrems II Risk
Medium Risk
SCCs in Place
Last Verified7 September 2026

How we reached this

Swiss legal entity: Doodle AG, Werdstrasse 21, 8004 Zürich, Switzerland, named in the Data Processing Addendum appended to the General Terms and Conditions, read raw 2026-09-07. GTC governed by Swiss law, courts of Zurich as venue. The privacy policy states the Swiss FADP is the basic applicable principle, with GDPR applying only 'in certain circumstances' (e.g. access from an EU member state) and CCPA where relevant. ownershipOrigin is NON_EU: Switzerland is not an EU/EEA member, notwithstanding its European Commission adequacy decision, and the schema's EU_OWNED/EU_HQ_FOREIGN_PARENT values are both defined around EU/EEA HQ. gdprStatus PARTIAL rather than COMPLIANT because the entity's own governing framework is Swiss law with GDPR applying only conditionally, even though the documentation itself (published DPA as GTC Appendix 1, separate General Data Processing Terms page, and a public sub-processor list) is thorough. dataHostingLocation EU on the sub-processor list's explicit 'Germany, Ireland' for both AWS and MongoDB Atlas. extraterritorialExposure US_CLOUD_ACT: AWS is a US company and the CLOUD Act reaches data it physically holds regardless of region, the same reasoning applied throughout this directory (e.g. Vainu, SEO.AI); several other named sub-processors (Chargebee, Google Analytics, Mailgun, Zapier) are US-only with no region given. sccInPlace true on the Privacy Policy's statement that where a destination country's protection is lower than Switzerland's, Doodle ensures an equivalent level 'by concluding EU Model Clauses with the appointed service providers ... or through the appointed service providers having in place Binding Corporate Rules'. dpaEvidence PUBLISHED: the DPA is Appendix 1 of the publicly readable General Terms and Conditions, and a separate 'General Data Processing Terms' page restates the same processor obligations. schremsIIRisk MEDIUM: safeguards are named (SCCs/BCRs) but applied generically across an unnamed set of 'appointed service providers' rather than case by case.

About Doodle

The Original Scheduling Poll, Still Running

Doodle predates almost everything else in this category. It launched in 2007 as a simple way to poll a group for a meeting time, and that core "group poll" feature is still there, alongside the booking-page and 1:1 scheduling tools that came later to compete with Calendly.

What It Does

  • Group Poll: find the time that works for everyone, still Doodle's signature feature
  • Sign-up Sheet: let people choose which of several sessions or slots to attend
  • 1:1: offer a list of available times for a client to pick from
  • Booking Page: a persistent, shareable link, set up once
  • Calendar and payment-collection integrations, plus enterprise security features

Scale and Customers

Doodle states 30M+ monthly users and lists Cisco, Google and HP among its clients, scale that very few scheduling tools in this directory can match. That scale is also why its documentation is unusually thorough for a scheduling tool: a published Data Processing Addendum (as Appendix 1 of the General Terms and Conditions), a separate General Data Processing Terms page, and a public sub-processor list.

Swiss, Not EU

Doodle AG is registered at Werdstrasse 21, 8004 Zürich, Switzerland. Its Terms of Service are governed by Swiss law with Zurich as the agreed venue, and its privacy policy states plainly that the Swiss Federal Data Protection Act (FADP) is "the basic principle" applying to processing, with GDPR applying only "in certain circumstances", for example when a user accesses the service from an EU member state.

Switzerland is not an EU or EEA member. It does hold a European Commission adequacy decision, meaning the EU treats Swiss data protection law as equivalent for the purposes of moving data between the two, but a Swiss company is still outside the EU's own jurisdiction and enforcement structure. For a directory built around "does this tool actually behave like an EU-jurisdiction vendor", that distinction matters more than the adequacy decision papering over it: Doodle should be evaluated as a well-regarded, GDPR-aware Swiss company, not folded into "EU" by default.

Where the Data Actually Sits

Doodle's published sub-processor list names its infrastructure explicitly:

Amazon Web Services, Inc. | Cloud Hosting Provider | Germany, Ireland MongoDB Atlas | Cloud Database | Germany, Ireland

Both of Doodle's core infrastructure providers are hosted in Germany and Ireland, EU territory. But AWS itself is an American company, and the CLOUD Act reaches data a US company physically holds regardless of which region it sits in, so this listing carries US_CLOUD_ACT exposure even though the servers are in the EU and the operating company is Swiss. The same sub-processor list also names several US-only vendors handling specific functions: Chargebee (payments), Google Analytics, Mailgun (email delivery) and Zapier.

Pricing

Doodle runs on a freemium model with paid Doodle Business plans layered on top; live per-seat pricing was not published on a page this review could locate, so check doodle.com directly before comparing tiers.

Where It Fits

Against Calendly, Doodle's differentiator is the group-poll format it invented and still leads on, plus a genuinely large enterprise customer base. For a fully EU-jurisdiction alternative, see TuCalendi in meeting scheduling.

Key Features

Group Poll for finding a time that works for everyone
Sign-up Sheet for workshops, webinars and events
1:1 scheduling with a shareable list of available times
Booking Page, set up once and shared as a persistent link
Calendar integrations and automatic payment collection
Enterprise security features and IAB TCF 2.0 consent management

Pros & Cons

One of the longest-running and most recognised names in scheduling, since 2007
30M+ monthly users and enterprise customers including Cisco, Google and HP
Published Data Processing Addendum, separate processing-terms page, and a public sub-processor list
Core hosting (AWS, MongoDB Atlas) located in Germany and Ireland
Invented and still leads on the group-poll format
Doodle AG is a Swiss company; Switzerland is not an EU/EEA member despite its EU adequacy decision
GDPR is stated to apply only 'in certain circumstances', with Swiss FADP as the default framework
US_CLOUD_ACT exposure via AWS despite EU-region hosting
Several sub-processors (Chargebee, Google Analytics, Mailgun, Zapier) are US-based with no region stated
No specific per-seat pricing published on a page this review could locate

Replaces

Company Info

Founded2007

Doodle GDPR & data protection: common questions

Is Doodle GDPR compliant?

Partly. Doodle meets some of the requirements, with caveats worth reading before you commit. Doodle is based in Switzerland, outside the EU/EEA, data is hosted within the European Union, and a Data Processing Agreement is published.

Where does Doodle store data?

Doodle states: ""Amazon Web Services, Inc | Cloud Hosting Provider | Germany, Ireland" and "MongoDB Atlas | Cloud Database | Germany, Ireland" (doodle.com/en/data-subprocessors/, read raw 2026-09-07). The same list also names Chargebee (USA, payments), Intercom (Ireland), Google Analytics (USA), Growthbook (Germany, Ireland, USA), Microsoft (Germany, Ireland), Mailgun (USA) and Zapier (USA).". Data is hosted within the European Union.

Does Doodle offer a Data Processing Agreement (DPA)?

Yes. Doodle publishes a DPA at https://doodle.com/en/general-data-processing-terms/. A DPA is required under Article 28 GDPR whenever a provider processes personal data on your behalf.

What a DPA has to cover

Is Doodle a European company?

No. Doodle is based in Switzerland, outside the EU/EEA. It may still be a sound choice (EU hosting and a signed DPA matter more than a flag) but the ownership is not European.

Is Doodle subject to the US CLOUD Act?

Yes. US authorities can compel disclosure of data held by a US company or its subsidiaries, regardless of the country the servers sit in. EU hosting alone does not remove this, the question is who controls the data, not where the disk is. Standard Contractual Clauses are in place for transfers, which is the required safeguard but does not override a lawful US order.

Schrems II compliance checklist

Who are Doodle's sub-processors?

Doodle publishes its sub-processor list at https://doodle.com/en/data-subprocessors/. Worth reading: a vendor hosting in the EU can still route data through non-EU sub-processors, which is where residency claims usually come apart.

Spotted something wrong?

Martech moves fast. Vendors change hosting regions, get acquired, publish a new DPA or rewrite their pricing, and they rarely announce it. We check what we publish and date every compliance review, but some of what you see here will be out of date before we catch it.

If you work at Doodle and something on this page is wrong, tell us and we will fix it. Readers, same invitation. Pointing us at the page that proves it gets it changed fastest.