Data

Calendly and the GDPR: AI training, data location and DPA

Teams: Doesn't train on your data. EU hosting not documented · DPA in the terms.

Vendor: Calendly LLCWorkspace and projectsChecked on How we check

Verdict

Is Calendly GDPR compliant?

Teams

Business

Doesn't train on your data

EU hosting not documented · DPA in the terms

Price: $16 / user / mo

No tool is GDPR compliant on its own: that depends on how your business uses it. This page shows the vendor's side, from its own pages. It is not legal advice.

Training

Does Calendly train on your data?

Trains on your data by default?

Checked

Doesn't train on your data.

No for its AI assistant: Calendly says Callie never sells or trains on customer data; the privacy notice mentions no AI training

Source: calendly.comArticle summary ('never sells or trains on it')Second source: calendly.comChecked on

Location

Where does Calendly store your data?

Where data is stored by default

Checked

United States: data centres of all listed sub-processors are in the US; Callie data sits in Google Cloud and AWS in the US

Source: calendly.comColumn 'Locations of Data Center(s)'Second source: calendly.comChecked on

Contract

Does Calendly sign a data processing agreement?

Data processing agreement (DPA)

Checked

DPA in the terms.

Yes. Calendly's DPA (effective 1 Jun 2026) is incorporated into the Customer Terms

Source: calendly.comPreamble ('incorporated into the Customer Terms')Checked on

Processors

Who else handles Calendly data?

Sub-processors (companies that handle the data for them)

Checked

20 listed.

Public. 20 entries, all with US data centres (some also in the Netherlands, Israel or UK); AI features and notetaker summaries use OpenAI, recordings use Recall.ai

Source: calendly.comTable 'Calendly Sub-processors' (updated 20 Aug 2026)Checked on

EU–US Data Privacy Framework

Checked

On the list.

Active (Calendly LLC; EU-US DPF, Swiss-US DPF, UK Extension)

Source: dataprivacyframework.govSearch 'Calendly'Checked on

Security

Which certifications and admin controls does Calendly have?

Security certifications

Checked

SOC 2 Type 2, SOC 3, ISO/IEC 27001 and PCI compliance

Source: calendly.comCompliance sectionChecked on

The vendor doesn't say: EU hosting, retention, admin controls, price.

Alternatives

Calendly alternatives that don't train on your data

Other workspace and projects tools whose business plan doesn't train on your data and includes a DPA.

The five marks, in order: No AI training · EU hosting · DPA · Sub-processors listed · DPF or EU vendor. ✓ meets it, ✕ doesn't, – partly, ? not stated.

Tool · PlanVerdictYour five rules
  • Google Chat

    Google Workspace Business Standard · €13.60 / user / mo

    Doesn't train on your dataEU hosting available · DPA in the terms

    ✓✓✓✓✓

  • Miro

    Business · €20 / user / mo

    Doesn't train on your dataEU hosting available · DPA in the terms

    ✓✓✓✓✓

  • monday.com

    Pro · €19 / user / mo

    Doesn't train on your dataEU hosting available · DPA in the terms

    ✓✓✓✓✓

  • Teamwork.com

    Basics · $9.99 / user / mo

    Doesn't train on your dataEU hosting available · DPA on request

    ✓✓✓✓✓

  • Wrike

    Business · $25 / user / mo

    Doesn't train on your dataEU hosting available · DPA in the terms

    ✓✓✓✓✓

Need something your tools can't do?

We design and build what your team is missing, around the way you already work and the data rules you set.

Book a callServices