How often is Cal.com audited?

Cal.com undergoes an independent external audit every year to maintain our SOC 2 Type II certification. Between audits, we use Vanta to continuously monitor our internal controls and ensure compliance every day.

Can I request a copy of Cal.com’s SOC 2 report?

Yes. Enterprise customers and partners can request access to our most recent SOC 2 report. Contact our team for details by sending an email to sales@cal.com or by scheduling a demo.

How does SOC 2 compliance protect my organization?

SOC 2 compliance ensures that Cal.com maintains strict standards for security, availability, and confidentiality, meaning your organization’s data is encrypted, access-controlled, and continuously monitored to reduce risk.

Does Cal.com meet other compliance standards?

Yes. In addition to SOC 2 Type II, Cal.com complies with HIPAA, ISO/IEC 27001, GDPR, and CCPA. Together, these frameworks provide a complete security foundation for organizations of all sizes.

Is Cal.com SOC 2 certified?

Yes. Cal.com is SOC 2 Type II certified, meaning our security, availability, and confidentiality controls have been audited and verified by an independent third party.

What is the difference between SOC 2 Type I and Type II?

Type I reviews whether security controls are designed effectively at one point in time. Type II evaluates whether those controls are followed and effective over several months, meaning Cal.com’s certification proves ongoing, consistent compliance.

SOC 2 compliance

Enterprise-grade security. Verified by SOC 2.

Cal.com is SOC 2 Type II compliant, independently audited to meet the highest standards for data security and privacy so you can schedule with confidence.

Get started

Trusted by fast-growing companies around the world

What is SOC 2 and why it matters

SOC 2 is a framework developed by the AICPA to ensure companies handle customer data securely, following five key criteria: security, availability, confidentiality, processing integrity, and privacy.

A SOC 2 Type II certification means Cal.com consistently applies strict security practices, verified through independent audits. This certification gives you peace of mind that your scheduling data is protected and handled with transparency.

Get started

What SOC 2 compliance means for you as a user of Cal.com

You can trust Cal.com with your sensitive data. Client details that flow through our system are handled securely, and we have independent audits to prove it.

Get started

Verified trust and transparency

Cal.com’s SOC 2 Type II certification is audited by an independent third party, proving our controls work as intended, meaning you can trust that your data is handled securely and consistently.

Enterprise-grade data protection

Every booking and message is encrypted, access-controlled, and monitored, meaning your information stays private and protected from unauthorized access.

Procurement-ready compliance

For enterprises, SOC 2 is often required. Cal.com provides documentation and audit reports to simplify your vendor approval, meaning faster, compliant onboarding for your team.

Continuous monitoring and independent audits

We use **Vanta** to monitor compliance year-round, while an **external auditor** verifies our controls annually, meaning your data stays secure through continuous oversight and verified assurance.

Designed for smooth rollouts and SOC 2-compliant scheduling

Built for easy, organization-wide deployment. Cal.com eliminates fragmented tools and scattered accounts, ensuring **SOC 2 compliance** with unified security, consistency, and control over your scheduling operations.

Get started

Domain-wide delegation

Simplify setup and ensure SOC 2 compliance across your organization. Cal.com gives admins centralized control over scheduling, bookings, and access.

SAML SSO, SCIM provisioning

SAML SSO, SCIM provisioning, and automated workflows provide admins with full visibility and control, ensuring SOC 2 access requirements are met.

Privacy compliance tools

RBAC, SAML SSO, and configurable data residency options simplify privacy management, ensuring SOC 2 and regulatory compliance across your organization.

Encryption and security monitoring

Cal.com encrypts scheduling data in transit and at rest, with ongoing monitoring and vulnerability management to meet SOC 2 security standards.

Proven across healthcare, sales, service, SaaS, and beyond

Cal.com meets SOC 2 compliance standards, providing secure and reliable scheduling for a wide range of industries, including healthcare, sales, service, and SaaS, ensuring data protection and privacy for diverse use cases.

Get started

Healthcare & wellness

Manage patient scheduling, telehealth sessions, and client intakes with SOC 2-compliant security and continuous monitoring to protect sensitive data.

Government & finance

SOC 2-compliant scheduling built with enterprise-grade security features to safeguard sensitive data and meet strict regulatory standards.

Sales & GTM teams

Route demo requests, coordinate CSM calls, and manage onboarding with SOC 2-certified infrastructure, ensuring privacy and security for all interactions.

Compliance and security beyond SOC Type II

Your scheduling system shouldn’t be the weakest link in your compliance stack. SOC 2 certification is part of Cal.com’s broader commitment to privacy and data protection. With our privacy-by-design architecture, you gain the confidence of HIPAA, SOC 2 Type II, ISO 27001, CCPA, and GDPR compliance, all without sacrificing usability. Learn more about Cal.com's compliance below!

Compliance info

See why our users love Cal.com

Read the impact we've had from those who matter most - our customers.

Get started

Thrilled with this scheduling app—it's a game-changer. The intuitive interface and advanced features streamline my time management. The standout, however, is the incredible support team—swift, expert responses to every query. A perfect combo for seamless scheduling and top-notch customer service. P.s. Way better than Calendly
Mickeyon Trustpilot
I just migrated from calendly to cal.com I'm liking it so far. I wasn't particularly displeased with calendly. It's fine. But I like that cal is OSS and my sub to calendly was coming up for renewal so I thought I'd check it out. Looks good.
Kent C. Dodds 🌌@kentcdodds on X
2 days of using @calcom is enough to never look back at calendly
Anuvesh Singh@singh_anuvesh on X
Without a doubt the best calendar/scheduling application I have ever used. It has all of the advanced features I need while also being insanely intuitive and straightforward for both end-users and booking recipients. Love it!!
davidvkimballon Trustpilot
(finally) made the move to @calcom after I couldn't find how to edit events in the calendly dashboard and I must say - dash is 10/10 Bravo @peer_rich and team (I should have moved over years ago!) OSS fam
Ant Wilson@AntWilson on X
One of the best tools for scheduling and my favorite after so many other options tried.
Denison Product Hunt
more elegant than Calendly, more open than Savvycal, cal.com works and it feels just right.
flo merianon Product Hunt
This platform's open-source nature and flexible licensing are a developer's dream. Self-hosting and white-labeling empower personalization and seamless integration.
Ahmed Elnaggaron Product Hunt
for the love of me, why do people still use Calendly? Just today I have seen products reference Calendly while they know of @calcom It's a no brainer for me to use , their brand is amazing, cool team + they even have more compelling features 🤷
Rotimi Best@rotimi_best on X
Amazing. I've been sharing it with everyone I know. It's helped me create more events spontaneously, because of how smooth it is compared to Calendly and Harmonizely.
Benon Product Hunt
Very easy to set up and start. Connected with my Google calendar without any problem. Connecting with Microsoft gives me an error. But other than that the user interface is very good.
Pankaj Dixiton Product Hunt
Just gave it a go and it's definitely the easiest meeting I've ever scheduled! No context switching, no distractions, and works even better on mobile too.
Aria Minaeion Product Hunt

All your key tools in sync with your meetings

Connects to Slack, Salesforce, and 100+ more. Bookings show up where your team already works.

Get started

Google CalendarChecks every calendar for conflicts and adds the booking.
Zoom VideoGives each booking its own meeting link.
SalesforceLogs the meeting on the contact and routes to the owner.
HubSpot CRMAdds bookings to contacts and deals.
SlackTells the team the moment a meeting is booked.
StripeTakes payment when the slot is booked.
FramerPuts your booking page on a Framer site.
ElevenLabsGives voice agents a realistic AI voice.
LinearSets your status to out of office from your calendar.
Meta PixelMeasures bookings from your Meta ad campaigns.
UmamiCounts visits to your booking page, privately.
WhatsAppMeets your guests on a WhatsApp chat or video call.

Frequently asked questions about SOC 2 compliance

The short ones are here. For anything else, ask below.

Trusted by fast-growing companies around the world

Choose Cal.com for verified, SOC 2 compliant scheduling

Cal.com’s SOC 2 certification, independent audits, and continuous monitoring with Vanta ensure your data is always protected. Choose a platform built for trust, compliance, and enterprise-grade security.

Get started Talk to sales