CalendarBridge Privacy and Data Security
Your Privacy and Security Come First
CalendarBridge combines enterprise level security, flexible privacy controls, and transparent data practices to help protect your information across every product.
No Credit Card Required.
- You're In Good Hands
Secure. Simple. Transparent.
CalendarBridge protects your calendar data through secure authentication, minimum required permissions, and strict data handling practices. Calendar information is processed only to provide the services you have authorized and is never used for any other purpose, allowing individuals and organizations to securely synchronize calendars without compromising sensitive calendar information.
No Data Stored or Analyzed
CalendarBridge never stores, or analyzes, or sells any of your calendar data. Our goal is simplicity in calendaring, not prying into your data.
Secure Connections
CalendarBridge connects via the secure OAuth2 protocol. We have no access to your login credentials and you can revoke our access at any time.
Keep Your Accounts Separate
CalendarBridge allows you to control what events and details get synced. No need to worry about data spilling over from one account to another.
Minimum Access
CalendarBridge only requests the bare minimum calendar permissions. We do not have access to your email, files, or any other non-calendar features.
Security Certifications
Independent third-party audits validate CalendarBridge’s security controls and demonstrate our commitment to protecting customer data.
-
Verified
SOC 2® (Type 1)
- Point-in-time assessment of control design and implementation.
- Baseline for our ongoing Type II audit cycle.
-
In Progress
SOC 2® (Type 2)
- Annual audit covering Security, Availability, and Confidentiality.
- Report available under NDA via Trust Center.
Privacy & Regulatory Compliance
CalendarBridge supports organizations with privacy and regulatory requirements through security practices designed to help meet industry standards.
-
Supported
GDPR
- Data Processing Agreement (DPA) available.
- Data subject rights: access, deletion, portability.
-
BAA Available
HIPAA
- Business Associate Agreement available on request.
- Audit logging and access controls for sensitive data.
Microsoft 365 Government Community Cloud High
Deploy CalendarBridge in Microsoft 365 GCC High to meet the security, compliance, and data residency requirements of government agencies and defense contractors.
Feature
Commercial
GCC
GCC High
Hosted On
View and edit all events on your synced calendars from one single page or app.
Regular Azure
Regular Azure
Government Azure
Protection
View and edit all events on your synced calendars from one single page or app.
Azure Protection
Azure Protection
Government Defense level
FedRAMP Authorization
View and edit all events on your synced calendars from one single page or app.
No
Moderate
High
Compliance Support for Government Regulations
View and edit all events on your synced calendars from one single page or app.
CMMC Level 1
DFARS 7012, CMMC Level 1, CMMC Level 2
DFARS 7012, ITAR, EAR, FedRAMP Moderate and High, CMMC Levels 1-3
- Patented Technology
Protected Innovation
CalendarBridge’s scheduling technology is protected by U.S. Patent No. 11,461,739.
Secure Scheduling Starts Here
Use CalendarBridge with confidence knowing every product is built with security, privacy, and transparency at its core.
Need More Information?
Access our Trust Center for security documentation, compliance information, policies, controls, questionnaires, and additional resources. Contact our team if you need assistance with your security review.
- Trust is Everything
We are Trusted by Major Companies Across All Industries
For enterprise-grade security and account management tools, companies turn to CalendarBridge.
- Get help
FAQs about CalendarBridge Security
Quick answers to the most common questions. Need more help? Check out our help site.
CalendarBridge has completed a SOC 2 Type 1 assessment, which evaluates the design and implementation of security controls at a point in time. CalendarBridge is also in progress on SOC 2 Type 2, which is an annual audit covering Security, Availability, and Confidentiality.
Yes. CalendarBridge supports GDPR compliance, including a Data Processing Agreement, also known as a DPA, and support for data subject rights such as access, deletion, and portability.
Yes. A Business Associate Agreement, or BAA, is available on request for organizations with HIPAA related requirements. CalendarBridge also supports audit logging and access controls for sensitive data.
Yes. CalendarBridge can be deployed in Microsoft 365 GCC High to support the security, compliance, and data residency requirements of government agencies and defense contractors.
CalendarBridge’s commercial Microsoft 365 environment is hosted on regular Azure, while GCC High uses Government Azure. GCC High also supports higher compliance requirements, including DFARS 7012, ITAR, EAR, FedRAMP Moderate and High, and CMMC Levels 1 through 3.
Yes. CalendarBridge’s scheduling technology is protected by U.S. Patent No. 11,461,739.
Security teams can access the CalendarBridge Trust Center for security documentation, compliance information, policies, controls, questionnaires, and additional resources. Teams can also contact CalendarBridge directly if they need help with a security review.
Yes. CalendarBridge provides security documentation, compliance information, policies, controls, questionnaires, and additional resources through its Trust Center to help organizations evaluate CalendarBridge during a vendor or security review.