"Data residency" gets invoked casually in privacy conversations, but the concept is legally narrow. Here's what EU data residency actually means, when GDPR requires it, and how to evaluate a scheduling tool's residency claims.
What data residency means (legally)
Data residency is the physical location where data is stored and processed. It's related to — but distinct from — data sovereignty (the legal jurisdiction that can compel access to the data) and data protection (how the data is secured regardless of location).
What GDPR actually requires
GDPR does not require EU data to stay in the EU. It requires that transfers outside the EU/EEA be protected by an adequacy decision, Standard Contractual Clauses (SCCs), or another Article 46 mechanism. The new EU-US Data Privacy Framework (2023) provides adequacy for certain US transfers.
When EU-hosted scheduling matters
For most businesses: SCCs + DPA is sufficient. For regulated industries (banking, healthcare in some EU member states), local regulators may require EU-only residency. For public-sector customers, sovereignty requirements may demand specific EU member-state hosting.
How to evaluate a scheduling tool's residency claims
Ask: where is the primary database? Where are backups? Where is the mail-sending sub-processor? "EU-hosted" in marketing copy sometimes means "the app servers are in Ireland but the database is in Virginia." Get specifics.
This is part of our privacy-first scheduling pillar guide — 18 articles covering every privacy angle.
Frequently Asked Questions
Does Cal Clear offer EU-only data residency?
Cal Clear currently runs on Google Cloud with primary infrastructure in the US. We sign SCCs and DPAs for EU customers. Dedicated EU-only hosting is on the roadmap for enterprise customers.
Is a US-hosted scheduling tool automatically non-compliant for EU bookings?
No. With SCCs and appropriate technical safeguards, US hosting is compliant for most EU bookings. Specific regulated sectors may require EU-only residency, but most businesses do not.
Try privacy-first scheduling, free
Cal Clear runs zero trackers on booking pages and auto-deletes booking data on your schedule. Start at calclear.app.