Doodle runs one of the most widely used scheduling platforms on the internet - over 30 million monthly active users and more than 146 million total accounts hitting endpoints that coordinate roughly 78,000 meetings every day. That's a massive surface area for any security team: calendar data, authentication flows, integrations with Google, Microsoft, and other enterprise identity providers, plus the trust of over 70,000 businesses worldwide. The platform operates as a "Time OS," expanding well beyond simple meeting links into a comprehensive scheduling layer professionals depend on daily.
The company was founded in 2007 and built in Switzerland, where privacy and security were baked in as core design principles from the start - not bolted on later. It's a fully owned subsidiary of TX Group. Engineering and operations run across four cities: Zurich, Berlin, Beladle, and Atlanta, giving the security org a distributed footprint to manage across multiple jurisdictions and regulatory regimes.
For anyone working in application security, identity, or infrastructure protection, the threat model here is real and concrete: high-volume user data at scale, OAuth and session management across major identity providers, API abuse at enterprise volume, and the compliance requirements that come with serving tens of thousands of businesses globally. Doodle isn't selling security as a product - it's a scheduling company where security is the load-bearing wall.
