Sub-processors
Last updated 24 September 2026
These are the outside services MotorPortal HQ uses. Each one only receives the data it needs to do its job. Providers marked “Only if connected” are used only when a dealership switches on that feature. Providers marked “Coming soon” are not in use and receive no data.
Our providers
- What it does
- Hosts the MotorPortal HQ app and dealership websites, keeps server logs, and sets up custom domains.
- Data involved
- All data passing through the app while it is in use; request logs (such as IP address, browser type and pages requested).
- Location
- United States
- When used
- Always used
- What it does
- Runs our main database.
- Data involved
- Account, dealership and dealer customer records held in MotorPortal HQ.
- Location
- London, UK (AWS eu-west-2)
- When used
- Always used
- What it does
- Stores uploaded files.
- Data involved
- Vehicle photos, dealership logos and private documents such as V5C logbooks and invoices.
- Location
- London, UK (eu-west-2)
- When used
- Always used
- What it does
- Takes subscription payments, and reservation deposits on dealers’ behalf.
- Data involved
- Billing contact and payment details (entered directly with Stripe); for deposits, the payer’s name, email address and phone number.
- Location
- United States and Ireland
- When used
- Always used for billing; for deposits, only if a dealer turns on online reservations
- What it does
- Sends service emails, such as sign-in emails and new-enquiry notifications.
- Data involved
- Recipient name and email address and the content of the email (which may include enquiry details).
- Location
- United States
- When used
- Always used
- What it does
- Drafts vehicle listing descriptions with AI, for the dealer to review and edit.
- Data involved
- Vehicle details such as make, model, mileage and features. Not intended to include personal data.
- Location
- United States
- When used
- Only when a dealer asks for an AI description. AI document reading and condition scoring are coming soon and not in use.
- What it does
- Receives accounting journal exports.
- Data involved
- Accounting entries for sales and purchases, which may include customer or supplier names.
- Location
- Set by Xero (we’re confirming this)
- When used
- Only if a dealer connects Xero
- What it does
- Receives accounting journal exports.
- Data involved
- Accounting entries for sales and purchases, which may include customer or supplier names.
- Location
- Set by Intuit (we’re confirming this)
- When used
- Only if a dealer connects QuickBooks
- What it does
- Receives VAT information the dealer chooses to send. Currently connected to HMRC’s test environment only.
- Data involved
- VAT figures and VAT registration number, plus the fraud-prevention information HMRC requires: public IP address, device identifier, browser details, screen and window size, and time zone.
- Location
- United Kingdom
- When used
- Only if a dealer connects Making Tax Digital
- What it does
- Looks up vehicle details from a registration number.
- Data involved
- Vehicle registration numbers only.
- Location
- United Kingdom
- When used
- When a dealer looks up a vehicle
- What it does
- Looks up MOT history from a registration number. Access is authorised using a Microsoft Entra ID sign-in token (no personal data is sent to Microsoft).
- Data involved
- Vehicle registration numbers only.
- Location
- United Kingdom
- When used
- When a dealer looks up a vehicle
- What it does
- Vehicle history checks (finance, write-off and similar).
- Data involved
- None — not connected yet.
- Location
- —
- When used
- Not in use
- What it does
- AI walkaround video.
- Data involved
- None — not in use yet.
- Location
- —
- When used
- Not in use
- What it does
- AI walkaround video.
- Data involved
- None — not in use yet.
- Location
- —
- When used
- Not in use
Notes
HMRC, the DVLA and the DVSA are government bodies. They receive information from MotorPortal HQ to provide their own services, rather than working for us, but we list them here so you can see everywhere data goes.
Where a provider is outside the UK, we rely on the UK’s approved transfer mechanisms, as explained in our privacy notice.
We’ll tell dealerships before we add or replace a sub-processor, as set out in our Data Processing Agreement. Questions: anaymakwana@icloud.com.