Sub-processors

Last updated 24 September 2026

Draft — this document is being reviewed by a solicitor and may change before MotorPortal HQ launches publicly.

These are the outside services MotorPortal HQ uses. Each one only receives the data it needs to do its job. Providers marked “Only if connected” are used only when a dealership switches on that feature. Providers marked “Coming soon” are not in use and receive no data.

Our providers

Vercel
Active
What it does
Hosts the MotorPortal HQ app and dealership websites, keeps server logs, and sets up custom domains.
Data involved
All data passing through the app while it is in use; request logs (such as IP address, browser type and pages requested).
Location
United States
When used
Always used
Neon
Active
What it does
Runs our main database.
Data involved
Account, dealership and dealer customer records held in MotorPortal HQ.
Location
London, UK (AWS eu-west-2)
When used
Always used
Amazon Web Services (S3)
Active
What it does
Stores uploaded files.
Data involved
Vehicle photos, dealership logos and private documents such as V5C logbooks and invoices.
Location
London, UK (eu-west-2)
When used
Always used
Stripe
Active
What it does
Takes subscription payments, and reservation deposits on dealers’ behalf.
Data involved
Billing contact and payment details (entered directly with Stripe); for deposits, the payer’s name, email address and phone number.
Location
United States and Ireland
When used
Always used for billing; for deposits, only if a dealer turns on online reservations
Resend
Active
What it does
Sends service emails, such as sign-in emails and new-enquiry notifications.
Data involved
Recipient name and email address and the content of the email (which may include enquiry details).
Location
United States
When used
Always used
Anthropic
Active
What it does
Drafts vehicle listing descriptions with AI, for the dealer to review and edit.
Data involved
Vehicle details such as make, model, mileage and features. Not intended to include personal data.
Location
United States
When used
Only when a dealer asks for an AI description. AI document reading and condition scoring are coming soon and not in use.
Xero
Only if connected
What it does
Receives accounting journal exports.
Data involved
Accounting entries for sales and purchases, which may include customer or supplier names.
Location
Set by Xero (we’re confirming this)
When used
Only if a dealer connects Xero
Intuit QuickBooks
Only if connected
What it does
Receives accounting journal exports.
Data involved
Accounting entries for sales and purchases, which may include customer or supplier names.
Location
Set by Intuit (we’re confirming this)
When used
Only if a dealer connects QuickBooks
HM Revenue & Customs (Making Tax Digital)
Only if connected
What it does
Receives VAT information the dealer chooses to send. Currently connected to HMRC’s test environment only.
Data involved
VAT figures and VAT registration number, plus the fraud-prevention information HMRC requires: public IP address, device identifier, browser details, screen and window size, and time zone.
Location
United Kingdom
When used
Only if a dealer connects Making Tax Digital
DVLA Vehicle Enquiry Service
Active
What it does
Looks up vehicle details from a registration number.
Data involved
Vehicle registration numbers only.
Location
United Kingdom
When used
When a dealer looks up a vehicle
DVSA MOT History API
Active
What it does
Looks up MOT history from a registration number. Access is authorised using a Microsoft Entra ID sign-in token (no personal data is sent to Microsoft).
Data involved
Vehicle registration numbers only.
Location
United Kingdom
When used
When a dealer looks up a vehicle
HPI
Coming soon – not in use
What it does
Vehicle history checks (finance, write-off and similar).
Data involved
None — not connected yet.
Location
—
When used
Not in use
Shotstack
Coming soon – not in use
What it does
AI walkaround video.
Data involved
None — not in use yet.
Location
—
When used
Not in use
Runway
Coming soon – not in use
What it does
AI walkaround video.
Data involved
None — not in use yet.
Location
—
When used
Not in use

Notes

HMRC, the DVLA and the DVSA are government bodies. They receive information from MotorPortal HQ to provide their own services, rather than working for us, but we list them here so you can see everywhere data goes.

Where a provider is outside the UK, we rely on the UK’s approved transfer mechanisms, as explained in our privacy notice.

We’ll tell dealerships before we add or replace a sub-processor, as set out in our Data Processing Agreement. Questions: anaymakwana@icloud.com.