Your fleet data. Hosted in the EU. Built for GDPR from day one.
Movcar is hosted in the European Union on AWS. GDPR compliance is built into the platform, not added on top. Your vehicles need no GPS trackers or other hardware — Movcar is fleet management software, nothing more.
WHAT MAKES MOVCAR SECURE
Movcar is used by 1,100+ paying fleets across 22 countries. The design decisions that let us deploy new customers in minutes are the same ones that protect their fleet data.
All fleet operational data — vehicles, drivers, documents, mileage, expenses, claims — is stored on AWS infrastructure inside the European Union. Payment and email data processed by Stripe and SendGrid is handled in the US under EU Standard Contractual Clauses and the EU-US Data Privacy Framework.
Compliance is built into the platform from the start, not added later. Data minimisation, purpose limitation, and retention controls are core features.
The Data Processing Agreement template is published on this page and free to download for any plan. For a signed copy personalised to your account, email support@movcar.app.
Movcar is software only. We never install GPS trackers, telematics dongles, or any other vehicle hardware. Drivers log their own mileage and trips through the mobile app.
For organisations that require dedicated infrastructure, Movcar offers Private Cloud and On-Premise deployments with full data isolation.
DATA RESIDENCY
Movcar's SaaS infrastructure runs entirely on Amazon Web Services in the European Union. Customer data — vehicle records, documents, mileage logs, expenses, driver profiles, claims — is stored and processed inside the EU. We do not move SaaS customer data outside the EU.
SECURITY CONTROLS
Movcar builds on AWS's secured infrastructure and adds application-level controls of its own. Encryption is on by default, access is limited to the minimum required, and payment data never touches our database.
YOUR DATA, YOUR RIGHTS
Movcar acts as a Data Processor for fleet data you upload, and as a Data Controller for your account itself. Under GDPR, you have the right to access, correct, export, and erase your data. We honour every one of those rights — without legal gymnastics.
| Vendor | Purpose | Region |
|---|---|---|
| Amazon Web Services | Hosting & storage | EU (eu-west-1) |
| Stripe | Subscription payments | Subscription payments |
| Microsoft 365 | Business email & bookings | EU |
A full sub-processor list is provided with the DPA available on this page.
The DPA template is available directly on this page. For a signed copy or the full sub-processor list, email us — one email, one business day.
FOR ENTERPRISE FLEETS
When the standard multi-tenant SaaS deployment doesn't fit — because of regulator requirements, data isolation policies, or specific SLA frameworks — Movcar can run on dedicated infrastructure inside your own AWS account or your own data centre.
FREQUENTLY ASKED QUESTIONS
Where is Movcar's data hosted?
Your fleet operational data (vehicles, drivers, documents, mileage, expenses, claims) is stored on Amazon Web Services in the European Union (primary region: eu-west-1, Ireland) and does not leave the EU. Payment data is processed by Stripe (US) and transactional email by SendGrid (US), both under EU Standard Contractual Clauses and the EU-US Data Privacy Framework.
Is Movcar GDPR-compliant?
Yes — GDPR is built into the platform, not added by policy. The platform is designed around GDPR principles: data minimisation, purpose limitation, retention controls, subject rights. A Data Processing Agreement is available on this page.
How do I get a Data Processing Agreement (DPA)?
The unsigned DPA template is available directly on this page — free to download for any plan, including the Free plan. For a signed copy personalised to your account, email support@movcar.app with the subject "DPA request".
Who are Movcar's sub-processors?
AWS for hosting, Stripe for payments, Microsoft 365 for business email and bookings. A complete sub-processor list is provided alongside the DPA on request.
Does Movcar install hardware in my vehicles?
No. Movcar is software-only. We do not sell, ship, or install GPS trackers, telematics dongles, OBD readers, or any other vehicle hardware. Drivers self-log mileage and trips through the mobile app.
Do you offer on-premise or private-cloud deployment?
Yes, for organisations that require it. See Private Cloud and On-Premise. Full data isolation, custom SLA, dedicated infrastructure.
How does Movcar handle payment data?
Stripe processes all card transactions on servers in the USA, under EU Standard Contractual Clauses and the EU-US Data Privacy Framework. Movcar's database never stores card numbers or CVCs. Invoices generated by Stripe are available in your account's Subscription section.
Who do I contact for security questions?
Email support@movcar.app. Include "Security" in the subject line for fastest routing.
