Your fleet data. Hosted in the EU. Built for GDPR from day one.
Movcar is hosted in the European Union on AWS. GDPR compliance is built into the platform, not added on top. Your vehicles need no GPS trackers or other hardware — Movcar is fleet management software, nothing more.
What makes Movcar secure
Movcar is used by over 1,100 paying fleets across 22 countries. The design choices that allow us to onboard new customers in minutes are the same ones that safeguard their fleet data.
All fleet operational data — vehicles, drivers, documents, mileage, expenses, claims — is stored on AWS infrastructure inside the European Union. Payment and email data processed by Stripe and SendGrid is handled in the US under EU Standard Contractual Clauses and the EU-US Data Privacy Framework.
Compliance is integrated into the platform from the beginning, not added afterward. Data minimization, purpose limitation, and retention controls are fundamental features.
The Data Processing Agreement template is published on this page and free to download for any plan. For a signed copy personalized to your account, email support@movcar.app.
Movcar is software only. We never install GPS trackers, telematics dongles, or any other vehicle hardware. Drivers log their own mileage and trips through the mobile app.
For organizations that require dedicated infrastructure, Movcar offers Private Cloud and On-Premise deployments with full data isolation.
DATA RESIDENCY
Movcar's SaaS infrastructure runs entirely on Amazon Web Services within the European Union. Customer data — vehicle records, documents, mileage logs, expenses, driver profiles, claims — is stored and processed inside the EU. We do not transfer SaaS customer data outside the EU.
SECURITY CONTROLS
Movcar builds on AWS's secured infrastructure and adds application-level controls of its own. Encryption is on by default, access is limited to the minimum required, and payment data never touches our database.
YOUR DATA, YOUR RIGHTS.
Movcar acts as a Data Processor for fleet data you upload, and as a Data Controller for your account itself. Under GDPR, you have the right to access, correct, export, and delete your data. We honor every one of those rights — without legal gymnastics.
| Vendor. | Purpose. | Region. |
|---|---|---|
| Amazon Web Services | Hosting & storage. | EU (eu-west-1). |
| Stripe | Subscription payments. | Subscription payments. |
| Microsoft 365 | Business email & bookings. | EU. |
A complete list of sub-processors is provided with the Data Processing Agreement (DPA) available on this page.
The DPA template is available directly on this page. For a signed copy or the full sub-processor list, email us — one email, one business day.
FOR ENTERPRISE FLEETS.
When the standard multi-tenant SaaS deployment isn't suitable — due to regulator requirements, data isolation policies, or specific SLA frameworks — Movcar can operate on dedicated infrastructure within your own AWS account or data center.
FREQUENTLY ASKED QUESTIONS.
Where is Movcar's data hosted?
Your fleet operational data (vehicles, drivers, documents, mileage, expenses, claims) is stored on Amazon Web Services in the European Union (primary region: eu-west-1, Ireland) and does not leave the EU. Payment data is processed by Stripe (US) and transactional email by SendGrid (US), both under EU Standard Contractual Clauses and the EU-US Data Privacy Framework.
Is Movcar GDPR-compliant?
Yes — GDPR is integrated into the platform, not added through policy. The platform is designed with GDPR principles in mind: data minimization, purpose limitation, retention controls, and subject rights. A Data Processing Agreement can be found on this page.
How do I obtain a Data Processing Agreement (DPA)?
The unsigned DPA template is available directly on this page — free to download for any plan, including the Free plan. For a signed copy personalized to your account, email support@movcar.app with the subject "DPA request".
Who are Movcar's sub-processors?
AWS for hosting, Stripe for payments, Microsoft 365 for business email and bookings. A complete sub-processor list is provided alongside the DPA on request.
Does Movcar install hardware in my vehicles?
No. Movcar is software-only. We do not sell, ship, or install GPS trackers, telematics dongles, OBD readers, or any other vehicle hardware. Drivers self-log mileage and trips through the mobile app.
Do you offer on-premise or private-cloud deployment?
Yes, for organizations that require it. See Private Cloud and On-Premise. Full data isolation, custom SLA, dedicated infrastructure.
How does Movcar handle payment data?
Stripe processes all card transactions on servers in the USA, under EU Standard Contractual Clauses and the EU-US Data Privacy Framework. Movcar's database never stores card numbers or CVCs. Invoices generated by Stripe are available in your account's Subscription section.
Who do I contact for security questions?
Email support@movcar.app. Include "Security" in the subject line for fastest routing.
