Product factsheet · Financial Services · Managed platform (HubSpot)
Marketing Automation
Moraph resells, implements and runs HubSpot for financial institutions that want to market by email without losing track of consent. HubSpot holds contacts, subscription types and the lawful basis for each contact, and sends campaigns with working unsubscribe links. Moraph configures it for CAN-SPAM, GDPR and your compliance review process, keeps the configuration under change control, and checks campaigns against your rules before they go out.
Principal workflows
- Capture consent: HubSpot forms record what each contact agreed to, the subscription types they chose and, where GDPR applies, the lawful basis for processing. Moraph configures the forms, subscription types and consent text you approve.
- Build and review: Campaigns are built in HubSpot from approved templates, and Moraph's pre-send checks confirm the required elements are present before compliance approves the content.
- Send and honor opt-outs: HubSpot sends to the approved audience, suppresses contacts who have opted out, and processes unsubscribes from every message. Moraph keeps opt-outs in step with your other systems.
- Govern and evidence: Moraph reviews the configuration, data flows and consent records with your team each month, and produces the evidence needed for complaints, data subject requests and compliance reviews.
Who uses it
- Marketing teams at banks, credit unions, lenders, wealth managers and advisers
- Compliance and marketing review staff who approve communications
- Privacy officers responsible for consent and data protection
- Institutions with customers or prospects in the United Kingdom or European Union
- Teams that already use HubSpot and need it governed
Reporting
- Campaigns sent with their approvals
- Subscriptions and opt-outs by type and period
- Contacts without a recorded lawful basis
- Opt-out synchronization failures
- Bounces and complaints by campaign
- Configuration changes and user access reviews
Features
- Subscription types: HubSpot lets contacts subscribe to and leave each type of communication separately, such as product news, rate alerts or events, and Moraph sets them up to match your programs.
- Consent and lawful basis: HubSpot records the lawful basis for processing and the consent given for contacts covered by GDPR or UK GDPR, configured with the consent text your privacy team approves.
- Unsubscribe handling: Every marketing email carries an unsubscribe link, and HubSpot stops sending to the contact for that subscription type, or all marketing email, once they opt out.
- Opt-out synchronization: Moraph connects HubSpot with your CRM and other sending systems so an opt-out recorded in one is respected in the others.
- Approved templates: Email templates carry your sender identification, postal address, required disclosures and unsubscribe footer, so marketers start from a compliant layout.
- Pre-send checks: Moraph runs a checklist on each campaign before approval: sender details, postal address, subscription type, audience, disclosures and links. Automated checks may flag issues; your reviewer decides.
- Compliance approval: Campaigns are routed to your compliance reviewer for approval before sending, using HubSpot approvals where your subscription includes them, with the approval kept with the campaign.
- Data minimization: Only the contact fields agreed with your privacy team are synchronized into HubSpot; account balances, account numbers and other nonpublic financial details are kept out unless you approve a specific use.
- Data subject requests: Access and deletion requests for contacts are handled using HubSpot's privacy tools, at the direction of your privacy team, with each request logged.
- Team permissions: HubSpot user permissions and teams limit who can edit contacts, build emails, publish and export data, configured to your roles by Moraph.
- Retention and archiving: Sent emails and their approvals can be passed to your communication archive, so marketing communications are kept with your other records.
- Change management: Changes to subscription types, forms, integrations and permissions go through change requests your team approves, and are recorded.
Integrations
- CRM: Contacts and opt-outs synchronized with your CRM, including Moraph's managed CRM for Finance, using HubSpot's integrations or the APIs on both sides.
- Core banking and digital banking: Where approved, limited customer attributes such as product held or branch are passed to HubSpot for segmentation, without account numbers or balances.
- Website and forms: HubSpot forms embedded on your website capture subscriptions and consent.
- Communication archive: Sent marketing emails passed to your archive, including Moraph's managed Communication Archiving, for retention and supervision.
- Identity provider: Staff sign in through your identity provider where your HubSpot edition supports single sign-on.
- Moraph service portal: Change requests, pre-send check results, integration alerts and monthly service reviews tracked in Moraph's service portal.
Deployment
- New HubSpot account: A HubSpot account provisioned through Moraph and configured to the agreed baseline.
- Existing HubSpot account: Your existing HubSpot account brought under management after a baseline review of consent, permissions and integrations.
- Data hosting: HubSpot data is hosted in the HubSpot data center region available for your account under HubSpot's terms; region choice is confirmed during discovery.
Security and privacy
- Single sign-on: Your staff sign in through your identity provider where your HubSpot edition supports it, so your password and multi-factor policies apply; Moraph's service portal always uses your identity provider.
- Role-based access: HubSpot permissions limit who can edit contacts, publish emails and export data, and exporting contacts is restricted to the roles you choose.
- Data minimization: Nonpublic personal financial information is kept out of HubSpot unless your privacy team approves a specific field for a specific use.
- Moraph staff access: Moraph engineers use named accounts with the permissions you approve, and their access is reviewed with yours.
- Audit trail: Moraph's service portal records every change request, approval and pre-send check, alongside the activity history HubSpot keeps.
- Audited operations: Moraph is SOC 2 Type II and ISO/IEC 27001 audited company-wide, and its service records are hosted in the United States, United Kingdom or Australia region you choose. HubSpot's own data hosting follows its available regions and terms.
Limitations
- Moraph is not HubSpot. Moraph resells, implements and operates the platform; HubSpot develops it and runs its service.
- HubSpot's own service commitments, product roadmap and any outages apply. Moraph does not change them.
- Licences are subject to HubSpot's terms, which you accept as part of the purchase. Some features, such as approvals, audit logs and single sign-on, depend on the edition you license.
- Moraph does not write or approve your marketing content. Your institution decides what is sent and approves it.
- Pre-send checks confirm the elements Moraph has agreed to check; they are not legal advice and do not replace your compliance review.
- The service covers email marketing. Text messages and calls bring separate rules, such as the TCPA, and are not configured unless agreed separately.
- Opt-out synchronization works with systems that can be integrated; opt-outs held in systems without an integration must be handled by your process.
- HubSpot is not a records archive. Retention of sent communications relies on your archive.
Next steps
Book a demonstration or a technical briefing at www.moraph.com/solutions/marketing-automation. Purchasing routes and company information: www.moraph.com/how-to-buy.
Moraph LLC · Current as of October 2026.