Marketing Automation

Moraph resells, implements and runs HubSpot for financial institutions that want to market by email without losing track of consent. HubSpot holds contacts, subscription types and the lawful basis for each contact, and sends campaigns with working unsubscribe links. Moraph configures it for CAN-SPAM, GDPR and your compliance review process, keeps the configuration under change control, and checks campaigns against your rules before they go out.

The problem it solves

Marketing teams at banks, credit unions, lenders and advisers want to send timely campaigns, while compliance needs every message reviewed and every recipient's consent respected. In practice contact lists are exported and re-imported, unsubscribes from one system do not reach another, consent records for European contacts are incomplete, and approvals happen by email attachment. When a complaint or regulator asks why someone received a message, the answer is hard to reconstruct.

Who it’s for

• Marketing teams at banks, credit unions, lenders, wealth managers and advisers
• Compliance and marketing review staff who approve communications
• Privacy officers responsible for consent and data protection
• Institutions with customers or prospects in the United Kingdom or European Union
• Teams that already use HubSpot and need it governed

1. Capture consentHubSpot forms record what each contact agreed to, the subscription types they chose and, where GDPR applies, the lawful basis for processing. Moraph configures the forms, subscription types and consent text you approve.
2. Build and reviewCampaigns are built in HubSpot from approved templates, and Moraph's pre-send checks confirm the required elements are present before compliance approves the content.
3. Send and honor opt-outsHubSpot sends to the approved audience, suppresses contacts who have opted out, and processes unsubscribes from every message. Moraph keeps opt-outs in step with your other systems.
4. Govern and evidenceMoraph reviews the configuration, data flows and consent records with your team each month, and produces the evidence needed for complaints, data subject requests and compliance reviews.

Subscription types

HubSpot lets contacts subscribe to and leave each type of communication separately, such as product news, rate alerts or events, and Moraph sets them up to match your programs.

Consent and lawful basis

HubSpot records the lawful basis for processing and the consent given for contacts covered by GDPR or UK GDPR, configured with the consent text your privacy team approves.

Unsubscribe handling

Every marketing email carries an unsubscribe link, and HubSpot stops sending to the contact for that subscription type, or all marketing email, once they opt out.

Opt-out synchronization

Moraph connects HubSpot with your CRM and other sending systems so an opt-out recorded in one is respected in the others.

Approved templates

Email templates carry your sender identification, postal address, required disclosures and unsubscribe footer, so marketers start from a layout with the required elements in place.

Pre-send checks

Moraph runs a checklist on each campaign before approval: sender details, postal address, subscription type, audience, disclosures and links. Automated checks may flag issues; your reviewer decides.

Compliance approval

Campaigns are routed to your compliance reviewer for approval before sending, using HubSpot approvals where your subscription includes them, with the approval kept with the campaign.

Data minimization

Only the contact fields agreed with your privacy team are synchronized into HubSpot; account balances, account numbers and other nonpublic financial details are kept out unless you approve a specific use.

Data subject requests

Access and deletion requests for contacts are handled using HubSpot's privacy tools, at the direction of your privacy team, with each request logged.

Team permissions

HubSpot user permissions and teams limit who can edit contacts, build emails, publish and export data, configured to your roles by Moraph.

Retention and archiving

Sent emails and their approvals can be passed to your communication archive, so marketing communications are kept with your other records.

Change management

Changes to subscription types, forms, integrations and permissions go through change requests your team approves, and are recorded.

Marketer

Builds campaigns, forms and audiences from approved templates

Compliance reviewer

Approves or returns marketing content before it is sent

Privacy officer

Approves consent text, data fields and data subject request handling

Marketing manager

Owns the marketing program, schedules sends and manages the team's access

Moraph service engineer

Configures and operates HubSpot, runs pre-send checks and manages integrations

Auditor (read-only)

Reviews campaigns, approvals, consent records and reports within a granted scope

CRM

Contacts and opt-outs synchronized with your CRM, including Moraph's managed CRM for Finance, using HubSpot's integrations or the APIs on both sides.

Core banking and digital banking

Where approved, limited customer attributes such as product held or branch are passed to HubSpot for segmentation, without account numbers or balances.

Website and forms

HubSpot forms embedded on your website capture subscriptions and consent.

Communication archive

Sent marketing emails passed to your archive, including Moraph's managed Communication Archiving, for retention and supervision.

Identity provider

Staff sign in through your identity provider where your HubSpot edition supports single sign-on.

Moraph service portal

Change requests, pre-send check results, integration alerts and monthly service reviews tracked in Moraph's service portal.

Single sign-on

Your staff sign in through your identity provider where your HubSpot edition supports it, so your password and multi-factor policies apply; Moraph's service portal always uses your identity provider.

Role-based access

HubSpot permissions limit who can edit contacts, publish emails and export data, and exporting contacts is restricted to the roles you choose.

Data minimization

Nonpublic personal financial information is kept out of HubSpot unless your privacy team approves a specific field for a specific use.

Moraph staff access

Moraph engineers use named accounts with the permissions you approve, and their access is reviewed with yours.

Audit trail

Moraph's service portal records every change request, approval and pre-send check, alongside the activity history HubSpot keeps.

Audited operations

Moraph is SOC 2 Type II and ISO/IEC 27001 audited company-wide, and its service records are hosted in the United States, United Kingdom or Australia region you choose. HubSpot's own data hosting follows its available regions and terms.

New HubSpot account

A HubSpot account provisioned through Moraph and configured to the agreed baseline.

Existing HubSpot account

Your existing HubSpot account brought under management after a baseline review of consent, permissions and integrations.

Data hosting

HubSpot data is hosted in the HubSpot data center region available for your account under HubSpot's terms; region choice is confirmed during discovery.

Discovery

We review your marketing programs, review procedures, consent practices and existing tools, and agree the configuration baseline. We need your marketing and compliance procedures and a privacy contact.

Consent design

Subscription types, consent text, lawful basis settings and double opt-in rules are designed with your compliance and privacy teams.

Data and integrations

The contact fields to be synchronized are agreed and minimized, and integrations with your CRM, website and archive are built and tested.

Contact migration

Existing contacts and their opt-outs are imported, with contacts lacking a known consent status held back for your decision.

Templates and review

Approved templates and the compliance approval process are set up, and marketers and reviewers are trained.

Transition to managed service

The service moves to steady-state operations: pre-send checks, integration monitoring, change management and monthly service reviews.

• Moraph is not HubSpot. Moraph resells, implements and operates the platform; HubSpot develops it and runs its service.
• HubSpot's own service commitments, product roadmap and any outages apply. Moraph does not change them.
• Licences are subject to HubSpot's terms, which you accept as part of the purchase. Some features, such as approvals, audit logs and single sign-on, depend on the edition you license.
• Moraph does not write or approve your marketing content. Your institution decides what is sent and approves it.
• Pre-send checks confirm the elements Moraph has agreed to check; they are not legal advice and do not replace your compliance review.
• The service covers email marketing. Text messages and calls bring separate rules, such as the TCPA, and are not configured unless agreed separately.
• Opt-out synchronization works with systems that can be integrated; opt-outs held in systems without an integration must be handled by your process.
• HubSpot is not a records archive. Retention of sent communications relies on your archive.

• Walk through how a contact's consent and subscription choices are recorded and shown
• Unsubscribe from a test email and check the opt-out reaches your CRM
• Review a pre-send check on one of your own past campaigns
• Confirm which contact fields would be synchronized and which kept out
• Check who could export contacts under the proposed permissions
• Read the responsibilities table with your compliance and vendor management teams