Stripe Service Providers, Sub-Processors & Affiliates (original) (raw)

• Stripe Services Agreement

• Stripe Connect

  • Platform Agreement
  • Account Agreement

• Products and Programs

  • Stripe Atlas
  • Stripe Adaptive Pricing
  • Stripe Climate
  • Climate Contribution Terms
  • Stripe Corporate Card
  • Stripe Customer Portal
  • Stripe Data Pipeline
  • Stripe Financial Connections
  • Stripe Identity
  • Stripe Issuing
  • Stripe Tax
  • Stripe Partner Ecosystem
  • Stripe Radar
  • Stripe Rewards
  • Stripe Verifications
  • Stripe Shop
  • Stripe Terminal
  • Terminal Purchase Terms
  • Terminal Reseller Terms
  • Terminal Device EULA
  • Stripe Treasury - Connected Accounts
  • Stripe Treasury - Platforms

• Financial Services Terms

  • Acquirer Disclosure
  • Stripe Payments Company
  • Wells Fargo
  • PNC Bank
• Payment Method Terms
• Prohibited & Restricted Businesses

• Privacy

  • Privacy Policy
  • Cookies Policy
  • Data Privacy Framework
  • Service Providers List
  • Data Processing Agreement
  • Data Transfers Addendum
  • Stripe Privacy Center

• Intellectual Property

  • Intellectual Property Notice
  • Marks Usage

• Stripe Apps

  • App Developer Agreement
  • App Marketplace Agreement
• Licenses
• Consumer Terms

Last updated: July 21, 2023

To support Stripe in delivering its Services, Stripe engages service providers, Sub-Processors and affiliates to assist Stripe with its data processing activities on behalf of Stripe Business Users as defined in our Stripe Services Agreement.

Summary of Changes

We’ve updated this page because we strive to be clear about our use of Personal Data and the third party service providers we engage. The below outlines a few highlights of the changes we made, so please review this page carefully. If you have questions or queries, please contact us.

You will see that we have:

• added new sub-processors (WNS Global Services (UK) International Limited, Microsoft Corporation, LexisNexis Risk Solutions FL Inc., Shufti Pro Limited, Data Zoo Pty Limited, Ekata, Inc. and Lob.com, Inc.);
• added new Stripe Affiliates to reflect our product and global expansion (i.e., Stripe Brokering, Inc., Stripe Payments Company, Stripe Servicing, Inc., and Stripe Switzerland GmbH);
• updated the processing activities of some of our entities (i.e., Stripe Capital Europe, Limited and Stripe Payments Mexico S. de R.L. de C.V.);
• removed a Stripe Affiliate (i.e., Stripe Payments HK Limited and a Sub-Processor (Computer Services, Inc.);
• made some minor non-material textual changes.

What is a Sub-processor?

When Stripe engages third party service providers in our capacity as a data processor for our Business Users’ personal data, the General Data Protection Regulation (“GDPR”) and a number of other global privacy frameworks call these third-party service providers sub-processors. Sub-processors are service providers who have or potentially will have access to or process personal data that Stripe processes for, and on behalf of, Stripe’s Business Users.

This page outlines the types of service providers, Sub-processors, and affiliates we utilize, where they are located, and a description of the work they carry out.

Due Diligence

Before engaging any service provider (including Sub-processors), we perform due diligence, including a vendor security assessment. Our service providers are subject to contract terms designed to ensure that these service providers process personal data only for the purposes of providing services to Stripe and in accordance with our commitments to Business Users and applicable data protection laws.

List of Sub-processors

List of Service Providers

The below list of service providers are some key third parties Stripe works with across our products and services. You will also find some service providers that Stripe works with for a specific Stripe product or service.

List of Affiliates

Other Stripe Entities Involved in Offering the Services

Stripe may need to rely on Stripe affiliates to help provide the Services to our Business Users, their Customers and our End Users. Stripe affiliates are other entities delivering elements of the Services to our Business Users and End Users. The Stripe affiliates involved in the processing of personal data will depend on the location of our Business Users, their End Customers and our End User, and the nature of the services Stripe is providing.

Updates to this Page

Due to the nature of our global business and the volume of Business Users, our business needs and services providers may change from time to time. For example, we may deprecate a service provider to consolidate and minimize our use of service providers. Similarly, we may add a service provider if we believe that doing so will enhance our ability to deliver our Services.

We will periodically update this page to reflect additions and removals to our list of service providers, Sub-processors and Affiliates. If you are a Business User, you may subscribe to receive email notifications of updates to our list of Sub-processors on this page here.

Under the terms of our Data Processing Agreement (DPA), a Business User may reasonably object in writing to the processing of its personal data by a new Sub-processor within 30 days following the update of this page. If a Business User does not object during the 30 day time period, the appointment of the new Sub-processor shall be deemed accepted by the Business User. If you are a Business User and want to know more about our DPA, please contact us.

For more information on Stripe’s privacy practices, please visit our Privacy Policy. If you have any questions regarding this page, please contact us.