Stripe Sub-Processors and Service Providers List

We’re updating this page and the changes will be effective as of July 21, 2023.

Last updated: July 21, 2023

To support Stripe in delivering its Services, Stripe engages service providers, Sub-Processors and affiliates to assist Stripe with its data processing activities on behalf of Stripe Business Users as defined in our Stripe Services Agreement.

Summary of Changes

We’ve updated this page because we strive to be clear about our use of Personal Data and the third party service providers we engage. The below outlines a few highlights of the changes we made, so please review this page carefully. If you have questions or queries, please contact us.

You will see that we have:

  • added new sub-processors (WNS Global Services (UK) International Limited, Microsoft Corporation, LexisNexis Risk Solutions FL Inc., Shufti Pro Limited, Data Zoo Pty Limited, Ekata, Inc. and Lob.com, Inc.);
  • added new Stripe Affiliates to reflect our product and global expansion (i.e., Stripe Brokering, Inc., Stripe Payments Company, Stripe Servicing, Inc., and Stripe Switzerland GmbH);
  • updated the processing activities of some of our entities (i.e., Stripe Capital Europe, Limited and Stripe Payments Mexico S. de R.L. de C.V.);
  • removed a Stripe Affiliate (i.e., Stripe Payments HK Limited and a Sub-Processor (Computer Services, Inc.);
  • made some minor non-material textual changes.

What is a Sub-processor?

When Stripe engages third party service providers in our capacity as a data processor for our Business Users’ personal data, the General Data Protection Regulation (“GDPR”) and a number of other global privacy frameworks call these third-party service providers sub-processors. Sub-processors are service providers who have or potentially will have access to or process personal data that Stripe processes for, and on behalf of, Stripe’s Business Users.

This page outlines the types of service providers, Sub-processors, and affiliates we utilize, where they are located, and a description of the work they carry out.

Due Diligence

Before engaging any service provider (including Sub-processors), we perform due diligence, including a vendor security assessment. Our service providers are subject to contract terms designed to ensure that these service providers process personal data only for the purposes of providing services to Stripe and in accordance with our commitments to Business Users and applicable data protection laws.

List of Sub-processors

NAME

DATA

PURPOSE OF PROCESSING

ENTITY COUNTRY

Amazon Web Services, Inc.

Business User data and End Customer data

Cloud service provider

United States

Khoros, LLC

Information included in the query as provided by the requester

Tool to help manage incoming queries via social media

United States

Salesforce

The information included by the individual reaching out to Stripe, such as name, email address, phone number, and other information that may be included based on the nature of the communication

Customer service platform that supports customer interactions e.g. email

United States

Twilio, Inc

Business User data & End Customer data

Cloud communications platform as a service including two factor authentication

United States

User Support

TELUS International (Cda)

Information included in the queries raised by the individuals contacting Stripe support

Provide Business User support in several languages and timezones

Ireland

AML Rightsource

Information included in the queries raised by the individuals contacting Stripe support

Provide Business User support in several languages and timezones

United States

Teleperformance Colombia S.A.S.

Information included in the queries raised by the individuals contacting Stripe support

Provide Business User support in several languages and timezones

Colombia

Teleperformance España S.A.U.

Information included in the queries raised by the individuals contacting Stripe support

Provide Business User support in several languages and timezones

Spain

TDCX (MY) SDN. BHD.

Information included in the queries raised by the individuals contacting Stripe support

Provide Business User support in several languages and timezones

Malaysia, Philippines

WNS Global Services (UK) International Limited

Information included in the queries raised by the individuals contacting Stripe support

Provide Business User support in several languages and timezones

United Kingdom

Microsoft Corporation

Information included in the queries raised by the individuals contacting Stripe support

Provide AI technology to improve the quality of user support operations

United States 

Stripe Identity

Trulioo Information Services Inc.

End Customer data

Identity verification for End Customers of Business Users

Canada

Global Data Consortium, Inc.

End Customer data

Identity verification for End Customers of Business Users

United States

InscribeAI, Inc.

End Customer data

Identity verification for End Customers of Business Users

United States

Data Zoo Pty Limited

End Customer data

Identity verification for End Customers of Business Users

Australia

Shufti Pro Limited

End Customer data

Identity verification for End Customers of Business Users

United Kingdom 

LexisNexis Risk Solutions FL Inc.

End Customer data

Identity verification for End Customers of Business Users

United States

Ekata, Inc.

End Customer data

Identity verification for End Customers of Business Users

United States

Lob.com, Inc.

End Customer data

Identity verification for End Customers of Business Users

United States

Stripe Atlas

LegalInc.com, Inc.

Stripe Atlas Representatives’ personal information as required for incorporation in the State of Delaware

File incorporation documents in the State of Delaware

United States

List of Service Providers

The below list of service providers are some key third parties Stripe works with across our products and services. You will also find some service providers that Stripe works with for a specific Stripe product or service.

NAME

DATA

PURPOSE OF PROCESSING

ENTITY COUNTRY

DocuSign, Inc.

Business User data

eSignatures

United States

Google LLC

Business User data, End Customers’ data and Visitors’ data

Email, file storage, collaboration tools, and services to help protect our Sites (e.g. ReCAPTCHA) and to measure interactions on our Sites

United States

Marketo, Inc.

Business User data

Marketing tool

United States

Salesforce.com, Inc.

Business User data

Customer relationship management platform which stores Business User contact information as well as supporting information about the business relationship

United States

Zoom Video Communications, Inc.

Business User data, insofar as that is shared in spoken word between the conversing parties

Video conferencing system

United States

Ekata, Inc.

Business User data

Provide sanctions screening services

United States

LegitScript, LLC

Business User data

Provide merchant monitoring services

United States

User and Sales support service providers

Information included in the queries raised by the individuals contacting Stripe support

Provide user and sales support in several languages and timezones

Various

Verification service providers

Business User data and End Customer data

Help verify the identity of Stripe Business Users and End Customers, and mitigate fraud

Various

Stripe Issuing

Idemia America Corp.

Cardholder name, PAN, CVV, expiration date, shipping address

Printing the cards for Stripe Issuing

United States

Stripe Terminal

The Phoenix Group

Business User name and address for shipping purposes

To enable hardware ordered from Stripe to be shipped to Business Users in the US and CA

United States

Lantec (UK) Ltd

Business User name and address for shipping purposes

To enable hardware ordered from Stripe to be shipped to Business Users in Europe

United Kingdom

List of Affiliates

Other Stripe Entities Involved in Offering the Services

Stripe may need to rely on Stripe affiliates to help provide the Services to our Business Users, their Customers and our End Users. Stripe affiliates are other entities delivering elements of the Services to our Business Users and End Users. The Stripe affiliates involved in the processing of personal data will depend on the location of our Business Users, their End Customers and our End User, and the nature of the services Stripe is providing.

Name

Region 

Entity County 

Purpose of Processing

Stripe Payments Canada, Ltd.

AMER

Canada 

Please see https://stripe.com/en-ca/ssa

Stripe Brokering, Inc.

AMER

United States 

Provide lending facilitation services to bank partners in connection with Stripe Capital loans in the United States

Stripe, Inc. 

AMER

United States 

Please see https://stripe.com/ssa 

Stripe Payments Company 

AMER

United States

Please see https://stripe.com/ssa and https://stripe.com/legal/spc

Stripe Servicing, Inc.

AMER

United States

Provide credit collection services related to Stripe Capital in the United States

Stripe Payments Australia Pty Ltd A.C.N. 160 180 343

APAC

Australia

Please see https://stripe.com/au/ssa

Stripe India Private Limited

APAC

India

Please see https://stripe.com/en-in/ssa

In order to meet regulatory data localization requirements for Indian payment transactions, Stripe India Private Limited stores certain data on servers located in India.

Stripe Technology India Private Limited

APAC

India

Provides user support as well as internal operational support to other Stripe Affiliates

PT Stripe Payments Indonesia

APAC

Indonesia

Please see https://stripe.com/id/ssa

Stripe Japan, Inc. 

APAC

Japan

Please see https://stripe.com/en-jp/legal

Stripe Payments Malaysia Sdn. Bhd.

APAC

Malaysia

Please see https://stripe.com/en-my/ssa

Stripe New Zealand Limited

APAC

New Zealand 

Please see https://stripe.com/nz/ssa

Stripe Payments Singapore Pte. Ltd.

APAC

Singapore

Please see https://stripe.com/en-sg/legal

Stripe Payments (Thailand) Ltd.

APAC

Thailand

Please see https://stripe.com/th/legal/ssa

Noaliasing SPRL

EMEA

Belgium

Provide local marketing and customer support services within Belgium

Stripe France SARL

EMEA

France

Provide local marketing and customer support services within France 

Stripe Deutschland GmbH

EMEA

Germany

Provide local marketing and customer support services within Germany

Stripe Capital Europe, Limited

EMEA

Ireland

Provide Stripe Capital product and related services to Stripe users in the EEA, EU and UK

Stripe Payments Europe Limited

EMEA

Ireland

Data Controller located in the EU. Please see https://stripe.com/ie/ssa

Together with either Stripe Technology Europe Limited, the e-money licensed entity with the Central Bank of Ireland, or Stripe Payments UK Limited, the e-money licensed entity with the UK FCA

Stripe Israel Payments Ltd.

EMEA

Israel

Provide local marketing and customer support services within Israel 

Stripe Payments Europe, Limited - Italian Branch

EMEA

Italy 

Please see https://support.stripe.com/questions/faq-vat-e-invoicing-requirements-in-italy

Stripe Netherlands B.V. 

EMEA

Netherlands

Provide local marketing and customer support services within the Netherlands 

Stripe Payments sp. z o.o.

EMEA

Poland

Provide local marketing and customer support services within Poland

Stripe Spain S.L.

EMEA

Spain

Provide local marketing and customer support services within Spain

Tiny Experiment Aktiebolag

EMEA

Sweden

Provide local marketing and customer support services within Sweden 

Stripe Switzerland GmbH

EMEA

Switzerland

Provide local marketing and customer support services within Switzerland

Stripe FZ-LLC

EMEA

United Arab Emirates 

Provide local marketing and customer support services within the United Arab Emirates

Stripe Brasil Soluções de Pagamento - Instituição de Pagamento Ltda

LATAM

Brazil

Please see https://stripe.com/br/ssa

Stripe Payments Mexico, S. de R.L. de C.V.

LATAM

Mexico

Please see https://stripe.com/en-mx/ssa

Provides user support as well as internal operational support to other Stripe Affiliates.

Updates to this Page

Due to the nature of our global business and the volume of Business Users, our business needs and services providers may change from time to time. For example, we may deprecate a service provider to consolidate and minimize our use of service providers. Similarly, we may add a service provider if we believe that doing so will enhance our ability to deliver our Services.

We will periodically update this page to reflect additions and removals to our list of service providers, Sub-processors and Affiliates. If you are a Business User, you may subscribe to receive email notifications of updates to our list of Sub-processors on this page here.

Under the terms of our Data Processing Agreement (DPA), a Business User may reasonably object in writing to the processing of its personal data by a new Sub-processor within 30 days following the update of this page. If a Business User does not object during the 30 day time period, the appointment of the new Sub-processor shall be deemed accepted by the Business User. If you are a Business User and want to know more about our DPA, please contact us.

For more information on Stripe’s privacy practices, please visit our Privacy Policy. If you have any questions regarding this page, please contact us.