Summary of Changes
We’ve updated this page because we strive to be clear about our use of Personal Data and the third party service providers we engage. The below outlines a few highlights of the changes we made, so please review this page carefully. If you have questions or queries, please contact us.
You will see that we have:
- Included additional information on our existing service providers to provide you with more information (e.g. their location, privacy statements).
- Added new Stripe Affiliates to reflect our international growth.
- Included additional information on our Sub-processors.
- Added details on how users can subscribe to receive notifications about updates to the Service Providers page. If you are a User, you may subscribe to receive email notifications of updates to this page here.
What is a Sub-processor?
When Stripe engages third party service providers in our capacity as a data processor for our Users’ personal data, the General Data Protection Regulation (“GDPR”) calls these third-party service providers sub-processors. Sub-processors are service providers who have or potentially will have access to or process personal data that Stripe processes for, and on behalf of, Stripe’s users.
The list outlines the types of service providers, sub-processors, and affiliates we utilize, where they are located, and a description of the work they carry out.
Before engaging any service provider, we perform due diligence, including a vendor security assessment. Our service providers are subject to contract terms designed to ensure that these service providers process personal data only for the purposes of providing services to Stripe and in accordance with our commitments to Users and applicable data protection laws.
List of Sub-processors
|Name||Data||Purpose of Processing||Entity Country|
|Amazon Web Services, Inc.||User data and User’s Customers’ data||Cloud service provider||United States|
|Khoros, LLC||Information included in the query as provided by the requester||Tool to help manage incoming queries via social media||United States|
|Zendesk, Inc.||The information included by the individual reaching out to Stripe, such as name, email address, phone number, and other information that may be included based on the nature of the communication||Customer service platform that supports customer interactions e.g. via phone, chat or email||United States|
|Twilio, Inc||User data||Cloud communications platform as a service||United States|
|TELUS International (Cda)||Information included in the queries raised by the individuals contacting Stripe support||Provide User support in several languages and timezones||Ireland|
|AML Rightsource||Information included in the queries raised by the individuals contacting Stripe support||Provide User support in several languages and timezones||United States|
|Sykes Enterprises, Inc.||Information included in the queries raised by the individuals contacting Stripe support||Provide User support in several languages and timezones||United States|
|Teleperformance Colombia S.A.S.||Information included in the queries raised by the individuals contacting Stripe support||Provide User support in several languages and timezones||Colombia|
|Teleperformance España S.A.U.||Information included in the queries raised by the individuals contacting Stripe support||Provide User support in several languages and timezones||Spain|
|TDCX (MY) SDN. BHD.||Information included in the queries raised by the individuals contacting Stripe support||Provide User support in several languages and timezones||Malaysia, Philippines|
|Jumio Corporation||Users’ Customers data||Identity verification for customers of Stripe Users||United States|
|Trulioo Information Services Inc.||Users’ Customers data||Identity verification for customers of Stripe Users||Canada|
|Global Data Consortium, Inc.||Users’ Customers data||Identity verification for customers of Stripe Users||United States|
|Microsoft Azure||Users’ Customers data||Identity verification for customers of Stripe Users via Face API||United States|
|LegalInc.com, Inc.||Stripe Atlas founder(s)’ personal information as required for incorporation in the State of Delaware||File incorporation documents in the State of Delaware||United States|
List of Service Providers
The below list of service providers are some key third parties Stripe works with across our products and services. You will also find some service providers that Stripe works with for a specific Stripe product or service.
|Name||Data||Purpose of processing||Entity Country|
|DocuSign, Inc.||User data||eSignatures||United States|
|Google LLC||User data and Users’ Customers’ data||Email, file storage, collaboration tools||United States|
|Marketo, Inc.||User data||Marketing tool||United States|
|Salesforce.com, Inc.||User data||Customer relationship management platform which stores User contact information as well as supporting information about the business relationship||United States|
|Zoom Video Communications, Inc.||User data, insofar as that is shared in spoken word between the conversing parties||Video conferencing system||United States|
|User and Sales support service providers||Information included in the queries raised by the individuals contacting Stripe support||Provide user and sales support in several languages and timezones||Various|
|Verification service providers||User data and Users’ Customers’ data||Help verify the identity of Stripe Users and Users’ Customers, and mitigate fraud||Various|
|Idemia America Corp.||Cardholder name, PAN, CVV, expiration date, shipping address||Printing the cards for Stripe Issuing||United States|
|The Phoenix Group||User name and address for shipping purposes||To enable hardware ordered from Stripe to be shipped to users in the US and CA||United States|
|Lantec (UK) Ltd||User name and address for shipping purposes||To enable hardware ordered from Stripe to be shipped to users in Europe||United Kingdom|
List of Affiliates
Other Stripe Entities Involved in Offering the Services
Stripe may need to rely on Stripe affiliates to help provide the Services to our Users and their Customers. Stripe affiliates are other entities delivering elements of the Services to our Users. The Stripe affiliates involved in the processing of personal data will depend on the location of our Users and their Customers, and the nature of the services Stripe is providing.
|Name||Entity Country||Purpose of processing|
|Stripe Payments Australia Pty Ltd A.C.N. 160 180 343||Australia||Please see https://stripe.com/au/ssa|
|Stripe Payments Canada, Ltd.||Canada||Please see https://stripe.com/en-ca/ssa|
|Stripe Payments Malaysia Sdn. Bhd.||Malaysia||Please see https://stripe.com/en-my/ssa|
|Stripe Payments Mexico, S. de R.L. de C.V.||Mexico||Please see https://stripe.com/en-mx/ssa|
|Stripe India Private Limited||India||Please see https://stripe.com/en-in/ssa
In order to meet regulatory data localization requirements for Indian payment transactions, Stripe India Private Limited stores certain data on servers located in India.
|Stripe Payments Europe Limited||Ireland||Data Controller located in the EU
Please see https://stripe.com/ie/ssa
Together with either
|Stripe Capital Europe, Limited||Ireland||Provide Stripe Capital product and related services to Stripe users in the EEA|
|Stripe Japan KK||Japan||Please see https://stripe.com/en-jp/legal|
|Stripe New Zealand Limited||New Zealand||Please see https://stripe.com/nz/ssa|
|Stripe Payments Singapore Pte. Ltd.||Singapore||Please see https://stripe.com/en-sg/legal|
|Noaliasing SPRL||Belgium||Provide local marketing and customer support services within Belgium|
|Stripe Brasil Soluções de Pagamento Ltda.||Brazil||Please see https://stripe.com/br/ssa|
|Stripe Deutschland GmbH||Germany||Provide local marketing and customer support services within Germany|
|Stripe France SARL||France||Provide local marketing and customer support services within France|
|Stripe Netherlands B.V.||Netherlands||Provide local marketing and customer support services within the Netherlands|
|Stripe Spain S.L||Spain||Provide local marketing and customer support services within Spain|
|Tiny Experiment Aktiebolag||Sweden||Provide local marketing and customer support services within Sweden|
|Stripe Payments HK Limited||Hong Kong||Local marketing and customer support services within Hong Kong|
Updates to this Page
Due to the nature of our global business and the volume of users, our business needs and services providers may change from time to time. For example, we may deprecate a service provider to consolidate and minimize our use of service providers. Similarly, we may add a service provider if we believe that doing so will enhance our ability to deliver our Services.
We will periodically update this page to reflect additions and removals to our list of service providers. If you are a User, you may subscribe to receive email notifications of updates to this page here.
Under the terms of our Data Processing Agreement (DPA), a User may reasonably object in writing to the processing of its personal data by a new sub-processor within 30 days following the update of this page. If a User does not object during the 30 day time period, the appointment of the new sub-processor shall be deemed accepted by the User. If you are a Stripe User and want to know more about our DPA, please contact us.