Stripe Service Providers, Sub-Processors & Affiliates

Last updated: June 8, 2022

To support Stripe in delivering its Services, Stripe engages Service Providers, Sub-Processors and Affiliates to assist Stripe with its data processing activities on behalf of Stripe Business Users as defined in our Stripe Services Agreement.

Summary of Changes

We’ve updated this page because we strive to be clear about our use of Personal Data and the third party service providers we engage. The below outlines a few highlights of the changes we made, so please review this page carefully. If you have questions or queries, please contact us.

You will see that we have:

  • Added new Stripe affiliates (e.g. PT Stripe Payments Indonesia), Service Providers (e.g. LegitScript, LLC) and Sub-processors (e.g. InscribeAI, Inc.) to reflect our international growth.
  • Removed a Service Provider (i.e. Microsoft Azure) and a Sub-processor (i.e. Jumio Corporation).
  • Updated the terms on this page used to reflect our updated Privacy Policy (e.g. Business User).

What is a Sub-processor?

When Stripe engages third party service providers in our capacity as a data processor for our Business Users’ personal data, the General Data Protection Regulation (“GDPR”) calls these third-party service providers sub-processors. Sub-processors are service providers who have or potentially will have access to or process personal data that Stripe processes for, and on behalf of, Stripe’s Business Users.

The list outlines the types of service providers, sub-processors, and affiliates we utilize, where they are located, and a description of the work they carry out.

Due Diligence

Before engaging any service provider, we perform due diligence, including a vendor security assessment. Our service providers are subject to contract terms designed to ensure that these service providers process personal data only for the purposes of providing services to Stripe and in accordance with our commitments to Business Users and applicable data protection laws.

List of Sub-processors

Name Data Purpose of Processing Entity Country
Amazon Web Services, Inc. Business User data and End Customer data Cloud service provider United States
Khoros, LLC Information included in the query as provided by the requester Tool to help manage incoming queries via social media United States
Zendesk, Inc. The information included by the individual reaching out to Stripe, such as name, email address, phone number, and other information that may be included based on the nature of the communication Customer service platform that supports customer interactions e.g. via phone, chat or email United States
Salesforce The information included by the individual reaching out to Stripe, such as name, email address, phone number, and other information that may be included based on the nature of the communication Customer service platform that supports customer interactions e.g. email United States
Twilio, Inc Business User data Cloud communications platform as a service United States

User Support

TELUS International (Cda) Information included in the queries raised by the individuals contacting Stripe support Provide Business User support in several languages and timezones Ireland
AML Rightsource Information included in the queries raised by the individuals contacting Stripe support Provide Business User support in several languages and timezones United States
Sykes Enterprises, Inc. Information included in the queries raised by the individuals contacting Stripe support Provide Business User support in several languages and timezones United States
Teleperformance Colombia S.A.S. Information included in the queries raised by the individuals contacting Stripe support Provide Business User support in several languages and timezones Colombia
Teleperformance España S.A.U. Information included in the queries raised by the individuals contacting Stripe support Provide Business User support in several languages and timezones Spain
TDCX (MY) SDN. BHD. Information included in the queries raised by the individuals contacting Stripe support Provide Business User support in several languages and timezones Malaysia, Philippines

Stripe Identity

Trulioo Information Services Inc. End Customer data Identity verification for End Customers of Business Users Canada
Global Data Consortium, Inc. End Customer data Identity verification for End Customers of Business Users United States
InscribeAI, Inc. End Customer data Identity verification for End Customers of Business Users United States
Computer Services, Inc. End Customer data Identity verification for End Customers of Business Users United States

Stripe Atlas

LegalInc.com, Inc. Stripe Atlas Representative’s’ personal information as required for incorporation in the State of Delaware File incorporation documents in the State of Delaware United States

List of Service Providers

The below list of service providers are some key third parties Stripe works with across our products and services. You will also find some service providers that Stripe works with for a specific Stripe product or service.

Name Data Purpose of processing Entity Country
DocuSign, Inc. Business User data eSignatures United States
Google LLC Business User data, End Customers’ data and Visitors’ data Email, file storage, collaboration tools, and services to help protect our Sites (e.g. ReCAPTCHA) and to measure interactions on our Sites United States
Marketo, Inc. Business User data Marketing tool United States
Salesforce.com, Inc. Business User data Customer relationship management platform which stores Business User contact information as well as supporting information about the business relationship United States
Zoom Video Communications, Inc. Business User data, insofar as that is shared in spoken word between the conversing parties Video conferencing system United States
Ekata, Inc. Business User data Provide sanctions screening services United States
LegitScript, LLC Business User data Provide merchant monitoring services United States
User and Sales support service providers Information included in the queries raised by the individuals contacting Stripe support Provide user and sales support in several languages and timezones Various
Verification service providers Business User data and End Customer data Help verify the identity of Stripe Business Users and EndCustomers, and mitigate fraud Various

Stripe Issuing

Idemia America Corp. Cardholder name, PAN, CVV, expiration date, shipping address Printing the cards for Stripe Issuing United States

Stripe Terminal

The Phoenix Group Business User name and address for shipping purposes To enable hardware ordered from Stripe to be shipped to Business Users in the US and CA United States
Lantec (UK) Ltd Business User name and address for shipping purposes To enable hardware ordered from Stripe to be shipped to Business Users in Europe United Kingdom

List of Affiliates

Other Stripe Entities Involved in Offering the Services

Stripe may need to rely on Stripe affiliates to help provide the Services to our Business Users, their Customers and our End Users. Stripe affiliates are other entities delivering elements of the Services to our Business Users and End Users. The Stripe affiliates involved in the processing of personal data will depend on the location of our Business Users, their End Customers and our End User, and the nature of the services Stripe is providing.

Name Entity Country Purpose of processing
Stripe, Inc. United States Please see https://stripe.com/ssa
Stripe Payments Australia Pty Ltd A.C.N. 160 180 343 Australia Please see https://stripe.com/au/ssa
Stripe Payments Canada, Ltd. Canada Please see https://stripe.com/en-ca/ssa
Stripe Payments Malaysia Sdn. Bhd. Malaysia Please see https://stripe.com/en-my/ssa
Stripe Payments Mexico, S. de R.L. de C.V. Mexico Please see https://stripe.com/en-mx/ssa
Stripe India Private Limited India Please see https://stripe.com/en-in/ssa
In order to meet regulatory data localization requirements for Indian payment transactions, Stripe India Private Limited stores certain data on servers located in India.
PT Stripe Payments Indonesia Indonesia Please see https://stripe.com/id/ssa
Stripe Payments Europe Limited Ireland Data Controller located in the EU
Please see https://stripe.com/ie/ssa

Together with either
  • Stripe Technology Europe Limited, the e-money licensed entity with the Central Bank of Ireland, or
  • Stripe Payments UK Limited, the e-money licensed entity with the UK FCA
Stripe Capital Europe, Limited Ireland Provide Stripe Capital product and related services to Stripe users in the EEA
Stripe Japan KK Japan Please see https://stripe.com/en-jp/legal
Stripe New Zealand Limited New Zealand Please see https://stripe.com/nz/ssa
Stripe Payments Singapore Pte. Ltd. Singapore Please see https://stripe.com/en-sg/legal
Noaliasing SPRL Belgium Provide local marketing and customer support services within Belgium
Stripe Brasil Soluções de Pagamento Ltda. Brazil Please see https://stripe.com/br/ssa
Stripe Deutschland GmbH Germany Provide local marketing and customer support services within Germany
Stripe France SARL France Provide local marketing and customer support services within France
Stripe Netherlands B.V. Netherlands Provide local marketing and customer support services within the Netherlands
Stripe Spain S.L Spain Provide local marketing and customer support services within Spain
Tiny Experiment Aktiebolag Sweden Provide local marketing and customer support services within Sweden
Stripe Payments HK Limited Hong Kong Local marketing and customer support services within Hong Kong

Updates to this Page

Due to the nature of our global business and the volume of Business Users, our business needs and services providers may change from time to time. For example, we may deprecate a service provider to consolidate and minimize our use of service providers. Similarly, we may add a service provider if we believe that doing so will enhance our ability to deliver our Services.

We will periodically update this page to reflect additions and removals to our list of service providers. If you are a Business User, you may subscribe to receive email notifications of updates to this page here.

Under the terms of our Data Processing Agreement (DPA), a Business User may reasonably object in writing to the processing of its personal data by a new sub-processor within 30 days following the update of this page. If a Business User does not object during the 30 day time period, the appointment of the new sub-processor shall be deemed accepted by the Business User. If you are a Business User and want to know more about our DPA, please contact us.

For more information on Stripe’s privacy practices, please visit our Privacy Policy. If you have any questions regarding this page, please contact us.

On this page