Payments vendors and their subprocessors

15 payments vendors with a tracked subprocessor list, re-checked daily. Of the 8 whose trust page we track, 5 list a SOC 2 Type II report and 3 list ISO 27001.

  1. Adyen subprocessors
  2. Airwallex subprocessors
  3. BitPay subprocessors
  4. Chargebee subprocessors
  5. Chargify subprocessors
  6. Checkout.com subprocessors
  7. EBANX subprocessors
  8. FastSpring subprocessors
  9. GoCardless subprocessors
  10. Mollie subprocessors
  11. Paddle subprocessors
  12. Recurly subprocessors
  13. Stripe subprocessors
  14. Tink subprocessors
  15. Toast subprocessors

Key DPA terms across payments vendors

What each vendor's data processing agreement commits to. The vendor page quotes the sentence behind every answer.

Vendor Breach notification Notice of a new subprocessor Transfers outside the EU
Adyen Without undue delay, with no set deadline 30 days ahead Standard contractual clauses
Chargebee Without undue delay, with no set deadline 10 days ahead Standard contractual clauses and the EU–US Data Privacy Framework
Mollie Without undue delay, with no set deadline 10 days ahead Standard contractual clauses, binding corporate rules, and adequacy decisions
Paddle Without undue delay, with no set deadline 14 days ahead Standard contractual clauses and adequacy decisions
Stripe Within 48 hours 30 days ahead Standard contractual clauses and the EU–US Data Privacy Framework

Other categories

Security 68 AI 46 Marketing 32 Analytics 30 Developer Tools 26 Finance 23 Data 22 Legal 20 Recruiting 19 Observability 18 Support 18 HR 17 Identity 17 Communication 14 Productivity 14 Customer Success 13 Logistics 13 CRM 12 Privacy 12 Sales 12 Compliance 11 Cloud 9 Collaboration 9 Infrastructure 9 Product 9 Communications 8 Construction 8 Education 7 Hospitality 7 Manufacturing 7 Retail 7 Telecom 7 Automation 6 Media 6 Content 5 DevOps 5 E-commerce 5 Energy 3 Healthcare 3 Nonprofit 3 Real Estate 3 Sports 3 Storage 3 Design 2 Government 2 Travel 2 Food 1 Gaming 1 Insurance 1