Stripe Subprocessors List (November 2026): Changes and History

Stripe names 83 subprocessors on its published list. Read from the vendor's own page and re-checked daily.

Last checked November 9, 2026 Last change September 28, 2026 Official source ↗

Stripe subprocessors (November 2026)

# Subprocessor Purpose Location Data
1 Amazon Web Services, Inc. Cloud service provider United States Business User and Representative data and End Customer data
2 Amazon Internet Services Private Limited Cloud service provider India Business User data and Representative Data. Furthermore, in order to meet regulatory data localization requirements for Indian payment transactions, Stripe India Private Limited stores certain data on servers located in India
3 Microsoft Corporation (Microsoft Azure) Cloud Service Provider United States Business User and Representative data and End Customer data
4 Snowflake, Inc. Cloud Service Provider United States Business User data and End Customer data.
5 Sprinklr, Inc. Tool to help manage incoming queries via social media United States Information included in the query as provided by the requester
6 Salesforce, Inc. Customer service platform that supports customer interactions e.g. email United States The information included by the individual reaching out to Stripe, such as name, email address, phone number, and other information that may be included based on the nature of the communication
7 Twilio, Inc. Cloud communications platform as a service including two factor authentication and user support United States Business User data & End Customer data
8 Intuition Machines, Inc. Tool that provides hCaptcha for fraud prevention United States Business User data & End Customer data
9 Verifi, Inc. Tool that helps resolve and reduce transaction disputes United States Business User data & End Customer data
10 Jack Henry & Associates, Inc. Paper check scanning and verification for electronic clearance United States Business User data & End Customer data
11 InscribeAI, Inc. identity verification for End Customers of Business Users United States End Customer data
12 TELUS International (Cda) Provide Business User support in several languages and timezones Ireland Information included in the queries raised by the individuals contacting Stripe support
13 AML Rightsource Provide Business User support in several languages and timezones United States Information included in the queries raised by the individuals contacting Stripe support
14 Teleperformance Colombia S.A.S. Provide Business User support in several languages and timezones Colombia Information included in the queries raised by the individuals contacting Stripe support
15 TDCX (MY) SDN. BHD. Provide Business User support in several languages and timezones Malaysia Information included in the queries raised by the individuals contacting Stripe support
16 Cognizant Worldwide Limited Provide Business User support in several languages and timezones Philippines, India Information included in the queries raised by the individuals contacting Stripe support
17 WNS Global Services (UK) International Limited Provide Business User support in several languages and timezones United Kingdom, India Information included in the queries raised by the individuals contacting Stripe support
18 Microsoft Corporation Provide AI technology to improve the quality of user support operations United States Information included in the queries raised by the individuals contacting Stripe support
19 FrontApp, Inc. Customer service tool that supports customer interactions e.g. email United States Information included in the queries raised by the individuals contacting Stripe support
20 Adish Co., Ltd. Provide Business User support Japan Information included in the queries raised by the individuals contacting Stripe support
21 LoanProSoftware, LLC Loan management services United States End Customer data of customers and applicants for a credit card for personal use through a Business User.
22 January Technologies, Inc. Manages collections relating to credit cards United States End Customer data of customers and applicants for a credit card for personal use through a Business User.
23 Trulioo Information Services, Inc. Identity verification for End Customers of Business Users Canada End Customer data
24 London Stock Exchange Group plc Identity verification for End Customers of Business Users United States End Customer data
25 Data Zoo Pty Limited Identity verification for End Customers of Business Users Australia End Customer data
26 Shufti Pro Limited Identity verification for End Customers of Business Users United Kingdom End Customer data
27 LexisNexis Risk Solutions FL, Inc. Identity verification for End Customers of Business Users United States End Customer data
28 Ekata, Inc. Identity verification for End Customers of Business Users United States End Customer data
29 Lob.com, Inc. Identity verification for End Customers of Business Users United States End Customer data
30 Databricks, Inc. Cloud service provider for Stripe Data Pipeline United States Business User data and End Customer data
31 Google LLC Cloud service provider for Stripe Data Pipeline United States Business User data and End Customer data
32 LegalInc.com, Inc. File incorporation documents in the State of Delaware United States Stripe Atlas Representatives’ personal data as required for incorporation in the State of Delaware
33 FreedomPay, Inc. Payment gateway services provider United States Business User data & End Customer data
34 PPRO Payment Services S.A. Payment method integration service provider Luxembourg End Customer and Business User data
35 Payla Services GmbH Payment method integration service provider Germany End Customer and Business User data
36 NETSTARS Co., Ltd. Payment method integration service provider Japan End Customer and Business User data
37 DocuSign, Inc. eSignatures United States Business User data
38 Marketo, Inc. Marketing tool United States Business User data
39 Salesforce.com, Inc. Customer relationship management platform which stores Business User contact information as well as supporting information about the business relationship United States Business User data
40 Zoom Video Communications, Inc. Video conferencing system United States Business User data, insofar as that is shared in spoken word between the conversing parties
41 LegitScript, LLC Provide merchant monitoring services United States Business User data
42 User and Sales support service providers Provide user and sales support in several languages and timezones Various Information included in the queries raised by the individuals contacting Stripe support
43 Verification service providers Help verify the identity of Stripe Business Users and End Customers, and mitigate fraud Various Business User data and End Customer data
44 Idemia America Corp. Printing the cards for Stripe Issuing United States Cardholder name, PAN, CVV, expiration date, shipping address
45 Stripe Payments Canada, Ltd. Please see https://stripe.com/en-ca/ssa Canada —
46 Stripe Brokering, Inc. Provide lending facilitation services to bank partners in connection with Stripe Capital loans in the United States United States —
47 Stripe, LLC Please see https://stripe.com/ssa United States —
48 Stripe Payments Company Please see https://stripe.com/ssa and https://stripe.com/legal/spc United States —
49 Stripe Servicing, Inc. Provide credit collection services related to Stripe Capital in the United States United States —
50 Stripe Global Technology, LLC UX and related services in connection with the stablecoin financial account product United States —
51 Sold Through Link, LLC (fka Lemon Squeezy, LLC) Merchant of record related services United States —
52 TPS Unlimited, Inc.(d/b/a TaxJar) Tax-filing related services. See here for TaxJar’s own sub-processor list. United States —
53 Horkos, Inc. (d/b/a Privy) Crypto and stablecoin related services. See here for Privy’s own sub-processor list. United States —
54 Bridge Ventures, LLC Crypto and stablecoin related services. See here for Bridge’s own sub-processor list. United States —
55 Metronome Technologies, Inc. Usage-based billing and metering related services United States —
56 Stripe India Private Limited Please see https://stripe.com/en-in/ssa In order to meet regulatory data localization requirements for Indian payment transactions, Stripe India Private Limited stores certain data on servers located in India. India —
57 Stripe Technology India Private Limited Provides user support as well as internal operational support to other Stripe Affiliates India —
58 PT Stripe Payments Indonesia Please see https://stripe.com/id/ssa Indonesia —
59 Stripe Japan, Inc. Please see https://stripe.com/en-jp/legal Japan —
60 Stripe Payments Malaysia Sdn. Bhd. Please see https://stripe.com/en-my/ssa Malaysia —
61 Stripe New Zealand Limited Please see https://stripe.com/nz/ssa New Zealand —
62 Stripe Payments Singapore Pte. Ltd. Please see https://stripe.com/en-sg/legal Singapore —
63 Stripe Payments (Thailand) Ltd. Please see https://stripe.com/th/legal/ssa Thailand —
64 BBPOS Devices Limited Providing customer support services in relation to Stripe Terminal products Hong Kong SAR —
65 Noaliasing SPRL Provide local marketing and customer support services within Belgium Belgium —
66 Stripe France SARL Provide local marketing and customer support services within France France —
67 Stripe Deutschland GmbH Provide local marketing and customer support services within Germany Germany —
68 Stripe Payments Europe Limited Please see https://stripe.com/ie/ssa and https://stripe.com/ie/legal/dpa. Ireland —
69 Stripe Technology Company Limited Data controller located in Ireland with primary responsibility for processing Personal Data outside of the Americas. Together with relevant Stripe local regulated entities (those who are licensed, authorized or registered by a Local Regulatory Authority) and Stripe Payments Europe Limited. Ireland —
70 Stripe Technology Europe, Limited For payment services, as an e-money institution regulated by the Central Bank of Ireland. Ireland —
71 Stripe Israel Payments Ltd. Provide local marketing and customer support services within Israel Israel —
72 Stripe Italy S.r.l. Provide local marketing and customer support services within Italy Italy —
73 Stripe Netherlands B.V. Provide local marketing and customer support services within the Netherlands Netherlands —
74 Stripe Payments sp. z o.o. Provide local marketing and customer support services within Poland Poland —
75 Stripe Spain S.L. Provide local marketing and customer support services within Spain Spain —
76 Tiny Experiment Aktiebolag Provide local marketing and customer support services within Sweden Sweden —
77 Stripe Switzerland GmbH Provide local marketing and customer support services within Switzerland Switzerland —
78 Stripe Romania S.R.L. Provide local marketing and customer support services within Romania Romania —
79 Stripe FZ-LLC Provide local marketing and customer support services within the United Arab Emirates United Arab Emirates —
80 Stripe Payments UK, Ltd. Together with Stripe Technology Company Limited and Stripe Payments Europe Limited, the e-money licensed entity with the UK FCA. Please see https://stripe.com/gs/ssa UK —
81 Bridge Building Sp. Z.o.o. Crypto and stablecoin related services Poland —
82 Bridge Building S.A. Crypto and stablecoin related services Luxembourg —
83 Stripe Payments Mexico, S. de R.L. de C.V. Please see https://stripe.com/en-mx/ssa Provides user support as well as internal operational support to other Stripe Affiliates. Mexico —

Get an email when Stripe changes its subprocessors

ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.

Track Stripe free

Key DPA terms at Stripe

What Stripe's data processing agreement commits to, with the sentence each answer comes from. SCCs or the Data Privacy Framework: what's the difference?

Breach notification

Within 48 hours

“notify User without undue delay, which for Data Incidents affecting Personal Data subject to the GDPR or UK GDPR will be no later than 48 hours”
DPA, stripe.com ↗
Notice of a new subprocessor

30 days ahead

“Stripe will notify User via email if Stripe intends to add one or more Sub-processors to that list at least 30 days before the changes take effect”
DPA, stripe.com ↗
Transfers outside the EU

Standard contractual clauses and the EU–US Data Privacy Framework

“such as the Data Privacy Framework, the EEA SCCs, the UK International Data Transfer Addendum and any data transfer mechanism available under DP Law that is incorporated into this DPA”
“such as the Data Privacy Framework, the EEA SCCs, the UK International Data Transfer Addendum and any data transfer mechanism available under DP Law that is incorporated into this DPA”
DPA, stripe.com ↗
Customer data after the contract ends

Deleted or returned when the contract ends

“at User's choice, delete or return to User all Personal Data Processed in connection with the Services, and delete existing copies, following termination of the Agreement”
DPA, stripe.com ↗
Audit rights

Once a year

“Following this request, and no more frequently than once annually, Stripe will promptly provide documentation or complete a written data security questionnaire of reasonable scope and duration regarding Stripe's and its Affiliates' Processing of Personal Data”
DPA, stripe.com ↗

Documents we track for Stripe

DPA
checked November 9, 2026 changed September 30, 2026 stripe.com ↗
Privacy policy
checked November 9, 2026 stripe.com ↗
Subprocessor list
checked November 9, 2026 changed September 28, 2026 stripe.com ↗
Terms of service
checked November 9, 2026 changed November 5, 2026 stripe.com ↗

Change history

  1. Terms of service changed

    The introductory notice pointing to the arbitration clause in Section 11.4 was expanded to explicitly state that arbitration is required for certain disputes and that it limits how User may seek relief, rather than just saying it "affects User's rights".

  2. Terms of service changed

    Stripe's General Terms add a new Section 4.3 "Data Incident Notification" requiring User to notify Stripe of any Data Incident likely to impact Stripe within 48 hours (previously "immediately" for unauthorized acquisition of Personal Data) and to supply specific incident details, add a new Section 4.7 restricting how User may use "Stripe Output Data" (including bans on using it to train ML models or in ways implicating the EU AI Act/FCRA), add a new Section 1.7 on AI Agents making User liable for actions taken through them, and change the Preview Services liability cap formula while broaden...

  3. DPA changed

    Stripe's DPA (updated September 28, 2026) broadens the EEA SCCs definition to include Module 3 (Processor to Processor) transfers, replaces the CCPA-specific Section 3.3 with broader 'US State DP Law' obligations covering VCDPA, CPA, CTDPA and UCPA, adds 'cryptocurrency wallet address' to processed personal data categories, and replaces specific encryption standards (TLS 1.2, AES-256) with generic 'NIST-approved' cryptographic requirements; it also removes the region-based rule for choosing between Stripe, LLC and Stripe Payments Europe, Limited as the contracting entity in favor of 'the St...

  4. Subprocessor removed

    Stripe removed Stripe Payments Europe, Limited - Italian Branch from its subprocessor list.

  5. Subprocessor removed

    Stripe removed Lantec (UK) Ltd from its subprocessor list.

  6. Subprocessor removed

    Stripe removed Mitek Systems, Inc. from its subprocessor list.

  7. Purpose changed

    Stripe changed what Google LLC does with customer data: Cloud service provider for Stripe Data Pipeline (before: Email, file storage, collaboration tools, and services to help protect our Sites (e.g. ReCAPTCHA) and to measure interactions on our Sites).

  8. Subprocessor added

    Stripe added Stripe Italy S.r.l. (Italy) as a subprocessor.

    Who else uses Stripe →

  9. Subprocessor added

    Stripe added Metronome Technologies, Inc. (United States) as a subprocessor.

  10. Subprocessor added

    Stripe added Stripe, LLC (United States) as a subprocessor.

    Who else uses Stripe →

  11. Subprocessor added

    Stripe added Databricks, Inc. (United States) as a subprocessor.

    Who else uses Databricks →

  12. Subprocessor added

    Stripe added January Technologies, Inc. (United States) as a subprocessor.

  13. Subprocessor added

    Stripe added LoanProSoftware, LLC (United States) as a subprocessor.

  14. Subprocessor added

    Stripe added Snowflake, Inc. (United States) as a subprocessor.

    Who else uses Snowflake →

  15. Subprocessor added

    Stripe added Microsoft Corporation (Microsoft Azure) (United States) as a subprocessor.

Tracking since September 25, 2026. Every change links to the two versions of the document it came from. All vendors' changes →

Stripe subprocessors FAQ

How many subprocessors does Stripe use?
Stripe lists 83 subprocessors on its published list, including Amazon Web Services, Inc., Amazon Internet Services Private Limited, Microsoft Corporation (Microsoft Azure), Snowflake, Inc., and Sprinklr, Inc. and 78 more.
Where does Stripe process customer data?
The subprocessors named by Stripe are located in United States, India, Ireland, Japan, Canada, and Germany and 25 other locations, as stated on its list.
How quickly does Stripe report a personal data breach to customers?
According to its DPA, Stripe reports a personal data breach to customers within 48 hours: “notify User without undue delay, which for Data Incidents affecting Personal Data subject to the GDPR or UK GDPR will be no later than 48 hours”
How much notice does Stripe give before adding a subprocessor?
Stripe's DPA gives 30 days' notice of a new subprocessor, the time customers have to object: “Stripe will notify User via email if Stripe intends to add one or more Sub-processors to that list at least 30 days before the changes take effect”
How does Stripe transfer personal data outside the EU?
Stripe's DPA relies on standard contractual clauses and the EU–US Data Privacy Framework: “such as the Data Privacy Framework, the EEA SCCs, the UK International Data Transfer Addendum and any data transfer mechanism available under DP Law that is incorporated into this DPA”
When was Stripe's subprocessor list last checked?
ClauseTrail last checked Stripe's subprocessor list on November 9, 2026 and last saw it change on September 28, 2026. Lists are re-checked daily.
How do I find out when Stripe adds or removes a subprocessor?
ClauseTrail monitors Stripe's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.