How many subprocessors does Stripe use?

Stripe lists 78 subprocessors on its published list, including Amazon Web Services, Inc., Amazon Internet Services Private Limited, Sprinklr, Inc., Salesforce, Inc., and Twilio, Inc. and 73 more.

Where does Stripe process customer data?

The subprocessors named by Stripe are located in United States, India, Ireland, Japan, United Kingdom, and Canada and 25 other locations, as stated on its list.

How quickly does Stripe report a personal data breach to customers?

According to its DPA, Stripe reports a personal data breach to customers within 48 hours: “if Stripe experiences a Data Incident, notify User without undue delay, which for Data Incidents affecting Personal Data subject to the GDPR or UK GDPR will be no later than 48 hours”

How much notice does Stripe give before adding a subprocessor?

Stripe's DPA gives 30 days' notice of a new subprocessor, the time customers have to object: “Stripe will notify User via email if Stripe intends to add one or more Sub-processors to that list at least 30 days before the changes take effect.”

How does Stripe transfer personal data outside the EU?

Stripe's DPA relies on standard contractual clauses and the EU–US Data Privacy Framework: “Module 1 (Transfer: Controller to Controller) and Module 2 (Transfer: Controller to Processor) of the standard contractual clauses set out in the European Commission Implementing Decision (EU) 2021/914”

When was Stripe's subprocessor list last checked?

ClauseTrail last checked Stripe's subprocessor list on September 25, 2026. Lists are re-checked daily.

How do I find out when Stripe adds or removes a subprocessor?

ClauseTrail monitors Stripe's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.

Stripe Subprocessors List (September 2026): Changes and History

Stripe names 78 subprocessors on its published list. Read from the vendor's own page and re-checked daily.

Last checked September 25, 2026 Official source ↗

Stripe subprocessors (September 2026)

#	Subprocessor	Purpose	Location	Data
1	Amazon Web Services, Inc.	Cloud service provider	United States	Business User and Representative data and End Customer data
2	Amazon Internet Services Private Limited	Cloud service provider	India	Business User data and Representative Data. Furthermore, in order to meet regulatory data localization requirements for Indian payment transactions, Stripe India Private Limited stores certain data on servers located in India
3	Sprinklr, Inc.	Tool to help manage incoming queries via social media	United States	Information included in the query as provided by the requester
4	Salesforce, Inc.	Customer service platform that supports customer interactions e.g. email	United States	The information included by the individual reaching out to Stripe, such as name, email address, phone number, and other information that may be included based on the nature of the communication
5	Twilio, Inc.	Cloud communications platform as a service including two factor authentication and user support	United States	Business User data & End Customer data
6	Intuition Machines, Inc.	Tool that provides hCaptcha for fraud prevention	United States	Business User data & End Customer data
7	Verifi, Inc.	Tool that helps resolve and reduce transaction disputes	United States	Business User data & End Customer data
8	Jack Henry & Associates, Inc.	Paper check scanning and verification for electronic clearance	United States	Business User data & End Customer data
9	Mitek Systems, Inc.	Paper check scanning and verification for electronic clearance	United States	Business User data & End Customer data
10	TELUS International (Cda)	Provide Business User support in several languages and timezones	Ireland	Information included in the queries raised by the individuals contacting Stripe support
11	AML Rightsource	Provide Business User support in several languages and timezones	United States	Information included in the queries raised by the individuals contacting Stripe support
12	Teleperformance Colombia S.A.S.	Provide Business User support in several languages and timezones	Colombia	Information included in the queries raised by the individuals contacting Stripe support
13	TDCX (MY) SDN. BHD.	Provide Business User support in several languages and timezones	Malaysia	Information included in the queries raised by the individuals contacting Stripe support
14	Cognizant Worldwide Limited	Provide Business User support in several languages and timezones	Philippines, India	Information included in the queries raised by the individuals contacting Stripe support
15	WNS Global Services (UK) International Limited	Provide Business User support in several languages and timezones	United Kingdom, India	Information included in the queries raised by the individuals contacting Stripe support
16	Microsoft Corporation	Provide AI technology to improve the quality of user support operations	United States	Information included in the queries raised by the individuals contacting Stripe support
17	FrontApp, Inc.	Customer service tool that supports customer interactions e.g. email	United States	Information included in the queries raised by the individuals contacting Stripe support
18	Adish Co., Ltd.	Provide Business User support in Japanese	Japan	Information included in the queries raised by the individuals contacting Stripe support
19	Trulioo Information Services, Inc.	Identity verification for End Customers of Business Users	Canada	End Customer data
20	London Stock Exchange Group plc	Identity verification for End Customers of Business Users	United States	End Customer data
21	InscribeAI, Inc.	Identity verification for End Customers of Business Users	United States	End Customer data
22	Data Zoo Pty Limited	Identity verification for End Customers of Business Users	Australia	End Customer data
23	Shufti Pro Limited	Identity verification for End Customers of Business Users	United Kingdom	End Customer data
24	LexisNexis Risk Solutions FL, Inc.	Identity verification for End Customers of Business Users	United States	End Customer data
25	Ekata, Inc.	Identity verification for End Customers of Business Users	United States	End Customer data
26	Lob.com, Inc.	Identity verification for End Customers of Business Users	United States	End Customer data
27	LegalInc.com, Inc.	File incorporation documents in the State of Delaware	United States	Stripe Atlas Representatives’ personal data as required for incorporation in the State of Delaware
28	FreedomPay, Inc.	Payment gateway services provider	United States	Business User data & End Customer data
29	PPRO Payment Services S.A.	Payment method integration service provider	Luxembourg	End Customer and Business User data
30	Payla Services GmbH	Payment method integration service provider	Germany	End Customer and Business User data
31	NETSTARS Co., Ltd.	Payment method integration service provider	Japan	End Customer and Business User data
32	DocuSign, Inc.	eSignatures	United States	Business User data
33	Google, LLC	Email, file storage, collaboration tools, and services to help protect our Sites (e.g. ReCAPTCHA) and to measure interactions on our Sites	United States	Business User data, End Customers’ data and Visitors’ data
34	Marketo, Inc.	Marketing tool	United States	Business User data
35	Salesforce.com, Inc.	Customer relationship management platform which stores Business User contact information as well as supporting information about the business relationship	United States	Business User data
36	Zoom Video Communications, Inc.	Video conferencing system	United States	Business User data, insofar as that is shared in spoken word between the conversing parties
37	LegitScript, LLC	Provide merchant monitoring services	United States	Business User data
38	User and Sales support service providers	Provide user and sales support in several languages and timezones	Various	Information included in the queries raised by the individuals contacting Stripe support
39	Verification service providers	Help verify the identity of Stripe Business Users and End Customers, and mitigate fraud	Various	Business User data and End Customer data
40	Idemia America Corp.	Printing the cards for Stripe Issuing	United States	Cardholder name, PAN, CVV, expiration date, shipping address
41	Lantec (UK) Ltd	To enable hardware ordered from Stripe to be shipped to Business Users in Europe	United Kingdom	Business User name and address for shipping purposes
42	Stripe Payments Canada, Ltd.	Please see https://stripe.com/en-ca/ssa	Canada	—
43	Stripe Brokering, Inc.	Provide lending facilitation services to bank partners in connection with Stripe Capital loans in the United States	United States	—
44	Stripe Payments Company	Please see https://stripe.com/ssa and https://stripe.com/legal/spc	United States	—
45	Stripe Servicing, Inc.	Provide credit collection services related to Stripe Capital in the United States	United States	—
46	Stripe Global Technology, LLC	UX and related services in connection with the stablecoin financial account product	United States	—
47	Lemon Squeezy, LLC	Merchant of record related services	United States	—
48	TPS Unlimited, Inc.	Tax-filing related services	United States	—
49	Horkos, Inc. (d/b/a Privy)	Crypto and stablecoin related services	United States	—
50	Bridge Ventures, LLC	Crypto and stablecoin related services	United States	—
51	Stripe India Private Limited	Please see https://stripe.com/en-in/ssa In order to meet regulatory data localization requirements for Indian payment transactions, Stripe India Private Limited stores certain data on servers located in India.	India	—
52	Stripe Technology India Private Limited	Provides user support as well as internal operational support to other Stripe Affiliates	India	—
53	PT Stripe Payments Indonesia	Please see https://stripe.com/id/ssa	Indonesia	—
54	Stripe Japan, Inc.	Please see https://stripe.com/en-jp/legal	Japan	—
55	Stripe Payments Malaysia Sdn. Bhd.	Please see https://stripe.com/en-my/ssa	Malaysia	—
56	Stripe New Zealand Limited	Please see https://stripe.com/nz/ssa	New Zealand	—
57	Stripe Payments Singapore Pte. Ltd.	Please see https://stripe.com/en-sg/legal	Singapore	—
58	Stripe Payments (Thailand) Ltd.	Please see https://stripe.com/th/legal/ssa	Thailand	—
59	BBPOS Devices Limited	Providing customer support services in relation to Stripe Terminal products	Hong Kong SAR	—
60	Noaliasing SPRL	Provide local marketing and customer support services within Belgium	Belgium	—
61	Stripe France SARL	Provide local marketing and customer support services within France	France	—
62	Stripe Deutschland GmbH	Provide local marketing and customer support services within Germany	Germany	—
63	Stripe Payments Europe Limited	Please see https://stripe.com/ie/ssa and https://stripe.com/ie/legal/dpa.	Ireland	—
64	Stripe Technology Company Limited	Data controller located in Ireland with primary responsibility for processing Personal Data outside of the Americas. Together with relevant Stripe local regulated entities (those who are licensed, authorized or registered by a Local Regulatory Authority) and Stripe Payments Europe Limited.	Ireland	—
65	Stripe Technology Europe, Limited	For payment services, as an e-money institution regulated by the Central Bank of Ireland.	Ireland	—
66	Stripe Israel Payments Ltd.	Provide local marketing and customer support services within Israel	Israel	—
67	Stripe Payments Europe, Limited - Italian Branch	Provide local marketing and customer support services within Italy	Italy	—
68	Stripe Netherlands B.V.	Provide local marketing and customer support services within the Netherlands	Netherlands	—
69	Stripe Payments sp. z o.o.	Provide local marketing and customer support services within Poland	Poland	—
70	Stripe Spain S.L.	Provide local marketing and customer support services within Spain	Spain	—
71	Tiny Experiment Aktiebolag	Provide local marketing and customer support services within Sweden	Sweden	—
72	Stripe Switzerland GmbH	Provide local marketing and customer support services within Switzerland	Switzerland	—
73	Stripe Romania S.R.L.	Provide local marketing and customer support services within Romania	Romania	—
74	Stripe FZ-LLC	Provide local marketing and customer support services within the United Arab Emirates	United Arab Emirates	—
75	Stripe Payments UK, Ltd.	Together with Stripe Technology Company Limited and Stripe Payments Europe Limited, the e-money licensed entity with the UK FCA. Please see https://stripe.com/gs/ssa	UK	—
76	Bridge Building Sp. Z.o.o.	Crypto and stablecoin related services	Poland	—
77	Bridge Building S.A.	Crypto and stablecoin related services	Luxembourg	—
78	Stripe Payments Mexico, S. de R.L. de C.V.	Please see https://stripe.com/en-mx/ssa Provides user support as well as internal operational support to other Stripe Affiliates.	Mexico	—

Get an email when Stripe changes its subprocessors

ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.

Track Stripe free

Key DPA terms at Stripe

What Stripe's data processing agreement commits to, with the sentence each answer comes from. SCCs or the Data Privacy Framework: what's the difference?

Breach notification: Within 48 hours

“if Stripe experiences a Data Incident, notify User without undue delay, which for Data Incidents affecting Personal Data subject to the GDPR or UK GDPR will be no later than 48 hours”
DPA, stripe.com ↗
Notice of a new subprocessor: 30 days ahead

“Stripe will notify User via email if Stripe intends to add one or more Sub-processors to that list at least 30 days before the changes take effect.”
DPA, stripe.com ↗
Transfers outside the EU: Standard contractual clauses and the EU–US Data Privacy Framework

“Module 1 (Transfer: Controller to Controller) and Module 2 (Transfer: Controller to Processor) of the standard contractual clauses set out in the European Commission Implementing Decision (EU) 2021/914”

“the EU-US, Swiss-US or UK-US Data Privacy Framework self-certification program operated by the US Department of Commerce”
DPA, stripe.com ↗
Customer data after the contract ends: Deleted or returned when the contract ends

“at User's choice, delete or return to User all Personal Data Processed in connection with the Services, and delete existing copies, following termination of the Agreement”
DPA, stripe.com ↗
Audit rights: Through certifications and audit reports only

“following User's written request, contribute to audits or inspections by making audit reports available to User”
DPA, stripe.com ↗

Documents we track for Stripe

DPA: checked September 25, 2026 stripe.com ↗
Privacy policy: checked September 25, 2026 stripe.com ↗
Subprocessor list: checked September 25, 2026 stripe.com ↗
Terms of service: checked September 25, 2026 stripe.com ↗

Change history

Tracking since September 25, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.

Stripe subprocessors FAQ

How many subprocessors does Stripe use?: Stripe lists 78 subprocessors on its published list, including Amazon Web Services, Inc., Amazon Internet Services Private Limited, Sprinklr, Inc., Salesforce, Inc., and Twilio, Inc. and 73 more.
Where does Stripe process customer data?: The subprocessors named by Stripe are located in United States, India, Ireland, Japan, United Kingdom, and Canada and 25 other locations, as stated on its list.
How quickly does Stripe report a personal data breach to customers?: According to its DPA, Stripe reports a personal data breach to customers within 48 hours: “if Stripe experiences a Data Incident, notify User without undue delay, which for Data Incidents affecting Personal Data subject to the GDPR or UK GDPR will be no later than 48 hours”
How much notice does Stripe give before adding a subprocessor?: Stripe's DPA gives 30 days' notice of a new subprocessor, the time customers have to object: “Stripe will notify User via email if Stripe intends to add one or more Sub-processors to that list at least 30 days before the changes take effect.”
How does Stripe transfer personal data outside the EU?: Stripe's DPA relies on standard contractual clauses and the EU–US Data Privacy Framework: “Module 1 (Transfer: Controller to Controller) and Module 2 (Transfer: Controller to Processor) of the standard contractual clauses set out in the European Commission Implementing Decision (EU) 2021/914”
When was Stripe's subprocessor list last checked?: ClauseTrail last checked Stripe's subprocessor list on September 25, 2026. Lists are re-checked daily.
How do I find out when Stripe adds or removes a subprocessor?: ClauseTrail monitors Stripe's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.