DPA Monitor

Stripe policy documents

We monitor 3 documents for Stripe. Open one to see the current version and every change we've detected.

Documents

Recent changes

  • high21d ago

    The DPA was restructured and significantly expanded. Section 1 changed from "Structure" (entity selection based on account location) to "Scope" (broader statement of applicability). Section 2 added new Affiliate roles including "independent Data Controller" status. Personal Data categories expanded to include "cryptocurrency wallet address." Section 3.3 changed from CCPA-specific obligations to broader "United States Specific Data Protection Obligations" covering all US State DP Laws with six detailed requirements replacing the previous three-part CCPA certification.

  • high22d ago

    Stripe updated its list of service providers, sub-processors, and affiliates with multiple material changes: removed Stripe, Inc. (replaced by Stripe, LLC as of January 3, 2026), removed Stripe Payments Europe Limited - Italian Branch (replaced by new Stripe Italy S.r.l.), removed Mitek Systems, Inc., and removed Lemon Squeezy, LLC from sub-processors list (now called Sold Through Link, LLC in affiliates). Added multiple new sub-processors and service providers including Microsoft Corporation (Azure cloud services), Snowflake, Inc., LoanPro Software LLC, January Technologies, Inc., InscribeAI, Inc., and new cloud providers for Stripe Data Pipeline. Updated Terminal fulfillment partners and added new affiliate Metronome Technologies, Inc.

Related reading

DPA Monitor is a change-detection tool. We report when a vendor's document changes and link you to the official source — we do not interpret legal meaning or provide legal advice. For your specific situation, consult a qualified professional.