Stripe’s Sub-Processors and Vetting Process

Question

How does Stripe vet any third-party service providers they use to provide services?

Answer

Stripe identifies, evaluates, and engages sub-processors through our vendor management program. We enter into a contract with each sub-processor prior to sharing data with the sub-processor, and each contract contains terms that provide for monitoring and audit. In addition, all potential vendors are vetted and approved through Stripe’s security review process before we begin using their services.

We maintain our current list of sub-processors here.