Stripe DPA Acknowledgement
Status: PENDING OPERATOR ACTION Trigger: Before first EU customer Last updated: 2026-05-19 UTC
Vendor Details
| Field | Value |
|---|---|
| Vendor | Stripe, Inc. |
| Vendor address | 354 Oyster Point Blvd, South San Francisco, CA 94080, USA |
| Role | Payment processor — processes billing name, billing address, email, and payment card data |
| DPA URL | https://stripe.com/legal/dpa |
| SCC mechanism | Yes — Stripe's standard DPA includes 2021 EU Commission Standard Contractual Clauses (Module 2, Controller-to-Processor) |
| Data transfer safeguard | SCCs built into Stripe DPA; UK Addendum also available for UK data subjects |
How to Execute
Time estimate: ~10 minutes
- Log in to the Stripe Dashboard at
https://dashboard.stripe.com/ - Navigate to Settings → Data Processing Agreement
- Direct URL:
https://dashboard.stripe.com/settings/legal - Review the Stripe Data Processing Agreement.
- Click Agree and Sign (or the current equivalent button). Stripe countersigns automatically — no waiting period.
- Download the executed PDF from the same settings page.
- Save the PDF to Google Drive at:
legal/DPAs/stripe-dpa-<year>.pdf - Update this document (fields below) and the summary table in
vendor-dpas-status.md.
Execution Record
Fill in this section after signing.
| Field | Value |
|---|---|
| Signed date | PENDING |
| Signed by | Kristerpher, MooseQuest LLC dba Raxx (operator / data controller) |
| Stripe agreement version | [fill in — shown on the DPA settings page, e.g., "v3.0, October 2023"] |
| SCC modules confirmed | [fill in — confirm Module 2 Controller-to-Processor is included] |
| UK Addendum included | [yes/no] |
| Google Drive file | [fill in — full Drive URL after upload] |
| Drive folder | legal/DPAs/ |
| Notes | [any notes on what you observed during signing, version changes, etc.] |
What This Covers
Stripe's standard DPA covers Stripe's role as a data processor for: - Billing name and email (from Raxx user accounts) - Billing address - Payment card metadata (last 4, brand — Raxx never handles raw PAN, which is tokenized by Stripe) - Stripe customer ID and subscription status - Payment event data transmitted via Stripe webhooks to Raxx
The DPA also includes Stripe's Sub-Processor List at https://stripe.com/legal/stripe-subprocessors. Raxx accepts
that list as part of executing the DPA.
Version History
| Date | Change | By |
|---|---|---|
| 2026-05-19 UTC | Document created | raxx-dev-bot (feature/vendor-dpa-acknowledgements) |