Stripe · Stripe Acceptable Use Policy · View original document ↗

Export Control and Software Transfer Restriction

High severity Medium confidence Explicitdocumentlanguage Unique · 0 of 343 platforms
Share 𝕏 Share in Share 🔒 PDF
Recent governance activity Stripe recorded 2 documented changes in the last 30 days.
Start monitoring updates
Monitor governance changes for Stripe Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

The policy prohibits users from transferring or moving software, technology, or services, including Stripe's software and encryption software, across country borders in any manner not permitted by applicable law.

This analysis describes what Stripe's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This provision places an affirmative obligation on users to comply with applicable export control laws when transferring or moving any software or technology associated with the End User Services, with specific reference to encryption software, which is subject to export licensing requirements under U.S. and other national export control regimes.

Interpretive note: The clause references 'law' generally without specifying which jurisdictions' export control frameworks apply, creating ambiguity for users in non-U.S. jurisdictions about which legal standards govern their obligations.

Consumer impact (what this means for users)

Under this clause, users must ensure that any transfer or movement of software, technology, or services related to End User Services across national borders complies with applicable export control law. The specific mention of encryption software is operationally significant because encryption products are subject to export licensing requirements under U.S. Export Administration Regulations and equivalent frameworks in other jurisdictions.

How other platforms handle this

Netflix Medium

The Netflix service and any content accessed through it are for your personal, non-commercial use only and may not be shared with anyone outside of your household, unless, in countries where this feature is available, you purchased an Extra Member Account.

Meta Medium

The Meta Products are not directed to children. Access to or use of Meta Products by anyone under the age of 13 is not allowed. If you are based in the EU, you must be at least 16 years old, or the minimum age in your country if it is higher than 16, to use or access Meta Products, unless your count...

Disney+ Medium

The Services are provided to individuals for their personal, noncommercial use only. Companies, commercial establishments, associations and other groups may not purchase or use the Services.

See all platforms with this clause type →

Monitoring

Stripe has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Monitor free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
You must not, and must not allow others to: Transfer or move software, technology, or services (including our software or encryption software) to or from any country in a way that law does not permit.

— Excerpt from Stripe's Stripe Acceptable Use Policy

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

(1) REGULATORY LANDSCAPE: This provision directly engages U.S. Export Administration Regulations (EAR) administered by the Bureau of Industry and Security (BIS), which govern the export of commercial items including encryption software. The International Traffic in Arms Regulations (ITAR) administered by the State Department may also be relevant in certain technology transfer contexts. Equivalent export control regimes in the EU, UK, and other jurisdictions where Stripe operates may impose parallel obligations. (2) GOVERNANCE EXPOSURE: High for users or organizations that operate internationally and transfer software or technology components across borders. Encryption software carries specific export classification requirements under EAR, and non-compliance can result in civil and criminal penalties administered by BIS. (3) JURISDICTION FLAGS: Users in the EU are subject to EU Dual-Use Regulation export controls in addition to national export control frameworks. UK users are subject to the Export Control Order 2008 and subsequent amendments. Users in countries subject to U.S. comprehensive sanctions programs face compounded exposure under this clause and the sanctions compliance provision. (4) CONTRACT AND VENDOR IMPLICATIONS: Organizations that deploy or distribute Stripe End User Services in multi-jurisdiction environments should conduct an export control classification assessment for any relevant software components. The specific reference to encryption software suggests Stripe uses or incorporates encryption technology that may carry EAR classification codes requiring licensing for export to certain destinations. (5) COMPLIANCE CONSIDERATIONS: Legal and compliance teams should assess whether any current or planned cross-border deployments of software or technology incorporating Stripe End User Services require export licenses or are otherwise subject to restrictions under applicable export control law. This is particularly relevant for organizations with operations in jurisdictions subject to U.S. export controls.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Monitor free for 14 days

Free: track 1 platform + weekly digest. Monitor: 10 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    The FTC has general consumer protection jurisdiction over deceptive or unfair practices in consumer-facing agreements; primary export control enforcement is conducted by BIS and State Department, which are not listed agency options
    File a complaint →

Applicable regulations

CFAA
United States Federal

Provision details

Document information
Document
Stripe Acceptable Use Policy
Entity
Stripe
Document last updated
May 20, 2026
Tracking information
First tracked
May 21, 2026
Last verified
May 21, 2026
Record ID
CA-P-012840
Document ID
CA-D-00873
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
71e9dd68625b6950b15b7b6573be602a42c07dfee4728caed96bc12130231304
Analysis generated
May 21, 2026 02:06 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Stripe
Document: Stripe Acceptable Use Policy
Record ID: CA-P-012840
Captured: 2026-05-21 02:06:26 UTC
SHA-256: 71e9dd68625b6950…
URL: https://conductatlas.com/platform/stripe/stripe-acceptable-use-policy/export-control-and-software-transfer-restriction/
Accessed: May 25, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Compliance Governance Intelligence

Need to monitor specific governance provisions?

Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Compliance free trial

Or start with Monitor →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Stripe's Export Control and Software Transfer Restriction clause do?

This provision places an affirmative obligation on users to comply with applicable export control laws when transferring or moving any software or technology associated with the End User Services, with specific reference to encryption software, which is subject to export licensing requirements under U.S. and other national export control regimes.

How does this clause affect you?

Under this clause, users must ensure that any transfer or movement of software, technology, or services related to End User Services across national borders complies with applicable export control law. The specific mention of encryption software is operationally significant because encryption products are subject to export licensing requirements under U.S. Export Administration Regulations and equivalent frameworks in other jurisdictions.

Is ConductAtlas affiliated with Stripe?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Stripe.