Business Users have 30 days from the date a sub-processor is added to this page to submit a written objection under the DPA. Failure to object within that window constitutes deemed acceptance of the new sub-processor appointment.
This analysis describes what Stripe's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes a time-limited objection mechanism that requires active monitoring of the sub-processor list by Business Users who wish to preserve their right to object under the DPA. The deemed-acceptance mechanism means that inaction within the 30-day window operates as contractual consent to the new sub-processor arrangement.
Under this clause, Business Users who do not submit a written objection to Stripe within 30 days of a new sub-processor being listed are treated as having accepted that appointment under the DPA. This provision requires Business Users to actively monitor the page or subscribe to email notifications in order to exercise the objection right within the specified window.
Cross-platform context
See how other platforms handle 30-Day Sub-Processor Objection Window with Deemed Acceptance and similar clauses.
Compare across platforms →"Under the terms of our Data Processing Agreement (DPA), a Business User may reasonably object in writing to the processing of its personal data by a new Sub-processor within 30 days following the update of this page. If a Business User does not object during the 30 day time period, the appointment of the new Sub-processor shall be deemed accepted by the Business User.Excerpt from Stripe's Service Providers (Sub-Processors)
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes a time-limited objection mechanism that requires active monitoring of the sub-processor list by Business Users who wish to preserve their right to object under the DPA. The deemed-acceptance mechanism means that inaction within the 30-day window operates as contractual consent to the new sub-processor arrangement.
Under this clause, Business Users who do not submit a written objection to Stripe within 30 days of a new sub-processor being listed are treated as having accepted that appointment under the DPA. This provision requires Business Users to actively monitor the page or subscribe to email notifications in order to exercise the objection right within the specified window.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Stripe.