Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The document states that Stripe India Private Limited stores certain personal data related to Indian payment transactions on servers located in India to comply with Indian regulatory data localization requirements. This disclosure appears in both the sub-processor list and the affiliate list.
This analysis describes what Stripe's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision confirms that personal data associated with Indian payment transactions is subject to data localization obligations under Indian regulation, which affects how Business Users and their technical teams configure data flows for Indian payment processing. Business Users operating in India or processing Indian payment transactions should confirm that their own data handling and disclosure documentation reflects this localization requirement.
The document states that personal data associated with Indian payment transactions is stored on servers in India to satisfy Indian regulatory data localization requirements. Business Users processing payments in India should verify that their own privacy notices and data transfer documentation accurately reflect this processing arrangement.
Cross-platform context
See how other platforms handle India Data Localization Disclosure and similar clauses.
Compare across platforms →Monitoring
Stripe has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"In order to meet regulatory data localization requirements for Indian payment transactions, Stripe India Private Limited stores certain data on servers located in India.Excerpt from Stripe's Service Providers (Sub-Processors)
1. REGULATORY LANDSCAPE: India's data localization requirements for payment data are established under the Reserve Bank of India's Storage of Payment System Data directive, which mandates that data related to Indian payment transactions be stored exclusively in India. This provision confirms Stripe's compliance posture with that requirement. Business Users should also assess applicability of India's Digital Personal Data Protection Act (DPDPA), enacted in 2023, to their own processing activities involving Indian data subjects. 2. GOVERNANCE EXPOSURE: Low for most Business Users, as this is a disclosure of Stripe's compliance with Indian regulatory requirements rather than a new obligation imposed on Business Users. However, Business Users who have assumed global data portability or who have configured data flows based on a single-region storage assumption should verify compatibility with this localization arrangement. 3. JURISDICTION FLAGS: This provision is specifically applicable to Business Users processing payment transactions in India. The Reserve Bank of India and, going forward, the Data Protection Board of India (under the DPDPA) are the relevant regulatory authorities. 4. CONTRACT AND VENDOR IMPLICATIONS: Business Users whose DPAs include data residency requirements or global data portability commitments should confirm that the India-specific localization arrangement is consistent with those commitments. Technical integration documentation may need to reflect that certain data cannot be transferred out of India. 5. COMPLIANCE CONSIDERATIONS: Business Users operating in India should confirm that their own privacy notices disclose the India-based data storage arrangement. Teams responsible for data transfer impact assessments should note that India-localized payment data is not subject to cross-border transfer under this arrangement.
This provision confirms that personal data associated with Indian payment transactions is subject to data localization obligations under Indian regulation, which affects how Business Users and their technical teams configure data flows for Indian payment processing. Business Users operating in India or processing Indian payment transactions should confirm that their own data handling and disclosure documentation reflects this localization requirement.
The document states that personal data associated with Indian payment transactions is stored on servers in India to satisfy Indian regulatory data localization requirements. Business Users processing payments in India should verify that their own privacy notices and data transfer documentation accurately reflect this processing arrangement.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Stripe.