Stripe is legally required to verify your identity and business information before you can use its services, and it may check your details against external databases without further notice.
Merchants must provide extensive personal and business information — including date of birth, tax ID, and beneficial ownership details — and authorize Stripe to share that information with third-party verification services, with no guarantee of a successful outcome or right to contest a failed verification.
Cross-platform context
See how other platforms handle AML and KYC Identity Verification Obligations and similar clauses.
Compare across platforms →This means Stripe collects and shares sensitive personal and business data with third-party identity verification services, which has privacy implications and may result in account access being denied if verification fails.
(1) REGULATORY FRAMEWORK: This provision implements Bank Secrecy Act (31 U.S.C. § 5311) and FinCEN Customer Due Diligence Rule (31 C.F.R. § 1020.210) obligations, including the Beneficial Ownership Rule (31 C.F.R. § 1010.230) for legal entity customers. USA PATRIOT Act §326 requires financial institutions to implement CIP programs. GDPR Arts. 6(1)(c) and 9 apply to EU Users whose data is processed for legal compliance purposes; CCPA §1798.100 applies to California residents. The sharing of data with third-party verification databases implicates the FCRA (15 U.S.C. §1681) if those databases are consumer reporting agencies. (2)
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.