This analysis describes what Stripe's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The updated terms establish new restrictions on how merchants may use Stripe Output Data, prohibiting its use for automated decision-making about customer relationships, credit or employment eligibility determinations, or training AI systems that substitute for Stripe's Services. Merchants using AI Agents to access Stripe Services are now explicitly liable for all actions initiated by those agents, as the terms state such actions are legally binding. Data breach notification obligations have been tightened: users must notify Stripe within 48 hours of becoming aware of a data incident affecting Stripe or its Affiliates, and must provide specific information about the type of data, affected individuals, and remediation status. You can review the specific restrictions on Stripe Output Data use in the updated Service Terms and adjust any automated processes or AI Agent integrations accordingly.
View change record →How other platforms handle this
Comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities
Canva will use or disclose your information where we reasonably believe that such action is necessary to (a) comply with the law and the reasonable requests of law enforcement...
Where necessary, we use your personal data, including Contact Data, Technical Data, Communication Data and Government Identifiers, where necessary, to comply with legal obligations such as tax reporting, regulatory requirements...
"Each party will comply with the DPA, including the Data Transfers Addendum, which is incorporated into this Agreement by this reference.Excerpt from Stripe's Terms of Service
We read the privacy policies and terms of service of 38 AI platforms. Here is what they say about training, retention, arbitration, and liability.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
The clause states: “Each party will comply with the DPA, including the Data Transfers Addendum, which is incorporated into this Agreement by this reference.”
ConductAtlas has identified this type of provision across 273 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Stripe.