“User must not use or otherwise export, re-export, or transfer the Stripe Technology except as authorized by United States law and the laws of the jurisdiction(s)...including by providing access to Stripe Technology (a) to any individual or entity ordinarily resident in a High-Risk Jurisdiction”
This analysis describes what Stripe's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This restriction exposes users to potential violations if they provide Stripe Technology access to persons in High-Risk Jurisdictions, regardless of intent.
Interpretive note: The excerpt is truncated after item (a), suggesting additional prohibited categories exist that are not captured here. The definition of High-Risk Jurisdiction is not provided in the excerpt. The canonical claim reflects only what is explicitly present.
The updated terms establish new restrictions on how merchants may use Stripe Output Data, prohibiting its use for automated decision-making about customer relationships, credit or employment eligibility determinations, or training AI systems that substitute for Stripe's Services. Merchants using AI Agents to access Stripe Services are now explicitly liable for all actions initiated by those agents, as the terms state such actions are legally binding. Data breach notification obligations have been tightened: users must notify Stripe within 48 hours of becoming aware of a data incident affecting Stripe or its Affiliates, and must provide specific information about the type of data, affected individuals, and remediation status. You can review the specific restrictions on Stripe Output Data use in the updated Service Terms and adjust any automated processes or AI Agent integrations accordingly.
View change record →The reader is prohibited from using or transferring Stripe Technology in ways not authorized by US law and applicable jurisdictional law, including granting access to residents of High-Risk Jurisdictions.
How other platforms handle this
You agree that you are not prohibited from receiving the Services under the laws of the United States, England, Wales, Canada or other applicable jurisdiction. For example, you are not on the U.S. Treasury Department's list of Specially Designated Nationals...
By purchasing, downloading, or using technology or software from the Site, you agree to abide by applicable laws, rules, and regulations including, but not limited to, the Export Administration Act and the Arms Export Control Act...
You are responsible for complying with the export laws and regulations of the United States and other applicable jurisdictions.
"User must not use or otherwise export, re-export, or transfer the Stripe Technology except as authorized by United States law and the laws of the jurisdiction(s)...including by providing access to Stripe Technology (a) to any individual or entity ordinarily resident in a High-Risk JurisdictionExcerpt from Stripe's Terms of Service
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
This restriction exposes users to potential violations if they provide Stripe Technology access to persons in High-Risk Jurisdictions, regardless of intent.
The reader is prohibited from using or transferring Stripe Technology in ways not authorized by US law and applicable jurisdictional law, including granting access to residents of High-Risk Jurisdictions.
ConductAtlas has identified this type of provision across 179 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Stripe.