Stripe
Security and trust center evidence
Economic infrastructure for the internet.
Summary
Stripe has 2 registry-verified rows in the CertReports index, last verified 26 Oct 2026. The strongest row is PCI DSS: Listed on the Visa Global Registry as PCI DSS validated through 2027-08-31. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
Stripe is listed in the Visa Global Registry as PCI DSS validated through 31 Aug 2027, with the assessment originally issued 7 Dec 2020 and performed by Enterprise Risk Management, Inc. (dba ERMProtect), as of 26 Oct 2026. Stripe is listed in the DPF registry with active EU-US, SW-US, and UK Extension certifications issued 11 May 2026 and expiring 11 May 2027, as of 26 Oct 2026. No public evidence was found for a SOC 2 report for Stripe as of 26 Oct 2026. No public evidence was found for ISO/IEC 27001 for Stripe as of 26 Oct 2026. No public evidence was found for a HIPAA BAA offering for Stripe as of 26 Oct 2026.
- Listed in the Visa Global Registry as PCI DSS validated through 31 Aug 2027 (ERMProtect), as of 26 Oct 2026.
- Listed in the DPF registry with active EU-US, SW-US and UK Extension certifications through 11 May 2027, as of 26 Oct 2026.
- No public evidence found for SOC 2, ISO/IEC 27001 or HIPAA as of 26 Oct 2026.
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 26 Oct 2026; it is regenerated whenever a row changes.
Among payments vendors
2verified rows
Category median 1, across 737 indexed payments vendors. Stripe has more verified rows than 97 percent of them.
billingmoney movementpayment gatewaypayment processing
Compare with similar vendors
Pick your own comparisonCompliance grid
PCI DSSVerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-08-31
as of 26 Oct 20263 sources · Enterprise Risk Management, Inc, (dba ERMProtect)
EU-US Data Privacy FrameworkVerifiedActive: EU-US Certification, SW-US Certification, UK Extension Certification
as of 26 Oct 20261 source
Legal artefacts
No DPA, BAA or subprocessor list has been captured from a public page yet. Registry rows above do not depend on this. Check the vendor trust centre.
Subprocessors
No subprocessor list captured yet.
Change history
- 26 Oct 2026PCI DSS renewedExpiry moved from 2027-03-31 to 2027-08-31.
- 26 Oct 2026PCI DSS auditor changedAuditor changed from Coalfire Systems, Inc to Enterprise Risk Management, Inc, (dba ERMProtect).
- 19 Sep 2026Trust centre movedTrust centre URL is now https://docs.stripe.com/security.
Similar vendors with evidence
Related by product tags and the Payments category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
Kashier Payment Solutions
Payments
Scale faster by growing your business with Kashier payment acceptance and processing
Element Payment Solutions
Payments
Element Payment Solutions delivers secure, fast, and flexible payment gateway solutions, empowering businesses of all sizes to grow with
Finix Payments
Payments
Finix is a payments technology provider enabling businesses to accept and send payments online or in
2C2P
Payments
2C2P is a payment service provider that helps companies in emerging markets accept and make payments
Evidence against regulations
All regulations for StripeHow much of each regulation’s vendor requirements Stripe’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read