{"license":"CC BY 4.0","attribution":"AI Dispatch — https://aidispatch.news","methodology":"https://aidispatch.news/methodology","generated_at":"2026-09-18T12:05:10.829Z","entity":{"name":"Stripe","slug":"stripe","type":"vendor","subtype":"payments","developer":null,"homepage_url":"https://stripe.com/","summary":null,"url":"https://aidispatch.news/vendors/stripe/","published_at":"2026-08-02T05:03:23.709836+00:00","updated_at":"2026-08-29T08:27:23.113821+00:00"},"fields":[{"key":"support_model","label":"Support model","category":"practicality","status":"present","value":"Support plans. Receive ongoing assistance and day-to-day support for technical questions with tiered plans based on your needs.","not_yet_interpreted":true,"quote":"Support plans. Receive ongoing assistance and day-to-day support for technical questions with tiered plans based on your needs.","source_url":"https://stripe.com/","retrieved_at":"2026-08-06T06:06:10.814988+00:00","review":null,"superseded_quote":null},{"key":"safety_policy","label":"Safety policy","category":"safety","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://stripe.com/","retrieved_at":"2026-08-11T17:27:06.54658+00:00","review":null,"superseded_quote":null},{"key":"data_handling","label":"Data handling","category":"safety","status":"present","value":"AES-256 encryption of production data at rest","not_yet_interpreted":false,"quote":"To protect data at rest, Stripe uses industry standard encryption (AES-256) to encrypt all production data stored in server infrastructure.","source_url":"https://stripe.com/legal/dpa","retrieved_at":"2026-08-14T13:05:47.475847+00:00","review":null,"superseded_quote":null},{"key":"liability_cap","label":"Liability cap","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://stripe.com/legal/dpa","retrieved_at":"2026-08-14T13:05:47.475847+00:00","review":null,"superseded_quote":null},{"key":"dispute_process","label":"Dispute process","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://stripe.com/legal/dpa","retrieved_at":"2026-08-14T13:05:47.475847+00:00","review":null,"superseded_quote":null},{"key":"usage_restrictions","label":"Usage restrictions","category":"safety","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://stripe.com/legal/dpa","retrieved_at":"2026-08-14T13:05:47.475847+00:00","review":null,"superseded_quote":null},{"key":"audit_trail","label":"Audit trail","category":"assurance","status":"present","value":"User-facing audit logs of account changes/activity","not_yet_interpreted":false,"quote":"You can also view audit logs of important account changes and activity in your security history","source_url":"https://stripe.com/security","retrieved_at":"2026-08-14T13:06:29.26152+00:00","review":null,"superseded_quote":null},{"key":"third_party_evals","label":"Third-party evaluations","category":"safety","status":"present","value":"Third-party security firms conduct scans/pen tests","not_yet_interpreted":false,"quote":"We hire industry-leading security companies to perform third-party scans of our systems","source_url":"https://stripe.com/security","retrieved_at":"2026-08-14T13:06:29.26152+00:00","review":null,"superseded_quote":null},{"key":"initiative","label":"Initiative","category":"agency","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://stripe.com/","retrieved_at":"2026-08-06T06:06:10.814988+00:00","review":null,"superseded_quote":null},{"key":"open_weights","label":"Open weights","category":"models","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://stripe.com/","retrieved_at":"2026-08-06T06:06:10.814988+00:00","review":null,"superseded_quote":null},{"key":"indemnification","label":"Indemnification","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://stripe.com/","retrieved_at":"2026-08-06T06:06:10.814988+00:00","review":null,"superseded_quote":null},{"key":"explainability","label":"Explainability","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://stripe.com/","retrieved_at":"2026-08-06T06:06:10.814988+00:00","review":null,"superseded_quote":null},{"key":"regulatory_alignment","label":"Regulatory alignment","category":"assurance","status":"present","value":"Contractually undertakes to comply with data protection law when processing personal data (DPA); no specific statute, AI framework or controller/processor role is named in the span cited","not_yet_interpreted":false,"quote":"Stripe must comply with and perform its obligations under DP Law when Processing Personal Data","source_url":"https://stripe.com/legal/dpa","retrieved_at":"2026-08-14T13:05:47.475847+00:00","review":null,"superseded_quote":null},{"key":"availability","label":"Availability","category":"practicality","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://stripe.com/","retrieved_at":"2026-08-06T06:06:10.814988+00:00","review":null,"superseded_quote":null},{"key":"sla_terms","label":"SLA terms","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://stripe.com/","retrieved_at":"2026-08-06T06:06:10.814988+00:00","review":null,"superseded_quote":null},{"key":"tool_use","label":"Tool use","category":"ecosystem","status":"present","value":"SDKs, APIs, MCP server, and AI developer tools for integration","not_yet_interpreted":false,"quote":"Use our SDKs, APIs, MCP server, and AI developer tools to build and maintain your own integration with Stripe.","source_url":"https://stripe.com/","retrieved_at":"2026-08-11T14:30:59.694997+00:00","review":null,"superseded_quote":null},{"key":"marketplace_presence","label":"Marketplace presence","category":"ecosystem","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://stripe.com/","retrieved_at":"2026-08-06T06:06:10.814988+00:00","review":null,"superseded_quote":null},{"key":"environment","label":"Operating environment","category":"agency","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://stripe.com/","retrieved_at":"2026-08-06T06:06:10.814988+00:00","review":{"state":"flagged","confidence":"medium","reviewed_at":null,"detected_at":"2026-08-18T00:20:17.384326+00:00"},"superseded_quote":null},{"key":"model_swappable","label":"Model swappable","category":"models","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://stripe.com/","retrieved_at":"2026-08-06T06:06:10.814988+00:00","review":null,"superseded_quote":null},{"key":"protocols_supported","label":"Protocols supported","category":"ecosystem","status":"present","value":"Agentic Commerce Protocol (ACP)","not_yet_interpreted":true,"quote":"Agentic Commerce Protocol (ACP)","source_url":"https://stripe.com/","retrieved_at":"2026-08-06T06:06:10.814988+00:00","review":null,"superseded_quote":null},{"key":"compliance_certs","label":"Compliance certifications","category":"assurance","status":"present","value":"PCI Service Provider Level 1 certification","not_yet_interpreted":false,"quote":"certified us to PCI Service Provider Level 1","source_url":"https://stripe.com/security","retrieved_at":"2026-08-14T13:06:29.26152+00:00","review":null,"superseded_quote":null},{"key":"coverage_limits","label":"Coverage limits","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://stripe.com/","retrieved_at":"2026-08-06T06:06:10.814988+00:00","review":null,"superseded_quote":null},{"key":"open_source","label":"Open source","category":"ecosystem","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://stripe.com/","retrieved_at":"2026-08-06T06:06:10.814988+00:00","review":null,"superseded_quote":null},{"key":"price_point","label":"Price point","category":"practicality","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://stripe.com/","retrieved_at":"2026-08-06T06:06:10.814988+00:00","review":null,"superseded_quote":null},{"key":"supported_regions","label":"Supported regions","category":"practicality","status":"present","value":"160 countries","not_yet_interpreted":true,"quote":"160 countries","source_url":"https://stripe.com/","retrieved_at":"2026-08-06T06:06:10.814988+00:00","review":null,"superseded_quote":null},{"key":"incident_reporting","label":"Incident reporting","category":"safety","status":"present","value":"Bug bounty vulnerability contact via HackerOne","not_yet_interpreted":false,"quote":"Contact: https://hackerone.com/stripe","source_url":"https://stripe.com/.well-known/security.txt","retrieved_at":"2026-08-14T13:06:25.455404+00:00","review":null,"superseded_quote":null},{"key":"model_provider","label":"Model provider","category":"models","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://stripe.com/","retrieved_at":"2026-08-06T06:06:10.814988+00:00","review":null,"superseded_quote":null},{"key":"context_window","label":"Context window","category":"models","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://stripe.com/","retrieved_at":"2026-08-06T06:06:10.814988+00:00","review":null,"superseded_quote":null},{"key":"insurance_carriers","label":"Insurance carriers","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://stripe.com/","retrieved_at":"2026-08-06T06:06:10.814988+00:00","review":null,"superseded_quote":null},{"key":"settlement_mechanism","label":"Settlement mechanism","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://stripe.com/","retrieved_at":"2026-08-06T06:06:10.814988+00:00","review":null,"superseded_quote":null},{"key":"api_access","label":"API access","category":"ecosystem","status":"present","value":"500M+ API requests per day","not_yet_interpreted":true,"quote":"500M+ API requests per day","source_url":"https://stripe.com/","retrieved_at":"2026-08-06T06:06:10.814988+00:00","review":null,"superseded_quote":null},{"key":"red_teaming","label":"Red teaming","category":"safety","status":"present","value":"Security teams conduct regular penetration tests and red team exercises against infrastructure","not_yet_interpreted":false,"quote":"Our security teams test our infrastructure regularly by scanning for vulnerabilities and conducting penetration tests and red team exercises.","source_url":"https://stripe.com/security","retrieved_at":"2026-08-21T14:06:32.714303+00:00","review":null,"superseded_quote":null},{"key":"pricing_model","label":"Pricing model","category":"practicality","status":"present","value":"Integrated per-transaction pricing with no hidden fees","not_yet_interpreted":true,"quote":"Integrated per-transaction pricing with no hidden fees","source_url":"https://stripe.com/","retrieved_at":"2026-08-06T06:06:10.814988+00:00","review":null,"superseded_quote":null},{"key":"action_space","label":"Action space","category":"agency","status":"present","value":"agent toolkit lets AI agents earn and spend funds on a user's behalf","not_yet_interpreted":false,"quote":"The agent toolkit allows your agents to help you earn and spend funds, expanding their capabilities.","source_url":"https://stripe.com/changelog","retrieved_at":"2026-08-14T13:05:49.163281+00:00","review":null,"superseded_quote":null},{"key":"eval_coverage","label":"Evaluation coverage","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://stripe.com/","retrieved_at":"2026-08-06T06:06:10.814988+00:00","review":null,"superseded_quote":null},{"key":"documented_incidents","label":"Documented incidents","category":"impact","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://stripe.com/","retrieved_at":"2026-08-06T06:06:10.814988+00:00","review":null,"superseded_quote":null},{"key":"base_models","label":"Base models","category":"models","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://stripe.com/","retrieved_at":"2026-08-06T06:06:10.814988+00:00","review":null,"superseded_quote":null},{"key":"fine_tuning","label":"Fine-tuning","category":"models","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://stripe.com/","retrieved_at":"2026-08-06T06:06:10.814988+00:00","review":null,"superseded_quote":null},{"key":"safety_evaluations","label":"Safety evaluations","category":"safety","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://stripe.com/","retrieved_at":"2026-08-06T06:06:10.814988+00:00","review":null,"superseded_quote":null},{"key":"model_card","label":"Model or system card","category":"safety","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://stripe.com/","retrieved_at":"2026-08-06T06:06:10.814988+00:00","review":null,"superseded_quote":null},{"key":"insurance_available","label":"Insurance available","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://stripe.com/","retrieved_at":"2026-08-06T06:06:10.814988+00:00","review":null,"superseded_quote":null},{"key":"outcome_based_pricing","label":"Outcome-based pricing","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://stripe.com/","retrieved_at":"2026-08-06T06:06:10.814988+00:00","review":null,"superseded_quote":null},{"key":"deployment_options","label":"Deployment options","category":"practicality","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://stripe.com/","retrieved_at":"2026-08-06T06:06:10.814988+00:00","review":null,"superseded_quote":null},{"key":"asset_custody","label":"Asset custody","category":"assurance","status":"present","value":"A dedicated team manages Stripe's Card Data Vault in an isolated AWS environment","not_yet_interpreted":false,"quote":"A dedicated team manages our CDV in an isolated Amazon Web Services (AWS) environment","source_url":"https://stripe.com/security","retrieved_at":"2026-08-21T14:06:32.714303+00:00","review":null,"superseded_quote":null},{"key":"permission_scopes","label":"Permission scopes","category":"assurance","status":"present","value":"Dashboard supports assigning detailed least-privilege roles to employees and creating restricted API keys","not_yet_interpreted":false,"quote":"you can assign different detailed roles to enable least-privilege access for your employees, and create restricted API keys","source_url":"https://stripe.com/security","retrieved_at":"2026-08-21T14:06:32.714303+00:00","review":null,"superseded_quote":null},{"key":"market_recognition","label":"Market recognition","category":"impact","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://stripe.com/security","retrieved_at":"2026-08-21T14:06:32.714303+00:00","review":null,"superseded_quote":null},{"key":"own_liability_cover","label":"Own liability cover","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://stripe.com/security","retrieved_at":"2026-08-21T14:06:32.714303+00:00","review":null,"superseded_quote":null},{"key":"self_reported_performance","label":"Self-reported performance","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://stripe.com/security","retrieved_at":"2026-08-21T14:06:32.714303+00:00","review":null,"superseded_quote":null},{"key":"audit_trail_immutable","label":"Tamper-evident log","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://stripe.com/security","retrieved_at":"2026-08-14T13:06:29.26152+00:00","review":{"state":"flagged","confidence":"high","reviewed_at":null,"detected_at":"2026-08-27T14:05:00.153202+00:00"},"superseded_quote":null},{"key":"runtime_governance","label":"Runtime governance","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://stripe.com/security","retrieved_at":"2026-08-14T13:06:29.26152+00:00","review":null,"superseded_quote":null},{"key":"deployment_scale","label":"Deployment scale","category":"impact","status":"present","value":"1.9T in payments volume processed in 2025","not_yet_interpreted":true,"quote":"1.9T in payments volume processed in 2025","source_url":"https://stripe.com/","retrieved_at":"2026-08-06T06:06:10.814988+00:00","review":null,"superseded_quote":null},{"key":"high_risk_domains","label":"High-risk domains","category":"impact","status":"present","value":"Accept payments, offer financial services","not_yet_interpreted":true,"quote":"Accept payments, offer financial services","source_url":"https://stripe.com/","retrieved_at":"2026-08-06T06:06:10.814988+00:00","review":null,"superseded_quote":null},{"key":"integrations","label":"Integrations","category":"practicality","status":"present","value":"Connect to existing systems. Orchestrate payments across multiple processors, build custom workflows, and connect to third parties using APIs, partner apps, or prebuilt integrations.","not_yet_interpreted":true,"quote":"Connect to existing systems. Orchestrate payments across multiple processors, build custom workflows, and connect to third parties using APIs, partner apps, or prebuilt integrations.","source_url":"https://stripe.com/","retrieved_at":"2026-08-06T06:06:10.814988+00:00","review":null,"superseded_quote":null},{"key":"autonomy_level","label":"Autonomy level","category":"agency","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://stripe.com/","retrieved_at":"2026-08-06T06:06:10.814988+00:00","review":null,"superseded_quote":null},{"key":"human_oversight","label":"Human oversight","category":"agency","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://stripe.com/","retrieved_at":"2026-08-06T06:06:10.814988+00:00","review":null,"superseded_quote":null},{"key":"goal_complexity","label":"Goal complexity","category":"agency","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://stripe.com/","retrieved_at":"2026-08-06T06:06:10.814988+00:00","review":null,"superseded_quote":null},{"key":"user_base","label":"User base","category":"impact","status":"present","value":"200M+ active subscriptions managed on Stripe Billing","not_yet_interpreted":true,"quote":"200M+ active subscriptions managed on Stripe Billing","source_url":"https://stripe.com/","retrieved_at":"2026-08-06T06:06:10.814988+00:00","review":null,"superseded_quote":null},{"key":"multi_agent","label":"Multi-agent","category":"ecosystem","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://stripe.com/","retrieved_at":"2026-08-06T06:06:10.814988+00:00","review":null,"superseded_quote":null},{"key":"target_sectors","label":"Target sectors","category":"impact","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://stripe.com/","retrieved_at":"2026-08-06T06:06:10.814988+00:00","review":null,"superseded_quote":null}],"trust_gap_scores":[{"dimension":"runtime_governance","score":2,"rationale":"\"you can assign different detailed roles to enable least-privilege access for your employees, and create restricted API keys\" - restricted API keys are a scope limit actually enforced at call time, not merely a described intent. Falls short of 3 because no spend ceiling or authority limit on agent-initiated actions is published on the pages checked. The runtime_governance field previously filed here quoted \"Actions within the most sensitive areas of the infrastructure need a human review\", which describes Stripe's own internal change management, not a control the customer's agent runs under; it was rejected in this audit.","rubric_version":"v1","scored_by":"fact-checker","judged":true,"scored_at":"2026-08-27T08:28:39.951337+00:00","superseded_scores":null,"rests_on_flagged_absence":null,"evidence_newer_than_judgement":null},{"dimension":"audit_trail","score":2,"rationale":"\"You can also view audit logs of important account changes and activity in your security history\" evidences a customer-reviewable record of account activity. Falls short of 3: the only immutability claim on the page (\"Code changes are recorded in an immutable, tamper-evident log\") is about Stripe's internal code deployment pipeline, not this record, and the field asserting otherwise was rejected in this audit.","rubric_version":"v1","scored_by":"fact-checker","judged":true,"scored_at":"2026-08-27T08:28:39.951337+00:00","superseded_scores":null,"rests_on_flagged_absence":["Tamper-evident log"],"evidence_newer_than_judgement":null},{"dimension":"compliance","score":2,"rationale":"\"certified us to PCI Service Provider Level 1\" is a named certification from a named regime, and the DPA binds Stripe to comply with data protection law when processing personal data. Falls short of 3: PCI DSS is a payments-security regime, not an AI assurance schedule, and no per-engagement compliance schedule or AI framework posture is published.","rubric_version":"v1","scored_by":"fact-checker","judged":true,"scored_at":"2026-08-27T08:28:39.951337+00:00","superseded_scores":null,"rests_on_flagged_absence":null,"evidence_newer_than_judgement":null},{"dimension":"outcome_settlement","score":0,"rationale":"No public evidence found. \"Integrated per-transaction pricing with no hidden fees\" charges per transaction processed, which is a usage fee, not payment released on a verified outcome of agent work.","rubric_version":"v1","scored_by":"fact-checker","judged":true,"scored_at":"2026-08-27T08:28:39.951337+00:00","superseded_scores":null,"rests_on_flagged_absence":null,"evidence_newer_than_judgement":null},{"dimension":"insurance_indemnity","score":0,"rationale":"No public evidence found. Neither the security page nor the DPA checked names cover, a carrier, a policy limit, or a customer indemnity for AI or agent-caused loss.","rubric_version":"v1","scored_by":"fact-checker","judged":true,"scored_at":"2026-08-27T08:28:39.951337+00:00","superseded_scores":null,"rests_on_flagged_absence":null,"evidence_newer_than_judgement":null}]}