Stripe reliance on account credentials and instructions
Stripe is entitled to rely on instructions or actions transmitted using user credentials, and users must safeguard their account security.
Supporting quotations
Stripe is entitled to rely on any instruction or action taken within User’s Stripe Account. User must ensure that its Stripe Account is not used or modified by anyone other than User and its authorized representatives, and will use commercially reasonable efforts to prevent the unauthorized access, disclosure, or use of its Stripe Account Credentials. If User believes that its Stripe Account Credentials have been wrongly accessed, disclosed, or used, User must promptly notify Stripe and cooperate fully, including by providing any information Stripe reasonably requests. Any action or inaction by Stripe will not diminish User’s responsibility for the security of its Stripe Account Credentials or for any unauthorized access, disclosure, or use of them. User is solely responsible for any losses, damages or costs that User or others may suffer arising out of or relating to hacking, tampering, or unauthorized access of the Services, User’s Stripe Account, or Protected Data, or User’s failure to use or implement anti-fraud or data security measures, except to the extent that those losses, damages, or costs are caused by Stripe’s gross negligence, fraud, or willful misconduct.
Security & Safeguards · Company commitment
Notification requirements upon security or data incident
Users must notify Stripe promptly upon experiencing a data incident reasonably likely to affect Stripe systems or data.
Supporting quotations
If User experiences a Data Incident that is reasonably likely to impact Stripe or its Affiliates, User must notify Stripe without undue delay, which will be no later than 48 hours, after becoming aware of the Data Incident. In this notice, User shall provide Stripe with the following information: (a) the type of Personal Data that was the subject of the Data Incident; (b) the categories and potential number of individuals or records affected (including their countries); and (c) the status of User’s investigation and current or planned remediation.
Security & Safeguards · Company commitment
Maintenance of administrative, physical, and technical safeguards
Each party must maintain commercially reasonable security safeguards to protect data from unauthorized access or compromise.
Supporting quotations
Each party will maintain commercially reasonable administrative, technical, and physical safeguards designed to protect data in its possession or under its control from unauthorized access, accidental loss, and unauthorized modification. Stripe will comply with its obligations in the Data Security Exhibit.