Stripe integration¶

Connect Stripe to Dxtra to automatically track payment processing activities, manage data subject rights for payment data, and maintain compliance with GDPR and CCPA requirements.

Overview¶

When you accept payments via Stripe, Stripe processes personal data including credit/debit card information, billing addresses, customer identity, and transaction history. Dxtra tracks this data processing relationship through webhook integration, helping you maintain compliance documentation and respond to data subject rights requests.

What Dxtra Tracks from Stripe¶

Dxtra uses the customer email address to link payment events to data subjects and creates a record of payment data processing in your Processing Activity Log.

Add Stripe as a data processor¶

Before configuring the webhook, add Stripe as a data processor in Dxtra:

1. Go to Processors in the Dxtra dashboard sidebar
2. In the Onboard a Data Processor section, select Stripe from the dropdown
3. Review the processor details — Dxtra shows Stripe's description and the data processing relationship
4. Enter your Stripe Restricted Key when prompted
5. Your Data Controller DID is displayed automatically
6. Click Confirm and Onboard

Stripe now appears in your Manage Processors table with an Interconnected badge.

Configure the Stripe webhook¶

The webhook connection enables real-time event streaming from Stripe to Dxtra. This is how Dxtra tracks payment processing activities and links them to data subjects.

Step 1: Get your Dxtra credentials¶

1. Log in to the Dxtra Dashboard
2. Navigate to Developers (or Settings > Developers)
3. Copy your Data Controller DID (unique identifier for your organization)
4. Copy your DX Key (API key for webhook authentication)

Store these securely — you'll need them in Step 2.

Step 2: Configure Stripe Webhook¶

In your Stripe Dashboard:

1. Navigate to Developers > Webhooks (or Integrate > Webhooks)
2. Click Add endpoint button
3. Enter the Dxtra webhook URL provided during processor onboarding:

https://conduit.dxtra.ai/api/v1/integrations/stripe/event?token={YOUR_ENCRYPTED_TOKEN}

1. Select Events to send. Choose:
2. customer.created
3. customer.updated
4. customer.deleted
5. payment_intent.succeeded
6. payment_intent.payment_failed
7. invoice.created
8. invoice.paid
9. customer.subscription.created
10. customer.subscription.updated

11. customer.subscription.deleted

12. Click Add endpoint to save

Step 3: Verify Webhook Signature (Recommended)¶

For maximum security, enable webhook signature verification. Stripe automatically verifies the webhook signature with Dxtra using the webhook signing secret.

In your Stripe Dashboard Webhooks section: 1. Find your newly created endpoint 2. Note the Signing secret (starts with whsec_) 3. Stripe will use this to sign all webhook events 4. Dxtra verifies the signature using the standard Stripe SDK

Step 4: Test the Webhook¶

Still in the Stripe Webhooks section:

1. Find your endpoint
2. Click the ... menu and select Send test event
3. Choose customer.created or payment_intent.succeeded for testing
4. Click Send test event

Step 5: Verify Integration in Dxtra¶

Back in the Dxtra Dashboard:

1. Navigate to Processing Activity Log or Integrations
2. Look for the test event from Stripe (may take 1-2 minutes to appear)
3. You should see:
4. Event type (e.g., stripe:customer.created)
5. Timestamp
6. Data subject created (if customer had email)
7. Verify that a new data subject appears in your Data Subjects list

If the test event doesn't appear after 2 minutes, go to Troubleshooting.

Step 6: Deploy to Production¶

Once verified:

1. Return to Stripe Webhooks section
2. Your endpoint should now show Events successfully sent (once live events start flowing)
3. Stripe will begin sending real payment events to Dxtra
4. Monitor your Processing Activity Log to verify events are being received

Data processing details¶

What Data is Sent¶

When Stripe sends webhook events to Dxtra, the events include:

Customer Events: - Customer ID - Email address - Name - Billing address - Creation and update timestamps

Payment Events: - Customer email - Payment amount and currency - Payment status (succeeded, failed, etc.) - Timestamp

Subscription Events: - Customer email - Subscription status (active, canceled, etc.) - Billing interval (monthly, yearly, etc.) - Timestamp

What Data is NOT Sent¶

Dxtra does NOT receive or store: - Full credit card numbers - CVV or security codes - Raw card data - Stripe API keys - Subscription pricing (only billing interval)

Data Retention¶

Dxtra retains webhook event records in the Processing Activity Log according to your organization's data retention policy (configurable in Settings > Compliance Framework).

Authentication¶

The webhook URL uses a single token parameter for authentication:

URL Parameters: - token={ENCRYPTED_TOKEN} — JWE-encrypted authentication token generated during processor onboarding. Your organization's DID and DX Key are embedded inside the token; they are not passed as separate URL parameters.

Stripe Signature Verification: - Dxtra verifies the Stripe-Signature header using Stripe's standard webhook signature method - This ensures events genuinely come from Stripe, not a malicious actor

Customer data redaction¶

When a data subject submits an erasure (deletion) request and you process it:

1. Delete the data subject in Dxtra (or mark as deleted)
2. Dxtra can automatically trigger data redaction in Stripe
3. Stripe removes/anonymizes the customer data in your account
4. The deletion is logged in Dxtra's audit trail

Monitoring¶

Processing activity log¶

Monitor incoming Stripe events:

1. Navigate to Processing Activity Log in Dxtra
2. Filter by Source: stripe to see only Stripe events
3. Review event details:
4. Event type
5. Timestamp
6. Data subject created
7. Customer email

Alerts and notifications¶

Configure notifications for Stripe events:

1. Navigate to Settings > Communication Preferences
2. Enable Data Processor Updates to receive alerts for new processors or events
3. Enable Integration Issues to be notified of webhook failures

Manual event verification¶

To verify events are flowing:

1. Create a test charge in Stripe development mode
2. Check the Processing Activity Log in Dxtra within 2 minutes
3. Verify the event appears with correct customer data

Troubleshooting¶

Events Not Appearing in Dxtra¶

Problem: Test webhooks or production events aren't showing in the Processing Activity Log

Check: 1. Webhook URL is correct and includes a valid token parameter (the JWE-encrypted token from processor onboarding) 2. Stripe endpoint shows as Enabled and Active 3. URL doesn't have typos or special character encoding issues 4. Firewall/network allows Stripe to reach Dxtra servers

Solutions: 1. Go to Stripe Webhooks page and verify the endpoint URL 2. Send another test event 3. Wait 2-3 minutes for the event to process 4. Check for any error messages in Stripe's webhook delivery logs 5. Contact support@dxtra.ai if events still don't appear

Stripe Webhook Logs: 1. In Stripe Webhooks section, click your endpoint 2. Scroll to Events section 3. Look for recent events and check their Response status 4. Failed events show HTTP error codes (e.g., 400, 401, 500)

401 Unauthorized Response¶

Problem: Stripe webhook returns 401 Unauthorized

Causes: - JWE token in webhook URL is invalid or expired - Webhook secret has changed since initial setup

Solutions: 1. Re-run the Stripe onboarding in Dxtra to generate a new webhook URL and re-register the endpoint with Stripe. 2. Send a test event to verify

400 Bad Request Response¶

Problem: Stripe webhook returns 400 Bad Request

Causes: - Webhook URL is malformed - Query parameters are missing or incorrect

Solutions: 1. Check URL syntax for typos 2. Ensure the token= parameter is present (copied from processor onboarding) 3. URL-encode special characters if needed

Data Subject Not Created¶

Problem: Webhook event received but no data subject created

Causes: - Webhook event doesn't include customer email - Customer email is empty or invalid - Data subject already exists (duplicate event)

Solutions: 1. Check Stripe webhook event details — does it include customer.email? 2. Verify Stripe customer has valid email in their profile 3. Check if data subject already exists in Dxtra for that email

Webhook Delivery Delays¶

Problem: Events take 5+ minutes to appear in Dxtra

Cause: Network latency or high event volume

Solutions: 1. Verify webhook is enabled in Stripe 2. Check Stripe's webhook delivery logs for retry attempts 3. Contact support@dxtra.ai if delays persist

Webhook event examples¶

customer.created¶

Sent when a new customer is created in Stripe:

{
  "id": "evt_1234567890",
  "object": "event",
  "type": "customer.created",
  "data": {
    "object": {
      "id": "cus_123456",
      "email": "customer@example.com",
      "name": "John Smith",
      "address": {
        "line1": "123 Main St",
        "city": "San Francisco",
        "state": "CA",
        "country": "US",
        "postal_code": "94105"
      },
      "created": 1234567890
    }
  }
}

payment_intent.succeeded¶

Sent when a payment succeeds:

{
  "id": "evt_1234567891",
  "object": "event",
  "type": "payment_intent.succeeded",
  "data": {
    "object": {
      "id": "pi_123456",
      "customer": "cus_123456",
      "amount": 5000,
      "currency": "usd",
      "status": "succeeded",
      "created": 1234567891
    }
  }
}

Compliance documentation¶

When using Stripe with Dxtra, ensure you have:

• Stripe Terms of Service reviewed by legal team
• Data Processing Addendum (DPA) executed with Stripe
• Stripe documented in your Record of Processing Activities (RoPA)
• Data retention policy documented (in Dxtra Settings)
• Stripe webhook data minimization reviewed
• Customer privacy notice updated to mention Stripe payment processing

Next steps¶

1. Verify webhook events are flowing (Step 5)
2. Review customer data in the Processing Activity Log
3. Update your Data Processing documentation to include Stripe
4. Configure data subject rights workflow
5. Test a data subject access request (use test customer in Stripe dev mode)

Related documentation¶

• Payment Integrations Overview — Other payment processors
• Webhook Integrations — Webhook reference
• Processing Activity Log — View tracked data
• Data Subject Rights — Handle customer requests
• Go-Live Checklist — Pre-launch verification

Support¶

Questions or issues? - Check the Troubleshooting section above - Review FAQ - Contact support@dxtra.ai with your webhook URL and DID

Ready to integrate? Start with adding Stripe as a data processor, then configure the webhook.