Stripe is compliant with the EU PSD2 directive and strong customer authentication. All card numbers are encrypted on disk with AES-256.
Stripe's infrastructure for storing, decrypting and transmitting card numbers runs independently, without sharing any sensitive information with our services.