Prevents falling behindBuilding blockEstablished

Paddle

Paddle.com Market Ltd ·www.paddle.com· As of: 2026-07-30

Resells your software in its own name and thereby becomes the buyer's contractual counterparty. Registration, calculation, remittance and liability for indirect tax in foreign jurisdictions then sit with the vendor rather than with the software company.

Work through this tool with an AI

ClaudeChatGPTPerplexity

Our verdict

Cross-border indirect tax is not optional. Sell digital products into France, Canada or Australia and you owe tax there once the local threshold is crossed. Not registering is a legal exposure, not a saving. So a tool in this category keeps you from falling behind. It creates no edge: competitors discharge the same duty, usually with the same or an equivalent vendor, and the buyer notices nothing except a foreign name on the invoice.

Evidence:As of 2026-07-305 percent plus 50 US cents per checkout transaction, custom pricing for products under 10 dollars and for invoiced salesOpen sourceAs of 2026-07-30Paddle is the reseller of the product, 30 days' notice, funds withheld until the later of six months after termination or expiry of the last subscriptionOpen sourceAs of 2026-07-30The buyer contracts with Paddle rather than with the software company, and data is processed outside the EUOpen sourceAs of 2026-07-30Paddle and the seller are independent controllers, not controller and processorOpen sourceAs of 2026-07-30Exit: payment token handover to a foreign PCI vault within about two weeks, customer data exported from the dashboardOpen sourceAs of 2026-07-30Payout fees: none for ACH and SEPA in matching currency, 15 dollars, euros or pounds when the currency differs, conversion margin of up to 1.5 percentOpen sourceAs of 2026-07-30Processing addendum for the ancillary services: standard contractual clauses module two, 14-day objection window for new subprocessors, deletion within 30 days, one on-site audit per calendar yearOpen sourceAs of 2026-07-30Legal entity and company number: Paddle.com Market Limited, 08172165, incorporated 8 August 2012, status activeOpen sourceAs of 2026-07-30The large payment processor offers its own merchant-of-record model at a 3.5 percent surcharge on top of regular payment feesOpen source

Who it fits

Solo

suitable

No base fee, no minimum term, the price only applies when revenue flows. For a one-person business selling worldwide this is the only realistic route to a clean tax position.

Mid-market

suitable

The actual sweet spot. As long as there is no in-house tax function and the number of countries keeps growing, the percentage is cheaper than registrations, filings and advice in every single country.

Enterprise

suitable with caveats

Above a certain revenue the percentage costs more than an in-house tax function, and procurement at large accounts wants to contract with the software company directly, not with a reseller. On top of that there is no classic data processing agreement for the core service, and no ISO 27001 certificate held by the vendor itself is publicly evidenced.

Buy, switch or build

Off-the-shelf

Payment provider plus tax service, you stay the seller

The usual setup: a payment processor for the card, a tax service for rates and filings, your own registrations in every country where a threshold is crossed. The fee lands around 3 percent instead of 5, the customer relationship stays with the software company, and so does the liability for tax miscalculated or not remitted. This works as long as the number of countries stays manageable and someone in-house owns it.

AI-native

No meaningful AI-native replacement

The duty is legal, not computational. No model replaces a Canadian registration or assumes liability for a wrong filing. What newer vendors in this category bring is a different counterparty and a different price list, not a different category. The large payment processor has offered its own merchant-of-record model since 2025, at a 3.5 percent surcharge on top of regular payment fees, which comes out more expensive and younger.

Build it yourself

Your own registrations, your own filings

Nobody builds their own merchant of record. The serious build-it-yourself route is to carry the duty yourself: a VAT identification, the EU scheme for distance sales, registrations in the handful of non-EU countries where revenue actually arises, and an accountant who files. That adds up when revenue is concentrated in a few countries, and it breaks the moment the twentieth market appears and nobody can say which threshold was crossed.

Our advice

  • Solo: Buy. Registering in ten countries yourself costs more time than the revenue justifies.
  • Mid-market: Buy, but read the exit clause before the first customer signs.
  • Enterprise: Do the maths. At this size an in-house tax function is cheaper and the customer contract too valuable.

Who is behind it

Staying power: Established

Founded in 2012, continuously active since, funded with both venture and debt capital, and an acquirer in its own right. The vendor is not a bet. The risk lies not in its survival but in the dependency its contractual design creates.

  • Legal entity and company number: Paddle.com Market Limited, Companies House 08172165, incorporated 8 August 2012, status active, 30 Old Bailey, London EC4M 7AUAs of 2026-07-30Legal entity and company number: Paddle.com Market Limited, 08172165, incorporated 8 August 2012, status activeOpen source · As of 2026-07-30
  • Equity funding: USD 200 million Series D led by KKR, valuation USD 1.4 billion (2022)As of 2026-07-30paddle.com/…Open source · As of 2026-07-30
  • Acquisition made by the vendor: acquisition of ProfitWell for more than USD 200 million (2022), today part of the product as Retain and MetricsAs of 2026-07-30paddle.com/blog/paddle-acquires-profitwellOpen source · As of 2026-07-30
  • Operating scale, vendor's own figures: more than 10,000 digital businesses, more than USD 6 billion in processed volume, USD 112 million in sales tax remitted last yearAs of 2026-07-30paddle.com/aboutOpen source · As of 2026-07-30
  • Debt financing: USD 25 million from CIBC Innovation Banking (July 2025)As of 2026-07-30fintechfutures.com/…Open source · As of 2026-07-30

Cost of leaving: High

The data side is solved, the contractual side is not. Payment tokens are handed to the successor's PCI vault within about two weeks according to the vendor, and customer records are exported from the dashboard. What does not travel is the relationship with the buyer: the buyer contracted with Paddle, not with the software company, and the tax numbers, invoices and payment mandates run in Paddle's name. Leaving means obtaining your own registrations, issuing your own invoices and, in many cases, asking the customer to authorise payment again. Then there is the cash: notice is 30 days, and the vendor may hold back balances until the later of six months after termination or the expiry of the last running subscription.

Regulation and data

How to read the traffic lightHow to read the traffic lightThe traffic light rates how well a point is evidenced, not how good the tool is. It draws only on the value, note and source held in the profile. Where a statement is missing, it rates the absence, not a guess. A well-reasoned "unclear" on a point that matters little for this tool is yellow. A missing source on a point that decides whether you can use it at all is red.documented, no condition attacheddocumented, tied to a conditiondocumented, but unfavourableopen on a point that decides usability
Data processing agreementScale for this point: Data processing agreementdocumented, no condition attached: Auftragsverarbeitungsvertrag öffentlich abrufbar und ohne weitere Bedingung Bestandteil des Vertrags; oder er entfällt nachvollziehbar begründet, weil kein Anbieter Kundendaten verarbeitet.documented, tied to a condition: Vertrag existiert, ist aber an einen Tarif gebunden, nur nach Anfrage einsehbar oder allein in den Nutzungsbedingungen geregelt statt als eigenes Dokument.documented, but unfavourable: Kein Auftragsverarbeitungsvertrag im üblichen Sinn: entweder weil der Anbieter für das Kerngeschäft eigenständig Verantwortlicher ist und stattdessen eine andere Konstruktion gilt, oder weil öffentlich offen bleibt, ob überhaupt einer angeboten wird.open on a point that decides usability: Weder ein Vertrag noch ein dokumentierter Weg zu einem Vertrag; der Einkauf hätte nichts, worauf er sich stützen kann.documented, but unfavourabledoes not apply to the core business, in place for the add-on servicesAs of 2026-07-30Paddle and the seller are independent controllers, not controller and processorOpen sourceFor the sales flow Paddle is not a processor but an independent controller, because the buyer contracts with Paddle. Instead of a processing agreement, a data sharing addendum between two independent controllers applies. A genuine processing agreement exists separately for the metrics and retention services.As of 2026-07-30
Storage locationScale for this point: Storage locationdocumented, no condition attached: EU-Speicherort ohne Zusatzkosten und ohne Tarifbindung, oder der Ort ist vollständig selbst bestimmbar, weil das Werkzeug im eigenen Betrieb läuft.documented, tied to a condition: EU-Speicherort möglich, aber an einen Tarif, einen gesondert zu aktivierenden Zusatz oder einen Umzug in eine getrennte Umgebung gebunden; oder die EU-Region ist nicht die Voreinstellung.documented, but unfavourable: Kein EU-Speicherort, der Ort ist aber eindeutig benannt, sodass die Folgen bewertbar sind.open on a point that decides usability: Der Speicherort ist öffentlich nicht benannt oder vom Kunden nicht steuerbar, sodass sich die Verarbeitung nicht verorten lässt.open on a point that decides usabilityunclear, processing outside the EU confirmedAs of 2026-07-30The buyer contracts with Paddle rather than with the software company, and data is processed outside the EUOpen sourceThe vendor states on its GDPR page that data is processed outside the EU. Neither the privacy policy nor the processing addendum names a storage location, region or data centre; the addendum only refers to servers run by a third party. No option for European data residency is documented.As of 2026-07-30
SubprocessorsScale for this point: Subprocessorsdocumented, no condition attached: Vollständige öffentliche Liste der Unterauftragnehmer mit Zweck und Land; oder es gibt keine, weil das Werkzeug im eigenen Betrieb läuft.documented, tied to a condition: Liste existiert und ist benannt, aber nur nach Anfrage oder nach Zugang zu einem Vertrauensportal einsehbar, oder sie nennt Zweck und Land nicht vollständig.documented, but unfavourable: Keine geführte Liste; namentlich stehen nur einzelne Dienste in der Datenschutzerklärung, überwiegend solche der eigenen Website.open on a point that decides usability: Weder eine Liste noch eine Nennung der Verarbeiter des Produkts, und kein dokumentierter Weg, sie zu erfahren.documented, tied to a conditionlist in the trust centre, 14-day objection windowAs of 2026-07-30Processing addendum for the ancillary services: standard contractual clauses module two, 14-day objection window for new subprocessors, deletion within 30 days, one on-site audit per calendar yearOpen sourceThe processing addendum promises an up-to-date list and grants a 14-day objection window before a new subprocessor is used. The list sits in the trust centre at trust.paddle.com. That page is rendered in the browser and could not be read programmatically in this review, so the names are not evidenced here.As of 2026-07-30
Third-country transferScale for this point: Third-country transferdocumented, no condition attached: Keine Übermittlung in ein Drittland, oder die Übermittlung findet statt und die Grundlage ist benannt und im Vertrag verankert, etwa Standardvertragsklauseln, Angemessenheitsbeschluss oder EU-US-Datenschutzrahmen.documented, tied to a condition: Übermittlung findet statt, eine Grundlage ist genannt, aber ohne Zuordnung, welcher Empfänger auf welcher Grundlage arbeitet.documented, but unfavourable: Übermittlung findet statt und die eigenen Unterlagen widersprechen sich, oder die genannte Grundlage bezieht sich erkennbar nur auf einen Randbereich wie die Marketing-Website.open on a point that decides usability: Übermittlung findet erkennbar statt und eine Grundlage wird nirgends genannt.documented, no condition attachedstandard contractual clauses, module two, plus the UK addendumAs of 2026-07-30paddle.com/legal/privacyOpen sourceFor transfers out of the EEA and the UK to countries without an adequacy decision, the vendor names standard contractual clauses and further safeguards. A copy is available only on request to privacy@paddle.com and is not published.As of 2026-07-30
Training on customer dataScale for this point: Training on customer datadocumented, no condition attached: Vertraglich oder in der Datenschutzerklärung ausdrücklich ausgeschlossen, mit Erstreckung auf die eingesetzten Modellanbieter; oder es gibt keine Datenübertragung an einen Anbieter.documented, tied to a condition: Ausschluss ab einem bestimmten Tarif, oder die Zusage steht nur auf einer Dokumentationsseite statt im Vertrag, oder die Frage stellt sich für das Werkzeug sachlich kaum und der Anbieter schweigt dazu.documented, but unfavourable: Nutzung ist die Voreinstellung und nur ein Widerspruch beendet sie; oder der Anbieter trainiert eigene Modelle auf bereinigten Kundendaten.open on a point that decides usability: Keine Aussage, obwohl das Werkzeug KI-Funktionen auf Kundeninhalten betreibt.open on a point that decides usabilityunclearNeither the privacy policy nor the processing addendum nor the GDPR page states whether transaction or buyer data is used to train models. The vendor runs retention and fraud features that rely on analysis, so the question is open and belongs in contract talks.no source given · As of 2026-07-30
Retention and deletionScale for this point: Retention and deletiondocumented, no condition attached: Löschfristen nach Vertragsende beziffert und die Löschung oder Rückgabe zugesagt; oder die Fristen bestimmt der Betreiber selbst, weil das Werkzeug im eigenen Betrieb läuft.documented, tied to a condition: Löschung ist zugesagt, die Fristen sind aber nur teilweise beziffert, oder Sicherungskopien sind ausdrücklich ausgenommen.documented, but unfavourable: Nur der Grundsatz der Erforderlichkeit ohne jede Frist nach Vertragsende, oder Fristen sind allein für Randbereiche wie Website-Protokolle genannt.open on a point that decides usability: Keine Aussage zu Aufbewahrung und Löschung.documented, no condition attacheddeletion or return within 30 days of contract end, funds held back up to six months longerAs of 2026-07-30Paddle is the reseller of the product, 30 days' notice, funds withheld until the later of six months after termination or expiry of the last subscriptionOpen sourceThe processing addendum provides for return or deletion of personal data within 30 days of the cessation date. The privacy policy instead ties retention to the applicable limitation period. Money follows its own rule: the vendor may hold back amounts for future chargebacks and refunds until the later of six months after termination or the expiry of the last subscription.As of 2026-07-30
CertificationsScale for this point: Certificationsdocumented, no condition attached: Mehrere anerkannte Nachweise, benannt mit Norm, Fassung und Geltungsbereich, und bezogen auf den Anbieter selbst.documented, tied to a condition: Ein anerkannter Nachweis für den Anbieter belegt, der Bericht aber nur auf Anfrage, oder der Nachweis hängt an einem Tarif, oder der Geltungsbereich bleibt teilweise offen.documented, but unfavourable: Nur pauschale Nennung ohne Norm-Fassung und Geltungsbereich, oder bloße Selbstauskunft, oder die Nachweise gehören dem Infrastrukturanbieter statt dem Anbieter, oder der Prüfzeitraum ist erkennbar veraltet, oder die eigenen Angaben widersprechen sich.open on a point that decides usability: Kein Nachweis genannt und keine Sicherheits- oder Vertrauensseite vorhanden.documented, but unfavourableSOC 2 Type 2 for the platform services, card data in a vault the vendor describes as PCI compliant, no ISO 27001 of its own evidencedAs of 2026-07-30paddle.com/legal/soc-2-complianceOpen sourceThe public compliance page names a SOC 2 Type 2 report on security, availability and confidentiality, with an examination period of 1 July to 31 December 2022 stated there. The report is released only under a non-disclosure agreement. A more recent report is presumed to sit in the trust centre but could not be read there. No ISO 27001 certificate held by the vendor itself is publicly evidenced.As of 2026-07-30
EU AI Act, Article 50Scale for this point: EU AI Act, Article 50documented, no condition attached: Der Anbieter macht eine belegte Aussage, die die eigene Pflicht trägt, etwa Modelldokumentation und Zertifizierung nach ISO/IEC 42001; oder das Werkzeug enthält nachvollziehbar begründet kein KI-System im Sinne der Verordnung.documented, tied to a condition: Der Anbieter äußert sich zur Verordnung oder ordnet die eigene Funktion ein, eine benannte Zusage zu den Transparenzpflichten aus Artikel 50 fehlt aber; oder das Werkzeug enthält kein KI-System, das gegenüber Menschen auftritt, und der Anbieter schweigt.documented, but unfavourable: Das Produkt enthält KI-Funktionen, der Anbieter schweigt dazu oder trägt ein Selbstetikett ohne Nachweis; die Kennzeichnung ist vom Betreiber aber selbst setzbar.open on a point that decides usability: KI spricht im Produkt unmittelbar mit Endkunden und der Anbieter sagt zu Artikel 50 nichts; die Kennzeichnung lässt sich ohne Zusage des Anbieters nicht sicher setzen.documented, but unfavourableunclearThe vendor says nothing in any public legal document about the transparency duties under Article 50 of the AI Regulation that apply from August 2026. This would matter for the automated fraud and recovery features, which rest on scoring buyer behaviour.no source given · As of 2026-07-30
Audit loggingScale for this point: Audit loggingdocumented, no condition attached: Nachvollziehbares Protokoll über Zugriffe und Änderungen in allen Tarifen enthalten, mit benannter Frist und Ausleitung in eigene Systeme; oder die Nachvollziehbarkeit liegt vollständig in eigener Hand, weil das Werkzeug im eigenen Betrieb läuft.documented, tied to a condition: Protokoll vorhanden, aber an einen höheren Tarif oder einen kostenpflichtigen Zusatz gebunden, oder die Ausleitung fehlt in den unteren Stufen; Reichweite und Frist sind benannt.documented, but unfavourable: Protokolle sind nur anbieterseitig beschrieben, oder Reichweite und Frist bleiben offen, sodass sich Nachweispflichten nicht planen lassen.open on a point that decides usability: Öffentlich nicht belegt, ob der Kunde überhaupt ein auswertbares Protokoll erhält.open on a point that decides usabilityunclear, audit right granted by contractAs of 2026-07-30Processing addendum for the ancillary services: standard contractual clauses module two, 14-day objection window for new subprocessors, deletion within 30 days, one on-site audit per calendar yearOpen sourceThe processing addendum grants an on-site audit right of no more than one audit per calendar year. Whether access and changes inside the seller account are logged in an auditable, exportable way, and to what extent, is not publicly documented.As of 2026-07-30

What it really costs

Entry price

No base fee and no setup cost. 5 percent plus 50 US cents per checkout transaction, which the vendor states covers card acceptance, tax registration and remittance, fraud protection, chargebacks and buyer support.As of 2026-07-305 percent plus 50 US cents per checkout transaction, custom pricing for products under 10 dollars and for invoiced salesOpen source

As of 2026-07-30

What gets expensive

In three places. First the flat component: 50 cents on a 5 dollar ticket is another ten percent, which is why the vendor points products under 10 dollars and invoiced sales to custom pricing. Second the currency: taking payout in a currency other than your balance currency costs a conversion margin of up to 1.5 percent, and a wire into a country with a different currency costs 15 dollars, euros or pounds. Third the scaling: 5 percent is an uncapped levy on revenue. Somewhere around 10 million in revenue it exceeds what an in-house tax function with its own registrations costs, and that is exactly the moment when leaving is most expensive.

What it displaces

  • Own indirect tax registration in every country you sell into
  • A separate tax service alongside the payment processor
  • Your own invoicing, dunning and chargeback handling

Interfaces

  • Billing API and event notifications
  • Checkout as an embedded overlay or as a redirect
  • Customer data export from the seller account
  • Handover of payment method tokens to a third-party PCI vault

Matching methods

  • Regulatory Density TestThe test finds a textbook case of a duty that hits everyone alike, because every vendor owes VAT in foreign jurisdictions, and Paddle takes that duty on itself as the contracting party.
  • The Five Animals: ACV-to-GTM ModelThe model calls for a no-touch route to market at small annual contract values, and selling without a rep only holds up if per-country tax duties do not have to be handled one by one.

Alternatives

  • Stripe

Sources

  1. 1.5 percent plus 50 US cents per checkout transaction, custom pricing for products under 10 dollars and for invoiced sales (opens in a new tab)paddle.com/pricing · As of 2026-07-30
  2. 2.Paddle is the reseller of the product, 30 days' notice, funds withheld until the later of six months after termination or expiry of the last subscription (opens in a new tab)paddle.com/legal/terms · As of 2026-07-30
  3. 3.The buyer contracts with Paddle rather than with the software company, and data is processed outside the EU (opens in a new tab)paddle.com/legal/gdpr · As of 2026-07-30
  4. 4.Paddle and the seller are independent controllers, not controller and processor (opens in a new tab)paddle.com/legal/data-sharing-addendum · As of 2026-07-30
  5. 5.Exit: payment token handover to a foreign PCI vault within about two weeks, customer data exported from the dashboard (opens in a new tab)paddle.com/seller-guides/subscription-migration · As of 2026-07-30
  6. 6.Payout fees: none for ACH and SEPA in matching currency, 15 dollars, euros or pounds when the currency differs, conversion margin of up to 1.5 percent (opens in a new tab)paddle.com/help/manage/get-paid/is-there-a-fee-taken-for-payouts · As of 2026-07-30
  7. 7.Processing addendum for the ancillary services: standard contractual clauses module two, 14-day objection window for new subprocessors, deletion within 30 days, one on-site audit per calendar year (opens in a new tab)paddle.com/legal/data-processing-addendum · As of 2026-07-30
  8. 8.Legal entity and company number: Paddle.com Market Limited, 08172165, incorporated 8 August 2012, status active (opens in a new tab)find-and-update.company-information.service.gov.uk/…/08172165 · As of 2026-07-30
  9. 9.The large payment processor offers its own merchant-of-record model at a 3.5 percent surcharge on top of regular payment fees (opens in a new tab)stripe.com/pricing · As of 2026-07-30
  10. 10.paddle.com/… (opens in a new tab)As of 2026-07-30
  11. 11.paddle.com/blog/paddle-acquires-profitwell (opens in a new tab)As of 2026-07-30
  12. 12.paddle.com/about (opens in a new tab)As of 2026-07-30
  13. 13.fintechfutures.com/… (opens in a new tab)As of 2026-07-30
  14. 14.paddle.com/legal/privacy (opens in a new tab)As of 2026-07-30
  15. 15.paddle.com/legal/soc-2-compliance (opens in a new tab)As of 2026-07-30

Last reviewed: 2026-07-30 by Dr. Oliver Gausmann, Convios GmbH

Details out of date? Let us know.

← Back to the toolbox