The 3rd party needs to be someone who is trustworthy in two senses: 1. They can be trusted not to misuse the authorisation they will be given to Dalton's Strip

The 3rd party needs to be someone who is trustworthy in two senses: 1. They can be trusted not to misuse the authorisation they will be given to Dalton's Stripe account. The Stripe API (https://stripe.com/docs/api https://stripe.com/docs/api) does indeed give access to identifying information. 2. We can trust them not to misrepresent the facts on behalf of their client (i.e., Dalton). I've no idea what kind of institutions Dalton is thinking of, but reputable accountants should fit the bill.