Salesforce B2C Commerce 24.7 >

B2C Commerce Security Guide

To help protect your sites from security threats, follow our security best practices as you set up, administer, and develop your Salesforce B2C Commerce environments.

Note: The topics in the B2C Commerce Security Guide are provided on an information-only basis. This document is not legal advice and no attorney-client relationship is created by its use. Salesforce urges its customers and prospective customers to consult with their own counsel to familiarize themselves with the security requirements that govern their specific situations.

To the extent the guide outlines Salesforce's current product offerings, those are as of the date of issue of this document only, and are subject to change without notice. Customers are responsible for making their own independent assessment of the information in this document and any use of Salesforce’s products or services, subject to the terms of customer's agreement with Salesforce. This documentation does not modify any agreement between Salesforce and its customers.

  • B2C Commerce Security Model
    Salesforce B2C Commerce security is a partnership between Salesforce and our B2C Commerce customers. As always, Trust is our #1 value at Salesforce. We are committed to delivering the highest standard in system availability, performance, and security.
  • General Security Best Practices
    At Salesforce, we understand that the confidentiality, integrity, and availability of your data is vital to your business. We want you to implement maximum protection for your sites against security threats and recommend using the following core best practices as you set up your Salesforce B2C Commerce environments.
  • Security Best Practices for Administrators
    You can use Business Manager to secure your site and ensure a safe online shopping environment for your customers. In doing so, you also secure Business Manager by preventing attackers from removing security controls that you previously configured.
  • Security Best Practices for Developers
    As a B2C Commerce developer, use these security best practices to develop secure storefronts.

Infocenter Retirement: On June 30, 2023, the Infocenter was retired, and documentation currently hosted on the Infocenter will be published to Salesforce Help, Commerce Cloud Developer Center, and Salesforce B2C Commerce Developer Documentation Resources. For more information, see the release note.