Salesforce B2C Commerce 24.7 > B2C Commerce Security Guide

B2C Commerce Security Model

Salesforce B2C Commerce security is a partnership between Salesforce and our B2C Commerce customers. As always, Trust is our #1 value at Salesforce. We are committed to delivering the highest standard in system availability, performance, and security.

  • Shared Responsibility Model
    Ecommerce sites and platforms are particularly attractive cyber attack targets. Cyber attackers look for locations where they can try to exfiltrate sensitive data, such as credit cards, personally identifiable information (PII), and credentials. The ordering workflow also offers an attractive attack surface for cybercriminals to try to enrich themselves. They can create fake orders, adjust coupons and promotions, and deny service to legitimate customers.
  • Security Managed by Salesforce
    Salesforce ensures that security is a focus of B2C Commerce development and provides secure development and platform-level security.
  • Security Managed by Customer
    Salesforce provides a variety of configurable security controls that authorized administrators can use to secure their instances on the Salesforce B2C Commerce platform. Customers can use additional controls to further customize their security footprint.

Infocenter Retirement: On June 30, 2023, the Infocenter was retired, and documentation currently hosted on the Infocenter will be published to Salesforce Help, Commerce Cloud Developer Center, and Salesforce B2C Commerce Developer Documentation Resources. For more information, see the release note.