Compliance engineered for the Cloud
Salesforce maintains a comprehensive set of compliance certifications and attestations to validate our #1 value of Trust.

PCI Responsibility Matrix - Commerce Cloud on 1P

PCI DSS B2C Commerce / Commerce Cloud

The PCI Responsibility Matrix outlines which parties (e.g., service providers like Salesforce and their customers) are accountable for specific PCI DSS controls required to protect payment card data. It serves as a guide for defining shared and individual responsibilities, ensuring that each party understands its role in maintaining compliance.
Latest version
Valid from 2024-07-15
Last updated on 2024-07-16