B2C Commerce / Commerce Cloud (First Party)

Applicable to the services branded as B2C Commerce/Commerce Cloud on First Party Data Centers

Please refer to the "Audits and Certifications" section of the service-specific Security, Privacy and Architecture documentation for details regarding the security and privacy related audits and certifications received.

Related documents

Documents associated with this service

Name	Updated On	Infrastructure	Category
Salesforce Trusted AI Impact Report	2026-10-09	First party Hyperforce	FAQ's and White Papers
Vulnerability/Penetration Report Summary - Commerce Cloud SLAS	2026-10-05	First party	External Security Assessments
ISO 42001:2023 - Salesforce AI Platform, Agentforce Slack AI, GIA2H	2026-10-01	First party AWS Hyperforce	ISO 42001
SOC 1 Bridge (Gap) Letter - Commerce Cloud Digital	2026-10-01	First party Hyperforce	SOC 1
Vulnerability/Penetration Report Summary - Salesforce CC Mobify	2026-09-01	First party AWS	External Security Assessments
PCI ASV Network Scan - PredictSpring	2026-08-21	First party AWS	PCI DSS
PCI ASV Network Scan - Commerce Cloud	2026-08-20	First party Hyperforce	PCI DSS
Salesforce Enterprise Resilience/BCP Summary	2026-07-23	First party AWS Hyperforce	Resilience, BCP & DR
Vulnerability/Penetration Report Summary - B2B Commerce	2026-07-15	First party	External Security Assessments
PCI Attestation of Compliance (AoC) - Commerce Cloud	2026-07-14	First party Hyperforce	PCI DSS