---
schema_version: "1"
id: 2dd6f932b20739a21acef41f9bc32bb2b466a217cadaf567c8d0382f2df36be6
title: B2C Commerce Security Model
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/cc/264-0-0/b2c_commerce_security_model.md
canonical_url: https://help.salesforce.com/s/articleView?id=cc.b2c_commerce_security_model.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 90a0ccd82c7d1ec1758d703638242f5c3c05dacfd775ba2e0bd7065a042115fe
description: "Salesforce B2C Commerce security is a partnership between Salesforce and our B2C Commerce customers. As always, Trust is our #1 value at Salesforce. We’re committed to delivering the highest standard in system availability, performance, and security."
products:
  - Commerce
  - B2C Commerce
release: "264"
---
# B2C Commerce Security Model

Salesforce B2C Commerce security is a partnership between Salesforce and our B2C Commerce customers. As always, Trust is our #1 value at Salesforce. We’re committed to delivering the highest standard in system availability, performance, and security.

- **[Shared Responsibility Model](https://help.salesforce.com/s/articleView?id=cc.b2c_shared_responsibility_model.htm&release=264.0.0&type=5)**  
    B2C Commerce sites and platforms are attractive cyber attack targets. Cyber attackers look for locations where they can try to exfiltrate sensitive data, such as credit cards, personally identifiable information (PII), and credentials. The ordering workflow also offers an attractive attack surface for cybercriminals to try to enrich themselves. They can create fake orders, adjust coupons and promotions, and deny service to legitimate customers.
- **[Security Managed by Salesforce](https://help.salesforce.com/s/articleView?id=cc.b2c_security_managed_by_salesforce.htm&release=264.0.0&type=5)**  
    Salesforce ensures that security is a focus of B2C Commerce development and provides secure development and platform-level security.
- **[Security Managed by Customer](https://help.salesforce.com/s/articleView?id=cc.b2c_security_managed_by_customer.htm&release=264.0.0&type=5)**  
    Salesforce provides a variety of configurable security controls that authorized administrators can use to secure their instances on the Salesforce B2C Commerce platform. Customers can use additional controls to further customize their security footprint.