---
schema_version: "1"
id: bba9efc088945a87a2edeb108ba9b00208ce1db516674f4aa68ae2acb3fe76b1
title: Secure Storage in B2C Commerce
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/cc/264-0-0/b2c_secure_storage.md
canonical_url: https://help.salesforce.com/s/articleView?id=cc.b2c_secure_storage.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 4b35813be59b5388f27592eee3fc3da338f1bebd0f016c39f676dc55472c247b
description: Salesforce B2C Commerce stores many types of sensitive information, the most important being credit card details. Credit card encryption, key generation, and re-encryption are automatic, and merchants undergoing a PCI audit can monitor this process.
products:
  - Commerce
  - B2C Commerce
release: "264"
---
# Secure Storage in B2C Commerce

Salesforce B2C Commerce stores many types of sensitive information, the most important being credit card details. Credit card encryption, key generation, and re-encryption are automatic, and merchants undergoing a PCI audit can monitor this process.

Payment instruments, such as debit and credit cards, aren’t removed from B2C Commerce. They’re masked after a data retention period that you can configure. The default retention period is 12 months. B2C Commerce masks credit card payment instrument types based on credit card validity, and it masks payment instruments of other types after the data retention period expires. It masks payment instruments assigned to orders after the data retention period expires.

- **[Private Keys and Certificates in B2C Commerce](https://help.salesforce.com/s/articleView?id=cc.b2c_certificates_and_private_keys.htm&release=264.0.0&type=5)**  
    In various scenarios, you must import your third-party certificates and private keys into your instance’s keystore. A keystore can store multiple entries, each of which can be of type `PrivateKeyEntry` or of type `TrustedCertificateEntry`. This is similar to the terminology used by `java.security.KeyStore`.