Security compliance features

StoreConnect is built with security and compliance at its core, giving you confidence that your data is safe and protected. With SOC 2, ISO 27001, and GDPR compliance, HIPAA compliance available as an add-on, and dedicated privacy and security teams, your Salesforce org holds all customer, order, and store data, and each store runs on StoreConnect-hosted servers that hold a synchronized copy of the data the store needs. Credit card payments are handled exclusively by PCI-compliant payment providers, while all data is encrypted in transit and at rest, and regularly audited by independent third parties.

Security compliance

• StoreConnect is SOC 2 Type 1 and 2 compliant

• StoreConnect maintains a dedicated privacy team and is GDPR compliant

• StoreConnect is ISO 27001 certified

• HIPAA compliance is available as an add-on on the Emporium and Flagship plans

• StoreConnect maintains a dedicated Security team, whose responsibilities include maintaining our application, network and system security. We engage independent third parties to regularly test and audit the security and privacy program

• StoreConnect encrypts all data in transit and at rest

Location of customer data

• Your Salesforce org is the system of record for customer information, orders, products, pages, and all other configuration, protected by Salesforce data privacy and security

• Each store runs on StoreConnect-hosted servers in a SOC 2 compliant and audited environment. These hold a synchronized copy of the data the store needs, in an encrypted database

Storage of credit card information

• StoreConnect does not process credit card payments and does not store credit card information. Credit card payments are handled by our payment provider partners who maintain PCI compliance