[{"data":1,"prerenderedAt":411},["ShallowReactive",2],{"bootstrap":3,"blog-commerce-layer-s-commitment-to-trust-and-security":277},{"navigation":4,"globalConfig":196,"forms":218},{"headerSections":5,"headerFooterLinks":67,"footer":76,"legalLinks":153,"socialLinks":176},[6,39,44,50,57,62],{"hasSubMenu":7,"title":8,"links":9,"columns":38},true,"Product",[10,20,26,32],{"showTag":11,"_modelApiKey":12,"text":13,"subtitle":14,"icon":15,"isExternal":11,"link":16,"openForm":11},false,"navigation_link","Universal checkout","Sell anywhere","globe-simple",{"_modelApiKey":17,"slug":18,"title":19},"page","universal-checkout","Universal Checkout",{"showTag":11,"_modelApiKey":12,"text":21,"subtitle":22,"icon":23,"isExternal":11,"link":24,"openForm":11},"Distributed OMS","Manage orders","package",{"_modelApiKey":17,"slug":25,"title":21},"distributed-oms",{"showTag":11,"_modelApiKey":12,"text":27,"subtitle":28,"icon":29,"isExternal":11,"link":30,"openForm":11},"Promotion engine","Automated discounts","seal-percent",{"_modelApiKey":17,"slug":31,"title":27},"promotion-engine",{"showTag":11,"_modelApiKey":12,"text":33,"subtitle":34,"icon":35,"isExternal":11,"link":36,"openForm":11},"POS system","Operate stores","devices",{"_modelApiKey":17,"slug":37,"title":33},"pos-system",2,{"hasSubMenu":11,"showTag":11,"_modelApiKey":12,"text":40,"isExternal":11,"link":41,"openForm":11,"title":40},"Pricing",{"_modelApiKey":42,"slug":43},"pricing_page","pricing",{"hasSubMenu":11,"showTag":11,"_modelApiKey":12,"text":45,"isExternal":11,"link":46,"openForm":11,"title":45},"Customers",{"_modelApiKey":47,"slug":48,"title":49},"customer_landing_page","customers","Customers page",{"hasSubMenu":11,"showTag":11,"_modelApiKey":12,"text":51,"isExternal":11,"link":52,"openForm":11,"form":54,"title":51},"Partners",{"_modelApiKey":17,"slug":53,"title":51},"partners",{"_modelApiKey":55,"slug":53,"name":56},"form","PartnersForm",{"hasSubMenu":11,"showTag":11,"_modelApiKey":12,"text":58,"label":59,"isExternal":7,"url":60,"openForm":11,"title":61},"Docs Hub","Learn more","https:\u002F\u002Fdocs.commercelayer.io\u002F","Docs",{"hasSubMenu":11,"showTag":11,"_modelApiKey":12,"text":63,"isExternal":11,"link":64,"openForm":11,"title":63},"Blog",{"_modelApiKey":65,"slug":66},"blog_landing_page","blog",[68,72],{"text":69,"link":70},"Sign in",{"_modelApiKey":12,"text":69,"isExternal":7,"url":71,"openForm":11},"https:\u002F\u002Fdashboard.commercelayer.io\u002Fsign_in",{"text":73,"link":74},"Sign up for free",{"_modelApiKey":12,"text":73,"isExternal":7,"url":75,"openForm":11},"https:\u002F\u002Fdashboard.commercelayer.io\u002Fsign_up",[77,89,109,132],{"hasSubMenu":7,"title":8,"links":78},[79,81,83,85,87],{"showTag":11,"_modelApiKey":12,"text":13,"subtitle":14,"icon":15,"isExternal":11,"link":80,"openForm":11},{"_modelApiKey":17,"slug":18,"title":19},{"showTag":11,"_modelApiKey":12,"text":21,"subtitle":22,"icon":23,"isExternal":11,"link":82,"openForm":11},{"_modelApiKey":17,"slug":25,"title":21},{"showTag":11,"_modelApiKey":12,"text":27,"subtitle":28,"icon":29,"isExternal":11,"link":84,"openForm":11},{"_modelApiKey":17,"slug":31,"title":27},{"showTag":11,"_modelApiKey":12,"text":33,"subtitle":34,"icon":35,"isExternal":11,"link":86,"openForm":11},{"_modelApiKey":17,"slug":37,"title":33},{"showTag":11,"_modelApiKey":12,"text":40,"isExternal":11,"link":88,"openForm":11},{"_modelApiKey":42,"slug":43},{"hasSubMenu":7,"title":90,"links":91},"Resources",[92,94,99,104,107],{"showTag":11,"_modelApiKey":12,"text":93,"isExternal":7,"url":60,"openForm":11},"Documentation",{"showTag":11,"_modelApiKey":12,"text":95,"label":95,"isExternal":11,"link":96,"openForm":11},"Agentic Commerce",{"_modelApiKey":17,"slug":97,"title":98},"agentic-commerce-whitepaper","Agentic Commerce Whitepaper",{"showTag":11,"_modelApiKey":12,"text":100,"isExternal":11,"link":101,"openForm":11},"Core concepts",{"_modelApiKey":17,"slug":102,"title":103},"headless-commerce","Headless commerce",{"showTag":11,"_modelApiKey":12,"text":105,"isExternal":7,"url":106,"openForm":11},"Changelog","https:\u002F\u002Fdocs.commercelayer.io\u002Fchangelog\u002F",{"showTag":11,"_modelApiKey":12,"text":63,"isExternal":11,"link":108,"openForm":11},{"_modelApiKey":65,"slug":66},{"hasSubMenu":7,"title":110,"links":111},"Company",[112,116,118,121,126],{"showTag":11,"_modelApiKey":12,"text":113,"isExternal":11,"link":114,"openForm":11},"Vision",{"_modelApiKey":17,"slug":115,"title":113},"vision",{"showTag":11,"_modelApiKey":12,"text":45,"isExternal":11,"link":117,"openForm":11},{"_modelApiKey":47,"slug":48,"title":49},{"showTag":11,"_modelApiKey":12,"text":51,"isExternal":11,"link":119,"openForm":11,"form":120},{"_modelApiKey":17,"slug":53,"title":51},{"_modelApiKey":55,"slug":53,"name":56},{"showTag":11,"_modelApiKey":12,"text":122,"isExternal":11,"link":123,"openForm":11},"Security",{"_modelApiKey":17,"slug":124,"title":125},"security","Security at Commerce Layer",{"showTag":11,"_modelApiKey":12,"text":127,"label":128,"isExternal":11,"openForm":7,"form":129},"Giveback","Giveback program",{"_modelApiKey":55,"slug":130,"name":131},"giveback","GivebackForm",{"hasSubMenu":7,"title":133,"links":134},"Get in touch",[135,140,145,149],{"showTag":11,"_modelApiKey":12,"text":136,"isExternal":11,"openForm":7,"form":137},"Contact",{"_modelApiKey":55,"slug":138,"name":139},"contact","ContactUsForm",{"showTag":11,"_modelApiKey":12,"text":141,"isExternal":11,"openForm":7,"form":142},"Book a demo",{"_modelApiKey":55,"slug":143,"name":144},"demo","RequestDemoForm",{"showTag":11,"_modelApiKey":12,"text":146,"label":147,"isExternal":7,"url":148,"openForm":11},"Support","Email support","mailto:support@commercelayer.io",{"showTag":11,"_modelApiKey":12,"text":150,"label":151,"isExternal":7,"url":152,"openForm":11},"Community","Discord community","https:\u002F\u002Fdiscord.gg\u002Fcommercelayer",{"hasSubMenu":7,"title":154,"links":155},"Legal",[156,161,165,169,173],{"showTag":11,"_modelApiKey":12,"text":157,"label":158,"isExternal":7,"url":159,"openForm":11,"htmlClassNames":160},"Terms","Terms and conditions","\u002Flegal-embed\u002Fterms-of-service","iubenda-nostyle no-brand iubenda-noiframe iubenda-embed",{"showTag":11,"_modelApiKey":12,"text":162,"label":163,"isExternal":7,"url":164,"openForm":11,"htmlClassNames":160},"Privacy","Privacy policy","\u002Flegal-embed\u002Fprivacy-policy",{"showTag":11,"_modelApiKey":12,"text":166,"label":167,"isExternal":7,"url":168,"openForm":11,"htmlClassNames":160},"Cookies","Cookie policy","\u002Flegal-embed\u002Fcookie-policy",{"showTag":11,"_modelApiKey":12,"text":170,"isExternal":7,"url":171,"openForm":11,"htmlClassNames":172},"Notice at collection","#","iubenda-cs-uspr-link",{"showTag":11,"_modelApiKey":12,"text":174,"isExternal":7,"url":171,"openForm":11,"htmlClassNames":175},"Privacy preferences","iubenda-cs-preferences-link",[177,180,184,188,192],{"title":178,"type":179,"url":152,"isExternal":7},"Discord","discord-logo",{"title":181,"type":182,"url":183,"isExternal":7},"Github","github","https:\u002F\u002Fgithub.com\u002Fcommercelayer",{"title":185,"type":186,"url":187,"isExternal":7},"Bluesky","bluesky-logo","https:\u002F\u002Fbsky.app\u002Fprofile\u002Fcommercelayer.io",{"title":189,"type":190,"url":191,"isExternal":7},"X","x-logo","https:\u002F\u002Fx.com\u002Fcommercelayer",{"title":193,"type":194,"url":195,"isExternal":7},"LinkedIn","linkedin","https:\u002F\u002Fwww.linkedin.com\u002Fcompany\u002Fcommerce-layer",{"pagesWithoutCtaPanel":197,"ctaPanel":198,"notification":208,"showApiResponseTime":11,"newsletterSignup":216},[],{"title":199,"subtitle":200,"ctas":201},"Ready to get started?","Discover how we can help your business.",[202,205],{"_modelApiKey":203,"text":204,"isExternal":7,"url":75,"openForm":11},"link","Get started for free",{"_modelApiKey":203,"text":206,"isExternal":11,"openForm":7,"form":207},"Contact us",{"_modelApiKey":55,"slug":138,"name":139},{"showNotification":7,"link":209,"linkText":210,"text":215},{"_modelApiKey":203,"text":210,"isExternal":11,"link":211,"openForm":11},"Read article",{"_modelApiKey":212,"slug":213,"title":214},"blog_post","the-new-payments-api-built-for-how-people-pay-now","The new Payments API. Built for how people pay now.","\u003Cp>The new Payments API. Built for how people pay now.\u003C\u002Fp>\n",{"ctaText":217},"Subscribe",[219,225,229,236,240,246,249,253,261,262,267,272,274],{"_modelApiKey":55,"slug":220,"pardotFormEmbedCode":221,"formEmbedMinHeight":222,"successTitle":223,"successCopy":224},"agentic-commerce","https:\u002F\u002Fcommercelayer.fillout.com\u002Ft\u002F5w4Khwgxr6us?whitepaper=agentic",520,"Thank you for your request!","We’ll be in touch soon to arrange a date and time for your personalized demo.",{"_modelApiKey":55,"slug":226,"pardotFormEmbedCode":227,"formEmbedMinHeight":228,"successTitle":223,"successCopy":224},"shopify","https:\u002F\u002Fform.fillout.com\u002Ft\u002FgVnLSmKZwRus",850,{"_modelApiKey":55,"slug":130,"pardotFormEmbedCode":230,"formEmbedMinHeight":231,"displayTitle":232,"copy":233,"successTitle":234,"successCopy":235},"https:\u002F\u002Fform.fillout.com\u002Ft\u002FmVDF8aAiofus",500,"We give back.","\u003Cp>Part of Commerce Layer's company ethos is to empathize and support one another: co-workers, customers, and community. We want to do our part to help nonprofit organizations and small businesses who may feel adversely affected by the current global economic climate, and as a result, need in-kind support to reach their customers.\u003C\u002Fp>\n\n\u003Cp>If this general description matches your organization’s needs, please tell us your story by completing the following form so we can consider helping your cause.\u003C\u002Fp>\n","Thank you!","We will contact you soon to learn more about your story.",{"_modelApiKey":55,"slug":237,"pardotFormEmbedCode":227,"formEmbedMinHeight":228,"displayTitle":238,"copy":239},"book-an-onboarding-session","Book an onboarding session","\u003Cp>Schedule some time and our devs will help you set up a Commerce Layer + Sanity store.\u003C\u002Fp>\n",{"_modelApiKey":55,"slug":241,"pardotFormEmbedCode":242,"formEmbedMinHeight":243,"displayTitle":244,"successTitle":234,"successCopy":245},"download-our-whitepaper","https:\u002F\u002Fform.fillout.com\u002Ft\u002F5YPWmy8oT7us?whitepaper=ComposableCommerce",450,"Download our whitepaper.","Check your inbox. You should receive a download link soon.",{"_modelApiKey":55,"slug":247,"pardotFormEmbedCode":248,"formEmbedMinHeight":243,"displayTitle":244,"successTitle":234,"successCopy":245},"download-the-content-and-commerce-whitepaper","https:\u002F\u002Fform.fillout.com\u002Ft\u002F5YPWmy8oT7us?whitepaper=ContentAndCommerce",{"_modelApiKey":55,"slug":250,"pardotFormEmbedCode":251,"formEmbedMinHeight":243,"displayTitle":244,"copy":252,"successTitle":234,"successCopy":245},"whitepaper","https:\u002F\u002Fform.fillout.com\u002Ft\u002F5YPWmy8oT7us?whitepaper=Jamstack","\u003Cp>Commerce Layer is the perfect platform for building commerce on the Jamstack. Convert any design into pixel perfect HTML pages. Connect a best-of-breed headless CMS. Go serverless and forget the hassle of managing complex infrastructures.\u003C\u002Fp>\n",{"_modelApiKey":55,"slug":254,"pardotFormEmbedCode":255,"formEmbedMinHeight":256,"displayTitle":257,"copy":258,"successTitle":259,"successCopy":260},"contact-links","https:\u002F\u002Fform.fillout.com\u002Ft\u002FeWPyhHGHT7us",750,"Contact us.","\u003Cp>Tell us about your project. Our team will reach out to you for a personalized offer.\u003C\u002Fp>\n","Thanks for your message!","We’ll be in touch soon to discuss your project details.",{"_modelApiKey":55,"slug":138,"pardotFormEmbedCode":255,"formEmbedMinHeight":256,"displayTitle":257,"copy":258,"successTitle":259,"successCopy":260},{"_modelApiKey":55,"slug":263,"pardotFormEmbedCode":227,"formEmbedMinHeight":228,"displayTitle":264,"successTitle":265,"successCopy":266},"demo-embed","Want to see it in action? Request a demo.","Thanks for your request!","We’ll be in touch soon to arrange a date and time for your free live demo.",{"_modelApiKey":55,"slug":53,"pardotFormEmbedCode":268,"formEmbedMinHeight":228,"displayTitle":269,"copy":270,"successTitle":234,"successCopy":271},"https:\u002F\u002Fform.fillout.com\u002Ft\u002F9MTkDWMUSqus","Become our partner.","\u003Cp>Join us and get our guidance in helping your clients succeed. Our partners are our ambassadors. We are committed to your success as much as you are.\u003C\u002Fp>\n","We will contact you soon to discuss the details of our partnership.",{"_modelApiKey":55,"slug":273,"pardotFormEmbedCode":268,"formEmbedMinHeight":228,"displayTitle":269,"copy":270,"successTitle":234,"successCopy":271},"partners-embed",{"_modelApiKey":55,"slug":143,"pardotFormEmbedCode":227,"formEmbedMinHeight":228,"displayTitle":275,"copy":276,"successTitle":265,"successCopy":266},"Get a free live demo.","\u003Cp>Get a personalized demo and learn more about what Commerce Layer can do for your company.\u003C\u002Fp>\n",{"_modelApiKey":212,"link":278,"subtitle":283,"date":283,"author":284,"additionalAuthors":294,"icon":295,"abstract":296,"tag":297,"displayTitle":279,"cardRatio":300,"featured":11,"seoMetaTags":301,"layout":365,"blogPostCarousel":303,"_seoMetaTags":372,"authors":406},{"text":279,"isExternal":11,"url":280,"link":281},"SOC 2, ISO 27001, and PCI DSS: A testament to security and trust.","",{"_modelApiKey":212,"slug":282},"commerce-layer-s-commitment-to-trust-and-security","December 4, 2024",{"name":285,"picture":286},"Seth Bindernagel",{"url":287,"alt":288,"title":288,"width":289,"height":289,"format":290,"focalPoint":291,"customData":293},"https:\u002F\u002Fwww.datocms-assets.com\u002F35053\u002F1656680208-seth.jpg","Seth Bindernagel avatar",1280,"jpg",{"x":292,"y":292},0.5,{},[],"certificate","In 2024, Commerce Layer achieved several security certifications and distinctions that show our investment in keeping our clients and their customers safe.",{"color":298,"name":299},"gray","News","portrait",[302,306,310,313,317,320,323,327,331,335,338,342,346,350,354,357,361],{"attributes":303,"tag":304,"content":305},null,"title","Committed to your security | SOC 2, ISO 27001, PCI DSS",{"attributes":307,"tag":309,"content":303},{"property":308,"content":305},"og:title","meta",{"attributes":311,"tag":309,"content":303},{"name":312,"content":305},"twitter:title",{"attributes":314,"tag":309,"content":303},{"name":315,"content":316},"description","We meet the industry standard with SOC 2, ISO 27001, and PCI DSS certifications, safeguarding your data with robust compliance and top-tier security.",{"attributes":318,"tag":309,"content":303},{"property":319,"content":316},"og:description",{"attributes":321,"tag":309,"content":303},{"name":322,"content":316},"twitter:description",{"attributes":324,"tag":309,"content":303},{"property":325,"content":326},"og:image","https:\u002F\u002Fwww.datocms-assets.com\u002F35053\u002F1733312075-cl_compliance-certifications_blog-post-02.jpg?auto=format&fit=max&w=1200",{"attributes":328,"tag":309,"content":303},{"property":329,"content":330},"og:image:width","1200",{"attributes":332,"tag":309,"content":303},{"property":333,"content":334},"og:image:height","630",{"attributes":336,"tag":309,"content":303},{"name":337,"content":326},"twitter:image",{"attributes":339,"tag":309,"content":303},{"property":340,"content":341},"og:locale","en",{"attributes":343,"tag":309,"content":303},{"property":344,"content":345},"og:type","article",{"attributes":347,"tag":309,"content":303},{"property":348,"content":349},"og:site_name","Commerce Layer",{"attributes":351,"tag":309,"content":303},{"property":352,"content":353},"article:modified_time","2025-10-08T16:34:15Z",{"attributes":355,"tag":309,"content":303},{"property":356,"content":280},"article:publisher",{"attributes":358,"tag":309,"content":303},{"name":359,"content":360},"twitter:card","summary_large_image",{"attributes":362,"tag":309,"content":303},{"name":363,"content":364},"twitter:site","@commercelayer",[366],{"_modelApiKey":367,"copy":368,"listStyle":369,"darkTheme":11,"buttons":370,"color":371,"indent":7},"wysiwyg","\u003Cp>According to \u003Ca href=\"https:\u002F\u002Fwww.ibm.com\u002Freports\u002Fdata-breach\">IBM's 2024 Cost of a Data Breach report\u003C\u002Fa>, the average total cost of a security data breach has escalated to $4.88 million globally, with ecommerce and financial sectors bearing the brunt of potential security vulnerabilities. Perhaps more alarming, research from Cybersecurity Ventures predicts that cybercrime will cost the global economy an unprecedented \u003Ca href=\"https:\u002F\u002Fcybersecurityventures.com\u002Fcybercrime-to-cost-the-world-9-trillion-annually-in-2024\u002F%22\">$9.5 trillion in 2024\u003C\u002Fa>, with a new cyber attack occurring every 39 seconds. These staggering facts present existential threats for enterprise brands. A single security breach can destroy customer trust built over decades, trigger severe reputational damage, and result in massive financial penalties. Security has become the fundamental currency of trust. Brands select technology vendors that they know will serve as a security partner entrusted with their most valuable asset: customer confidence.\u003C\u002Fp>\n\n\u003Cp>In 2024, Commerce Layer achieved several security certifications and distinctions that represent more than just a technical achievement. They are industry distinctions that serve as a validation about how much we invest in keeping our clients and their customers safe. These achievements include SOC2, PCI DSS, and ISO 27001. Plus, while it’s not an industry security or compliance standard, we also achieved the AWS Foundational Tech Review, further validating our platform with a third-party evaluation. In this post, we’ll dive into each, describe what they mean, what we had to do to meet the standard, and why they are important for any brand.\u003C\u002Fp>\n\n\u003Ch4>SOC 2: The foundation of trust in service organizations\u003C\u002Fh4>\n\n\u003Cp>The Service Organization Control (SOC) reporting framework emerged in the early 2000s as a response to the growing complexity of service-based business models and the need for standardized security assurance. Initially created to provide transparency into service organizations' control environments, SOC 2 has become a critical benchmark for:\u003C\u002Fp>\n\n\u003Cul>\n\u003Cli>Demonstrating organizational commitment to data security\u003C\u002Fli>\n\u003Cli>Providing independent verification of security practices\u003C\u002Fli>\n\u003Cli>Addressing growing concerns about data protection in cloud-based services\u003C\u002Fli>\n\u003Cli>Creating a standardized approach to evaluating organizational controls\u003C\u002Fli>\n\u003C\u002Ful>\n\n\u003Cp>SOC 2 matters in modern computing because it addresses the critical need for:\u003C\u002Fp>\n\n\u003Cul>\n\u003Cli>Transparent security practices\u003C\u002Fli>\n\u003Cli>Independent verification of control mechanisms\u003C\u002Fli>\n\u003Cli>Comprehensive risk management\u003C\u002Fli>\n\u003Cli>Customer confidence in digital service providers\u003C\u002Fli>\n\u003C\u002Ful>\n\n\u003Cp>Commerce Layer’s SOC 2 Type II certification involved a comprehensive 12-month audit that examined a number of aspects of our security practices. We’ve listed the highlights in the following sub-sections.\u003C\u002Fp>\n\n\u003Cp>\u003Cstrong>Demonstrated capabilities:\u003C\u002Fstrong>\u003C\u002Fp>\n\n\u003Cul>\n\u003Cli>Cryptographic controls (AES-256 encryption for data at rest and in transit)\u003C\u002Fli>\n\u003Cli>Multi-factor authentication implementation\u003C\u002Fli>\n\u003Cli>Detailed access control mechanisms\u003C\u002Fli>\n\u003Cli>Granular user permission management\u003C\u002Fli>\n\u003Cli>Comprehensive logging and monitoring systems\u003C\u002Fli>\n\u003C\u002Ful>\n\n\u003Cp>\u003Cstrong>Technical implementation highlights:\u003C\u002Fstrong>\u003C\u002Fp>\n\n\u003Cul>\n\u003Cli>Implemented zero-trust network architecture\u003C\u002Fli>\n\u003Cli>Deployed advanced intrusion detection systems (IDS)\u003C\u002Fli>\n\u003Cli>Established continuous security event monitoring with real-time alerting\u003C\u002Fli>\n\u003Cli>Utilized machine learning-powered anomaly detection\u003C\u002Fli>\n\u003Cli>Maintained detailed audit trails with immutable log preservation\u003C\u002Fli>\n\u003C\u002Ful>\n\n\u003Cp>\u003Cstrong>Security controls validated:\u003C\u002Fstrong>\u003C\u002Fp>\n\n\u003Cul>\n\u003Cli>NIST SP 800-53 control framework compliance\u003C\u002Fli>\n\u003Cli>Advanced encryption protocols\u003C\u002Fli>\n\u003Cli>Robust identity and access management (IAM)\u003C\u002Fli>\n\u003Cli>Comprehensive incident response procedures\u003C\u002Fli>\n\u003C\u002Ful>\n\n\u003Cp>For enterprise clients, SOC 2 certification is a non-negotiable requirement. With our SOC 2 compliance, we have implemented robust security controls that protect sensitive customer and transaction data. Of course, SOC 2 also means that we commit to maintaining a proactive approach to risk management and data protection.\u003C\u002Fp>\n\n\u003Ch4>PCI DSS: The evolution of payment security standards.\u003C\u002Fh4>\n\n\u003Cp>The Payment Card Industry Data Security Standard (PCI DSS) originated in 2004 as a collaborative effort between major credit card brands: Visa, MasterCard, American Express, Discover, and JCB. It was born from a critical need to protect cardholder data in a burgeoning digital financial ecosystem and emerged as a response to escalating cybercrime and data breach incidents. Prior to PCI DSS, payment security was fragmented and inconsistent. PCI DSS represents both a critical compliance checklist, and an industry framework that delivers the following: \u003C\u002Fp>\n\n\u003Cul>\n\u003Cli>Standardizes global payment security practices\u003C\u002Fli>\n\u003Cli>Protects consumers from financial fraud\u003C\u002Fli>\n\u003Cli>Creates a unified approach to data protection\u003C\u002Fli>\n\u003Cli>Reduces financial risks for businesses and consumers\u003C\u002Fli>\n\u003C\u002Ful>\n\n\u003Cp>To attain the full PCI DSS Level 1 provider certification, we demonstrated all of the following technical specs, implementation details, and advanced security mechanism.\u003C\u002Fp>\n\n\u003Cp>\u003Cstrong>Technical specifications:\u003C\u002Fstrong>\u003C\u002Fp>\n\n\u003Cul>\n\u003Cli>End-to-end payment data encryption\u003C\u002Fli>\n\u003Cli>Tokenization of sensitive payment information\u003C\u002Fli>\n\u003Cli>Segmented network architectures\u003C\u002Fli>\n\u003Cli>Regular penetration testing and vulnerability assessments\u003C\u002Fli>\n\u003C\u002Ful>\n\n\u003Cp>\u003Cstrong>Security implementation details:\u003C\u002Fstrong>\u003C\u002Fp>\n\n\u003Cul>\n\u003Cli>Payment Card Industry Data Security Standard version 4.0 compliance\u003C\u002Fli>\n\u003Cli>Advanced payment data tokenization\u003C\u002Fli>\n\u003Cli>Secure transmission protocols (TLS 1.3+)\u003C\u002Fli>\n\u003Cli>Regular automated and manual security assessments\u003C\u002Fli>\n\u003Cli>Comprehensive cardholder data protection strategies\u003C\u002Fli>\n\u003C\u002Ful>\n\n\u003Cp>\u003Cstrong>Advanced security mechanisms:\u003C\u002Fstrong>\u003C\u002Fp>\n\n\u003Cul>\n\u003Cli>Payment card data segmentation\u003C\u002Fli>\n\u003Cli>Dynamic fraud detection algorithms\u003C\u002Fli>\n\u003Cli>Secure payment processing microservices\u003C\u002Fli>\n\u003Cli>Continuous compliance monitoring\u003C\u002Fli>\n\u003C\u002Ful>\n\n\u003Cp>PCI compliance demonstrates that Commerce Layer meets the highest standards for handling payment information. Our platform protects against potential data breaches, reduces the risk of financial fraud, and builds trust with our enterprise customers who can pass that to their end users.\u003C\u002Fp>\n\n\u003Ch4>ISO 27001: The international standard for information security management\u003C\u002Fh4>\n\n\u003Cp>ISO 27001 is an internationally recognized standard for information security management systems (ISMS). It provides a systematic approach to managing sensitive company information, ensuring its confidentiality, integrity, and availability. Developed by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC), ISO 27001 emerged from the need to create a comprehensive, globally recognized framework for information security management. The standard's origins can be traced to the British Standard BS 7799 in the late 1990s and was first published in 2005. It is continuously updated to reflect technology advancements to address the complex challenges of global digital infrastructure. The standard provides a universal language for security practices, creates a standardized approach to risk management, and enables cross-border trust in information systems. \u003C\u002Fp>\n\n\u003Cp>To meet the ISO 27001 standards, we had to show how we identify, assess, and mitigate security risks as part of a required technical framework. It includes a set of 114 controls across 14 different domains, which cover areas like access control, cryptography, several layers of security, and supplier relationships. Specifically, we displayed the following:\u003C\u002Fp>\n\n\u003Cul>\n\u003Cli>Risk management methodology, aligned with ISO 31000, requiring that we systematically evaluate potential threats to our information assets and implement appropriate controls.\u003C\u002Fli>\n\u003Cli>An information security management system (ISMS) covering:\n\n\u003Cul>\n\u003Cli>Asset management\u003C\u002Fli>\n\u003Cli>Operational security controls\u003C\u002Fli>\n\u003Cli>Cryptographic controls\u003C\u002Fli>\n\u003Cli>Physical and environmental security\u003C\u002Fli>\n\u003Cli>Incident management procedures\u003C\u002Fli>\n\u003C\u002Ful>\u003C\u002Fli>\n\u003C\u002Ful>\n\n\u003Cp>The ISO 27001 certification demonstrates that we have a comprehensive information security management system and can systematically manage and protect sensitive information. As a commitment to our customers, we’re adhering to this rigorous and internationally recognized best practice, and also providing a framework for continuous security improvement.\u003C\u002Fp>\n\n\u003Ch4>A cherry on top: The AWS Foundational Tech Review\u003C\u002Fh4>\n\n\u003Cp>As part of the AWS marketplace process, Amazon developed their Foundational Tech Review (FTR) to ensure that technology solutions meet the highest standards of cloud security and performance. FTR involves a comprehensive evaluation of Commerce Layer’s cloud-based solutions to determine if we meet the standard. After the evaluation, AWS concluded that Commerce Layer met the FTR architectural integrity standards, assuring operational excellence, and serving as a reference benchmark for cloud service reliability in the AWS marketplace. Their assessment included:\u003C\u002Fp>\n\n\u003Cul>\n\u003Cli>Multi-region, high-availability infrastructure validation\u003C\u002Fli>\n\u003Cli>Comprehensive cloud security architecture review\u003C\u002Fli>\n\u003Cli>Advanced cloud native security implementation\u003C\u002Fli>\n\u003C\u002Ful>\n\n\u003Cp>We are very proud to be part of the AWS marketplace with the FTR distinctions, running AWS cloud services on two continents.\u003C\u002Fp>\n\n\u003Ch4>Conclusion: Building a holistic approach to digital trust…and we’re just getting started.\u003C\u002Fh4>\n\n\u003Cp>Commerce Layer's 2024 security certifications represent a comprehensive, multi-layered defense strategy that addresses the most critical aspects of digital security:\u003C\u002Fp>\n\n\u003Cp>\u003Cstrong>SOC 2\u003C\u002Fstrong>: A rigorous, independent validation that ensures our service organization maintains the highest standards of security, availability, processing integrity, confidentiality, and privacy, providing customers with verifiable assurance of our robust internal controls.\u003C\u002Fp>\n\n\u003Cp>\u003Cstrong>PCI DSS\u003C\u002Fstrong>: A critical certification that demonstrates our absolute commitment to protecting payment card data through comprehensive encryption, tokenization, and secure transmission protocols, ensuring the financial safety of every transaction processed through our platform.\u003C\u002Fp>\n\n\u003Cp>\u003Cstrong>ISO 27001\u003C\u002Fstrong>: A globally recognized standard that validates our systematic approach to managing sensitive information, showcasing our ability to identify, manage, and continually improve our information security risks through a comprehensive and adaptive management system.\u003C\u002Fp>\n\n\u003Cp>These certifications represent a fundamental approach to digital trust. In an era where data is the most valuable currency, we promise our enterprise customers that we will provide:\u003C\u002Fp>\n\n\u003Cul>\n\u003Cli>Proactive threat prevention\u003C\u002Fli>\n\u003Cli>Continuous security evolution\u003C\u002Fli>\n\u003Cli>Transparent and verifiable protection mechanisms\u003C\u002Fli>\n\u003Cli>A partnership built on trust and technological excellence\u003C\u002Fli>\n\u003C\u002Ful>\n\n\u003Cp>Our commitment to security and to protecting what matters most is part of our vision that prioritizes trust, innovation, and customer confidence. If you have any specific questions about these concepts, please don’t hesitate to reach out to our CTO, Massimo Scardellato.\u003C\u002Fp>\n","checkbox",[],"green",[373,374,376,378,380,382,384,386,388,390,392,394,396,398,400,402,404],{"attributes":303,"tag":304,"content":305},{"attributes":375,"tag":309,"content":303},{"property":308,"content":305},{"attributes":377,"tag":309,"content":303},{"name":312,"content":305},{"attributes":379,"tag":309,"content":303},{"name":315,"content":316},{"attributes":381,"tag":309,"content":303},{"property":319,"content":316},{"attributes":383,"tag":309,"content":303},{"name":322,"content":316},{"attributes":385,"tag":309,"content":303},{"property":325,"content":326},{"attributes":387,"tag":309,"content":303},{"property":329,"content":330},{"attributes":389,"tag":309,"content":303},{"property":333,"content":334},{"attributes":391,"tag":309,"content":303},{"name":337,"content":326},{"attributes":393,"tag":309,"content":303},{"property":340,"content":341},{"attributes":395,"tag":309,"content":303},{"property":344,"content":345},{"attributes":397,"tag":309,"content":303},{"property":348,"content":349},{"attributes":399,"tag":309,"content":303},{"property":352,"content":353},{"attributes":401,"tag":309,"content":303},{"property":356,"content":280},{"attributes":403,"tag":309,"content":303},{"name":359,"content":360},{"attributes":405,"tag":309,"content":303},{"name":363,"content":364},[407],{"name":285,"picture":408},{"url":287,"alt":288,"title":288,"width":289,"height":289,"format":290,"focalPoint":409,"customData":410},{"x":292,"y":292},{},1791534736831]