commercetools Expands Enterprise Security Program with New Trust Center and Industry Certifications

2026-07-08 · Source: The AI Journal · Field: Legal & Regulatory — Compliance & Risk Management, Legal Technology (LegalTech) · Depth: Intermediate, quick

Summary

commercetools, a global leader in autonomous commerce, announced on July 8, 2026, the expansion of its enterprise security and compliance program. This initiative includes the launch of a new Trust Center and the availability of its first ISAE 3402 Type 2 report, alongside an updated SOC 2 Type 2 report. The new Trust Center provides customers and prospects with centralized, self-service access to security certifications, audit reports, and compliance documentation, streamlining procurement, security reviews, and vendor assessments. These additions complement existing certifications such as HIPAA compliance, HDS certification for France, ISO 27001, and Cyber Essentials for the UK. This expanded program aims to provide enhanced assurance for organizations operating in highly regulated industries and those adopting AI-powered commerce platforms.

Key takeaway

For enterprise procurement, legal, or security teams evaluating commerce platforms, commercetools' expanded security program and new Trust Center significantly simplify vendor assessment. You can now access critical ISAE 3402 Type 2 and updated SOC 2 Type 2 reports, alongside existing HIPAA and ISO 27001 certifications, through a self-service portal. This transparency accelerates your due diligence process, ensuring the platform meets your organization's stringent security and compliance requirements, especially when operating in regulated industries or adopting AI-driven commerce.

Key insights

Enterprise commerce platforms require robust, transparent security and compliance documentation to build customer trust.

Principles

• Centralized access to security documentation accelerates vendor evaluation.
• Industry-standard certifications are crucial for regulated sectors.
• Trust is as vital as innovation in AI-powered commerce.

In practice

• Implement a Trust Center for self-service access to audit reports.
• Pursue ISAE 3402 Type 2 and SOC 2 Type 2 audits.
• Maintain certifications like HIPAA, HDS, ISO 27001, and Cyber Essentials.

Topics

• Enterprise Security
• Compliance Certifications
• Trust Center
• SOC 2 Type 2
• ISAE 3402 Type 2
• Autonomous Commerce

Best for: CTO, VP of Engineering/Data, Executive, Legal Professional, Security Engineer, IT Professional

Related on AIssential

• The Agentic Commerce Revolution — Agentic AI unbundles traditional commerce, necessitating new trust protocols for autonomous transactions.
• Boost.ai Achieves SOC 2 Type II Certification for Enterprise Grade Conversational AI Platform — SOC 2 Type II certification with zero exceptions validates Boost.ai's enterprise-grade conversational AI security.
• For the 2nd time in weeks, Microsoft packages laced with credential stealer — Supply chain attacks exploit trust models, not vulnerabilities, using compromised credentials to publish cryptographically verified malicious packages.
• Visa is handling AI-prompted transactions for OpenAI - but can you trust it? — Agentic commerce requires robust security protocols and user-defined guardrails to mitigate new risks from AI-driven transactions.
• The Five Levels of Agentic Commerce — Agentic commerce's growth hinges on consumer trust, not just technological capability.
• The Gold Standard: Navigating the New SEC, BSP, and AFASA Reality in the Philippines — Agentic AI is crucial for navigating the Philippines' complex, dual-regulated crypto landscape and its "triple squeeze" of compliance mandates.

Open in AIssential →

Editorial summary, takeaway, and curation by AIssential. Original article published by The AI Journal.