Selecting the right ecommerce platform that your website will run from is a crucial decision. Changing the platform at a later date can be a very time consuming and expensive operation if you have thousands of products to move.
There are three key types that you can choose from which vary in complexity, price, and speed to market:
Software as a Service (SaaS)
Off-the-shelf software
Bespoke solution
There is a vast range of ecommerce platforms available, in the form of Software as a Service (SaaS) storefronts, off-the-shelf software, or bespoke solutions. Each has its own benefits and drawbacks. When selecting an option, think about the demand you are anticipating and how many SKUs will you have on the system for your product inventory.
If you have a relatively small set of products, it may be more cost-effective to try using one of SaaS providers. As with anything, there are always pros and cons.
Software as a Service (SaaS)
Typically the quickest and least expensive route to market.
For a small monthly payment, an aspiring online retailer can set up an ecommerce business relatively quickly. Providers such as Shopify.com or Bigcommerce.com offer easy to configure, template builds with a configurable front-end presentation.
These solutions are great for dipping your toe in the water and finding out how the world of ecommerce works. It's very quick to throw together a website that looks professional and functions well. However, the platforms are heavily templated and making adjustments to your site to add in large-scale customisation is not an option. There's little to differentiate between the different e-tailers on these platforms.
Key platforms to consider:
Off-the-shelf software
Off-the-shelf solutions are available and can be set-up by someone with strong technical knowledge. Typically, a higher level of technical ability is required for set up, allowing for much more in the way of customisation to the platform. Adobe, WooCommerce (for WordPress), and Kentico are examples of 'off-the-shelf' ecommerce software, all of which are highly feature-rich and extendable.
A major drawback to any off-the-shelf solution is the number of unnecessary features that often come bundled into the platform. Tools that are designed to meet the needs of the mass market often end up over-delivering to individual businesses that require only a small selection of the services on offer.
As with SaaS solutions, it's not easy to differentiate your site from the competition. It's possible to add plugins to the sites, but those plugins are available to all. If a competitor sees that it's working for you, it's easy enough for them to copy.
Key platforms to consider:
Bespoke
While an exact fit, a bespoke solution is likely to result in a longer timeline to market. This option will also require significant investment and is the least likely option of the three for a small start-up.
A bespoke solution will be able to give an e-tailer exactly what they are looking for from their ecommerce platform. However, there is no way around the fact that bespoke solutions will cost more than off-the-shelf software, as there is a much higher requirement for customisation to set the package up.
A bespoke solution can be a much leaner solution, optimised for the requirements of your build and without the excess baggage that can be included with off-the-shelf platforms.
What about PCI compliance?
The Payment Card Industry Security Standard Council (PCI SSC) is an international body set up to outline the security best practices for online card processing – specifically for any business that processes, stores or transmits credit card data.
As an online merchant, you will need to meet a level of compliance with the guidelines issued by the PCI. The exact level will depend on the nature of your business: smaller merchants are often able to complete a self-assessment survey to meet compliance.
For those using a SaaS solution, PCI compliance will not be an issue, this is handled by your provider. The set-up of your ecommerce store will determine whether you need to be PCI compliant. If your organisation/website is not handling/storing sensitive credit card information, it is unlikely you will need to be PCI compliant.
There are a number of ongoing requirements for PCI compliance, such as running regular vulnerability assessments against your website. These scans can either require a qualified security assessor or an approved scanning vendor to periodically check your website for known vulnerabilities.
Meeting the standards for compliance helps to protect your business from being breached and keeps your customers' data safe.
Check with your ecommerce solution provider if you are unsure of your PCI compliance obligations.