Ecommerce Website Checklist
Everything to verify before an online store goes live — from contact details and product pages through payments, performance, legal and security.
Communication
- ✓
Contact details are correct and easy to find
- ✓
Rating and review systems in place
- ✓
FAQ page in place
- ✓
Links to social media accounts present
- ✓
Shipping, returns, and refund policy are clear and easy to find
- ✓
Purchase confirmation and abandoned cart emails in place
- ✓
About page in place
- ✓
Newsletter subscription option in place
Accessibility
- ✓
Website tested for screen reader
- ✓
ARIA landmark roles in place
- ✓
Alternative text in place for images
- ✓
Page titles and metadata is unique and descriptive
- ✓
All forms have associated labels not placeholder text
- ✓
Colour contrast tested
- ✓
Links are easily recognisable and have a clear focus state
- ✓
Website meets appropriate level of WCAG compliance
Content
- ✓
The text has been checked for spelling, grammatical, and factual errors
- ✓
All pages have content
- ✓
Images and videos are working correctly
- ✓
Placeholder text removed
- ✓
Custom 404 page in place
Product information
- ✓
Detailed product description in place for all products
- ✓
Product pictures in place for all products
- ✓
Stock levels visible and accurate
- ✓
Sizing and colour selection works as expected
Compatibility
- ✓
Run through Mobile-Friendly Test and results adequate
- ✓
Website tested on mobile devices and tablets
- ✓
Website tested in targeted browsers
- ✓
Favicon and touch icons present in mobile devices
- ✓
Website tested for visitors with Javascript disabled
Legal
- ✓
Terms and conditions in place and easy to find
- ✓
GDPR compliant privacy policy in place (in Europe)
- ✓
GDPR compliant cookie policy in place and banner created
- ✓
Licence in place for any external content used
Analytics
- ✓
Analytics tracking in place
- ✓
Event tracking set up for key metrics
- ✓
Google analytics/search console account set up and linked
- ✓
XML sitemap in place and added to root of website
Design
- ✓
Favicon in place
- ✓
Logo links to home page
- ✓
Website navigation works smoothly
- ✓
Formatting is consistent across all page
Payments
- ✓
Shipping rates are displayed during checkout
- ✓
Discount codes can be applied in the cart
- ✓
Cart's content can be edited
- ✓
Prominent payment methods are available
- ✓
Guest and existing member logins available
- ✓
Checkout buttons are clearly visible
- ✓
Checkout works on different devices
- ✓
Detailed confirmation page in place before checkout
Infrastructure
- ✓
Domain name and web hosting set up and linked
- ✓
Automatic backups configured and working
- ✓
SSL certificate installed
- ✓
Files fully integrated and version control and deploy path in place
Performance
- ✓
HTML, CSS and JS files minified and combined where possible
- ✓
Images and videos have been optimised
- ✓
GZIP compression enabled
- ✓
Only necessary fonts, weights, and character sets are installed
- ✓
CDN/caching incorporated as required
- ✓
Website's performance tested and optimised
Technical
- ✓
301 redirects set up for pages which no longer exist
- ✓
Expirees caching activated
- ✓
Clean URL rewrites in place
- ✓
All versions of URL redirecting to the same format
- ✓
Robots.txt file not blocking search engine spiders
- ✓
HTML W3C valid
- ✓
CSS W3C valid
- ✓
No Javascript logs, errors or warning
- ✓
Noindex and nofollow removed to be accessible through search engines
Functionality
- ✓
Links, forms, and CTAs are working correctly
- ✓
Required fields tested
- ✓
Forms have confirmation URL or event tracking to track submissions
- ✓
Forms process correctly with Javascript disabled
- ✓
Search working correctly
- ✓
Forms are sent to the right person
- ✓
Input validation (min/max lengths, character limits) reviewed
Security
- ✓
The latest version of the eCommerce platform is used and/or all patches are applied
- ✓
Web Application Firewall is configured following best practice and is applied to all relevant domains
- ✓
No critical or high-risk vulnerabilities are detected
- ✓
Ecommerce platform is set up in accordance to best practices
- ✓
Infrastructure software is updated to the latest version
- ✓
Application, Infrastructure and security events are logged
- ✓
Malware and data leak detection tools in place
- ✓
Secure areas are locked and no accessible by search engines
- ✓
Default login URL is changed
- ✓
Default CMS username is changed
- ✓
SSL certificate is requested
Questions About the Ecommerce Website Checklist
It's a pre-launch (or periodic audit) checklist for ecommerce sites, covering everything from product information and accessibility to security, performance, and legal compliance — designed to catch gaps before they cost you sales or expose the site to risk.
It confirms every product has a detailed description, product photos, accurate stock levels, and working sizing/colour selection — the core details customers need before they'll buy.
It checks screen reader compatibility, ARIA landmark roles, image alt text, unique page titles/metadata, proper form labels, colour contrast, clear link focus states, and overall WCAG compliance. This ensures the site is usable by people with disabilities and helps avoid accessibility-related legal exposure.
Correct and easy-to-find contact details, a review/rating system, an FAQ page, social media links, clear shipping/returns/refund policies, purchase confirmation and abandoned cart emails, an About page, and a newsletter signup — the elements that build trust and keep customers informed.
It verifies copy has been proofread for spelling, grammar, and factual errors, every page has content (no blanks), images/videos work, placeholder text is removed, and a custom 404 page is in place instead of a default error page.
A favicon is in place, the logo links back to the homepage, navigation works smoothly, and formatting is consistent across all pages — the basics that make a site feel polished and professional.
That shipping rates display during checkout, discount codes apply correctly, cart contents can be edited, prominent payment methods are available, both guest and member checkout are supported, checkout buttons are clearly visible, checkout works across devices, and a detailed confirmation page appears before purchase.
Slow sites lose sales. This section checks that HTML/CSS/JS are minified and combined, images/videos are optimized, GZIP compression is enabled, only necessary fonts are loaded, a CDN/caching is used where appropriate, and overall site performance has been tested.
That the site passes a mobile-friendly test, works properly on mobile devices and tablets, renders correctly in all targeted browsers, shows favicon/touch icons on mobile, and still functions for visitors with JavaScript disabled.
Terms and conditions, a GDPR-compliant privacy policy (for European visitors), a GDPR-compliant cookie policy with a cookie banner, and proper licensing for any external content used on the site.
It confirms the ecommerce platform and infrastructure software are fully updated and patched, a Web Application Firewall is properly configured, no critical/high-risk vulnerabilities are detected, security events are logged, malware/data-leak detection tools are in place, secure areas are blocked from search engines, and default login URLs/usernames and the SSL certificate are properly set.
That analytics tracking is installed, event tracking is set up for key metrics (like purchases or signups), Google Analytics and Search Console accounts are linked, and an XML sitemap is submitted at the site's root.
301 redirects for removed pages, cache expiry settings, clean URL rewrites, consistent URL formatting, a robots.txt file that isn't blocking search engines, W3C-valid HTML/CSS, no JavaScript console errors, and confirming noindex/nofollow tags aren't accidentally hiding pages from search.
That all links, forms, and CTAs work correctly, required fields are validated, form submissions are tracked, forms still work with JavaScript disabled, site search works, form notifications reach the right person, and input validation (character/length limits) is in place.
It's built primarily as a pre-launch checklist, but many sections — especially Security, Performance, Analytics, and Legal — are worth revisiting periodically even after launch, since platforms update, policies change, and new vulnerabilities emerge over time.
Security, Payments, and Functionality directly affect whether customers can safely complete a purchase, so they're the highest priority. Accessibility and Legal compliance are also important since gaps there carry legal risk.
Let's have an honest conversation.
You've read enough websites. Tell us about your business and we'll tell you honestly whether we're the right digital marketing agency in NYC for the job. No hard sell. No fluff.