If you have researched order limits in the last year, you have probably read that real checkout enforcement requires Shopify Plus. It is one of the most repeated claims in this category, and it is out of date.
What Shopify actually says
On 31 January 2024 Shopify's developer changelog announced the Cart and Checkout Validation Function API with this line:
"Merchants on any plan can now use validation functions provided by public apps distributed through the Shopify App Store."
Any plan. The distinction that still exists is about who writes the function, not who can use one. Building a custom app containing Shopify Function APIs for your own store remains restricted to higher tiers. Installing a public app from the App Store that ships a validation function does not.
Which means the practical answer for a merchant on Basic or Grow is: you can have server-side order limits today, by installing an app, and the plan requirement people keep citing does not apply to you.
Why the distinction is worth understanding
"Server-side" is not jargon here, it is the whole product. Shopify's cart and checkout validation documentation puts it plainly: "Validation functions run on Shopify's servers and can block checkout progress when business rules aren't met," giving "reliable enforcement of business logic that can't be bypassed by customers."
Compare that with a limit implemented in your theme. The theme version breaks the moment a customer:
- edits the quantity field in the cart drawer
- opens a cart permalink that pre-fills a quantity
- uses Buy Now, which goes straight to checkout without touching your cart page
None of those are exotic. The first is an accident, the second and third are what a determined buyer does during a limited drop.
Where the coverage extends to
Shopify documents the reach as "online store carts, carts built for custom storefronts, and throughout the checkout process". It also reaches an area most merchants assume is exempt: since 11 December 2024 the Cart and Checkout Validation API "runs in draft orders admin and checkout" too. We cover the nuance there — including the one deliberate override — in do order limits apply to draft orders?
How to check a claim like this yourself
This matters beyond order limits. Shopify's platform capabilities move quickly, and app-blog content ages badly without anyone updating it. Two habits help:
- Prefer the changelog to a blog. shopify.dev/changelog is dated and authoritative. If a capability changed, it is recorded there.
- Check whether a guide cites anything. An article that explains Shopify's limits without a single link to Shopify is telling you what was true when someone last looked.
We hold ourselves to the same standard: if you find a claim on this blog without a source next to it, it is a defect, and you can tell us at our contact page.
