For platform teams who approve third-party apps
App VettingEvery damaging marketplace incident rode an update or a stolen publisher account - not a malicious first submission.
Answer a short interview, then paste your re-review triggers and your enforcement ladder. Your browser ranks the review pipeline by the data apps can reach and by reviewer capacity, checks the triggers for objectivity, works out the publish-channel controls you need, and audits the appeal and the enforcement ladder. Then the process design, and the developer policy.
The marketplace, and a short interview free
The triggers and the ladder free
The checks free
What the page flags
The gates
Pipeline, re-review and appeal, ranked
The publish channel
Triggers and the enforcement ladder
Area by area
Your developer self-check free
The objective triggers a developer can run against their own update before submitting it - publish it next to the submit button.
Self-check (Markdown)
The review process metered
Pricing as soon as the session is ready...
Sign inThe reply could not be read. Here it is as it came back:
Caveats
Caveats
The page's check of this reply
Saved reviews
How it works - and what is sourced
The pipeline follows the skill. A single hard gate is the default while reviewers keep up, and always when apps reach regulated data; a staged gate with an objective fast path once updates make reviewer time the constraint; functional review or a two-rung ladder only for metadata-only apps. Re-review fires on objective triggers - new scopes, new endpoints, changed data handling, a payment-model change, a new app type - never on "substantial changes".
Harden the publish channel before the front door: FIDO 2FA and short-lived tokens for publishers, a 24-48 hour hold when updates auto-propagate, OIDC publishing at scale, signed artifacts for auto-updated client code. Every rejection cites its policy; an appeal goes to someone who did not decide; the enforcement ladder names an owner, a notice period and the evidence for each rung; new requirements get six months of runway.