Are you ready to submit for platform approval?

The 24 checks we run before any Amazon SP-API, Walmart, TikTok Shop, or Shopify App Store submission. Work through it before you apply and avoid the most common rejections.

Get the checklist

Free24 checksSave as PDF

Free checklist

Get the 24-point readiness checklist

Enter your email to unlock the checklist on this page. You can save it as a PDF and we will email you the link.

Leave empty

First name

Work email

Company or product

Platform you are applying to

Check items off as you go. Your ticks are saved in this browser.

Business identity

Your legal business name, website domain, support email, and developer account name all match exactly.
Your website shows a physical business address, a working contact method, and a description of what your product does.
You use an email address on your own domain, not a free webmail address, for every developer account.
Your company registration and tax details are current and match what you enter in each console.

Use case and data requests

You can describe your app in two sentences: who uses it and the specific problem it solves.
Every permission, role, or scope you request maps to a feature a customer can see.
You request customer personal data (names, addresses, emails) only if a shipped feature truly needs it.
You have screenshots or a short video of the feature that uses each sensitive permission.

Policies on your website

A privacy policy that names the platforms you connect to and what data you take from each.
Terms of service and a clear way for customers to request data deletion.
A data retention statement: how long you keep each type of data and how it is deleted.
A contact address for security and privacy questions that someone actually monitors.

Security controls

Data is encrypted in transit (TLS) and at rest, including API tokens and refresh tokens.
Production access requires multi-factor authentication and is limited to people who need it.
You log access to customer data and keep those logs for a defined period.
You have a written incident response plan with notification timelines.
You have a process for patching dependencies and reviewing vulnerabilities.

Technical readiness

OAuth flows handle authorization, refresh, revocation, and reconnection cleanly for every customer.
Webhooks verify signatures and handle retries and duplicates without double-processing.
You respect rate limits with queues and backoff instead of hammering the API on errors.
You can delete a customer's data on request and when they uninstall or disconnect.

Submission

Every form answer is drafted in a document and reviewed before you paste it into the console.
Test credentials or a demo account are ready for reviewers, with clear instructions.
You have a plan for responding to a rejection with specific evidence, not a resubmission of the same answers.

Want this done for you?

The Platform Approval Package covers every item above, written for your product. Or get the full 51-page playbook with policy templates.

See the Approval Package Get the playbook

BROKEHOLD

Fractional CTO and commerce engineering for Shopify brands and commerce SaaS. Based in New Jersey.

contact@brokehold.com

Services

Commerce Tech Audit
Fractional CTO
Monthly CRO
AI Search Visibility
Industries
Custom Apps & Automation
AI-Connected Operations
Marketplace Integrations
Platform Approvals
Security & Compliance

Resources

Learn
Free tools
Shopify App Pricing Index
Playbooks & toolkits
FAQ

Company

About
Our work
Products
Security & access
Contact
Privacy Policy
Terms of Service
Refund Policy

Scroll to Top