Review and going live

What we check, what you need before you submit, and what happens after.

Sign in to see your own test client ID in the samples.

Before you submit

• Every owner of the team has reached Bedrock verification (ID, liveness and a screening check), or the team's business has passed its check. A business check also gives your consent screen a verified badge.
• A homepage and your own privacy policy, on https. The policy must say what you do with what you receive from Atheron.
• Redirect addresses for the live environment (https, or an app scheme for a public app; never localhost), every one on a domain your team has verified. See Verifying your domain.
• The scopes the live app needs. Sensitive ones need a reason we can see in your app.
• You accepted the developer terms and the data-use policy in force.

What we check

The name, logo, description and links for impersonation of Atheron or anyone else, scam patterns, links that do not belong together, redirect addresses on sites that are not yours, and whether each scope is needed. Automated checks help us; a person decides and writes the reason you see.

After

Approved: your live client signs people in at once, showing what we approved. Changing the name, logo, links or adding a sensitive scope later goes through review again; your test client shows changes at once.

Refused: you see why on the Go live page, change what is needed and submit again.

Suspension and appeals

We can suspend an app, or a developer, at once if it harms people. You see the reason in the portal and can appeal there. People who connected a suspended or removed app are told in their account.