Marketplace review stuck in "Security review" since Sep 30 — app "CaseFlow" (submitted Sep 24)

App Marketplace
1

Description

Our user-managed OAuth app CaseFlow (OAuth client ID No7XECM1SX68QU1y96dXhA, developer account yogev [at] web-xl [dot] com) was submitted for publication on September 24, 2026. The one review note we received (“Unique Dev / Prod Redirect URLs — Recommended”, Sep 16) was answered and shows as Acknowledged. Since then the timeline has stayed at “Security review — last updated September 30, 2026”, with no further note, request or status change in the console, and nothing is flagged as waiting on us.

Could you please tell us:

  1. whether the security review is still in progress or waiting on something from us;
  2. what the expected turnaround is from this point;
  3. if a reviewer needs anything else — a test account, a demo video, a TDD document — we will provide it the same day.

Context for the reviewer: CaseFlow is a native desktop application for law firms (Electron, macOS and Windows), installed on each attorney’s own computer. It uses the Authorization Code flow with PKCE through our licence server (license [dot] caseflow [dot] co [dot] il), requests only the scopes needed to create and manage the attorney’s own meetings, and never stores the client secret in the installer. The security questionnaire, TDD and privacy policy were attached to the submission.

How To Reproduce

  1. Authentication method / app type: user-managed OAuth app, Authorization Code + PKCE (public client), production credentials.
  2. Errors: none — the console shows “Your app has been submitted. You will be notified when your app is approved or returned for corrections.” with no open items since Sep 30.

Thank you — we are ready to act on any request immediately.

Yogev Tuval, CaseFlow (Legaltech)

2

Hello,

Thanks for your message. Security reviews are very in-depth; this is why we do not provide an expected timeframe for them. But in general speaking, most security reviews are completed within 10 business days from the date it begins.

It looks like your app was approved yesterday.

Regards, Kwaku