Note: All apps that integrate with Google APIs are required to comply with Google’s API Services User Data Policy regardless of whether they have been verified.
If your app falls in anyone of the below category, it is not mandatory for your app to complete an OAuth verification. However, you may still complete a verification for your app if you want to.
- Personal Use apps: If the app is for your personal use (fewer than 100 users), you and your limited number of users can continue using the app without going through verification(users will be allowed to click through “unverified app” warning screens during sign-in). Such apps will need to complete a verification, if they want to grow their user base beyond 100.
- Development/Testing/Staging apps: Apps in development/testing/staging mode are not subject to verification. Please create separate projects for development/testing/staging and production as per the Google OAuth policy.
Your “production” tier project should have a published status of “In Production”. You should only submit “production” tier projects for verification.
Note: Your app will be subject to the unverified app screen and the 100-user cap will be in effect when an app is in development/testing/staging. This cap is removed only after an app has been successfully verified. Learn more about Publishing status.
- Service-owned Data Only: The app only accesses its own data (using a Service Account), and not user data (linked to a Google Account).
- To understand what Service Accounts are, see Service Accounts.
- For instructions on using a service account, see Using OAuth 2.0 for Server to Server apps.
- Internal Use apps: The app is only used by people in your Google Workspace or Cloud Identity organization. The project must be owned by the organization, and its OAuth Consent Screen must be configured for internal use. In this case, your app might need approval from an organization administrator.
- Learn to designate your app as internal-only.
Note: Your app will not be subject to the unverified app screen or the 100-user cap if it's designated as internal-only. However, only users in the Workspace or Cloud Identity organization will be able to use your app.
- Google Workspace admin-trusted or marketplace-installed apps: An administrator can add a third-party app to the list of trusted apps in the Google Admin console. The app verification status is shown in the Admin console. Users that don't already have the app can install it (whether the app is verified or not).
Additionally, administrators can perform an admin install of an unverified app that’s published in the Google Workspace Marketplace. We will disclose the app’s unverified status during installation, and in the Admin console, but access to the app will be granted to all users that have the app installed by the administrator- Learn more about trusted apps and installing marketplace apps.
- Learn more about on how to control which third-party & internal apps access Google Workspace data
Note: Additionally, administrators can perform an admin install of an unverified app that’s published in the Google Workspace Marketplace. We will disclose the app’s unverified status during installation, and in the Admin console, but access to the app will be granted to all users that have the app installed by the administrator. Learn more about installing marketplace apps.