Our OAuth app has been “under review” for 33 days, and we have never received any email from the Trust & Safety team — not even an acknowledgement that the request was submitted.
Status in Verification Center: “Your branding and data access are currently under review.” All five criteria show as reviewed and passed:
- Homepage requirements — last reviewed Jul 20, 2026
- Branding guidelines — last reviewed Jul 20, 2026
- Privacy policy requirements — last reviewed Jul 22, 2026
- App functionality — last reviewed Jul 22, 2026
- Request minimum scopes — last reviewed Jul 22, 2026
Scopes: sensitive only, no restricted scopes, so no CASA assessment applies.
calendar.events— pendingcalendar.events.readonly— approvedcalendar.freebusy,userinfo.email— non-sensitive
The problem: the panel states “Expect the first email from our Trust and Safety team within 3-5 days.” That was 33 days ago. I have checked the support email inbox thoroughly — spam folder is empty, no filters exist, no blocked addresses, and there is no verification correspondence from Google of any kind. The Verification Center instructs us to “reply to the email thread from the Trust and Safety team,” but no such thread was ever created, so there is no way to reach the reviewers.
On our side everything is in place: homepage and privacy policy are live and publicly accessible, the privacy policy includes the Google API Services User Data Policy Limited Use disclosure and documents each requested scope individually, a demo video is provided, and both authorized domains are verified in Search Console under the project owner’s account.
Could someone confirm whether the request is genuinely in the review queue, and if possible trigger the initial Trust & Safety contact? I’m happy to provide the project ID and app name privately.
I have deliberately not resubmitted, to avoid resetting our position in the queue.