What’s the difference between Approved, Provisional Pass, and Not Approved?

If you’re granted Approved or Provisional Pass on your security review, it means we didn’t find any high-risk vulnerabilities in your offering. A Provisional Pass indicates that we likely found medium-risk vulnerabilities, and we work out a mutually acceptable timeline for you to remedy these items. In the meantime, you can list your app or component on the AppExchange and distribute it to customers. For a review that wasn’t approved, you must remedy the issues found before you can list your offering on the AppExchange or get access to the API token.