App Marketplace | App certification requirements

App certification involves the HubSpot Ecosystem Quality team reviewing and confirming that your listed app meets the requirements below for security, privacy, reliability, performance, usability, accessibility, and value. Certified apps stand out in the App Marketplace with a reputation for quality and trustworthiness. Your app will also earn special benefits and receive constructive feedback from the HubSpot Ecosystem Quality team during app certification review.

​

Overview

Below is an overview of app certification requirements. For more detail, see the review criteria section. Your app must:

• Be associated with a single HubSpot app ID.
  • Your listed public app must be unique. If you have already listed an app and want to replace it, you should update the existing app instead of listing a new one.
  • Do not create multiple apps that solve for the same use case. Apps with similar functionality and use the same APIs should be consolidated into a single app.
• Use OAuth authentication and all scopes it requires.
• Be associated with a verified domain.
• Public assets associated with your app must abide by security best practices.

Your app cannot use classic CRM cards, as they are no longer supported as of June 16, 2025. Learn more about this announcement on the HubSpot Developer Changelog. See the detailed list of security and privacy requirements.

​

Benefits of earning certification

In addition to the benefits of listing your app, certified apps receive:

• A “HubSpot Certified App” badge displayed on its App Marketplace listing.
• More prominent visibility in the HubSpot App Marketplace:
  • Inclusion in the “HubSpot Certified App” search filter.
  • Eligibility for inclusion in curated App Marketplace collections.
• Access to the “HubSpot Certified App” badge and social media images to share the app’s certification achievement.
• Favorable consideration in HubSpot’s partnership and amplification initiatives.

​

Review criteria

To earn certification, your app must demonstrate quality by meeting quantitative measures and qualitative descriptors of security, privacy, reliability, performance, usability, accessibility, and value. The requirements below are organized by these categories and include examples of constructive feedback you may receive.

​

Security & Privacy

Your app must:

• Be associated with a single HubSpot app ID. Your app must authorize API requests with the public HubSpot app ID (and OAuth client ID) associated with your app listing.
  • A listing must not redirect to a different public or private app.
  • Your listed public app must not require another public or private app to function.
• Be authenticated by the OAuth authorization code flow
  • Asking users to copy and paste OAuth codes or tokens is prohibited. Users should only be asked to grant access
  • Apps must request, manage, and refresh access tokens without user involvement
• Use all scopes it requests for installation (i.e. both in the required scope parameter and the optional_scope parameter).
  • Extraneous scopes must be removed.
  • If certain scopes only apply to a subset of your app’s user base, they should be included as conditionally required or optional scopes.
• Be associated with a verified domain.
• Your public assets will be assessed for security best practices related to outdated software and various web server vulnerabilities and findings.

​

Feedback example

Your app currently requires four scopes: contacts, timeline, forms, and content. According to our logs, however, it only made requests to the CRM Contacts and Timeline Events APIs in the last 30 days. Since the forms and content scopes are not required for either of these functions, please remove them as required from the app’s settings to minimize the permissions users must accept.

​

Reliability & Performance

Your app must:

• Be in good standing, meaning:
  • In compliance with all applicable terms.
  • Not have been rejected for certification in the last six months.
  • Not have any unresolved support escalations with mutual customers.
• Use stable, public versions of HubSpot’s APIs and extensions.
  • Using the latest public versions is recommended.
    • Undocumented APIs are considered unstable and must not be used in your production app.
    • Using private and public beta APIs and extensions is permitted. It is recommended to exercise caution and test with set customers before making such features widely available.
    • If your app uses APIs or features that are due to sunset, migrating to the latest versions is recommended.
  • If your app uses APIs that are not stable or public, please surface this during the certification review or to the App Partner Manager team to discuss options.
• Maintain a reasonable volume of activity from HubSpot customer accounts unaffiliated with your organization.
• Your app must adhere to the API usage guidelines and best practices, including:
  • Respecting rate limits (i.e. 100 inbound requests every 10 seconds per connected HubSpot account).
  • Refreshing OAuth access tokens before they expire.
  • Caching data for repeat calls when possible.
  • Using batch APIs and webhook subscriptions to reduce request volume when possible.
  • Using APIs to create properties, workflows, and custom workflow actions instead of requiring user action.
• Your app must maintain an average success rate above 95% across all activities
  • Requests resulting in error responses count against this success rate.
  • Some unavoidable or expected errors may be excluded when calculating success rates across all activities.
• Your app may have a browser extension to deliver supplementary functionality and value to customers:
  • Browser extensions must not be created specifically for the HubSpot UI or as a workaround to HubSpot’s APIs.
  • Browser extensions must not inject capabilities or components into HubSpot’s UI.
    • Officially supported UI extensions (e.g. CRM cards and custom workflow actions) provide more consistent user experiences for customers
  • Your app will be subjected to an additional security assessment if it includes a browser extension.

​

Feedback examples

Your app’s API success rate falls below the 95% threshold required for certification. Our logs show a 83% success rate in the last 30 days. The vast majority of these requests returned 429 burst rate limit errors. To reduce this error rate, we recommend throttling requests to 100 requests per 10 seconds for each account.

Your app is generating errors around trying to update contacts using an undefined email address, which will not work with this endpoint. Your app should skip these requests if a record does not have an email address.

Your app is making requests with expired OAuth tokens and receiving 401 errors before refreshing the token. To minimize these errors, we recommend that your app keep track of when tokens expire or refresh tokens before making requests. If you start seeing 401 errors for 100% of requests and are unable to refresh the access token, consider the app uninstalled and stop making requests for the account until a user re-authenticates your app.

Your app is generating 403 errors from trying to use the Contact Lists API with Marketing Hub Free accounts, which do not have access to contact lists. If your app repeatedly gets 403 errors for missing the proper scopes, it should stop making calls to retrieve lists from that account.

Your app’s webhook subscriptions frequently fail with 500 and 503 errors. Make sure that your server can handle the volume of requests (currently limited to 150 per second) so that customer data is not lost.

Your app is pulling many contacts one at a time instead of pulling them in batches. We recommend using batch endpoints instead.

​

Usability & Accessibility | App

• Your app must be listed in the HubSpot App Marketplace for at least six months.
• Your app must demonstrate usability best practices.
  • Installation and use should not cause confusion or frustration for mutual customers or otherwise negatively affect the core HubSpot user experience.
• Testing and evaluation of your app are conducted at the discretion of the HubSpot Ecosystem Quality team.

​

Feedback example

Your app currently requires users to manually configure workflow webhook actions to send text messages. Consider creating custom workflow actions via the app which are flexible enough to accommodate many use cases.

​

Usability & Accessibility | App Marketplace Listing

Your App Marketplace listing must:

• Accurately describe your app’s current functionality. If functionality changes based on a user’s product or subscription level, either for HubSpot or your solution, differences must be made clear.
• Your App Marketplace listing must contain clear and accurate pricing information:
  • The pricing plan in the listing must match the pricing information published on your website.
  • The pricing plan in the listing must only include pricing plans that allow for the usage of your HubSpot integration.
  • If a pricing plan does not support the integration, it should not be included in your listing. For example, if you have Plan A and Plan B for your app, but only Plan B can be used with the integration, only the pricing details for Plan B should be included in the listing.
  • Free pricing plans should only be used for Free forever or Freemium pricing models.
• Use placeholder data or hide data to not display personal identifiable information (PII).
• Include:
  • Informative and up-to-date visual aids, which may include screenshots or a video. Refer to the How to Make a Great App Demo Video page for best practices and examples of how to create a demo video.
  • An up-to-date “Setup documentation URL” that leads directly to a full setup guide for your app. You can review the full requirements for setup documentation. This guide also includes an example template that meets all requirements.
• Not include:
  • Any data or statistics, unless a case study is provided as a resource.

​

Feedback examples

Your App Marketplace listing includes few specific details about your app’s functionality. Please enhance the listing with screenshots which depict app functionality and include more thorough descriptions of common use cases and in-app behavior.

HubSpot customers are used to a “try before you buy” experience when purchasing our products and services. For this reason, we recommend your app provide a free trial or freemium sign-up experience. Some app partners who do not have pricing pages or free trials have created “HubSpot plans,” offering mutual customers transparent pricing, touchless sign-up, and other benefits.

​

Usability & Accessibility | Supporting Documentation

Supporting documentation for your app must:

• Exist on a live, publicly accessible URL (i.e. no paywalls or login required) and adhere to current accessibility, privacy, and GDPR standards.
• Be up-to-date and consistent with the current version of your app.
• Clearly describe:
  • What your app does.
  • How to install your app and connect a HubSpot account with screenshots of each step, including the scope approval screen.
  • How to configure your app once it is installed.
  • How to use your app, including both manual and automated interactions.
  • How to disconnect HubSpot from your app.
  • How to uninstall your app from a HubSpot account.
  • How disconnecting and uninstalling might affect users’ HubSpot accounts and data.
• Include images. Any images containing screenshots of the HubSpot UI should be up-to-date and consistent with the HubSpot design system.
• Videos are also strongly recommended, but not required. Videos should be updated regularly and reflect the current version of your app.

​

Feedback example

The setup guide for your app includes a screenshot depicting the scopes your app requires for installation. This screenshot does not show the business-intelligence scope, which is selected in your app’s settings. Please update the screenshot so that it reflects the current required scopes.

​

Value

• Your app’s active install count, retention, and HubSpot App Marketplace reviews are assessed as indicators of the value mutual customers find in your app.
  • Your app must have at least 60 active, unique installs to qualify for and retain certification. The accounts with installs must be unaffiliated with your organization. Test accounts will also be excluded.
    • If your app has fewer than 60 active installs, then you will be asked to cancel certification request.
    • If your app has fewer than the three active installs required to be listed, then your app may be removed from the App Marketplace.
• Your app listing must have responses from your team for any negative reviews of your app.

​

Feedback example

Your app has not maintained at least 60 active installs over the trailing six month period. As such, its certified status will be removed. You may re-apply for certification in six months.

​

The app certification and recertification review process

The HubSpot Ecosystem Quality team responds to app certification requests within 10 business days. The entire app review and feedback process should take no more than 60 days from the time feedback is shared. Review the criteria listed here for providing testing credentials to your app. Should your app meet all requirements, it will earn certified status and a “HubSpot Certified App” badge will be displayed to customers and prospects on the App Marketplace. Your app will also appear when users select the “HubSpot Certified App” filter. Should your app not successfully complete the review, you may re-apply in six months. As of August 5, 2025, all certified apps are now subject to a two year certification cycle, introduced earlier this year, to ensure ongoing compliance with HubSpot’s evolving standards. This means that once certified, your app will need to be recertified every two years in order to maintain its certified status. Each app will have a set certification expiration and renewal date, and failure to submit for renewal before the expiration date will result in the removal of your app’s certified designation from the HubSpot App Marketplace.

​

How recertification works

You will receive notifications starting 90 days before your app’s certification expiration date, giving you ample time to make any necessary updates and resubmit your app for review. To support a smooth renewal experience, new functionality is now available in the developer account. These tools include:

• Clear tracking of your app’s certification status and expiration date
• Step-by-step guidance on the renewal process
• Improved submission workflows to reduce friction

This recertification process replaces the previous annual review and allows for more predictable, consistent quality checks across all certified apps. If your app no longer meets the certification standards during the renewal process, our Ecosystem Quality team will work with you to resolve any issues before the certification expires. It’s highly encouraged that you monitor your app’s performance, certification requirements, Developer Changelog, and any additional HubSpot resources related to any changes in technology used and how your app could stay up to date.

​

Frequently asked questions

Are there any costs associated with app certification?

Will I be notified when my app will be eligible again for certification if it was previously rejected?

How should I promote my certified app to my customers?

I enjoy experimenting with the newest beta APIs. Is app certification right for me?

I'd like my app to be featured on the App Marketplace. Is this what app certification is for?

Why and how will my public assets be assessed for security best practices?

What happens if my app loses its certification status?

---

​

Related resources

How to apply for app certification How to list your app App listing requirements Developer community forum Contact the App Partner team