CASA Assessment

Temple (Temple)

unread,

May 6, 2026, 4:04:49 AM May 6

to Google Apps Script Community

Hi,

I was wondering what the general opinion of the CASA assessment scheme is?

I submitted 2 "utility" apps to Marketplace, I had to respond to several rounds of queries, which I've done, and now the latest response for both apps is that I'm required to take a CASA Tier 2 security assessment. AFAIK, I'll have to pay a minimum of $675 per app, I think. Then I guess I'll have to claw back the cost via a per user charge.

Do members of the community have apps that have been through this process? Is there a real earning potential?

I'll be interested to hear people's thoughts..

Temple

Waqar Ahmad

unread,

May 7, 2026, 7:43:47 AM May 7

to Google Apps Script Community

The question of which restricted scope is currently in use is essential, as there is often a viable workaround that allows for the use of sensitive scopes instead. Exploring these alternatives can frequently simplify the verification process while maintaining the necessary functionality and avoid CASA.

Temple (Temple)

unread,

May 8, 2026, 5:07:38 AM May 8

to Google Apps Script Community

Thank you Waqar - yes, workarounds were explored ... has anyone been through the CASA process? I'm intrigued as to whether or not they felt it was worthwhile and if it added value to their products. I'm probably going to take the plunge with one of my apps, I'll do some tidying up first though.

All the best

Temple

Temple (Temple)

unread,

May 12, 2026, 3:23:07 AM (10 days ago) May 12

to Google Apps Script Community

One small thing that did come out ... Google's reviewers were very insistent that links to things like the privacy policy, terms of service etc. should be via a domain registered to "me" ... l am keeping my code on GitHub, so I did a work-around to link to the GitHub pages via a dormant domain that I own. Once I got to the point of having to do the CASA assessment, I decided that it would be best to create a domain with a memorable name and then host all the apps there .... I think that means that I'll probably have to re-submit the apps again (ID's will change because I'll have to create projects within the new domain) .... I've emailed them to confirm.

Never mind ...

Reply all

Reply to author

Forward