App Lifecycle

Understand the stages of a LendWorks app from initial development to marketplace listing.

App States

Every app progresses through a lifecycle of states from initial creation to public availability:

Draft → Submitted → In Review → Listed
                                  │
                                  ├→ Suspended
                                  └→ Delisted

Draft

When you create a new app, it starts in Draft state. In this state:

• Only your developer account can access the app settings
• You can install the app on your sandbox org and any test organizations you own
• OAuth flows work normally for testing
• You can freely edit all app settings, scopes, and redirect URIs

Use this time to build and test your integration thoroughly.

Submitting for Review

When your app is ready for the marketplace, submit it from the developer dashboard:

1. Navigate to your app in the developer dashboard
2. Ensure all marketplace guidelines requirements are met
3. Click Submit for Review
4. Fill in the review questionnaire:
   • What does your app do?
   • Why does it need each requested scope?
   • How is user data stored and protected?
5. Submit

Once submitted, your app moves to Submitted and its settings are locked until the review is complete.

In Review

The LendWorks team reviews your app against the following criteria:

• Functionality — App works as described, handles errors gracefully
• Security — OAuth implementation follows best practices, secrets stored securely
• Scopes — Only necessary scopes are requested, with justification
• User Experience — Clear onboarding, meaningful error messages
• Policy Compliance — Adheres to marketplace guidelines and terms of service

Reviews typically complete within 5 business days. You'll receive email updates:

• Approved — Your app moves to Listed
• Changes Requested — Your app returns to Draft with reviewer feedback

Listed

Once listed, your app is publicly visible in the LendWorks marketplace. Organizations can discover and install it through their dashboard.

As a listed app:

• Installation count and reviews are tracked
• You receive webhook notifications when orgs install or uninstall your app
• You can view installation analytics in the developer dashboard

Updating a Listed App

You can update a listed app without taking it offline:

• Non-breaking changes (description, screenshots, docs URL) — Apply immediately
• Scope changes — Require a new review cycle. Existing installations keep their current scopes until users re-authorize.
• Redirect URI changes — Apply immediately but be cautious with removals

To update:

1. Edit the app settings in the developer dashboard
2. For scope changes, submit a new review
3. Changes are versioned — you can roll back if needed

Suspended

An app may be suspended if:

• Security vulnerabilities are discovered
• The app violates marketplace policies
• Excessive error rates or abuse are detected

When suspended:

• Existing installations stop working (API calls return 403)
• The app is hidden from the marketplace
• You receive an email with the reason and remediation steps
• Once issues are resolved, contact the review team to reinstate

Delisted

An app can be delisted:

• By you — Voluntarily remove your app from the marketplace
• By LendWorks — For severe or repeated policy violations

When delisted:

• The app is removed from the marketplace
• Existing installations continue working for a 30-day grace period
• After the grace period, all tokens are revoked and the app is fully disabled
• You can re-list by submitting a new review

Lifecycle Webhooks

Your app receives lifecycle events at its registered webhook URL: