# Shopify App Approval

**URL:** <https://community.hubspot.com/t/shopify-app-approval/154903>\
**Category:** Marketplace Apps\
**Tags:** shopify\
**Created:** [August 1, 2026, 4:23am UTC](https://community.hubspot.com/t/shopify-app-approval/154903 "2026-08-01T04:23:49Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![bridge](https://avatars.discourse-cdn.com/v4/letter/b/9e8a1a/32.png) [@bridge](https://community.hubspot.com/u/bridge)\
**Post date:** [August 1, 2026, 4:23am UTC](https://community.hubspot.com/t/shopify-app-approval/154903/1 "2026-08-01T04:23:49Z")

</div>

Does HubSpot sign custom End Recipient Acknowledgement Forms (ERAF) for individual developers publishing on Shopify?

---

<div class="post-metadata">

**Author:** ![STierney](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/stierney/32/186066_2.png) [@STierney](https://community.hubspot.com/u/STierney)\
**Post date:** [August 3, 2026, 7:47pm UTC](https://community.hubspot.com/t/shopify-app-approval/154903/3 "2026-08-03T19:47:53Z")

</div>

Hey @bridge,

Thanks for posting in the Community!

I’d like to tag in a few Community experts here to get their insight. @Anton, @alyssamwilie, and @EValdes - are any of you able to tag in here?

Shane, Senior Community Moderator

---

<div class="post-metadata">

**Author:** ![Multicalculators](https://avatars.discourse-cdn.com/v4/letter/m/ee59a6/32.png) [@Multicalculators](https://community.hubspot.com/u/Multicalculators)\
**Post date:** [August 3, 2026, 8:37pm UTC](https://community.hubspot.com/t/shopify-app-approval/154903/4 "2026-08-03T20:37:13Z")

</div>

From what I’ve seen, HubSpot doesn’t typically sign a custom **ERAF (End Recipient Acknowledgement Form)** specifically for individual Shopify app submissions.

In most cases, they rely on:  
• Their standard **terms of service / developer agreements**  
• Public **API & app usage policies**  
• And platform-level compliance handled through the app ecosystem

If Shopify is requesting an ERAF, it’s usually about confirming how user data is handled (especially for integrations touching customer data).

* * *

### 💡 What You Can Do Instead:

• Check if Shopify accepts **standard HubSpot legal docs** as a substitute  
• Reference HubSpot’s **data processing & privacy documentation**  
• Clearly document your app’s **data flow and permissions** (this often satisfies review teams)

* * *

### ⚠ Practical Insight:

Most developers don’t go the custom ERAF route unless:

- They’re a large partner
- Or working on enterprise-level integrations

For individual developers, approval usually depends more on:  
👉 Data handling transparency  
👉 Permission scope  
👉 Compliance with Shopify + HubSpot policies

* * *

### 💬 Curious:

Is Shopify explicitly asking for a signed ERAF from HubSpot,  
or just a confirmation of end-recipient data handling?

That detail might change the best approach 👍