Ongoing Compliance Reviews - FAQ

Ongoing reviews are one of monitoring tactics where we periodically review third-party applications for compliance. Meta verifies that applicable apps are using permissions and features as originally claimed during the App Review, and if the data access and user experience is not violating any terms.

Most of the apps that can access user data must go through Ongoing Review. However, if your app only needs business permissions/features, you might be eligible to install Facebook Login for Business, which will reduce the app’s requirement to go through Ongoing Review.

Note that Facebook Login for Business is available to all newly created Business type apps. Existing eligible Business type apps and None type apps have either been automatically switched to, or can opt in for Facebook Login for Business. See more details here.

You will be able to provide testing information in your app’s Basic Settings page and during your annual Data Use Checkup (DUC). You can find information on how to do so here.

A required action is a notification sent to request information that allows us to access your platform and thoroughly review your FB API integrations to ensure they are satisfying the requirements of Meta’s Platform Terms and Developer Policies. You may receive a required action notice if you did not provide your testing instructions and/or if our reviewers are unable to test your application with the information provided.

Our review team must thoroughly examine how your app utilizes FB Platform data across various layers. Therefore, it's crucial to ensure that we have access to all relevant authentication points within your app.

If there are multiple layers, such as a secondary login before or after Facebook Login, please provide the necessary username and password. This includes credentials for testing or demo servers, secondary logins, or any email registration flows associated with your app.

Additionally, for apps hosted on staging or development servers, consider that an extra layer of login might be required to access your server. Clarifying these authentication needs will significantly expedite the review process.

If you're still not sure what credentials are missing, you can opt to include a video in your next submission for further clarification.

Meta must perform Terms/Policy compliance reviews as part of Meta's Privacy Program. If we cannot complete an app’s Ongoing Review in a timely manner because we are unable to access a developer’s app, we must restrict platform access. When this happens, developers will be cited with a violation for Developer Term 7.e.i.1 and be immediately restricted with no warning period.

The developer will need to respond to any unresolved violations found in the app dashboard and the app will need to complete a review before it can regain Platform access.

Once all violations have been resolved, your app must go through a review process that typically takes one week to complete once we have access to your app. If there are other issues preventing access to your app, or found during the app review, you will receive an alert by email to the address of the main contact, as well as in the alerts inbox. Once the review process is complete without issues, full access will be restored.