HubSpot App Certification & Listing Updates 2026-2027: Impact on Your Storefront & Integrations

Hey ESHOPMAN community! If you're running a store or managing your operations with HubSpot, you know how crucial a robust and secure app ecosystem is. HubSpot is constantly evolving, and sometimes, those evolutions come with important announcements that we all need to pay attention to. Recently, a significant update dropped in the HubSpot Community about upcoming changes to App Listing and Certification Requirements, with deadlines stretching into 2026 and 2027.

This isn't just developer-speak; these changes impact the reliability, security, and future compatibility of every app you might be using or considering for your HubSpot portal, including powerful commerce solutions like ESHOPMAN. Let's break down what these updates mean for you, straight from the source.

HubSpot API and CRM Card Deprecation Timeline for 2026-2027

Elevating Your HubSpot Experience: Why These Updates Matter

HubSpot's commitment to a secure, reliable, and cutting-edge platform is unwavering. The recent announcements, initially shared by the original poster in the HubSpot Community, outline critical shifts designed to enhance the entire app ecosystem. For an e store builder like ESHOPMAN, built natively on HubSpot, these updates are foundational to ensuring seamless operations, robust security for customer data, and continued compatibility with the latest HubSpot features. They ensure that your storefront, CRM, and marketing efforts remain perfectly aligned and protected.

Keeping Your Apps on the Cutting Edge: API & Platform Versioning

HubSpot is always pushing forward, releasing new versions of its developer platform and REST APIs every six months (typically in March and September). To ensure stability and security, they're tightening the reins on which versions apps must use. This means developers must keep their integrations current, which directly benefits you, the end-user.

Use of Supported Versions: Apps must use a currently supported version of HubSpot’s developer platform and APIs. The latest version is always recommended.
Marketplace Listings: New apps built on unsupported platform versions will be rejected from being listed.
Certification & Recertification: Apps must be on a supported version at the time of review. A defined remediation window (around 60 days) will be provided if updates are required.

Enforcement Timeline:

Starting November 2, 2026: Apps must be on a supported developer platform version (e.g., v2025.2 or v2026.03). Legacy apps or Projects 2023.2 / 2025.1 will be rejected for new listings, and existing apps in certification will have ~60 days to migrate.
Starting March 2027: v4 APIs will become unsupported. Apps undergoing certification or recertification will have ~60 days to migrate.

What does this mean for you? It means HubSpot is serious about keeping its platform modern and secure. As a user, this translates to more reliable integrations and fewer headaches down the line. For those of you evaluating complex platforms or seeking an alternative to other commerce solutions, HubSpot's commitment to a secure, up-to-date app ecosystem, especially with solutions like ESHOPMAN, makes a compelling case for building your commerce directly within your CRM.

Phasing Out the Old: Legacy CRM Card Deprecation

Legacy CRM cards are being fully deprecated on October 31, 2026. Effective immediately, new app listings, certifications, or recertification submissions are no longer permitted to use them. If your app currently uses legacy CRM cards, it must migrate to app cards to be eligible.

This move is about improving the user experience within the HubSpot CRM. App cards offer a more flexible, customizable, and integrated way to display information and actions from connected apps directly within contact, company, or deal records. For ESHOPMAN users, this means a more streamlined view of customer purchase history, order statuses, and other vital e-commerce data directly where your sales and service teams operate.

Ensuring Clean Exits: Uninstall App Endpoint Usage Requirement

For all new app certification submissions and apps undergoing recertification, your app must use the Uninstall App API endpoint:

DELETE /appinstalls/v3/external-install

This endpoint requires an active OAuth access token and fully removes your app from a customer's HubSpot account, including all associated features and webhooks. Upon a successful uninstall, super admins in the account will receive an email notification with a link to reinstall the app if needed. This ensures a clean break, preventing orphaned data or lingering connections, which is crucial for data privacy and system hygiene.

Fortifying Connections: Apps Must Use OAuth v3 Endpoints

Effective immediately, all new app listings, certification submissions, and apps undergoing recertification must use the new OAuth v3 endpoints. OAuth v1 endpoints are being deprecated and replaced by the latest, more secure versions:

```
POST /oauth/2026-03/token
```
- authorization code & refresh token exchange
```
POST /oauth/2026-03/token/introspect
```
- token introspection (access & refresh tokens)
```
POST /oauth/2026-03/token/revoke
```
- token revocation (refresh tokens)

This update significantly enhances the security of app connections to your HubSpot portal. For integrations like omnisend marketing, which rely on secure data exchange, adopting OAuth v3 means stronger authentication and better protection against unauthorized access. This is paramount for protecting sensitive customer and transaction data flowing between your ESHOPMAN storefront and other marketing automation tools.

Deepening Trust: Token Access and Storage Security Questionnaire

For certification and recertification, developers must now complete a security questionnaire. This questionnaire will ask a series of questions regarding OAuth token access and storage, covering key areas such as encryption, access controls, and token lifecycle management. This extends beyond certification and will also be implemented for other programs, such as requesting access to sensitive data scopes.

This new requirement underscores HubSpot's rigorous approach to security. It provides an additional layer of vetting for apps, ensuring that developers are adhering to best practices for handling sensitive access tokens. For ESHOPMAN users, this means greater peace of mind that the apps connected to your commerce data are held to the highest security standards.

Streamlining the Process: Testing Credentials No Longer Required for App Listing

In a welcome change, as of March 31, 2026, testing credentials no longer need to be provided for app listing submissions. This reduces partner effort and improves security by eliminating the need to share and store sensitive login information. Instead, demo videos or guided walkthroughs demonstrating core user flows, configuration, and permission usage should be provided.

This update is a win-win. It simplifies the listing process for developers while maintaining a high bar for demonstrating app functionality, all without compromising security. This efficiency benefits the entire ecosystem, leading to faster access to new, high-quality integrations for your HubSpot storefront.

What This Means for Your ESHOPMAN Storefront and HubSpot Operations

These updates, while technical in nature, have a direct and positive impact on your day-to-day operations. They reinforce HubSpot's commitment to:

Enhanced Security: Stronger authentication, secure uninstallation, and rigorous security questionnaires mean your data is better protected.
Improved Reliability: Mandating current API versions reduces compatibility issues and ensures smoother integration performance.
Future-Proofing: By staying current with HubSpot’s evolving platform, your commerce solutions and integrations will continue to function seamlessly as HubSpot introduces new features and capabilities.
Better User Experience: The move to app cards and streamlined app listing processes ultimately leads to a more intuitive and efficient HubSpot environment for managing your sales, marketing, and service.

As a HubSpot-native e store builder, ESHOPMAN is dedicated to staying ahead of these changes, ensuring our platform always adheres to the latest requirements. We work tirelessly to provide a robust, secure, and fully integrated commerce experience within your HubSpot portal.

Stay Informed, Stay Ahead

HubSpot’s ongoing evolution is a testament to its dedication to providing a leading platform for businesses. By understanding and adapting to these app listing and certification requirements, you ensure that your HubSpot portal, and especially your ESHOPMAN storefront, remains a secure, efficient, and powerful engine for growth. Always choose certified apps and communicate with your app providers to ensure they are compliant with these vital updates.