What your Android build has to answer for
The Google Play requirements and RBI paragraphs that land on an Android release in India, and what each one asks of the build you actually ship.
7 guides, published by Security Brigade and last updated .
Proving the app, and proving the device
What an integrity verdict actually asserts, what it does not, and where the keys belong.
What a Play Integrity verdict actually returns, and who it is evidence for
The Play Integrity API returns three families of verdict, and the labels most conversations about it are really about are not among the ones you…
Android security advice that expired: fourteen statements, and the version that ended each one
Fourteen statements about Android security that were correct when somebody learned them and are not correct now. Each one is paired with the API…
What Google checks before it publishes you
The submission gates, in the order the console applies them, and the dates they start.
Google Play reads your manifest, not your code path
Google Play's restricted-permission rules are written against what an app declares, not against what it calls. An app that never invokes an API c…
Your Data safety form is a declaration about a binary, and the binary keeps changing
Google Play's Data safety form binds every developer with a published app. It covers data handled by third-party libraries and SDKs as well as yo…
Android 16 is now the submission gate: target API 36, and what the 1 November window actually is
Since 31 August 2026, Google Play has applied two requirements to two different sets of apps under one date, with two very different verbs. A new…
Every Play package must be registered by 30 September 2026 — and the install-side milestone is a different obligation
Two obligations, one date. Install-side verification enforcement begins on 30 September 2026 for users installing from seven named stores in Braz…
Where Indian regulation reaches the app
The obligations that arrive from a regulator, not from the store.
Applying this to your own estate
Get this scoped against what you actually run.
Scope, cost and cadence change with the estate, the regulator and the deadline. Describe yours and you will get a straight answer on all three from Security Brigade, who publish this site.