On October 16, 2026, Apple refreshed the App Store Review Guidelines. For teams shipping iOS or iPadOS apps through alternative app marketplaces or website distribution, a useful control sits in the left rail: the checkbox “Highlight Notarization Review Guidelines Only” (key icon / data-nr markers). That toggle shows which clauses apply to Notarization review — and which remain App Store–only.

We verified the live highlight inventory on October 17, 2026 against that October 16 page. This briefing maps what is in, what is out, and how developers can use that map for compliance planning. It is not about Mac Developer ID notarization.

Key point: Notarization is not the same as App Store approval. Per Apple’s framing, it is a baseline check for malware, security, integrity, that the app “functions as promised,” and privacy — it does not apply full App Store business or content standards to alternatively distributed apps.

Apple documents this on Apple Support — alternative distribution: Notarization does not enforce App Store standards for business practices and content on those apps. Flipping the Guidelines highlight is the practical way to see the clause-level split.

What’s in (Notarization set)

Section headers that carry Notarization markers: 1 Safety, 2 Performance, 4 Design, 5 Legal. Several rules are lettered-only — the parent heading may stay visible while only a sub-clause is keyed.

Safety — partial

Performance — heavy

Design — selected

Legal — privacy-heavy

What’s out

The live intro speaks generally of Notarization for iOS and iPadOS apps; it does not name EU or Japan. The legend links DMA / EU notarization help; EU and Japan still appear inside keyed 2.5.6 (alternative browser-engine entitlement).

What this means in practice

  1. Safety scope is selective. Most objectionable-content rules under 1.1 are outside the Notarization set; fraud and fake-utility rules (1.1.6) are inside. Treat “Safety” on the highlight as focused on integrity and harm-prevention clauses that are keyed — not as a full App Store content review.
  2. §3 Business is outside Notarization. Payments / IAP and other business-model rules are not Notarization gates. Billing and commercial-policy expectations still come from your marketplace, contracts, and applicable law. Apple Pay disclosures (4.9) and OS-capability monetization (4.10) remain in the Notarization set where relevant.
  3. Design keys are letter-specific. 4.3(a) (multiple Bundle IDs) is keyed; 4.3(b) and 4.2 Minimum Functionality are not. Passing Notarization does not equal meeting full App Store design or quality expectations.
  4. Privacy remains a core requirement. Almost all of 5.1 stays in the set (purpose strings, consent, ATT, health, location, and kids privacy substance under 5.1.4(a)). Kids Category merchandising (1.3) is separate from kids privacy.
  5. IP and gambling largely sit outside NR. General intellectual-property and gambling rules are mostly outside the highlight; Apple brand / product lookalike rules (5.2.4–5.2.5) stay in. Plan copyright, trademark, and real-money gaming compliance with your marketplace and local counsel.
  6. Use the live highlight as your checklist. Apple surfaces the set via the Guidelines page toggle rather than a separate Notarization-only PDF. After each “Last Updated” change, re-open the checkbox and reconfirm the keys you rely on.
  7. Confirm region and distribution mode. The intro describes Notarization for iOS and iPadOS apps in general terms; some entitlements (for example browser-engine rules under 2.5.6) remain region-specific. Match your compliance pack to where and how you distribute.

Practical takeaways for developers

  1. Treat Notarization as a security, integrity, and privacy baseline — not as a substitute for App Store content or business-model review.
  2. Do not equate Notarization with clearing App Store §3 or full Design expectations. §3 Business is outside the NR set; 4.3(a) still applies where keyed. Program agreements and account policies remain separate from this highlight.
  3. For alternative distribution, build a compliance checklist that still covers privacy (5.1), no hidden features (2.5.19), honest metadata (2.3), relevant UGC (1.2), and VPN / MDM (5.4–5.5) when applicable — and separately address payments, content, IP, and gambling under marketplace rules + local law.
  4. Re-check the live highlight after every Guidelines “Last Updated” bump. This inventory was verified 2026-10-17 against the 2026-10-16 page.

Sources

If you need a second look at how the Notarization highlight maps to your distribution plan, contact KappS — we can help you read the live Guidelines set against your compliance checklist.