Google OAuth App Verification

The calendar integration with Capacities got blocked for my company email. I sent a request so that they can enable it, but I got this response:

"""

❌ Request rejected — Information Security

High-risk scopes detected: calendar

Reasons:

The 'calendar' scope grants full read/write access to the user's calendar, allowing Capacities not only to view meetings but also to create, modify, or delete events without restriction—exceeding what is necessary for simply synchronizing and taking meeting notes.

Capacities is an unverified third-party application; it has not undergone Google's security review, and there are no guarantees regarding how it handles, stores, or shares corporate calendar data.

Combining access to the user profile and the full calendar within an unverified app exposes sensitive organizational information, including attendees, locations, video conferencing links, and confidential meeting content.

To obtain approval:

Ask the vendor (Capacities) to obtain Google OAuth App Verification to mitigate publisher risk, and to limit the requested scope to 'calendar.readonly' if they only need to read events for synchronization and note-taking purposes.

Provide evidence that Capacities meets security standards (SOC 2, ISO 27001, or equivalent) and document its corporate data retention and handling policy, attaching this information to a new unblocking request.

As an immediate alternative, consider using the native Google Calendar integration with tools already approved within our company ecosystem, or request unblocking with the restricted 'calendar.events.readonly' scope, which limits access to read-only for events.

"""

Is this possible?