Following up: the part we most need confirmed is #2. The October 5 news post and the App Store Connect release notes (October 15) say that all apps submitted from April 2027 need iPhone Duo screenshots, while the Screenshot specifications page says the requirement applies to apps using the iOS 27.1 SDK or later. Which one applies to apps built with the iOS 27.0 SDK? Any pointer would be appreciated.

What conditions trigger export compliance questions when ITSAppUsesNonExemptEncryption is NO? Hello, I'm trying to understand the specific conditions that require an app to answer export compliance questions, even when ITSAppUsesNonExemptEncryption is explicitly set to NO in the Info.plist. My understanding is that setting this key to NO should bypass the compliance step, but it seems there are exceptions. For instance, could any of the following override this setting? Using certain third-party SDKs that might have their own encryption. The presence of specific Apple frameworks like CryptoKit or CommonCrypto, even if not used for non-exempt purposes. Standard HTTPS calls made through WKWebView. A temporary bug or caching issue in App Store Connect. I am looking for a definitive list of conditions or official documentation on these exceptions. What are the known triggers that force a compliance review regardless of the Info.plist setting?