What is access verification?
Access verification was the third gate Meta placed in front of companies that wanted to become a Tech Provider on the WhatsApp Business Platform — software makers that use the Cloud API to message on behalf of other businesses. After the company's business portfolio passed Business Verification and its app passed Meta App Review, Meta asked it to complete access verification, a separate submission in the App Dashboard (App settings › Basic › Access verification) confirming that the business really was a technology provider entitled to reach other businesses' WhatsApp data. Partner guides put the typical turnaround at about five business days.
The three checks answer different questions, which is why people mix them up. Business Verification confirms the legal entity behind a portfolio — its name, address and documents. App Review judges the app: whether its use of whatsapp_business_messaging and whatsapp_business_management matches what the screencasts show, and it grants Advanced Access to those API Permissions. Access verification asked a third question: is this verified company actually in the business of serving clients, rather than a single brand reaching for other companies' assets?
On 3 October 2025 Meta's WhatsApp changelog recorded that access verification is no longer required to become a Tech Provider. Meta's current "Become a Tech Provider" guide lists two steps — verify your business, then App Review with Advanced Access — before onboarding clients through Embedded Signup. The term survives in older integration guides, compliance checklists and audit files, so it is worth knowing what it was and what has replaced it.
Key takeaways
- Access verification was Meta's check that a verified business genuinely operated as a Tech Provider serving other businesses.
- It came after Business Verification and App Review, was started in the App Dashboard and typically took about five business days.
- Meta's changelog of 3 October 2025 says access verification is no longer required to become a Tech Provider.
- Today the gates are a verified business portfolio and Advanced Access to the two WhatsApp permissions through App Review.
- Older checklists still list the step, so plan timelines from Meta's current onboarding page, not from a partner guide.
Climb the Tech Provider ladder — and see the rung Meta removed
- Tier 1Tier 1: Meta app with the WhatsApp use case (below the current tier)Standard AccessStandard Access
- Tier 2Tier 2: Business Verification (below the current tier)Legal entity confirmedLegal entity confirmed
- Tier 3Tier 3: App Review (below the current tier)Advanced AccessAdvanced Access
- Tier 4Tier 4: Access verification (below the current tier)Retired 3 Oct 2025Retired 3 Oct 2025
- Tier 5Tier 5: Tech Provider (below the current tier)Ready to onboardReady to onboard
- Tier 6Tier 6: First client live (current)Token, webhook, numberToken, webhook, number
Tier 6 · First client live
Token, webhook, number
Why: Onboard the first client through Embedded Signup and go live.
Business token exchanged, app subscribed to the client's WABA, number registered and a payment method added by the client.
Move 4 of 4: climbs to tier 6, First client live (Token, webhook, number). Onboard the first client through Embedded Signup and go live.
Why does access verification matter?
Partner onboarding is a critical path: a software company cannot onboard its first client until Meta has cleared it, and every week of waiting delays revenue. Teams that plan from an old checklist budget a week for a step that no longer exists, or stall because the App Dashboard never shows the prompt they expect. Compliance teams, meanwhile, need to record accurately which checks the company passed and when — business verification and App Review approvals are the evidence that matters now.
How does access verification work?
Create a Business-type app with the WhatsApp use case
Connect it to your business portfolio. With Standard Access the app can already message for your own business's assets — enough to build and test.
Pass Business Verification
Submit the business name, address, phone, email and website in Business settings, with documents if Meta cannot match the entity. App Review cannot start until the portfolio is verified.
Pass App Review for Advanced Access
Submit two screencasts — a message sent from your app arriving in WhatsApp, and your app creating a template — plus app settings such as the privacy policy and icon. Approval grants Advanced Access to the two WhatsApp permissions.
Skip the old access verification step
Until 3 October 2025 this is where you submitted access verification and waited. Meta no longer requires it, so an approved app moves straight to onboarding clients.
Onboard clients with Embedded Signup
Exchange each client's Embedded Signup code for a business token, subscribe your app to the client's WABA, register the number and have the client add a payment method.
Key facts at a glance
Access verification: key facts and limits
- Former place in the sequence
- After Business Verification and App Review
- Where it was started
- App Dashboard › App settings › Basic
- Typical turnaround (partner guides)
- About 5 business days
- Required since
- No longer required, per Meta's changelog of 3 Oct 2025
- Gates today
- Verified portfolio + App Review with Advanced Access
- Permissions that matter
- whatsapp_business_messaging, whatsapp_business_management
- Symptom without Advanced Access
- Error 200 on accounts your business does not own
Access verification in code
# Inspect a client's business token: which permissions, for which WABAs?curl -G "https://graph.facebook.com/v26.0/debug_token" \--data-urlencode "input_token={BUSINESS_TOKEN}" \--data-urlencode "access_token={APP_ID}|{APP_SECRET}"
After App Review, this is the quickest proof that your app really has access to a client's assets.
Common wrong turns
Common mistakes with access verification
Budgeting time for a step that no longer exists
Plans copied from 2024 partner guides still allow a week for access verification. Build the timeline from Meta's current Tech Provider guide: business verification, then App Review.
Confusing it with App Review
App Review approves how your app uses each permission; access verification judged the company. Missing Advanced Access is an App Review problem, and it shows up as error 200 on a client's WABA.
Treating its removal as fewer obligations
Dropping the check removed a form, not the responsibility. Meta's platform terms on data use and client consent still apply, so keep consent records and client agreements in order.
Recording the wrong evidence in audits
A compliance file that lists "access verification pending" looks like a gap. Record the business verification date and the App Review approval for each permission instead.
Access Verification FAQs
Is access verification still required for WhatsApp Tech Providers?+
What is the difference between access verification and App Review?+
How long did access verification take?+
Do I need access verification to send messages for my own brand?+
Example: A Pune SaaS team re-plans its launch
A Pune company building a clinic-booking product follows a partner's 2024 checklist that budgets five business days for access verification after App Review. Its App Review is approved on a Tuesday, the team waits for an access verification prompt that never appears, and the launch slips. Reading Meta's changelog, they find the step was dropped on 3 October 2025, run debug_token on their first client's business token to confirm the two permissions and the client's WABA ID are in granular_scopes, and onboard the first three clinics the same afternoon.
Good practice
Best practices for access verification
- Start Business Verification first — App Review cannot begin until the portfolio is verified.
- Record both App Review screencasts on a test number so no customer data appears in them.
- Run debug_token on every new client's business token and alert when a WABA is missing from granular_scopes.
- If a partner guide mentions access verification, check its date against Meta's changelog before acting on it.