StoreComply

These findings come from a single-pass research run on 30 Sept 2026: Shopify App Store listings read directly, Shopify developer documentation, EU regulation guidance from law firms and testing bodies, and the evidence supplied with the brief. Each claim is tagged with a confidence level:

• High: a primary source (Shopify's own docs or App Store listing, EU text), or reputable press with a date.
• Medium: a law-firm or testing-body summary, or a single secondary source.
• Low: an aggregator, vendor blog or analyst estimate.

App Store review counts and prices were read on 30 Sept 2026. They move weekly. There was no adversarial verification. The web search budget ran out partway through the run, so some items below are marked unverified and must be checked before they drive a decision.

---

R1. Shopify economics for app developers

• High. Revenue share: developers keep 100% of the first $1,000,000 of lifetime gross app revenue, and 85% above that (a 15% share). Revenue earned before 1 Jan 2025 doesn't count towards the $1M. Developers with $20M+ App Store revenue a year, or $100M+ company revenue, pay 15% on everything. Source: Shopify revenue share docs.
• High. The $1M is lifetime, not yearly. Announced 24 Apr 2025, and effective with the updated Partner Program Agreement on 16 June 2025. Before that, the exemption reset every year (the June 2021 model). Source: Shopify changelog.
  • Correction to the brief: "0% on the first $1M" is right, but it's once per developer, not per year. Third-party articles still describe the old yearly reset (for example shopthemedetector, 28 Sept 2026). For this idea it makes no practical difference: $1M lifetime covers the whole 24-month plan.
• High. All app billing carries a 2.9% processing fee plus applicable sales tax. There is also a one-time $19 Partner account registration fee. Source: Shopify revenue share docs.
• Low. Over 27,000 apps are listed, with 40–90 new apps a week. 87% of merchants use the App Store. The median cheapest paid plan is about $10 a month, and the average is about $33. Only 1–3% of users review an app. The "average developer" earns about $93k a year. Source: shopthemedetector, 28 Sept 2026 (an aggregator; the methods aren't shown).

R2. Built for Shopify (BFS) requirements

• High. Source: Built for Shopify requirements.

  Area	Requirement
  Merchant adoption	50 net installs from active shops on paid plans, 5 reviews minimum, and a minimum recent rating (threshold not published)
  Admin performance (75th percentile, 100+ calls over 28 days)	LCP ≤2.5s, CLS ≤0.1, INP ≤200ms
  Storefront performance	Must not cut the store's Lighthouse score by more than 10 points
  Checkout (if used)	p95 response ≤500ms, failure rate ≤0.1%
  Integration	Embedded in the admin with the latest App Bridge. Primary workflows stay inside the admin. Sign-up uses Shopify credentials. Online store elements must use theme app extensions.
  Design	Polaris look and feel, mobile-responsive, clear onboarding and errors, no dark patterns or false claims

• Unverified. The size of the ranking and conversion boost from the BFS badge. It's widely claimed, but Shopify doesn't publish it. Observed: every top-10 app in the Legal category carries the badge (R4).

R3. The regulations behind each wedge

GPSR: General Product Safety Regulation (EU) 2023/988

• High. Entered into force on 12 June 2023. It has applied since 13 Dec 2024, when it repealed the old General Product Safety Directive. Sources: TÜV Rheinland, UL, EUR-Lex.

• Medium. Online listings (distance sales) must show:

  • the manufacturer's name, postal address and electronic address;
  • if the manufacturer is outside the EU, the EU responsible person's name, postal address and electronic address;
  • information that identifies the product (picture, type, batch or serial number);
  • any warnings or safety information, in a language consumers in that country easily understand.

  Online marketplaces must not list an offer until the trader provides this information. Sources: Amasty summary of Art. 19, EUverify, Dudkowiak & Putyra.

• Medium. GPSR covers non-food consumer products sold in the EU and Northern Ireland (not Great Britain). Source: Amasty summary (search snippet; the page itself refused automated reading).

• Medium. A non-EU manufacturer needs an EU-based economic operator who is responsible for product safety. The email address is mandatory; a phone number alone isn't enough. QR codes and digital labels supplement the physical label but can't replace it. Source: EUverify.

• Unverified. The exact maximum penalties. They are set by each member state, and law-firm summaries say only "up to a percentage of annual turnover". EUR-Lex blocked automated reading during this run, so the article text was not read directly.

Shopify's native GPSR support

• High. Shopify tells merchants to use the "Disclosures" product metafield and metaobject entries for legally required warnings, and metafields or the product description for the other GPSR details. It provides no EU responsible person tool, and says "third-party compliance tools might be available on the Shopify App Store". Source: Shopify Help Center: GPSR.
• Implication: Shopify already gives merchants a free, native place to store GPSR data. Any app has to beat "type it into a metafield once".

EU withdrawal button: Directive (EU) 2023/2673

• High. From 19 June 2026, online sellers to EU consumers must offer an electronic withdrawal function:

  • a "withdraw from contract here" button, available throughout the withdrawal period;
  • a confirmation step;
  • an acknowledgement sent on a durable medium.

  In Germany, non-compliance can bring cease-and-desist actions under the UWG, and fines of up to €2M or 4% of turnover. Sources: Greenberg Traurig, 19 May 2026, K&L Gates.

• High. Shopify points merchants to its return and cancellation rules for this. It doesn't describe a ready-made native button. Source: Shopify Help Center.

EU legal-guarantee notice and "GARAN" label: Directive (EU) 2024/825 and Implementing Regulation (EU) 2025/1960

• Medium. App listings describe a mandatory harmonised EU guarantee notice and label starting in 2026 ("Meet the EU's 2026 guarantee notice requirement", "EU warranty label & GARAN guarantee label - 2025/1960"). At least 8 apps targeted it by 30 Sept 2026 (R4).
• Unverified. The application date of 27 Sept 2026. It is widely reported, but it was not confirmed from the primary text in this run.

California Proposition 65

• Unverified. The current rules for internet warnings and the 2025 amendments to short-form warnings. The OEHHA page returned no content to the fetch tool. On Shopify, one app ("Warn") covers Prop 65, allergen and EU AI Act warnings, with 18 reviews (R4).

B2B, customs and e-invoicing documents

• High. Sufio is the invoicing incumbent. It launched on 22 July 2013 and holds the Built for Shopify badge, with 4.9★ from 466 reviews. Plans are $7, $19, $49 and $129 a month. It supports PEPPOL e-invoicing (ZUGFeRD, Factur-X), credit notes, B2B automation and EU VAT handling. Source: Sufio on the App Store.
• Low. Latka estimates Sufio's revenue at $1.6M in 2024, up from $736K in 2023 ($401K in 2021). It lists 26 employees, ~3K customers and ACV of about $524. Source: Latka. These are estimates, not company-reported figures.
• Unverified. The dates of national B2B e-invoicing mandates (Belgium, Poland, France, Germany and others). These are the real driver of must-have document demand, and they must be checked before any move into this wedge.

R4. How crowded each wedge is (Shopify App Store, read 30 Sept 2026)

• High. The Legal category holds 517 apps. Source: Legal category.

GPSR apps: crowded, and no leader

Pricing summary via Meetanshi, 10 Jul 2026 and each listing.

Reading: at least 15 GPSR-capable apps. 21 months after GPSR started applying, the best-reviewed GPSR-only app has 29 reviews, and 10 or more launched in 2026 with zero reviews. Two have already left the store. The review base goes to bundles (Complimus: 69), not to pure GPSR tools.

Other compliance wedges: where reviews concentrate

Sources: Legal category page 1 and page 2, Revoq, Slash, inventivo, Sufio.

Reading:

• Deadline waves create install spikes. Revoq went from launch to 561 reviews in about 6.5 months by being live 3 months before the deadline.
• Nearly every compliance winner has a free plan. The paid revenue per install in this category is low.
• Being late to a wave is fatal. The withdrawal-button and GARAN waves have already been claimed.

R5. Evidence on Shopify-app businesses (supplied with the brief)

• Medium. DropCommerce grew from 3K CAD MRR (Aug 2019) to 78K CAD MRR (Dec 2021). The founder: "organic traffic from Shopify was everything". Paid ads and cold email failed. Growth was helped by the COVID e-commerce boom. Source: Indie Hackers AMA. Self-reported, and in a boom year.
• Medium. Mat De Sousa (Wide Bundles) went from $0 to about $50K MRR across a portfolio of Shopify apps. The lessons were validating through merchant conversations, onboarding, and App Store keyword targeting. Source: Mantle Techtonic. Self-reported. The number of apps and the timeline are not stated on the page.
• Low. Sufio: $1.6M in 2024, up from $736K in 2023 (Latka estimate, see R3). It shows a compliance-adjacent document app can build a durable, higher-ARPU business, over 11+ years.
• High (method). Rob Walling's stair-step approach: start with a one-time product or a small add-on in a single ecosystem (the Shopify App Store is the classic example), then build recurring SaaS on the skills and income it gives you. Source: MicroConf.

R6. Base rates

• No verified base rate was found for the share of new Shopify apps, or of bootstrapped B2B micro-SaaS products, that reach a given MRR within 24 months. RevenueCat's figures (17.3% of new subscription apps reach $1k/month in 2 years; 4.6% reach $10k) cover consumer mobile apps, a different buyer and channel. They are shown in other ideas in this portfolio for comparison only.
• Indirect signals (not base rates):
  • 27,000+ apps (Low, R1);
  • in the GPSR niche, 1 of ~15 apps has more than 25 reviews after up to 2 years (High, R4);
  • two GPSR apps are already gone (High, R4).

---

10.1 What this changes in the assessment

10.2 Open questions (next research run)

1. Primary texts:
   • GPSR Articles 19, 22 and 44 (penalties);
   • Directive 2024/825 and Regulation 2025/1960 (the GARAN date and scope);
   • the OEHHA Prop 65 internet-warning rules and the 2025 amendments.
2. Upcoming EU deadlines that touch Shopify storefronts or catalogues, with dates:
   • EUDR (the delayed application dates);
   • Digital Product Passport under ESPR (batteries first, then textiles);
   • the national B2B e-invoicing mandates.
3. Install numbers, not just reviews, for GCM, Complimus and Revoq (for example from Store Leads or the developers' public statements).
4. Number of Shopify stores in Germany, France, the Netherlands, Italy, Spain and the UK, and the share that stock third-party brands.
5. Churn benchmarks for paid Shopify apps: store closure rates, and app uninstall rates after a compliance deadline passes.
6. Whether Amazon, eBay, Etsy and other marketplaces accept a bulk GPSR feed, and in what format.
7. Trademark and domain availability for "StoreComply" (and conflicts with Complimus, ShopCompliance and simpleComply).