We have an .net app which interacts with salesforce using api. This would need to be downloaded from out website. We want to list this app on appexchange but the download would still happen from our website.
I had a few question regarding the listing.
Do we need to have this app as paid app in appexchange? Its paid from our website and all the checkout would happen from our website.
Does it need to go through security review? We dont have a package on SF, so how do they do the review?
Is there anything else that i need to be aware of
I know we need to signup as a partner for the listing which we are doing.
Update:
Our app would be residing outside of SF and would communicate with SF using API's. A use case would be of hosting online surveys and automatically update the survey results into SF using API's
We dont have any package that needs to be installed in SF, so how would SF do a security review, what would they review?