Providers must first submit a non-encrypted version of their extension for the basic check. If the extension passes the basic check, providers may choose to list and sell an encrypted version of their extension. The extension may include a notation to indicate that it contains encrypted code. We cannot verify that the encrypted code is the same as what was submitted for review, but we will be tracking post-purchase feedback and any developers that post encrypted code that is different from the code submitted for review may be subject to suspension or termination of their ability to list extensions in the Marketplace.