I had to go through a Google security review process, which took surprisingly long to get through (probably a good thing!). However, the $15k+ 3rd party audit is only necessary if you are running servers that have a copy of client data. Mimestream only caches email data on your Mac, so I didn't have to pay this fee.