Play Protect is blocking our DPC app — appeal submitted 4+ times over 2 months, still blocked (Fully Managed + Samsung Knox)

Hello Android Enterprise Community,
I am the developer of MDM solution. We are facing a critical issue with Google Play Protect (GPP) blocking our Device Policy Controller (DPC) during enrollment.

Issue Description:

• Error message: “This app can request access to sensitive data” when installing the MDM Agent APK via QR Code provisioning on Android 16 (and some earlier versions).
• We have thoroughly reviewed and ensured compliance with Google’s guidelines: Warning Dev Guidance ,  Potentially Harmful Applications (PHAs) ,  Mobile Unwanted Software (MUwS)
• We have submitted the Play Protect Appeal multiple times (more than 4 appeals over the past 2 months) via Play Protect appeal . However, our DPC is still being blocked.

Our Solution Details:

• Primary deployment mode: Fully Managed Device (Device Owner).
• Used exclusively internally within our company (On-Premise environment, no public distribution).
• Heavily focused on Samsung Galaxy devices - we integrate Samsung Knox SDK for additional policies (limited use of Android Management API).
• The DPC is installed via QR Code, with the APK hosted on our internal server.

Main Questions:

• Could the use of Samsung Knox SDK in combination with a custom DPC be causing the prolonged delay or rejection in the approval process?
• Does the fact that our solution is On-Premise + internal Fully Managed deployment affect how Google evaluates the DPC for allowlisting?
• Has anyone experienced similar long delays (2+ months) with Play Protect appeals for custom DPCs, and how did you resolve it?

We have also applied to the Android Enterprise Partner Portal to explore official channels, but our application was rejected. We would appreciate any guidance on improving our application or understanding the exact criteria.
This blocker is severely impacting our Samsung device rollout inside the company. We would greatly value:

• Experiences from developers whose custom/in-house DPCs have been successfully approved by GPP.
• Tips on writing more effective appeals (what additional information should we provide?).
• Any valid workarounds while waiting for approval.
• Recommendations on how to escalate or contact the right Google team regarding DPC allowlisting.

Thank you very much for your time and insights. Any help or shared experience would be highly appreciated.
Best regards,