ICP and legal12 min readFacts checked on November 1, 2026

What is a PSB filing, and does your website need one in China?

It's the public security step after an ICP, and it isn't settled for sites hosted abroad.

The short answer

A PSB filing registers your website with China's public security authorities. Sites on mainland servers need one after their ICP, within 30 days. It has its own portal, review and footer number. For sites hosted abroad, sources disagree, so don't assume you're exempt or obliged. Ask a local adviser.

  1. Article 12 of China's 1997 security Measures, revised in 2011, gives organizations 30 days to file.
  2. Article 23 of those Measures sets a warning or a stop of up to 6 months, and names no fine.
  3. Alibaba Cloud's June 2026 guide counts the 30 days from launch, China Briefing's April 2026 guide from the ICP number.
  4. On sites hosted abroad, Alibaba Cloud says to file, with a test that varies by page, while Chinafy said in September 2024 that it isn't necessary.
  5. Review takes 3 to 5 working days according to Chinafy in 2024, and 1 to 3 according to AppInChina in June 2026.

You got your ICP number, or you’re planning for one, and someone mentions a second filing. This one goes to the police, not to the telecom regulator.

It’s a short job on paper, but the guides disagree on who owes it and when. This page is part of the legal basics of a website in China.

What is a PSB filing?

A PSB filing is a separate registration of your website with China’s public security authorities.211

Alibaba Cloud calls it public security network filing, 公安联网备案, and says it isn’t the same thing as the ICP filing.2

It comes from a different text. The ICP rests on China’s internet information rules.19 The PSB filing rests on 1997 security Measures, revised in 2011.12

You tell the police what the site is. A 2024 Q&A credited to the public security ministry’s cyber bureau lists its content, interface, purpose, domain, responsible person, contact details and office location.23

ICP filingPSB filing
AuthorityMIIT 12Public security 3
Where you fileThrough your host 11On the national platform, beian.mps.gov.cn 2
Who reviewsSee our ICP filing guidePublic security for your registered address, not the host 323
Shown on your siteICP number at the bottom of pages 6PSB number and icon in the footer 27
ComesFirstAfter the ICP, for a mainland site 2

So your host can’t approve it for you. Alibaba Cloud states that public security reviews these filings, not Alibaba Cloud.3

You can spot a finished one in a site’s footer. Alibaba Cloud’s Chinese help pages show 浙公网安备 33010602009975号, which its English pages render as “Zhejiang Public Security Bureau Record No. 33010602009975”.717

Who needs a PSB filing?

Every site on mainland servers does, and on that the sources agree. Alibaba Cloud says a site or app with an ICP filing must also complete this one.2 The cyber bureau Q&A says operators need both filings.23

AppInChina and Chinafy describe the same duty for sites hosted in China.89

That covers plain company sites as well as stores. Chinafy lists e-commerce, informational and corporate landing sites alike.9

The legal text is wider and vaguer. Article 12 names legal persons and other organizations using the international network connection, and doesn’t use the word website.1

Hosts apply it to websites, and cite these Measures when they do.26

What about a site hosted outside mainland China?

Nobody we read settles this one, so don’t treat it as settled. Most guides pick one answer and move on, and the same provider can give different answers on different pages.

SourceWhat it says
Alibaba Cloud FAQ, English and Chinese, undatedOutside the mainland, no ICP is needed, but a PSB filing is. No other condition 520
Alibaba Cloud PSB page, Chinese, undatedOutside the mainland but serving the mainland: file within 30 days 2
Alibaba Cloud process overview, Chinese, undatedOutside the mainland, if the site can be reached from the mainland: file within 30 days of launch 21
Alibaba Cloud Hong Kong page, Chinese, undatedNo ICP needed, the site can go live directly, with no PSB step mentioned there 7
Chinafy, September 2024Not necessary if hosted outside the mainland 9
AppInChina, June 2026Requirements assume China hosting, and only Chinese-registered businesses can apply 8

So one host uses three tests: none at all, serving the mainland, and being reachable from it. Those tests catch different sites, and we can’t tell which one the platform applies.

There’s a practical knot too. weber.cloud says the site must show its ICP number before you submit.10 A site hosted abroad has no ICP number to show.

Alibaba Cloud calls the ICP a prerequisite when you use mainland servers, and the form it describes asks for the number.721 We found no explanation of what a site without one enters.

The text doesn’t clear it up. Article 12 sends organizations to the office designated by public security where they’re located.1

The cyber bureau Q&A says the police unit for an entity’s registered address does the review.23 Our reading is that neither text describes a foreign company with no presence in China. That’s a reading, not legal advice.

Article 24 says networks linked with Hong Kong, Macau and Taiwan follow the Measures by reference.1 It doesn’t say what a site hosted in Hong Kong owes.

We also found no public security notice aimed at foreign sites.

Verdict

Hosted on the mainland, file. Hosted abroad, neither “exempt” nor “must file” has solid support. Take it to a local adviser, with your hosting, entity and audience written down.

For your hosting choice, see hosting in China and Hong Kong hosting. If you have no entity, read can you do this without a Chinese company?

When do the 30 days start?

Assume the earliest date. Every source that gives a deadline says 30 days, but they count from different events.

SourceThe 30 days run from
Measures, Article 12The formal connection of the network 124
Alibaba Cloud, June 2026The launch of your website 6
Alibaba Cloud PSB pageThe day the site goes live, once it has its ICP number 23
Alibaba Cloud Hong Kong pageCompleting the ICP filing 7
China Briefing, April 2026Receiving your ICP filing number 11
AppInChina, June 2026Receiving the ICP filing, in its introduction 8
Tencent Cloud, 2022Obtaining the ICP filing from MIIT 12
weber.cloud, undatedReceiving the ICP 10

Alibaba Cloud alone counts from two different events. A mainland site needs its ICP first, so the ICP date comes first.1121 If your launch comes much later, no source tells you that it’s safe to wait.

Two more clocks run next to this one, and few guides mention them.

Fig. 1The three 30-day deadlines
  1. PSB filing30 days after going live or after the ICP, depending on the source
  2. Alibaba Cloud data codeValid for 30 calendar days, cannot be regenerated
  3. Footer number30 days after PSB approval
  • The application: 30 days, as above.
  • The footer: Another 30 days after approval to add the number, according to Alibaba Cloud and Tencent Cloud.312
  • The data code: If you use Alibaba Cloud’s shortcut, the code is valid for 30 calendar days and can’t be regenerated.4

Free check

Is your website visible on Baidu?

Enter your website. We check Baidu, access from China and how your site is set up, then email you the report.

How do you file?

You file online, on the platform, as the site’s operator. Alibaba Cloud’s guides and weber.cloud’s guide give a similar outline.

  1. Get the site ready. It should be reachable in China and show its ICP number, according to weber.cloud.10
  2. Open an account. Register on the National Internet Security Management Service Platform, beian.mps.gov.cn.2 Huawei Cloud says companies use a legal-person account, and identity is checked by scanning a code in the 公安一网通办 app.22
  3. Submit your entity. Enter the company and the person responsible, then wait for approval.37
  4. Start a new website application. Enter the ICP number, domain and server IP.7 The site name must match the one in your ICP filing.3
  5. Answer the interactive services question. See the next section.
  6. Keep the site online. Reviewers must be able to open it at any time, or the review fails.3
  7. Watch for the result. It usually arrives by SMS.7 weber.cloud says it comes in Chinese, to the registered Chinese mobile number.10
  8. Publish the number. Copy the number and HTML code from the platform into your footer.2

Published review times are short. Chinafy says 3 to 5 working days, and so does weber.cloud.910 AppInChina says 1 to 3 if your documents are complete.8 Huawei Cloud gives 2 to 3 for adding a new entity.22 Those are estimates, not commitments.

The documents

The lists differ, so prepare the widest one.

ItemAppInChina 8Chinafy 9weber.cloud 10
Chinese business licenseYesYesNot listed
ICP numberYesYesShown on the site
Domain proof or detailsYesYesRegistrar details
Hosting detailsNot listedYesYes
Website screenshotsYesNot listedNot listed
ID of the person responsibleYes, and the network security officerYesChinese ID card, its validity dates, and a photo holding it
Date the site went onlineNot listedNot listedYes

Huawei Cloud also mentions a domain certificate from your registrar and the server’s public IP.22 weber.cloud says all data must be in Chinese.10

We couldn’t read the platform’s own filing guide. Its page opened without usable content, so treat every list above as a provider’s account.

The shortcut at Alibaba Cloud

Alibaba Cloud can carry your ICP data over. You tick “Authorize” on your ICP order, then attach the data code on the platform after MIIT approves.4

Some fields still need filling in by hand.4 It’s specific to that host, and it covers websites only.

Read the choice closely. Alibaba Cloud’s Chinese page says refusing can’t be undone, while “not for now” can be revisited.25

Filing through a provider

AppInChina offers to apply through its own Chinese entity if you have none.8 It doesn’t explain how that works, and we found no independent source that backs it.

Have an adviser look at any such setup before you agree.

The interactive services question

The form asks whether your site offers interactive services. The label is wider than it sounds.

Alibaba Cloud defines an interactive site as one where users interact with each other or with the platform. Its list includes site search, message boards, live chat and user comments.3 A non-interactive site only shows static information.3

So on that wording, site search alone counts. It’s one host’s definition, but it’s the only one we could read.

Alibaba Cloud says to answer from the site’s real features, and to pick “No” if you’re unsure.3 If the order is rejected, you can change the answer and resubmit.3

A separate rule may also come into play. Security assessment provisions in force since November 30, 2018 cover forums, blogs, chat rooms, group chats and short video, among others.13

Launching one of those features calls for a self-run assessment, and the report goes in through the same platform before launch.13

Alibaba Cloud’s guide points to the platform’s assessment guide, without saying when you need it.3 We found no source that ties the form’s answer to the assessment.

We also found no source that says where a contact form falls. Interaction “with the platform” could reach it, but that’s our reading of one host’s wording.

What happens if you skip it?

The written penalty is a warning or a stop, not a fine. Article 23 says failing to file brings a warning, or a shutdown for rectification of up to 6 months.1 The 2024 cyber bureau Q&A repeats that.23

AppInChina and Chinafy mention fines.89 Those exist in the same Measures, but under a different article, for different failures.

FailureArticleWhat the text provides
No filing23Warning, or stop of up to 6 months 1
No security rules, no technical measures, no user training, among others21Correction order and warning. If not corrected, up to RMB 5,000 for responsible staff and RMB 15,000 for the entity. Serious cases: stop of up to 6 months 1

Police case reports show how this has played out. All four involve Chinese organizations, in reports published in 2019 and 2020. We read none about a foreign company, so they’re examples rather than a measure of risk.

CaseProblem foundOutcome
An organization’s portal in Zunyi, 2019 reportNo filing, no security rulesOrder to correct and a warning, under Articles 23 and 21 14
A Sichuan company in Luzhou, January 2019Checked over suspected illegal content. No filing, no security rules or technical measuresWarning and order to correct. The company closed the site itself 15
A public institution in Pan’an, March 2019No filing since the site opened in November 2011Warning and order to file by a deadline, under Articles 11, 12 and 23 16
A clothing company in Liling, May 2020No filing since the site was built in 2013Warning, under Articles 11, 12 and 23 18

The filing also isn’t the whole duty. Article 10 expects organizations to keep security rules, take technical measures, train users and report listed incidents within 24 hours.1

Article 5 lists 9 kinds of banned information.1 Our guide on sensitive content on a Chinese website covers that side.

The bottom line

If your site sits on mainland servers, the PSB filing is your next task after the ICP, and it isn’t optional. Treat 30 days as starting the moment you get your number.

If your site sits abroad, the sources conflict, so ask a local adviser instead of copying a vendor’s answer. For the steps before this one, see how long an ICP takes.

How Index in China can help

We translate your site into Simplified Chinese with a human reviewer and work on getting it indexed on Chinese search engines. ICP and PSB filings aren’t part of the offer we list, and our work doesn’t settle the PSB question for a site hosted abroad. We’ll tell you when your case needs a local adviser.

See how it works or book a 30-minute call.

Book a 30-minute call

Common questions

What does PSB stand for?

Public Security Bureau, the local police authority. In Chinese, the step is called 公安联网备案, and hosts in English call it a PSB filing or a public security filing. Searches also surface PSB residence registration and PSB case filings. Those are different processes, so check which one a document or a provider means.

How much does a PSB filing cost?

We can't give you a figure. None of the guides we read states a government fee, and that includes AppInChina and Chinafy. Filing yourself through the platform involves your own time, while a provider may charge for doing it. Ask for any fee in writing, and ask whether it's an official charge or a service charge.

Does a PSB filing need renewing every year?

Chinafy says it does, in a 2024 guide.9 We didn't find that in the AppInChina or Alibaba Cloud pages we read, so treat it as one vendor's claim. Check the platform's current guidance, or ask your local adviser, before you put an annual task in your compliance calendar.

What happens to my PSB filing if I change domain?

Chinafy says changes such as a new domain must be updated in the PSB system.9 A 2024 Q&A credited to the public security ministry's cyber bureau says to cancel both filings when a domain goes out of use, or you risk legal trouble if someone else registers it.23 Alibaba Cloud's PSB page sends you to the platform's guide for cancellation.2

Do apps and mini programs need their own PSB filing?

Apps do, according to Alibaba Cloud. You file for an app yourself on the platform, within 30 days of launch.4 Its data code doesn't cover mini programs either, but that page gives no deadline or steps for them.4 If you run a site and an app, list them separately before you start the paperwork.

Does a PSB filing help rankings on Baidu?

None of the pages we read links a PSB filing to rankings. It's a compliance step, and no source we opened gives data or a Baidu statement on the subject. Be careful with any provider who sells it as an SEO gain. Treat it as a compliance duty.

Sources

  1. Measures for Security Protection Administration of the International Networking of Computer Information Networks, MPS Order 33 (Chinese)
  2. Alibaba Cloud: Public security filing (Chinese)
  3. Alibaba Cloud: Guide to filling in a public security filing (Chinese)
  4. Alibaba Cloud: Using a data code for PSB filing
  5. Alibaba Cloud: FAQ on ICP filing scenarios
  6. Alibaba Cloud: GoChina ICP Filing Assistant, subsequent operations
  7. Alibaba Cloud: ICP filing and Hong Kong nodes (Chinese)
  8. AppInChina: What is China's PSB filing and how can I get it?
  9. Chinafy: PSB filing in China, what is it and do you need it?
  10. weber.cloud: Complete the PSB filing for a Chinese website
  11. China Briefing: Do I need a license to operate online in China?
  12. Tencent Cloud: ICP filing documentation
  13. CAC: Security assessment provisions for services with public opinion attributes (Chinese)
  14. Zunyi cyber police case reports, via Secrss (Chinese)
  15. Luzhou cyber police case reports, via Secrss (Chinese)
  16. Jinhua police case reports, via Secrss (Chinese)
  17. Alibaba Cloud: Add a PSB filing number, page footer
  18. Zhuzhou police case reports, via Secrss (Chinese)
  19. Measures for the Administration of Internet Information Services, revised text (Chinese)
  20. Alibaba Cloud: FAQ on ICP filing scenarios (Chinese)
  21. Alibaba Cloud: ICP filing process overview (Chinese)
  22. Huawei Cloud: Filling in a public security filing (Chinese)
  23. Website filing Q&A, credited to the Ministry of Public Security's cyber bureau, republished by the Xinghe County Internet Information Office on The Paper (Chinese)
  24. CECC: Measures, Chinese text and partial English translation
  25. Alibaba Cloud: Using a data code for PSB filing (Chinese)
Book a call
30 minutes

Find out what getting indexed in China would take.

In a 30-minute call we look at your site, your market and what getting indexed would take. You leave with a clear answer, whether or not we work together.

Book a 30-minute call
  1. 01Book a slot
  2. 02We look at your site
  3. 03You leave with a clear answer

Book a 30-minute call

30 minutes on your site, your market and what getting indexed would take.