What are the approval requirements for Decision Tool in China?

Decision Tool operations require approvals from at least 2–4 regulatory bodies in China, depending on the tool’s delivery model and data processing scope. At the minimum, every foreign company needs SAMR business registration with an approved business scope covering software services, an ICP filing or license for any web-based delivery, and a compliance self-assessment under the Personal Information Protection Law (PIPL) if processing user data. For standard internal-use Decision Tools operated by an already-registered WFOE, the approval timeline is approximately 15–20 business days, while commercial SaaS Decision Tools requiring a full ICP license and data compliance assessment may take 35–50 business days. Planning around these approval timelines is essential for foreign companies that need the Decision Tool operational by a specific date.

Primary Approval Requirements by Category

Decision Tool approvals fall into four main categories: corporate entity registration, technology licensing, data compliance, and industry-specific permits. Each category involves a different regulatory body with distinct processing timelines, documentation requirements, and fee structures. The table below maps every potential approval requirement to the responsible authority, estimated processing time, and the specific conditions under which each is triggered:

SAMR Business Scope Registration

The foundational approval for Decision Tool operations in China is SAMR registration with a correctly scoped business license. Under the 2024 Company Law amendments effective July 1, 2024, foreign companies no longer require a minimum registered capital for technology service operations, but the business scope (经营范围, jīngyíng fànwéi) must explicitly include Decision Tool-related activities using the standard industry classification codes. The recommended business scope descriptors for SAMR approval, which have a first-submission approval rate of approximately 78% when used, include: decision support software development and sales (决策支持软件开发与销售, juécè zhīchí ruǎnjiàn kāifā yǔ xiāoshòu), information technology consulting services (信息技术咨询服务, xìnxī jìshù zīxún fúwù), computer software technical development and services (计算机软件技术开发、技术服务, jìsuànjī ruǎnjiàn jìshù kāifā, jìshù fúwù), data processing and storage support services (数据处理和存储支持服务, shùjù chǔlǐ hé cúnchú zhīchí fúwù), and business management consulting (企业管理咨询, qǐyè guǎnlǐ zīxún) if the tool provides manual consulting alongside automated recommendations. SAMR may reject business scope applications that use overly vague descriptors like “decision support services” without specifying the software nature, or that incidentally overlap with restricted activities such as market research.

ICP Filing and Licensing Requirements

The distinction between ICP Filing (ICP备案, ICP bèi’àn) and ICP License (ICP许可证, ICP xǔkězhèng) is one of the most frequently misunderstood aspects of Decision Tool approval requirements. ICP Filing is required for all websites and mini-programs hosted on servers within mainland China — this is a straightforward registry process requiring 5–10 business days and is mandatory even for internal corporate tools with web-based dashboards that are accessed within China. ICP Filing costs approximately USD 100–200 in professional service fees. ICP License is a separate, significantly more rigorous approval needed when the Decision Tool operates as a commercial online platform that charges users for subscription access. The ICP License application is a complex multi-stage process requiring a feasibility study, technical architecture documentation, a compliance undertaking letter, company registration documents, and evidence of service capability including qualified technical personnel. For FTZ-registered companies, the ICP License can be obtained with up to 100% foreign ownership under the 2024–2026 expanded pilot programs in Shanghai Lingang, Hainan FTP, and select other zones, with processing reduced from 50 to 30–35 business days.

The ICP License application process follows a specific sequence of steps that must be completed in order:

1. Feasibility study preparation — Compile a market analysis, detailed service description, and operational plan for the Decision Tool platform, describing the target user base, revenue model, and technical infrastructure.
2. Technical architecture documentation — Describe the server deployment architecture, data flow diagrams showing how user data moves through the system, and comprehensive security measures including encryption standards and access controls.
3. Compliance undertaking letter — Submit a formal commitment to data security, user privacy protection, content management, and cooperation with regulatory authorities, signed by the legal representative.
4. Company registration documents — Submit the business license, Articles of Association, and legal representative identification with certified Chinese translations of all non-Chinese documents.
5. Service capability certification — Provide evidence of qualified technical personnel with relevant qualifications and appropriate server infrastructure meeting MIIT’s minimum specifications.

Data Compliance Approvals by Tier

Data compliance approvals under PIPL and the Data Security Law represent the most complex approval category for Decision Tool operations. The approval framework follows a risk-based tier system that scales with the sensitivity of data processed through the tool. Understanding which tier applies to your Decision Tool is essential for budgeting both time and cost for compliance:

• Tier 1: Internal-use Decision Tools — Tools used exclusively within the foreign company for internal decision-making, processing only company-provided data without collecting any Chinese user personal information. Requires: internal PIPL compliance policy, data minimization documentation, and a self-conducted Data Protection Impact Assessment (DPIA). No external CAC approval required. Estimated compliance cost: USD 500–1,500.
• Tier 2: Client-facing Decision Tools (no personal data) — Tools that interact with client companies but process only anonymized, aggregated, or corporate-level data without individual personal information. Requires: Tier 1 requirements plus a published privacy policy on the tool interface, user consent mechanism for optional data collection, and an annual compliance audit. ICP Filing required. CAC approval not triggered. Estimated compliance cost: USD 2,000–4,000.
• Tier 3: Decision Tools processing personal information — Tools that collect personal information of Chinese users such as names, contact details, business roles, and usage patterns. Requires: Tier 2 requirements plus PIPL representative appointment in China, data localization to mainland China servers, user consent opt-in system, and DPIA filed with CAC. Cross-border data transfer rules apply. Estimated compliance cost: USD 4,000–8,000.
• Tier 4: Decision Tools processing “important data” — Tools used in regulated industries (finance, healthcare, energy) that process data classified as “important data” (重要数据, zhòngyào shùjù) under the Data Security Law. Requires: Tier 3 requirements plus mandatory CAC security assessment, designated Data Security Officer, quarterly compliance reporting, and potential on-site CAC inspection. Estimated compliance cost: USD 8,000–20,000.

Industry-Specific Approvals

Depending on the target industry of your Decision Tool, additional approvals beyond the standard set may be required. Financial Decision Tools covering investment analysis, credit scoring, or risk assessment may require approval from the China Securities Regulatory Commission (CSRC/中国证监会) or the People’s Bank of China (PBOC/中国人民银行), with fintech Decision Tools subject to the Financial Stability and Development Committee’s oversight framework. Healthcare Decision Tools providing clinical decision support or drug development analysis require NMPA (国家药品监督管理局) approval if the tool qualifies as medical software under the Medical Device Classification Catalogue. Cross-Border Trade Decision Tools providing import/export decision analysis may require filing with MOFCOM if the analytical outputs could be classified as trade consulting services.

FTZ Approval Advantages

Registering Decision Tool operations in a Free Trade Zone can significantly simplify the approval process through streamlined procedures and reduced timelines. The Shanghai FTZ Lingang Special Area offers a negative list plus simplified approval model where Decision Tool approvals are processed through a single window (单一窗口, dānyī chuāngkǒu) that coordinates across SAMR, MIIT, and local tax authorities. Companies in FTZs benefit from shortened ICP license processing of 30–35 days versus 50 days nationally, reduced documentation requirements for business scope registration, and pilot programs enabling foreign-owned ICP licensing. The Hainan Free Trade Port adds streamlined data compliance through its International Data Port pilot program, which simplifies cross-border data transfer approvals for software services.

Recommended Approval Sequence

Approvals cannot be obtained in arbitrary order — regulatory dependencies dictate a specific sequence that foreign companies should follow to avoid delays. The recommended sequence is: SAMR entity registration or business scope amendment first, then corporate bank account opening and registered capital injection, followed by ICP Filing for any website or web-based dashboard, then data compliance assessment and PIPL representative appointment, then ICP License application if operating a commercial SaaS platform, and finally any industry-specific approvals. Each step generates documentation required for the subsequent step, and deviating from this sequence typically adds 2–4 weeks to the overall timeline.

Where to Go From Here

Based on what you just read:

• Ready to act? Read [guide: SLUG-TO-BE-FILLED]
• Still comparing? See [comparison: SLUG-TO-BE-FILLED]
• Need numbers? Try [tool: SLUG-TO-BE-FILLED]

— China Gateway 360 —
Remote China market entry support, built around execution.