Hosting a Website for China (2026): ICP Filing, Mainland Clouds or Hong Kong?

Web hosting in China, or for Chinese visitors from outside it, comes down to three legal routes, and only one of them puts the server inside the mainland. A mainland server needs an ICP filing before the site goes public, which in practice means a company or person registered in the mainland, a mainland cloud account and several weeks of review. A Hong Kong server needs no ICP filing and sits right next to the border. A global host with a CDN is the simplest route, and the slowest and least predictable one for visitors inside the mainland.

If your readers are mostly in Hong Kong, Taiwan, Macau or overseas Chinese communities, you don't need the ICP route at all; skip to the three-path comparison. If you sell to mainland consumers, read the ICP sections first, because the paperwork decides your hosting, not the other way round. The rules below come from Alibaba Cloud's and Cloudflare's ICP documentation, AWS's and Microsoft's China pages and each cloud's region list, read on 9 and 10 Oct 2026. It's general information, not legal advice.

Can a foreign company host a website in mainland China?

Not directly. Under China's rules for internet information services, a site on a mainland server needs an ICP filing if it's non-commercial, or an ICP licence if it's commercial. Alibaba Cloud's guide is blunt about the order of events: don't make the site public, even by bare IP address, until the filing is approved, or the communications administration may reject the application or shut the site down. Alibaba's own monitoring blocks any domain pointed at its mainland servers without a filing.

The filing also has to be made by an eligible holder. Cloudflare's ICP guide lists who can hold a filing: a representative office, a wholly foreign-owned enterprise (WFOE), a joint venture, a local company, or an individual for a personal site. A foreign business with no presence in China isn't on that list. Alibaba's GoChina service, built for companies outside the mainland, asks for a business licence and the address of a company registered in the mainland, and offers to register that company for you.

So the honest answer for an overseas business is to set up, or work through, a mainland entity first, or to host just outside the mainland. If a provider offers mainland hosting with no paperwork from you, ask whose filing your site would sit under and which city the server is really in.

ICP filing vs ICP licence, explained

The two get mixed up constantly, including by agencies selling 'ICP licence' packages. An ICP filing, called bei'an in Chinese, is the first level: it lets you run an informational site, such as a company profile or a marketing site, on a mainland server or CDN. An ICP licence covers commercial and transactional sites, the ones that sell goods or services online, and you can apply for it only once you already hold a filing. Cloudflare's guide says a marketing site needs only the filing.

Eligibility for the licence is narrower. Per Cloudflare, it's limited to local companies and to joint ventures in which the foreign partner owns less than 50%. Cloudflare estimates one to two months for a filing and two to three months for a licence. Registration with China's Ministry of Industry and Information Technology (MIIT) is free, though your provider may charge a processing fee.

You don't file with the government yourself; your hosting provider submits it. Alibaba Cloud's process, which is typical, runs like this:

You need an account on Alibaba's China site, aliyun.com; the international site can't file, and the filing system works only in Chinese. One account can hold only one filing entity. After you submit, Alibaba runs a preliminary check within one to two business days, you confirm by SMS through the MIIT system, and the provincial communications administration reviews it, usually in 1 to 20 business days, a step that can't be expedited. Once approved, the ICP number goes in your homepage footer, linked to the MIIT site, and a Public Security Bureau (PSB) filing is due within 30 days of launch, according to Alibaba's process page.

Some sectors need a regulator's pre-approval before the filing is even accepted: news, publishing, pharmaceuticals, medical devices, finance and religion, per Alibaba. Forum (BBS) sites can't be filed at all any more, because the pre-approval document they relied on is no longer issued.

If you don't read Chinese or have a team in China, Alibaba's GoChina ICP Filing Assistant handles the filing for a one-time fee of $5,000 (Alibaba's billing page, read 10 Oct 2026). Company registration and the licence application are separate services on top. That number is a useful reality check: the mainland route is a business project, not a hosting checkout.

Mainland, Hong Kong or global plus CDN: the three paths compared

Mainland is the only way to get your origin and your edge inside the Great Firewall. AWS's two China regions are run by local partners, Beijing by Sinnet and Ningxia by NWCD, and they need an AWS (China) account that's separate from your global one; those operators also handle ICP for their customers. Microsoft's Azure in China is a physically separate cloud run by 21Vianet. Alibaba Cloud lists more than a dozen mainland regions, from Beijing, Shanghai and Hangzhou to Shenzhen, Guangzhou and Chengdu, so you can put the server near your buyers.

Hong Kong is the nearest location that needs no filing. Alibaba's guide says sites on servers outside the mainland don't require an ICP filing, and Hong Kong is outside it. Guangzhou is only about 130 km away and Shanghai about 1,230 km. All four big clouds run a Hong Kong region: Alibaba Cloud's cn-hongkong and Google Cloud's asia-east2 with three zones each, Azure's East Asia with three availability zones, and AWS's ap-east-1, which is opt-in, so you enable it on your account before you can deploy there.

Global plus CDN is what most small sites do by default, and it works well for audiences in Hong Kong, Taiwan, Singapore and the diaspora. For visitors inside the mainland it's the least predictable option. A CDN only speeds things up inside China if its edge servers are inside China, and those need an ICP too: Cloudflare's China Network runs on JD Cloud data centres in the mainland, is a separate subscription for Enterprise customers, and requires a valid ICP filing or licence for every apex domain you add.

Distance sets the minimum delay on every request, at roughly 1 ms of round trip per 100 km. From Shanghai, Hong Kong is a 12 ms floor, Tokyo 18 ms and Singapore 38 ms, against 88 ms for Frankfurt and 104 to 120 ms for the US coasts. Those are best cases. Cloudflare's own China documentation warns that traffic routed through servers outside the country faces significant latency and reliability issues because of China's network boundaries, so a Hong Kong origin is close, not inside. We haven't measured real routes, and our CDN vs local hosting guide covers when an edge cache beats a nearby origin.

Put together, the trade-off between the three paths looks like this:

What Chinese visitors can't load: Google and other third parties

A Hong Kong or overseas server can be perfectly reachable while the page still breaks, because the fonts, scripts and embeds it calls are blocked. The Great Firewall works host by host, so what matters is every third-party domain your pages load, not just your own. GreatFire.org tests hostnames from inside the mainland on an ongoing basis, and its results, read on 10 Oct 2026, are more mixed than the usual advice suggests:

• www.google.com: blocked in every conclusive test since 14 Mar 2026, most recently on 4 Oct. Anything served from it, such as Google sign-in, won't load.
• www.google-analytics.com (last tested 27 Aug 2026) and ajax.googleapis.com (22 Aug): blocked. maps.googleapis.com was blocked when last tested, on 12 May.
• www.youtube.com (21 Sep) and connect.facebook.net, the Facebook SDK and pixel host (27 Jul): blocked.
• fonts.googleapis.com: reachable in its latest test, on 18 Aug; fonts.gstatic.com was reachable when last tested, on 21 Mar. www.googletagmanager.com (4 Oct) and www.recaptcha.net (12 Sep) also connected normally.

So the old rule that Google Fonts is blocked in China doesn't match GreatFire's current numbers, but a page that waits on a blocked analytics library or video embed can still hang. Self-host your fonts and core scripts, load analytics asynchronously so it fails quietly, swap YouTube embeds for self-hosted video or a plain link, and test from a connection inside China before launch. Blocking changes over time and GreatFire's verdicts are per hostname and per test date, so re-check the hosts your own pages use rather than relying on anyone's list, ours included.

Picks for a China-facing website

• Selling to mainland consumers: a mainland server plus an ICP licence, through your own mainland entity or a partner's. Budget for the paperwork and the months before you budget for hosting.
• Mainland brand or marketing site: a mainland server with an ICP filing if you have an eligible entity; otherwise a Hong Kong cloud region.
• No mainland entity, but mainland visitors matter: a Hong Kong region on Alibaba Cloud, AWS, Azure or Google Cloud, with fonts and scripts self-hosted.
• Hong Kong, Taiwan, Macau or diaspora audience: Hong Kong, Singapore or a nearby shared host with a CDN; no ICP needed.
• Small site where China is a minority of traffic: stay on a regular host near your main audience and keep pages light.

For those last two groups, an ordinary shared host with an Asian location is enough, and much cheaper than a cloud region you manage yourself. Hostinger lets you pick India, Indonesia or Malaysia when you set up, and its CDN adds locations such as Japan. Its Premium plan is $2.99 a month when you prepay 48 months ($143.52 upfront) and renews at $10.99 a month (US pricing page, read 10 Oct 2026). It has no Hong Kong or mainland server, so it won't fix speed inside the mainland. If that's the right fit, compare Hostinger's plans and choose an Asian server. For other markets, the country-by-country hub lines up the main hosting countries side by side.

Edge cases

• Switching mainland providers. If you already hold a filing elsewhere and move to Alibaba Cloud, you add Alibaba as an access provider; until you do, its monitoring blocks the domain. Remove a provider without adding a new one and the filing can be flagged as an empty shell.
• Sites reached by IP address. They still need a filing on a mainland server, and Alibaba's system files domain names only.
• IPv6. Cloudflare says IPv6 support is mandatory for internet-facing services in mainland China.
• Subdomains. Sites under the same apex domain can share one ICP number, per Cloudflare.
• Your global AWS account. It can't use the Beijing or Ningxia regions; you need a separate AWS (China) account.
• Data rules. Where personal data is stored can matter as much as speed; our data residency basics explain how to think about it, and a lawyer should confirm it for China.

None of these is exotic. They're the questions that come up after a team has already bought a server, and each is cheaper to settle before you choose a region than after. The same goes for search: in Google's own guidance, a country-code domain and the language of your pages carry more weight than where the server sits, which we unpack in does server location affect SEO.