Business Licensing and Market Access
What an AI company actually does rarely matches what its business licence says. API resale, online data processing and content generation services are frequently launched and monetised before the required permits are in place.
Regulators Classify by Substance, Not by Contract Title
The most common market-access mistake among AI companies is treating “technology development” as a universal permit.
Charging per API call, hosting and processing customer business data, and providing online content generation each map to different categories under China’s value-added telecommunications classification — none of which is covered by the six characters “technology development and technical consulting” on a business licence. Regulators look at who provides the service, how it is delivered, and whether it is offered for consideration to unspecified users. A contract describing the work as “technical services” does not change the classification.
The cost is not primarily the fine. Missing permits lead to takedown orders, app store review rejections, disqualification from tenders and government procurement, and flags as a material compliance defect in financing due diligence.
Core Services
- Business substance assessment and permit mapping: determine which value-added telecom category the business actually falls into, with a written conclusion on permit requirements
- ICP filing and commercial ICP licence: distinguish non-commercial filing from the commercial licence, and map the application route
- EDI licence: applicability assessment for online data processing and transaction processing, documentation and filing
- Foreign investment access: negative list comparison, foreign shareholding limits in telecom services, compliance boundaries of contractual control arrangements
- Other permits triggered by business type: online culture, publishing, HR services and similar, assessed against the actual product mix
- Entity consistency across permits and filings: alignment with algorithm filing entities, software enterprise certification and high-tech enterprise prerequisites
Typical Scenarios
Scenario 1: API resale operated as “technology development”
A company resells model API capacity, charging customers by usage, under a business scope limited to technology development. On inspection, the regulator characterises the activity as online data processing and transaction processing — a value-added telecom service — for which no permit is held.
Approach: classify by substance first, then either obtain the permit or restructure delivery so the substance matches existing qualifications (for example, pure software licensing with no data processing undertaken), and amend the business scope accordingly. The treatment of the historical operating period requires separate assessment.
Scenario 2: Foreign investment blocks ICP licence renewal
A company holds a commercial ICP licence for a content platform. After a Series A round brings in a foreign fund, the licence renewal is refused because foreign shareholding exceeds the permitted level, and the service is interrupted.
Approach: assess access restrictions before foreign capital enters, not at renewal. Viable routes include holding the licence through a domestic entity with contractual arrangements for the business, adjusting the shareholding structure, or carving the licensed business out into a separate domestic entity. Where the structure has already changed, assess remediation and re-application timelines, and arrange business continuity for the interim.
Scenario 3: Product expansion enters a new licensed category
A software vendor adds consumer-facing online courses and livestreaming without recognising that the new features fall within online culture and information dissemination regulation, and is ordered to obtain permits after launch.
Approach: run the access assessment at product inception rather than before launch, and establish a “new feature to permit” review step. For features already live, assess the remediation route alongside alternatives such as suspending the feature.
Process and Deliverables
| Stage | Work | Deliverables |
|---|---|---|
| 1 | Business model review, confirmation of delivery method | Business substance memo + permit requirement conclusion |
| 2 | Permit category assessment, foreign access comparison | Licensing route plan + access restriction checklist |
| 3 | Documentation, filing and liaison | Application package + filing status tracker |
| 4 | Business scope amendment, entity consistency check | Amendment documents + consistency checklist |
| Ongoing | New business access review, permit renewal and annual checks | New business access opinion + renewal reminders |
Frequently Asked Questions
Is ICP filing the same as an ICP licence? No. Filing is a basic registration for non-commercial internet information services and confers no operating right. The commercial ICP licence applies to providing information services to internet users for consideration. SaaS subscriptions, paid content and API resale generally require the latter.
Can a foreign investor hold equity in a licensed entity? Yes, within limits. Foreign shareholding in value-added telecom services is capped, and the applicable limit depends on the service category and the openness policy of the locality. In practice the more common problem is failing to assess access before financing, leaving an existing licence stuck at renewal or amendment. That assessment belongs before term sheet negotiation, not after closing.
Does a VIE structure solve the foreign access problem? No. A VIE is an offshore financing and consolidation arrangement. It does not change how the domestic licensed entity’s foreign character is determined, and it does not waive access restrictions. Treating a VIE as a tool to circumvent access limits conflates a structuring question with an access question, and the risk sits with the domestic entity.
Is a broader business scope better? No. Over-broad wording can trigger unnecessary approvals and regulatory attention, and invites questions about business substance in due diligence. The scope should correspond to actual business and the licensing route, not to maximum coverage.
Can operating without a permit be remedied? It can be assessed, but the route depends on the nature of the business, how long it has run, and whether harm occurred. Common treatment is to cease the activity, obtain the permit, and address the historical period with an explanation and remediation plan. Whether administrative penalty applies requires case-specific analysis.
Related Regulations
- Telecommunications Regulations of the PRC: telecom business licensing regime
- Catalogue of Telecommunications Business Categories: classification of value-added telecom services
- Measures for the Administration of Internet Information Services: commercial versus non-commercial distinction
- Provisions on the Administration of Foreign-Invested Telecom Enterprises: foreign shareholding limits
- Special Administrative Measures for Foreign Investment Access (Negative List)
- Interim Measures for the Administration of Generative AI Services: provider eligibility and filing requirements