ISMS CopilotISMS Copilot for China and Chinese-speaking teams
MLPS 2.0, PIPL, CSL, DSL, and cross-border data routes. In Chinese or English. No region bans, no travel bans.
What the ISMS Copilot China Copilot Can Do
No geo-blocks, no region bans, no travel bans from us: our policy is to serve every user, and email-and-password sign-in needs no single-sign-on network
Chinese-language answers and a Chinese app interface, with native compliance terminology
Guidance on the China stack: MLPS 2.0 (GB/T 22239-2019), the Cybersecurity Law as revised for 2026, the Data Security Law, and PIPL
Cross-border data transfer routes: CAC security assessment, the standard contract, certification, and the 2024 Provisions thresholds
EU data storage (Frankfurt), with mainland-origin sessions pinned to model providers whose terms welcome China users on hosts outside mainland China (EU-hosted failover)
Cross-framework mapping: China duties next to ISO 27001, SOC 2, and the frameworks your group already runs (the dedicated China knowledge modules ship with the next product release)
About ISMS Copilot for China and Chinese-speaking teams
ISMS Copilot serves users in China and users who travel there: no geo-blocks and no region-based account bans from us, ever. Ask in Chinese and get answers in Chinese, with the app interface in Chinese too. This page covers the frameworks organisations in China actually work with: the Multi-Level Protection Scheme 2.0 (GB/T 22239-2019) under the Cybersecurity Law, the Personal Information Protection Law (PIPL), the Data Security Law, and the CAC cross-border data routes (security assessment, standard contract, certification). Data lives in the EU (Frankfurt), and mainland-origin sessions run on model providers whose terms welcome China users. Chinese companies, China subsidiaries of global groups, and consultants are welcome.
Cross-framework mappings
Working across ISMS Copilot China and another standard? ISMS Mappings is a free public directory of control maps (ISO 27001, SOC 2, NIST, GDPR, and more). A Better ISMS tool, separate from the chat assistant.
Browse free mappingsFrequently Asked Questions
中文可以使用吗？
可以。用中文提问会得到中文回答，应用界面也可以切换为中文。此页面覆盖中国常用的合规框架：网络安全法（2025年修订版）、数据安全法、个人信息保护法（PIPL）、等级保护2.0（GB/T 22239-2019）以及数据出境安全评估、标准合同、认证等数据出境路径。中国大陆的企业、海外企业的中国子公司、咨询顾问都欢迎使用。本页中文版： https://www.ismscopilot.com/zh/regions/china
Is ISMS Copilot reachable from mainland China?
We do not block or degrade mainland connections, and we never ban accounts for where you travel. Sign in with email and password; the Google and Microsoft single-sign-on buttons need those providers' networks and may not load from the mainland. We do not promise guaranteed network reachability of any site from inside China (no honest foreign service can), and we never advise circumventing network controls. This page was last reviewed in October 2026.
Which China frameworks does it support?
This page and the assistant cover the China stack: MLPS 2.0 (GB/T 22239-2019), the Cybersecurity Law (2025 revision, in force 1 January 2026), the Data Security Law, PIPL, and the cross-border routes (security assessment, standard contract, certification, 2024 Provisions). The dedicated China framework knowledge modules ship with the next product release; Chinese-language answers about these laws work today. There is no dedicated GB/T 35273 or telecom-sector pack yet.
Where is data hosted when used from China?
Database and document storage live in Frankfurt by default (EU). Sessions from mainland China run on model providers whose terms welcome China users, on hosts outside mainland China, with EU-hosted failover. The DPA documents the no-mainland-endpoint data path. See /coverage for the current routing split.
How is this different from using a China-hosted AI?
ISMS Copilot is an EU-hosted service (Frankfurt storage) serving users in China; it is not a China-hosted deployment. Your compliance documents stay in the EU data path described in the DPA, and the assistant covers both the China frameworks and the global ones (ISO 27001, SOC 2) your group already runs. See our DeepSeek comparison page for the hosted-in-China versus serving-China-users distinction.
Which sources does this page use?
Cybersecurity Law (revised consolidated text, in force 2026-01-01): https://www.cac.gov.cn/2025-12/29/c_1768735112911946.htm. NPC Standing Committee amending decision of 28 October 2025: https://www.gov.cn/yaowen/liebiao/202510/content_7046194.htm. Data Security Law: https://www.cac.gov.cn/2021-06/11/c_1624994566919140.htm. Personal Information Protection Law: https://www.cac.gov.cn/2021-08/20/c_1631050028355286.htm. 2024 Provisions on Promoting and Regulating Cross-border Data Flows: https://www.cac.gov.cn/2024-03/22/c_1712776611775634.htm. Security Assessment Measures: https://www.gov.cn/zhengce/zhengceku/2022-07/08/content_5699851.htm. GB/T standard records: https://std.samr.gov.cn. Last reviewed 22 October 2026. Not legal advice.
Ready to do compliance work faster?
Built for speed, accuracy, and audit-ready output.