What Is PSB Filing (公安备案)?

Quick answer
PSB filing is a separate registration with the public security authorities, distinct from the ICP filing with the communications administration.
It is completed through the national internet security management platform and reviewed by the local public security bureau.
The usual expectation is to file within 30 days of the site going live, though local practice varies.
The approved record produces a public security filing number, displayed in the site footer alongside the ICP number.
Sites with user-generated content or interactive features face additional requirements around logging and moderation.

What is PSB filing?

PSB filing — 公安备案 — is the public security registration of a website operator. The ICP filing records the site with the communications administration; the PSB record registers it with the public security bureau responsible for the operator’s location. Both are part of operating a site on mainland hosting, and one does not replace the other.

The process runs through the national internet security management platform, where you submit the site’s details, the operator’s information, and the ICP filing number. The local bureau reviews it, may contact the responsible person, and issues a public security filing number on approval.

When must it be done?

The common expectation is within 30 days of the site becoming operational, and the practical rule is not to delay once the ICP filing is approved. Some hosting providers require the PSB record before they consider the site fully compliant, and some app stores ask for it during review.

Treat the window as a deadline with local interpretation. The platform and the bureau are the authority for your location; the provider can tell you what it expects to see. If the site is not live yet, the clock has not started, which is another reason to sequence the launch after both records are ready.

What information does the PSB filing require?

The site name and domain, the ICP filing number, the operator’s identity and contact details, the hosting provider, and a description of the services. Interactive sites may be asked about user registration, comment features, and content moderation. The responsible person must be reachable for verification.

The public security number that follows approval goes in the footer, typically next to the ICP number, and should link to the official platform. Keep the record updated when the domain, hosting, or operator details change, for the same reason the ICP filing needs updating.

<footer>
  <a href="https://beian.miit.gov.cn/" rel="noopener">
    京ICP备00000000号-1
  </a>
  <a href="https://www.beian.gov.cn/" rel="noopener">
    京公网安备 11000000000000号
  </a>
</footer>

What extra obligations come with user content?

A site that lets users publish content is expected to keep records and to be able to respond to complaints. That can include retaining access logs for a period set by regulation, having a moderation process, and naming a person responsible for content security. The PSB filing is where those arrangements are described.

The technical implication is that logging and moderation cannot be an afterthought. An AI-generated app with an open comment box and no admin interface does not meet the description it submitted. Build the moderation path before the review, not after a complaint.

Where this bites vibecoders
AI-built apps often include comments, uploads, or a public feed because the feature was easy to generate. Each one changes the compliance profile from a static site to an interactive service. The PSB form asks about exactly those features, so the honest answer may require moderation and logging work that the app does not have yet.

Where AI coding assistants get this wrong

Assuming PSB filing is optional once the ICP filing is approved.
Displaying the PSB number without the required link to the official platform.
Opening public comments or uploads without a moderation path.
Letting the 30-day window pass while waiting for the product to be finished.
Submitting the site’s operator details under a person who is not reachable.
Forgetting to update the record after a domain or hosting change.

Checklist

Confirm the local bureau’s current process with the hosting provider.
Complete PSB filing within the stated window after go-live.
Keep the ICP filing number and operator details consistent.
Describe interactive features accurately.
Add the PSB number and official link to the footer.
Update the record when the site or operator changes.

FAQ

Is PSB filing the same as ICP filing?

No. ICP filing is with the communications administration and covers the site’s operation and hosting. PSB filing is with the public security authorities and covers security and content responsibility. Both produce numbers displayed in the footer, and both are required for a compliant mainland-hosted site.

What happens if PSB filing is late?

The local bureau can require correction, and the site may be treated as non-compliant during that period. Hosting providers and app stores may also ask for the record. The practical risk is not a single fine but a compliance gap that surfaces during a review, a complaint, or a platform audit.

Does a personal blog need PSB filing?

A site on mainland hosting generally does, including a personal blog, because the requirement attaches to the site rather than to its commercial nature. The forms are simpler for a non-interactive site. Confirm with the provider, since local practice on small personal sites varies.

Do I need PSB filing for an app?

Apps distributed in the mainland have their own registration requirements, and an app that operates a service may need a public security record as well. The website record does not automatically cover the app. Treat app distribution and website hosting as separate compliance tracks.