App and mini program filings in China: eight milestones from kickoff to launch
A practical sequence for filing preparation, document management, coordinated releases and operational acceptance, drawing on MIIT app-filing requirements and mini program distribution.

1. Include filing milestones in the project plan
Common filing problems involve incomplete documentation and inconsistent version information, rather than the forms themselves. Reserve time for filing in the project schedule and include filing documents in milestone deliverables.
At kickoff, confirm the operating entity, domain and server ownership, privacy-policy version and customer-support contact details. This avoids a last-minute scramble for missing information.
2. Plan eight milestones from an engineering perspective
The eight milestones are: prepare entity information, organize documents, confirm feature scope, confirm privacy policies, verify the test environment, submit review materials, check consistency before release, and archive evidence after launch.
The pre-release consistency check is easy to overlook. Information shown in the app must match the filing materials, including the app name, operating entity, contact information and access to privacy terms.
3. Maintain filing records after launch
Major product updates may affect the validity of filing information. Include filing changes in the release checklist and run a compliance regression check after release.
Maintain a shared filing repository for screenshots, documents, approval records and mappings to product versions. This makes later audits and reviews easier.
4. Define responsibility and accountability
Compliance efforts often fail because responsibilities are unclear, rather than because the rules are impossible to understand. Establish a responsibility matrix early, specifying the duties and deliverables of legal, product, engineering, operations and customer support at each stage. This prevents important work from being acknowledged but left undone.
Embed responsibility in the workflow as well as the documentation. Specify who signs off on releases, who initiates an incident response and who resolves user appeals within what timeframe. Compliance capability depends on procedures that can actually be carried out.
- Create a RACI responsibility matrix covering kickoff, launch and operations.
- Keep traceable approval records at critical compliance checkpoints.
- Rehearse the incident-response process rather than relying only on written policies.
5. Keep evidence that demonstrates ongoing compliance work
During a regulatory inspection or customer audit, the challenge is often demonstrating that work was done and continues to be done. Maintain an evidence repository for policy versions, review records, sample logs, training records and incident reviews.
Keep evidence in chronological order and connect it to relevant versions. For each policy update, record the effective date, scope, approver and rollback plan. If a dispute arises, the team can identify which rules applied and why a decision was made.
- Organize compliance materials into policy, execution and review records.
- Keep key logs searchable and retain access-audit records.
- Preserve version differences and the associated approval trail.
6. Turn remediation into ongoing governance
Compliance governance continues after the first round of changes because the business, distribution channels and third-party dependencies keep evolving. Review policies quarterly to check whether they still fit the current business, assess new risks and update procedures and technical controls.
A durable approach is to build recurring checks into the product and delivery process. Encode key checks in release checklists, system validation and alert thresholds. This reduces dependence on individual experience and helps establish consistent organizational capability.
- Include recurring compliance checks in CI/CD release gates.
- Schedule quarterly risk reviews and annual policy updates.
- Measure response times, recurrence rates and remediation completion.
Practical Guidance
Starting from App and mini program filings in China: eight milestones from kickoff to launch, align business goals with current capabilities and pick the highest-confidence improvement to validate first.
If your work intersects with App filings, Mini program filings, run a small pilot to validate the workflow and data loop before scaling.
- Define clear success metrics and expected lift
- Reuse existing components and data assets
- Start where user impact is the highest
Delivery Rhythm
Ship tangible outcomes in 2-4 week iterations, then solidify stability and reusability as the next milestone.
Keep product, design, engineering, and data in lockstep to ensure requirements, experience, and implementation stay aligned.
Key Takeaways
- Treat filing as a project milestone rather than a last-minute launch task.
- Check consistency before release to support a successful review.
- Keep a filing repository to reduce ongoing maintenance effort.
Related Articles
China compliance outlook for 2026: a filing and launch-governance checklist for generative AI applications
Key considerations and common mistakes around generative AI service filings, registration and public disclosures, from model integration to ongoing operations.
Read MoreCross-border data compliance: transfer assessments and data minimization in product design
A practical framework for data classification, cross-border transfers, log retention and access governance in e-commerce and SaaS.
Read More