Deployment guide

This is technical guidance, not legal advice. Requirements depend on the operator, service, content, region, and commercial model. Complete qualified legal review before launch.

0 of 20operator checks marked complete

This progress is stored only in this browser. It is not a compliance certification.

Registration & legal review

Confirm the correct obligations for this operator and service.

Register the production domain with the operator’s verified details.Record that the origin is outside mainland China; continue the ICP and ICP License assessment before moving it to a mainland origin.Plan and complete Public Security Bureau network filing where required.Assess generative-AI service filing, model disclosure, and AI-content labeling duties.Have Privacy, Terms, User Agreement, and deletion procedures reviewed.

Hong Kong-first infrastructure

Keep the complete request path dependable from mainland networks.

Provision the Node.js or Docker host in Hong Kong or another reviewed non-mainland region.Configure authoritative DNS and SSL without routing through a blocked or unreviewed dependency.Serve fonts, icons, scripts, styles, and images locally or from mainland object storage.Provision PostgreSQL in the same reviewed region as the application and apply the database schema.Store backups and operational logs in the approved region.

AI, privacy & security

Minimize data and make the configured processing path visible.

Configure a China-accessible AI provider, model, endpoint, and matching region.Confirm provider retention, training, subcontractor, and deletion terms.Set a short, documented log-retention period and keep prompt bodies out of logs.Test per-item and account data deletion, including generated versions and backups.Complete access-control, secrets, dependency, rate-limit, backup, and incident-response reviews.

Launch verification

Test the deployed system, not only the local build.

Verify footer filing records and every legal/contact link on the production hostname.Test Generate, preview, copy, download, history, and deletion with the production provider.Verify the browser makes no requests to blocked external fonts, scripts, analytics, or APIs.Continuously test from China Mobile, China Telecom, and China Unicom locations, plus desktop and mobile.Record the final legal, privacy, security, and operator approval before public launch.

Need the full operations guide?

The repository includes environment variables, Docker and standalone notes, official source links, and a launch runbook.

Self-hosting reference