← Back to Blog
Medical Tourism

Is the AI Software Reading Your Scans Legal in China? A Verification Guide for International Patients

OriEast Editorial Team•2026-11-07

Quick Answer

Use this page to quickly understand what kinds of topics we cover, who the content is most useful for, and where to go next.

Main topics
Medical Tourism
Best for
China's new NMPA inspection framework for standalone AI diagnostic software took effect on 1 November 2026. Here is what international patients can reasonably ask a hospital to show, and how to check it independently.
Best next step
Read Patient Guides

Need help applying this to your own case?

OriEast can help turn what you learned here into the right next step for hospital choice, records preparation, or travel planning.

How OriEast helps

We help international patients move from reading and research to real medical coordination in China.

  • ✓Clarify whether this topic is relevant to your case or travel plan
  • ✓Shortlist the right hospital, service, or specialist pathway
  • ✓Review records and reduce planning mistakes before booking
  • ✓Support hospital coordination, travel timing, and next-step questions

Your records are only shared as needed to coordinate planning and specialist review.

If you are weighing an AI-assisted CT, pathology or endoscopy screen in China, the most common question from international patients is blunt: is this software legal? Starting 1 November 2026, China has a concrete answer to that question, and more importantly a concrete way to check it. On 30 October 2026 the National Medical Products Administration (NMPA) published the Guideline for Inspection of Standalone Software under the Good Manufacturing Practice for Medical Devices (《医疗器械生产质量管理规范独立软件检查指导原则》), effective 1 November 2026, replacing the 2020 guidance numbered 57, according to Eastmoney's report. That makes AI and other standalone-software devices subject, for the first time, to their own production-permit inspection rules and their own post-market supervision rules. For a patient comparing hospitals, the practical value is simple: there is now a documented regulatory trail you can ask to see, and a database you can verify it in.

What changed, in terms a patient can use

Two documents took effect on the same day, and mixing them up leads to overclaiming.

The first is the standalone-software inspection guideline itself. It tells inspectors how to audit the manufacturer of software-as-a-device: how the code is produced, controlled, changed and traced, and how the company is supervised after the product is on the market. The second is the revised GMP for medical devices (announcement 2025 No.107), which runs to 15 chapters and 132 articles and adds three chapters covering quality assurance, verification and validation, and contract manufacturing and outsourced work. Both are about the system behind the product, not about your individual scan.

That distinction matters when a brochure says a hospital's AI is "NMPA-approved". Regulatory approval in China means a specific product, by a specific manufacturer, for a specific declared use, holding a registration certificate. Under the device classification logic used by NMPA, diagnostic software of this kind sits in the higher-risk Class III tier, which carries a stricter review path than lower classes. What a hospital can legitimately claim is that it deployed a cleared product for its cleared purpose. What nobody can claim from a certificate alone is that a particular reading was correct.

On the approved-product side, the same industry summary cited in the NMPA announcement coverage notes that during 2026 NMPA cleared Class III AI products including digital pathology for cervical cytology, endoscopic image assistive triage for gastric lesions, chromosome karyotype assistive diagnosis, and nuclear-medicine image assistive triage for the chest. Read those names carefully: the recurring words are "assistive" and "triage". These tools prioritise and flag; a clinician interprets and signs out.

The verification method: what to ask for, and what it proves

The checkable core of the whole question is two documents. Ask the hospital — the imaging, pathology or endoscopy department, or the international medical services desk if you are booking through one — to show:

  1. the Class III registration certificate number for the specific software module that reads your study, and
  2. the algorithm filing record where one applies.

Both should be readable on screen or on paper, not described verbally. Then cross-check the number in NMPA's public device-registration data, where the product name, registrant and the approved scope are published. The number of steps involved is small, which is why the claim "our AI is fully approved" should never be taken on trust when the certificate number is one screenshot away.

A comparison of what each artefact actually gives you keeps expectations honest:

What you holdWho produces itWhat it provesWhat it does not prove
Class III registration certificate number for the moduleEquipment management / IT or vendor account managerA cleared product exists, with a named manufacturer and declared intended useThe version in your hospital matches the cleared version
Algorithm filing recordSame, or the vendor directlyThe algorithm was recorded in the regulatory trail, with change controlDiagnostic accuracy on your anatomy or disease
GMP standalone-software inspection status (new from 1 Nov 2026)Manufacturer, inspected by regulatorsThe maker is audited under software-specific production-quality rulesAnything about clinical performance
Verbal "we use AI" or a marketing badgeFront desk, promotional materialNothing verifiableNothing at all

If the answer to "which software is this, and what is its certificate number?" is a pause, treat that as information. Well-deployed, properly cleared tools are usually accompanied by staff who can name them.

Two follow-on questions close the loop. Does the cleared indication match your exam — a cervical cytology AI tells you nothing about a lung nodule protocol? And who signs the report? Ask, in plain words, whether a licensed radiologist or pathologist reviews every case and issues the signed result, and get that confirmed in writing if your insurer needs it. A specific treatment or follow-up plan must in any case be assessed in person by a licensed physician; AI output is an input to that consultation, not a substitute for it.

Where this fits in a China screening trip

AI-assisted screening is usually one component of a broader health-checkup visit rather than a standalone purchase, so the regulation is most useful when you read it alongside how the exam is arranged. Our health-checkup guide for foreign patients in Shanghai covers scheduling, languages, report format and what happens after the scan, and the health-checkups service page describes how imaging and endoscopy components are assembled for overseas patients. If you are choosing between institutions, the hospital directory and Shanghai international hospital guide show where international desks and English-language reporting are routine; the wider medical tourism guide to China covers visas, payment and records.

The verification logic transfers to almost every other technology you may be sold. The same principle — a certificate number, checked against the public record — is what turns "state-of-the-art" into something auditable, whether you are comparing proton therapy centres, evaluating CAR-T programs in China where research-stage and approved indications must be kept clearly apart, or asking about treatment pathways for a cancer workup in China. Screening that finds something, of course, is only the front half of the decision; the appointment and report-export logistics are covered in booking hospital appointments in Shanghai.

A realistic timeline is worth stating, because the verification requests happen at different moments. Before booking, you can ask which AI module is used and for its certificate number; a hospital that already deploys cleared software typically provides it within the same enquiry. In the days before the exam, confirm whether the report will be bilingual and whether you can take the original images on your own drive or receive a data export. On the day, ask the reading clinician whether the AI acted as a first pass or a second reader. After the exam, keep the certificate number with the report — if you later seek a home-country opinion, that is the detail that lets a foreign radiologist understand exactly what assisted the original read. Costs are quoted per centre and per protocol package, so treat any figure you have seen online as unconfirmed until the hospital's own written quote arrives.

Honest limits of the new framework

Three cautions, stated plainly because the enthusiasm around AI screening rarely comes with them.

First, this is a manufacturing-quality and post-market supervision rule, not a clinical-performance rule. It disciplines how software is built and changed; it does not measure how well a model behaves on your population, your scanner settings, or your disease stage. Second, a cleared product can be deployed poorly. Training, workflow and the quality of the underlying images determine what you actually receive, and none of that is guaranteed by a certificate. Third, regulatory status does not travel. NMPA approval is a Chinese status; your local physician will usually want to re-read the images rather than accept an AI-flagged conclusion, so ask for exportable studies and a translated signed report at the time of booking.

The reason to care about the November 2026 change anyway is procedural: for patients comparing hospitals on regulatory grounds, there is now a named software-specific inspection regime, and the two artefacts described above give you something a competitor's marketing page cannot match. Ask for the numbers, verify them in public data, and let a clinician interpret the result.

Next step

If you want the AI-assisted component of a China workup checked before you fly, OriEast can request the module name, certificate number and report format on your behalf, arrange case evaluation by our clinicians, handle hospital appointment booking, provide medical interpreting and coordinate the visit from arrival to report delivery. Start with submitting your records for evaluation or send a question through inquiry and we will tell you, in writing, what is and is not verifiable at each shortlisted centre.

Next step

If this topic is relevant to your treatment or travel plan, these pages are the best next place to continue.