If you are weighing a scan, a biopsy read or a treatment-planning step in a Chinese hospital, you have probably seen the phrase "AI-assisted" on a clinic page and wondered who, if anyone, checks that software. On 30 October 2026 the National Medical Products Administration published the Guideline for Independent Software Inspection under the Good Manufacturing Practice for Medical Devices and related documents, and the revised GMP for medical devices became mandatory on 1 November 2026. It is the first major revision of those manufacturing rules since 2014, and it puts AI and standalone-software medical devices under their own quality-system inspection requirements. For an international patient, the practical value of that news is narrow but real: it gives you a second, checkable layer to ask about, beyond the product certificate most hospitals present.
What changed, and when
Two regulatory tracks now shape AI diagnosis in China. The first governs whether a product may be sold and used as a medical device. The second governs whether the company that makes it runs an auditable quality system. The November 2026 change lands on the second track, and it follows a registration-side consultation earlier in the year.
| Date | Milestone | Why it matters to a patient |
|---|---|---|
| 2014 | Previous GMP baseline for medical device manufacturing | The quality-system framework suppliers were inspected against until this year |
| 14 Sep 2026 | The NMPA's device evaluation centre released a draft 2026 revision of the AI medical device registration review guideline | Indicates how AI products will be judged at the registration stage |
| 12 Oct 2026 | The comment period on that draft closed | The source does not state when the final version will be issued |
| 30 Oct 2026 | The NMPA issued the standalone-software inspection guideline and related documents | Creates a dedicated inspection framework for software-only devices |
| 1 Nov 2026 | Revised GMP mandatorily effective, the first major revision since 2014 | AI and standalone-software device makers now face separate quality-system inspection |
This is not a side note limited to imaging. AI has moved through the whole Chinese medical pipeline, including drug development: 21st Century Business Herald reported that Deruis Therapeutics' AI-designed oral small-molecule GLP-1 candidate MDR-001 went from project start to Phase III in about 4.5 years with roughly US$23 million in direct spend, against a conventional benchmark of 8–12 years and US$310–400 million for comparable work. When AI shortens development timelines that aggressively, regulators tightening the manufacturing-quality rules around software is a predictable, and for patients a reassuring, response.
Why an international patient should care about a manufacturing rule
Most patients only ever hear about the registration layer. But software is unusual among medical devices: the quality risks sit in how it was specified, built, validated, versioned and updated, not in a factory line. A separate inspection guideline for standalone software targets exactly that.
You will encounter this in three common scenarios:
- Screening and check-up imaging, where AI triage or measurement tools increasingly pre-read chest CT, mammography or fundus images. See our health check-up guide for foreigners in Shanghai and how to read a check-up report from a Chinese hospital.
- Cancer diagnosis and treatment planning, where software does contouring, dose calculation and response assessment. Radiotherapy and particle-therapy programmes are particularly software-heavy: read proton therapy in China and our cancer treatment service.
- Advanced therapy workups, where the pathology, imaging and laboratory software behind CAR-T therapy in China all feed one eligibility decision.
None of this means you should distrust a result. It means the question "is this software regulated, and by what?" now has a documented answer you can ask for.
The two layers, and what each one actually proves
| Layer | What it proves | What you can ask to see | What it does not tell you |
|---|---|---|---|
| Product registration (the certificate) | The device is authorised for a defined clinical use and indication | Registration certificate number and the registered product name | Whether your hospital validated it on its own scanners and patient mix |
| Manufacturing quality system (GMP), including the new standalone-software inspection guideline from 1 Nov 2026 | The manufacturer is subject to a defined quality-system inspection regime, with software-specific requirements | The legal manufacturer's name and its quality-system status | Whether the AI decided anything about your case |
The distinction matters because "it has a certificate" is often the entire answer a patient gets, and it says nothing about the version running on that workstation, or whether a human re-read the study. Ask for the manufacturer's registered name and the certificate number, then match them to the paperwork the hospital can produce.
Five verification steps you can run before you book
1. Get the product name, not the marketing label. Clinic brochures say "AI lung nodule analysis". The registration record says a specific product name from a specific manufacturer. Ask for the latter two.
2. Ask which risk class it is registered in, and what indication that registration covers. A tool registered for triage prioritisation is not the same as one registered to produce a diagnostic conclusion. If the indication wording is vague, that is a question for the physician, not the reception desk.
3. Check the announcement record yourself. The NMPA medical device announcements index is public and is where registration and quality-system notices appear. Search entry points and Chinese-English availability vary; if you cannot locate a record, treat it as a reason to request the documents from the hospital rather than as evidence of non-compliance.
4. Confirm who signs the report. For any AI-assisted study, ask whether a licensed radiologist or specialist independently reviewed and signed the result, and whether the AI output is retained in your file. The answer should be yes, and it should be written down.
5. Ask for the software version and the date of the local protocol. Software changes faster than hardware does. A version string and an effective date are cheap to request and useful if you seek a second opinion later — see how to prepare records for a follow-up hospital visit in China is not an available path; use preparing for a follow-up hospital visit and medical records for cancer treatment in China instead.
An honest boundary: a specific diagnosis and treatment plan must be assessed in person by a licensed physician who has examined you and your original images. Regulatory compliance of a software tool is not a substitute for that consultation, and nothing here should be read as a claim about accuracy or outcome.
What the new rules still leave for you to ask about
The inspection guideline addresses quality-system requirements for the manufacturer. Practical questions that remain hospital-level — and that are fair to put in writing to a coordinator:
- Whether the AI was validated locally, on that scanner type and that population, or is used as-is.
- What happens when the model is updated: is there a re-validation and a change record?
- Whether your images are processed on-premises or through a cloud service, and what that means for your data.
- Whether an English-language version of the report is issued, and who translates it.
These are not criticism of Chinese regulation; they are the ordinary diligence you would apply to any health technology anywhere. The reason to raise them now is that the November 2026 rules give you a shared vocabulary: you are asking about a documented quality-system framework, not making a vague accusation.
How this fits into choosing a hospital
Regulatory checks narrow the field; they do not pick it for you. Our guide to the best international hospitals in Shanghai covers the institutions where international-patient offices typically can produce device paperwork and English reports without a chain of requests, and the complete medical tourism guide for China explains how appointments, imaging and consultations sequence together. If your itinerary depends on a visa window, China's medical visa guide covers the documents. Costs vary by hospital, modality and the number of reads required, so treat any figure you are given online as provisional — the final number comes from the hospital's own quotation for your specific case.
Working with OriEast
OriEast supports international patients with document translation, hospital appointments — including through our Shanghai appointment service — and day-of-care coordination, plus help with traditional Chinese medicine consultations if your plan includes integrative support. In practice that means we can send your five verification questions to the international office before you travel, collect the registration and report details, and flag anything that needs a physician's answer rather than an administrator's.
Two concrete next steps: submit your case at /case-evaluation so a clinician-facing review of your records can be arranged before you book anything, or send us an inquiry about translation, appointments and on-the-ground coordination. If you would rather talk it through first, contact us directly and we will tell you which questions are worth asking your candidate hospitals.