Cloudinary Alternatives in China: ICP Filing, Offshore Media & PIPL

Cloudinary is a strong way to manage and deliver images and video, and nothing here argues against keeping it. But “which media host should we use for China” is the wrong first question. The decision that actually governs a mainland audience is not which network is quickest — it is where the legal duties land. Two of them do, and neither is really Cloudinary’s to carry: the ICP filing that a public mainland site requires, and the cross-border rules that attach the moment your China users’ uploaded media — which can hold faces and other personal information — is stored offshore. Speed matters, but it is the easy half. This page weighs Cloudinary, and any alternative, on the half that decides whether you may operate at all.

Cloudinary in China at a glance

The delivery gate: offshore media, mainland audience

A media CDN’s whole job is to put your images and video physically near the viewer. Cloudinary does that worldwide, from the partner networks it names — Akamai, Fastly and Cloudflare. What that same description quietly tells you is where the network is not: there is no node inside mainland China in the standard product. Cloudinary is candid about the consequence — “For audiences in China, delivery must be through a local CDN” — and it packages that local delivery as a separate, Enterprise-tier capability rather than something every account gets. So for a typical setup, every image a mainland visitor loads is fetched from the far side of the border, with all the inconsistency that crossing brings. This is the reachability half of the question. It is real, it is worth measuring on your own site, and it carries no legal weight on its own.

The ICP gate sits on your site, not on Cloudinary

Here is the part teams most often get backwards. The ICP filing (备案) is not a feature you buy from a media host; it is a filing that attaches to the public website shown to mainland visitors. Cloudinary says so in its own guidance, handing the question straight back to you: “At the outset, you might need to procure an Internet Content Provider (ICP) license,” and “Whether that requirement pertains to you is a legal question so consult with your legal team.” Even Cloudinary’s own China route makes the point — “Akamai requires a valid ICP license” before it will carry your assets. Under State Council Order No. 292 and MIIT Order No. 33, that filing binds to a mainland hosting resource and a mainland legal entity. Swapping Cloudinary for another media host changes none of this, because the duty never belonged to the media host in the first place — it belongs to the site embedding the media.

The data gate: whose faces are in the media

The third gate is the one a media service makes uniquely sharp. Images and video are rarely neutral bytes — they are frequently pictures of people, and a face is personal information. Cloudinary states plainly that “This Uploaded Content can contain Personal Information,” and that it “acts as a processor of personal data contained in Uploaded Content,” stored “in the European Union, the United States, the United Kingdom, Singapore, and Israel.” None of those is mainland China. So the moment you upload your China users’ photos or video to Cloudinary, you have moved their personal information across the border — a cross-border transfer that the Personal Information Protection Law governs through notice, separate consent and a lawful transfer mechanism (Articles 38–43). If your organization is a critical information infrastructure operator or handles large volumes, in-country storage may be required outright (PIPL Article 40; Cybersecurity Law Article 39 (formerly Article 37)). Cloudinary’s own safeguards are built for Western regimes — it certifies under the EU-US Data Privacy Framework and warns that “The laws of these territories may differ from the laws of the jurisdiction in which you live or conduct your business” — and none of them speaks to PIPL.

This is a risk map, not a verdict: which gates bite, and how hard, depends on your entity, your data volumes and whose media you handle — worth settling with counsel before you commit to any media host.

Where 21YunBox fits — a compliant overlay, not a migration

You keep Cloudinary as your global media origin — same uploads, same transformations, same delivery everywhere outside the mainland. What 21YunBox adds is the one piece a media CDN structurally cannot: ICP-filed delivery from inside the mainland, placed in front of the public site that embeds your media, so mainland visitors are served from inside China — no rebuild, no second media pipeline, and no move off Cloudinary. Our China team maps which duties apply to your entity and your users’ media, handles the ICP filing on the site that owes it, and works through the PIPL cross-border questions your uploaded content raises, while Cloudinary stays your source of truth for media everywhere else.

Get a compliance assessment →

Related reading:

• What is the China ICP license, and how do you get one?
• Cross-border data transfers under PIPL