Does ActiveCampaign Work in China? PIPL, Data Residency & Consent
ActiveCampaign holds your contacts' names, emails, phone numbers and behavioral data on offshore AWS infrastructure — in the US, EU and Asia-Pacific, with no mainland-China region. A compliance-first look at the PIPL cross-border transfer, the separate consent it needs, and the two doors.
Does ActiveCampaign work in China?
Whether you can use ActiveCampaign for a mainland-China audience is first a data-residency and consent question under PIPL, not a speed one. ActiveCampaign is an email-marketing, automation and CRM platform — it stores your contacts' names, email addresses, phone numbers and the behavior your automations run on — and where it keeps that data is what China's law responds to.
By ActiveCampaign's own privacy policy, your contacts' information "may be transferred to ActiveCampaign locations in the United States, Australia, Ireland, Brazil, and Costa Rica" and to the countries where its service providers operate — none of them inside mainland China. Loading a China contact into ActiveCampaign therefore sends personal information offshore: a cross-border transfer PIPL governs, requiring notice, a separate consent for the transfer on top of any marketing opt-in, and one transfer mechanism — and, for a CIIO or large-volume handler, in-country storage. The table below is ActiveCampaign's own wording and the rules it triggers.
This is a risk picture, not a verdict — your obligations turn on your contact volumes and your role. Our China team can map your ActiveCampaign exposure with you →
Compliance snapshot
- ! Contact data — names, emails, phone numbers, tags and behavioral/automation history — is held offshore on AWS, outside mainland China
- ! Loading China contacts into ActiveCampaign is a cross-border transfer of personal information that PIPL governs
- ! You need a separate consent for the cross-border transfer, distinct from the email or SMS marketing opt-in
- ✕ No mainland-China region; hosted forms, site tracking and campaign images are served from offshore (US, EU or APAC)
- ✓ A compliant, ICP-filed in-country delivery and storage path exists — no rebuild, no migration
What ActiveCampaign's own documentation says about China
| Fact | Primary source |
|---|---|
| In ActiveCampaign's own words: information about your contacts "may be transferred to ActiveCampaign locations in the United States, Australia, Ireland, Brazil, and Costa Rica as well as countries where our service providers and approved ActiveCampaign partners may be based." Not one of those locations is inside mainland China, so the contact and engagement data behind your campaigns is held offshore. | ActiveCampaign — Privacy Policy, retrieved 2026-10-07 |
| ActiveCampaign's data-hosting documentation describes data centers in the United States, the European Union and Asia-Pacific (Australia), hosted on Amazon Web Services, and says it will confirm the specific data center holding your contact data on request. The regions it offers are all offshore to the mainland; there is no mainland-China hosting region or data-residency option. | ActiveCampaign — Data hosting locations (Help Center), retrieved 2026-10-07 |
| A contact record in ActiveCampaign is personal information — a name, an email address, often a phone number, plus the tags, opens, clicks and automation history tied to it. Collecting that from people in mainland China and loading it into ActiveCampaign sends it offshore, which PIPL treats as a cross-border transfer: the handler (you, ActiveCampaign's customer — not ActiveCampaign) must give notice, obtain separate consent for the transfer, and satisfy one transfer mechanism — a CAC security assessment, the CAC standard contract, or certification. | PIPL Chapter III, Articles 38–39 |
| Marketing is consent-gated, and the cross-border transfer needs a second, separate consent. Sending commercial email or SMS to a contact and profiling their behavior rests on that individual's consent; where their personal information is then sent outside the mainland, PIPL Article 39 requires a distinct consent for the cross-border transfer — a general marketing opt-in does not cover it. For a platform whose whole purpose is holding and acting on contact data offshore, that second consent is the sharp edge. | PIPL Articles 13–14 (consent) and Article 39 (separate consent for cross-border provision) |
| For a CIIO or large-volume handler, personal information collected in China must be stored inside the mainland (PIPL Article 40; Cybersecurity Law Article 39 (formerly Article 37)) — a residency duty ActiveCampaign's US, EU and APAC regions cannot meet. Exposure also scales with volume: under the CAC's March 2024 cross-border rules, a non-CIIO transferring fewer than 100,000 individuals' non-sensitive personal information in a calendar year is exempt from the security assessment, standard contract and certification — though notice and separate consent still apply. | PIPL Article 40; CSL Article 39 (formerly Article 37); CAC — Provisions on Promoting and Regulating Cross-border Data Flows, March 2024 |
Sources verified by the 21YunBox compliance team on 2026-10-07.
For a mainland-China audience, the deciding question about ActiveCampaign is not how fast its forms paint — it is where your contacts’ personal data is allowed to live, and whether you had the right consent to send it there. ActiveCampaign is an email-marketing, automation and CRM platform: its entire job is to hold your contacts’ names, email addresses, phone numbers and the behavior your automations fire on. ActiveCampaign answers the location question in its own documentation — it runs no region inside mainland China, hosting instead in the United States, the European Union and Asia-Pacific on Amazon Web Services. So a China-facing ActiveCampaign setup is reachable, but every contact you collect crosses the border, and that is where China’s law — not your page-load time — sets the terms.
ActiveCampaign in China at a glance
| What decides it | In ActiveCampaign's own terms |
|---|---|
| Where it runs | Data centers in the United States, the European Union and Asia-Pacific (Australia), hosted on Amazon Web Services. No region is inside mainland China; the nearest, Australia, is still offshore. |
| Where your contacts' data lives | Names, emails, phone numbers, tags and automation history sit on that offshore infrastructure. ActiveCampaign will confirm your account's data center on request, but none of the options is in the mainland. |
| Collecting China contacts | Loading a mainland contact into ActiveCampaign sends personal information offshore — a cross-border transfer PIPL governs, needing notice, a transfer mechanism, and a separate consent beyond the marketing opt-in. |
| Serving the public | Hosted forms, site-tracking scripts, hosted pages and campaign images are delivered from offshore. A public mainland site that embeds them still needs an ICP filing tied to in-country hosting, which ActiveCampaign does not provide. |
| Is it reachable? | Yes — ActiveCampaign-hosted assets load from offshore, so the border shows up as distance in delivery, not as a block. The compliance gap stays whether the asset paints fast or slow. |
No mainland region — your contacts’ data stays offshore
ActiveCampaign runs no region inside mainland China. Its own privacy policy lists the places your contacts’ information may travel — “the United States, Australia, Ireland, Brazil, and Costa Rica,” plus the countries where its service providers operate — and its data-hosting documentation describes data centers in the United States, the European Union and Asia-Pacific, all on Amazon Web Services. You can ask which data center holds your account; none of the answers is in the mainland.
That geography settles the data question before performance enters it. Every contact you collect from someone in China and keep in ActiveCampaign — their name, email, phone number, and the tags and automation history attached to them — lives offshore. Under China’s Personal Information Protection Law that is a cross-border transfer of personal information, and the handler is you, ActiveCampaign’s customer, not ActiveCampaign. If you are a critical information infrastructure operator or a large-volume handler, personal information collected in China has to be stored in the mainland (PIPL Article 40; Cybersecurity Law Article 39 (formerly Article 37)) — a residency duty none of ActiveCampaign’s US, EU or APAC regions can satisfy.
The consent you collected is not the consent PIPL asks for
Even with a clean marketing list, ActiveCampaign raises a second question China asks and most platforms do not. Sending commercial email or SMS to a contact, and profiling what they open and click, rests on that person’s consent. Sending their personal information out of the mainland to ActiveCampaign’s offshore servers is, under PIPL, a separate act that needs its own separate consent — Article 39 is explicit that a general opt-in to be marketed to does not cover the transfer abroad. For a platform whose whole function is to hold contact data offshore and act on it, that second consent, a lawful transfer mechanism, and notice to the individual are the parts that are easy to miss and expensive to get wrong.
Hosted forms and tracking cross the border too
ActiveCampaign also serves assets straight to your audience — hosted sign-up forms, site-tracking and event scripts, hosted landing pages, and the images in your campaigns. Those load from the same offshore infrastructure, so they cross the border on every request from China. The exposure there is not whether they eventually paint; it is that a public-facing mainland site that embeds them still needs an ICP filing tied to in-country hosting — the regime under State Council Order No. 292 and MIIT Order No. 33 — for which ActiveCampaign, with no mainland presence, offers no footing.
This is a risk map, not a verdict: whether you need a separate transfer consent, in-country storage, an ICP filing, or all three turns on what you collect, how much personal data you hold, and who your contacts are — worth settling with counsel before you build.
Where 21YunBox fits — a compliant overlay, not a migration
You keep running your marketing on ActiveCampaign. We add the piece a platform with no mainland presence cannot: compliant, ICP-filed delivery from inside the mainland, placed in front of your existing setup — no rebuild, no second codebase, and no move off ActiveCampaign. Our China team maps your PIPL cross-border and consent obligations against your entity and contact volumes, then stands up the in-country delivery and, where the law requires it, the in-country storage a lawful China presence needs, while your account stays exactly where it already runs.
Related reading:
Frequently Asked Questions
Does ActiveCampaign store Chinese contacts' data in China?
No. By ActiveCampaign's own privacy policy, contact information may be transferred to its locations in the United States, Australia, Ireland, Brazil and Costa Rica, and its data-hosting documentation lists US, EU and Asia-Pacific data centers on Amazon Web Services. None is inside mainland China, so the names, emails, phone numbers and behavior of your China contacts are held offshore.
We already collected marketing opt-in — isn't that enough under PIPL?
Not on its own. PIPL treats sending personal information outside mainland China as a separate act that needs its own separate consent, distinct from the consent to email or text someone. You also need a lawful transfer mechanism, and possibly in-country storage if your volumes or role trigger it. Treat it as a risk to confirm with counsel, not a settled yes.
Can 21YunBox help make our ActiveCampaign setup compliant in China?
Yes. Our China team can assess your cross-border and data-residency exposure for your contact volumes and role, help put the separate-consent and transfer-mechanism path in place, and — where the law requires your China contacts' data to stay on the mainland — stand up compliant, ICP-filed in-country delivery and storage in front of ActiveCampaign, while you keep running your campaigns. Get in touch to work through your specific case.
