China · Hong Kong · Cross-Border

The PRC-side map,
drawn before the questions.

For an OTCQB China company, the U.S. paperwork is only half the file. CSRC filing, SAFE registration, data-security review, and HFCAA exposure decide whether the U.S. half can even begin. We map them calmly, in sequence, before they become surprises.

01 — The regulatory map

Six PRC-side questions that shape a U.S. OTC pathPresented factually. Legal conclusions on each belong to licensed PRC and Hong Kong counsel; our role is mapping and documentation.

01

CSRC overseas listing filing regime

Since March 2023, the Trial Administrative Measures for Overseas Securities Offering and Listing by Domestic Companies put overseas offerings and listings by PRC domestic companies on a filing basis with the CSRC. The regime is filing-based rather than approval-based, and it is drafted to reach both direct overseas listings and indirect ones — structures where an offshore entity lists while the substance of the business sits in mainland China, identified through revenue, asset, and management tests. The scope language is broad, and how it applies to a particular OTC quotation structure — where the pathway may involve quotation rather than an exchange listing, and may or may not involve a securities offering — is a determination that turns on structure and facts. Licensed PRC counsel makes that call; the readiness task is presenting counsel a complete, accurate picture of the structure so the call is made early and in writing.

02

SAFE registration — round-trip investment

Where PRC residents hold interests in an offshore holding structure used to raise capital and invest back into the mainland — the classic round-trip pattern — SAFE registration under the Circular 37 framework becomes part of the file. Registration status affects the legality of historical funds flows, the ability to move money through the structure, and how U.S. professionals view the enforceability of the offshore architecture. Structures assembled years ago, informally, or through nominee arrangements are where problems concentrate. This is qualitative diligence: who the PRC-resident holders are, when the offshore vehicle was formed, what was registered and when, and what the gaps are.

03

CAC data-security review considerations

For data-rich businesses — consumer platforms, companies holding large volumes of personal information, or businesses whose data could be classified as important data — China's cybersecurity and data-security framework adds a layer of review considerations around going to an overseas capital market. Whether a cybersecurity review, a data-export mechanism, or another compliance step applies depends on what data the company holds, in what volume, and how it is classified. The readiness posture is straightforward: know your data inventory and classification before anyone asks, because both PRC regulators and U.S. diligence professionals will.

04

MOFCOM / NDRC touchpoints

Depending on sector and structure, foreign-investment rules administered through MOFCOM and NDRC can matter at the margins — principally where the business operates in a sector on the negative list for foreign investment, or where the offshore structure was built through acquisitions of domestic entities. For most cases these are touchpoints rather than gates, but they belong on the map so counsel can confirm which apply.

05

VIE and red-chip structure diligence

Contractual (VIE) structures and red-chip holding architectures are familiar to U.S. professionals — and precisely because they are familiar, the diligence expectations are settled. Auditors, U.S. counsel, and sponsoring market makers will expect the full contractual set, a clean corporate chart down to individual beneficial owners, PRC legal analysis supporting the structure, and disclosure that describes what investors actually hold and what they do not. The CSRC filing regime, for its part, is written to reach indirect overseas listings through such structures. None of this is automatically disqualifying; all of it lengthens diligence when it arrives unprepared.

06

HFCAA and PCAOB inspection exposure

The Holding Foreign Companies Accountable Act ties continued U.S. trading to the PCAOB's ability to inspect the issuer's auditor. Under the 2022 Statement of Protocol, the PCAOB currently inspects and investigates registered firms headquartered in mainland China and Hong Kong, and it has not had a determination in force against those jurisdictions since December 2022. That is the present state, not a permanent guarantee of access — issuers should still plan for inspection-related risk: choose an auditor whose registration and inspection posture is solid, understand where workpapers sit, and treat the possibility of future determinations as a standing risk-factor rather than a solved problem. Our PCAOB audit readiness page covers the auditor-selection side in depth.

02 — The U.S. side of the table

What U.S. professionals will askAuditors, counsel, and sponsoring market makers ask the same questions of nearly every China-based case. Arriving with answers is the difference between weeks and quarters.

Corporate chart to beneficial owners

The full structure — offshore holdco, intermediate entities, WFOE, operating companies, VIE contracts if any — drawn down to individual beneficial owners, with formation dates and share counts that reconcile.

Funds-flow legality

How money historically moved into, through, and out of the structure — capital contributions, intercompany loans, dividends — and the SAFE and tax basis for each leg.

Related-party map

Every entity and person related to the founders and the group, with transactions identified, priced, and documented. Undisclosed related-party dealings are a leading cause of stalled audits.

Data-classification posture

What personal information and potentially important data the business holds, where it is stored, whether any of it crosses borders, and what PRC counsel has concluded about review and export obligations.

Foreign-ownership restrictions

Whether the operating sector appears on the foreign-investment negative list, and if so, how the structure addresses it — this drives both the VIE question and the disclosure that accompanies it.

PRC counsel's written positions

The CSRC-applicability, structure-validity, and data conclusions above, in writing, from licensed counsel — because U.S. professionals will not accept the issuer's own characterization of PRC law.

Division of labor

We map. Licensed counsel concludes.

Our role on cross-border issues is mapping and documentation: building the corporate chart, assembling the funds-flow history, organizing the data inventory, and framing the questions so they are answered once, early, and in writing. Legal conclusions on PRC and Hong Kong law — CSRC filing applicability, structure validity, data-review obligations — belong to licensed PRC and Hong Kong counsel, and we coordinate with them rather than substitute for them.

03 — Questions

Asked by nearly every China-based founder

Does the CSRC filing regime apply to an OTC quotation?
The Trial Measures apply to overseas offerings and listings by PRC domestic companies — direct and indirect — and the CSRC interprets the regime's scope broadly. Whether a particular OTC quotation structure falls inside it is a legal conclusion that depends on the structure, whether securities are being offered, and how the transaction is characterized. That conclusion belongs to licensed PRC counsel. Our role is to make sure the question is asked and documented early, so U.S. professionals are not relying on an unexamined assumption.
What is HFCAA exposure for a China-based issuer?
The Holding Foreign Companies Accountable Act restricts U.S. trading for issuers whose auditor the PCAOB cannot inspect. The PCAOB currently inspects and investigates firms in mainland China and Hong Kong under the 2022 Statement of Protocol, so the acute delisting scenario of 2021–2022 is not the present state. Issuers should still plan for inspection-related risk: auditor selection, workpaper access, and the possibility of future determinations all belong in the risk plan and in disclosure.
Is a VIE structure a blocker?
Not automatically — but it changes the diligence. U.S. auditors, counsel, and market makers will expect the contractual architecture fully documented, supported by PRC legal analysis, and honestly disclosed, and the CSRC regime is written to reach indirect listings through such structures. Expect deeper questions and a longer file, not an automatic no. The structures that fail are the ones presented as simpler than they are.
Why does SAFE Circular 37 registration keep coming up?
Because it sits underneath the money. Circular 37 concerns registration by PRC residents holding interests in offshore vehicles used for round-trip investment. If the registrations were never made, made late, or made incompletely, questions follow about the legality of historical funds flows and the enforceability of the offshore structure — and those questions surface during audit and legal diligence, which is the most expensive moment to discover them.
Which companies face CAC data-security review?
The considerations concentrate on data-rich businesses: consumer platforms, companies holding large volumes of personal information, and businesses whose data could be classified as important data. Whether a review or a data-export compliance mechanism applies is a determination for PRC counsel based on your actual data inventory. The readiness step within your control is knowing that inventory and its classification before anyone asks.
Important

OTC listing is not automatic and financing is not guaranteed. Form 211 is filed by a qualified market maker — a FINRA-member broker-dealer — not by the issuer and not by us. OTC IPO Expert is not a broker-dealer, law firm, auditor, transfer agent, or investment adviser. Our role is readiness assessment, diligence, documentation, and coordination with licensed professionals.

Map the PRC side before
the U.S. side starts billing.