Skip to content

Scenario Playbooks

Not a list of laws — the sequence of things your business must actually do

Each playbook breaks one concrete go-global scenario into stages, obligations, deliverables and evidence — every obligation links back to the primary text. 10 playbooks referencing 239 obligations from the Policy & Standards Library and 23 deliverable templates.

Content as of 2026-09-12 · corpus 2026.09|Compiled from public official sources with links and review dates for compliance decision support. Rules change; have licensed professionals review before external disclosure, regulatory filing or contractual commitments.

European UnionGenAI & foundation modelsAI agents

Taking an LLM API / generative AI service to EU enterprise customers

A China-based team offers its own or fine-tuned large models as an API, SDK or SaaS to enterprise customers established in the EU, who embed it into their own products or internal processes.

Stages
6
Obligations
23
Est. duration
20–34 wks
European UnionEmbodied AI & roboticsAI hardware & compute

Exporting embodied AI and robotics to the EU: Machinery Regulation, embedded high-risk AI and the CE route

A China-based manufacturer ships robots, robotic arms, mobile work platforms or humanoid robots with machine-learning capability into the EU. The product falls under the Machinery Regulation, while the AI safety components inside it may fall on the AI Act Annex I embedded high-risk route.

Stages
6
Obligations
37
Est. duration
30–51 wks
United States (Federal)United States — CaliforniaUnited States — ColoradoUnited States — TexasEnterprise SaaSAI agents

Bringing AI SaaS to US enterprise buyers: SOC 2, state privacy and AI laws, and the DOJ bulk-data rule

A China-based team sells an AI application as SaaS to US enterprise buyers (collaboration, support, coding, risk, hiring and similar), who run it inside their workflows and pass employee or end-consumer data through the service.

Stages
6
Obligations
29
Est. duration
26–46 wks
United States (Federal)China (Mainland)GlobalAI hardware & computeGenAI & foundation models

AI hardware and compute going global: two-way export controls, end users and model-weight transfers

A China-based company sells AI accelerators, servers, edge inference modules or compute services abroad, or builds/rents compute offshore and moves model weights, technical data and toolchains between China and other jurisdictions.

Stages
6
Obligations
32
Est. duration
24–42 wks
United Arab EmiratesSaudi ArabiaComputer visionEmbodied AI & robotics

Computer vision and smart-city solutions entering the Gulf (UAE / Saudi Arabia)

A China-based company sells video analytics, people- and vehicle-flow recognition, campus or city-scale security, or visual inspection solutions to Gulf government bodies, state-owned entities or large developers — typically with local deployment, a local joint venture and long-term operations.

Stages
5
Obligations
26
Est. duration
22–38 wks
SingaporeIndonesiaVietnamEnterprise SaaSGenAI & foundation models

Taking an AI application into Southeast Asia: Singapore as the hub, Indonesia and Viet Nam as the landing markets

A China-based team pushes an AI application (assistants, recommendation and decision systems, visual recognition, vertical SaaS) into Southeast Asia — typically establishing a regional headquarters and data centre in Singapore first, then expanding into Indonesia and Viet Nam.

Stages
5
Obligations
23
Est. duration
20–33 wks
JapanSouth KoreaEnterprise SaaSGenAI & foundation models

Entering Japan and Korea: APPI, PIPA and Korea’s AI Framework Act

A China-based AI company serves Japanese and Korean business or consumer customers through an offshore entity or a local subsidiary, processes local residents’ personal information, and may be treated as an AI business operator supplying services in those markets.

Stages
5
Obligations
27
Est. duration
20–33 wks
Hong Kong SARChina (Mainland)GenAI & foundation modelsAI hardware & compute

Pre-IPO ESG and sustainability disclosure readiness for HKEX (AI issuer perspective)

A China-based AI or embodied-AI company preparing to list on HKEX needs, between filing and its first post-listing annual report, to bring the ESG and climate disclosure data chain, governance structure and external assurance to a publishable, diligence-ready state.

Stages
6
Obligations
8
Est. duration
26–39 wks
European UnionUnited KingdomGlobalEnterprise SaaSGenAI & foundation models

EU enterprise due diligence and tenders: a 48-hour response mechanism

An EU enterprise buyer or public contracting authority sends a security-and-privacy questionnaire, an AI governance questionnaire, or a tender compliance section with a response window of only a few days. This playbook provides a mechanism — build the standing assets first, then respond by the hour — rather than scrambling to write materials on demand.

Stages
5
Obligations
18
Est. duration
7–11 wks
China (Mainland)GenAI & foundation modelsAI agents

China-side readiness before going global: algorithm and LLM filings, content labelling and the outbound data route

Before opening overseas markets in earnest, a China-based AI company must first settle its domestic filings, content labelling and outbound data route — a precondition for lawful operation onshore and material that overseas customers, investors and listing reviewers check item by item.

Stages
6
Obligations
41
Est. duration
26–46 wks
GDPR · PIPL · CCPA control mapping
Traceable AI · cited when sourced
ISO 27001 alignment in progress
WCAG 2.1 AA accessibility target
Scenario Playbooks | HaiWen HQ