Chinese factory access to your business systems
Approve a factory connection only after your system owner has checked its purpose, permissions, data flows and removal method. Use named accounts, limited access and supervised support, then test that access can be withdrawn. Coordinate the factory-side questions through Cambridge China Bridge.
Define the connection before approving it
Ask the factory to describe the task, the systems involved and why a connection is needed. Separate an order-sharing portal, a machine support session and a continuous cloud integration: each needs its own approval. Ask whether an exported file or supervised screen-sharing session would achieve the same result with less exposure.
Request a diagram showing connection direction, software installed, data exchanged, storage locations and everyone able to access it, including subcontractors and the cloud operator. Identify your business owner and technical approver. For commissioning scope and acceptance tests, use our machinery installation guide.
Give only the permissions needed
Create an individually assigned account for each approved technician. Start with read-only access to the relevant machine, folder or order records. Allow changes only where the agreed task needs them. Keep supplier access away from payment approval, customer records and unrelated systems. Avoid shared administrator passwords.
For automated connections, use a dedicated service account with narrowly scoped permissions. Check whether it can download, delete, change settings or invite other users. Keep account recovery and cloud ownership under your control. Use multi-factor authentication and set an expiry tied to the task; require approval before extending it.
Have your security team review the actual setup
Give your security reviewer the proposed software, requested permissions and connection diagram before installation. Ask for a demonstration of encrypted connections, updates, access logs, incident contacts and permission controls. Review the cloud operator as well as the factory. A certificate or factory audit alone does not establish that the proposed connection is safe.
Test with dummy data in an isolated environment. Confirm what the supplier can see, change and export, and whether the connection reaches other systems. Ask your privacy adviser to assess any personal data and overseas access before enabling it. Product documentation is a separate check: see our connectable product guide.
Control every remote support session
Keep remote support disabled between approved sessions. Verify the technician through a contact you already trust, agree the work in writing and have your employee approve the connection. Use your approved access gateway rather than exposing the machine directly to the internet. Supervise the session and record who connected, what changed and the outcome.
Approve file transfers, software installation and setting changes separately. Back up the configuration and agree how to reverse changes. For machinery, have a competent person on site control the safe working state. Stop the session if the technician requests broader access or disables safeguards. Settle ongoing support arrangements using our spare parts and service guide.
Working out your own order? Send us the product on WhatsApp and we reply the same working day: WhatsApp us
Prove that access can be removed
Before approval, demonstrate that your team can disconnect the integration without the factory's help. Keep an access register recording the owner, purpose, permissions, expiry and removal steps. Recheck access when technicians change, support ends or an incident occurs. Pause approval if the factory cannot explain who holds access or how you can revoke it.
At closure, disable accounts, revoke application permissions and tokens, end active sessions and remove remote agents and network exceptions. Rotate any shared secrets the supplier knew. Arrange return or deletion of supplier-held data under your agreed retention terms. Test that both interactive and automated access fail, and retain the closure evidence.
Frequently asked questions
Should I give a Chinese factory administrator access?
Start with limited permissions. If an administrator task is necessary, approve temporary elevation for a named technician, supervise the work and remove it afterwards.
Is a factory's cloud portal safe to use?
Review the operator, permissions, data locations, logs and exit method. Test with dummy data before connecting live business records.
Can a supplier leave remote support permanently enabled?
Prefer access enabled for approved sessions. Assess any continuous connection separately, with a documented purpose, restricted permissions, monitoring and a tested disconnect method.
Is deleting the supplier account enough?
Check application permissions, tokens, active sessions, service accounts and remote agents too. Test that the supplier can no longer connect or retrieve data.