These two standards are often asked about as if they were component certifications: GB 44495-2024 governs vehicle information security, and GB 44496-2024 governs software upgrade. Both land on the vehicle model, are done in the same type-approval test round, produce separate inspection and test reports, and are merged into the announcement material. Makers of T-Boxes, gateways and domain controllers feel the pressure, but it is transmitted down from the OEM — no separate certificate is issued for the part.
In the same batch, GB 44497-2024 (the event data recorder system) also exists: SAMR Announcement No. 7 of 2026 approved only Amendment 1 of 44495 and 44496, and 44497 is not in it. Whether you touch autonomous-driving data recording decides if you must deal with it separately — do not bundle all three into one plan.
The M class is for passengers, split by seats: M1 is up to nine seats including the driver — saloons, SUVs and MPVs; M2 is nine to 22 seats, covering commuter minibuses and light coaches; M3 is over 22 seats, covering public buses, long-haul coaches and articulated BRT.
The N class is for goods, by maximum design gross mass: N1 is up to 3.5 t, covering light trucks, pickups and last-mile delivery vans; N2 is above 3.5 t and up to 12 t, mostly municipal vehicles and medium box trucks; N3 is above 12 t, covering tractor heads, mixers and mining dump trucks.
Trailers are the biggest trap: the formal-version scope clause wrote "at least one O-class vehicle fitted with an electronic control unit", but Amendment 1 of both standards changes this to "applies to M-class and N-class vehicles". Makers of trailer accessories should confirm which version they file under.
Fuel, battery-electric, hybrid and hydrogen are treated alike: some read these two as exclusive to new-energy vehicles, but as long as there is an external connection and upgrade capability, a fuel car is covered too — the judgement is not based on powertrain.
The 44496 threshold is blunter: it looks only at whether upgrade capability exists. Over-the-air upgrade counts, and so does local flashing through a diagnostic tool; only vehicles with no flashing capability at all can claim non-applicability, and those are rare now, leaving little room for exemption.
Amendment 1 of 44496 also adds an exclusion: special-purpose vehicles converted from a type-approved second-class chassis or complete vehicle do not apply. Makers of converted and special-purpose vehicles — this clause decides whether you submit.
T-Boxes, gateways and domain controllers get no 44495 certificate of their own; the vehicle test checks them item by item — access control and authentication on the cellular, Wi-Fi, Bluetooth and USB interfaces are all unavoidable.
The OEM breaks the requirements down into component-level technical conditions and pushes them down: interface lists, key management and log retention all need evidence, and a supplier with no material stalls the type test.
The upgrade cloud platform falls under 44496 — package signature, anti-rollback and version records; the platform side must produce a complete evidence chain.
L-class two- and three-wheelers and off-road site machinery do not apply. GB 44497 has its own boundary, so do not sweep autonomous-driving data recording in by habit.
Imported vehicles are a misunderstanding: whether a local or imported brand, anything declared for domestic announcement follows the same threshold. Pure export models are outside the domestic announcement system and follow local regulations — do not mix the two.
The node is set by whether type approval exists, not by whether the model is in production or discontinued. Models already granted type approval execute from the 25th month after the standard's implementation — that is 1 January 2028. Models already withdrawn from the announcement with no production or sales have no such obligation; all still-on-sale stock models follow that date.
For newly applying type approval, the amendment pushes the node to the 7th month after implementation — 1 July 2026. The implementation date is 1 January 2026, and both amendments took effect on 28 January 2026. Plan production to the 1 July date.
For these projects, BlueAsia fixes the vehicle scope and applicable standards at the planning stage in one pass — confirm M or N class, whether upgrade capability exists, whether it is a special-purpose vehicle converted from a second-class chassis, and whether 44497 is in play — and for multiple models in parallel combines the sample vehicles, documents and system files for the two standards, covering derivative models on the same platform in one pass where possible.
Do not expect a piece of paper that reads "GB 44495 certificate". Neither standard has an independent certificate; the reports merge into the vehicle announcement material, and that is a different system from CCC issuance.
Pages explaining these two standards often lump all three mandatory standards into one and write the applicable models as "all vehicles". These pages with exaggerated headlines and content that does not match the text tend to rank poorly in search — before filing, check against the clauses and the amendment for a steadier footing.
Contact: King Email: king.guo@cblueasia.comAddress: Building C, Hongjingda Industrial Park, No. 107 Beihuan Road, Shiyan Street, Bao'an District, Shenzhen, China BlueAsia delivers more than service!
相关新闻
