As published, Decree 356/2025/ND-CP took effect on 1 January 2026, replacing Decree 13/2023, and implements Personal Data Protection Law 91/2025/QH15, which is reported in force from the same date. Article 17(1) defines cross-border transfer to include storing data in Vietnam on servers or a foreign cloud service outside Vietnam, transferring data to a recipient abroad, and processing data collected in Vietnam on a platform outside Vietnam (as published — confirm current requirements with your adviser). For a company using an offshore AI or LLM platform, that last limb means the tool itself can be part of a regulated transfer.
LATYNEX Digital builds AI workspaces and workflows with that data flow documented. This page covers that work for Ho Chi Minh City businesses. The general service is at AI Implementation for Business, and the market overview is at LATYNEX Digital for businesses in Ho Chi Minh City. Delivery is in English, and this page names no client.
Typical industries
- Companies using offshore AI assistants on customer or employee data
- Professional services firms with document-heavy workflows
- Outsourcing and software teams handling client data
- E-commerce and retail operators with customer records
- Operations and back-office teams evaluating AI tools
Common lead-handling problems
- No map of which prompts and uploaded documents contain personal data
- An AI vendor chosen before anyone asked where it processes data
- Vendor contract and data-protection policies held in different places
- Uncertainty over which flows need an assessment and which fall under an exemption
- No internal owner for the transfer question once a tool is in use
Direct answer
If your Ho Chi Minh City company uses or plans to use an offshore AI platform on data collected in Vietnam, LATYNEX can build the AI knowledge system around a data-flow map: which prompts and documents contain personal data, which platform processes them, and where the vendor contract and your data-protection policies sit, organised as inputs to the assessment dossier before the filing clock starts.
Why the global page and the Ho Chi Minh City hub are not enough
The global AI Implementation for Business page has no Vietnamese transfer regime to design around, and the Ho Chi Minh City hub is broad discovery for the market. As published, using an offshore platform on data collected in Vietnam can itself be a cross-border transfer, so the data flow has to be known before the tool goes live, not reconstructed afterwards.
What we configure and build
The work sits before your legal decision, not in place of it.
- A data-flow map from source systems to AI tools, marking where personal data enters prompts and documents
- Where a workflow can run without personal data, a design that keeps it out
- Vendor terms, processing locations and contract documents collected in one place for your reviewer
- Your own data-protection policies referenced against each flow
- A note of the dossier inputs as published (assessment report, transfer contract, policies) and where each currently sits, plus a written handover
Timing and other considerations
As published, the dossier must be kept available and submitted to the specialised authority within 60 days from the date the transfer starts. The authority answers within 15 days and can ask for completion within 30 days. Article 17(3) lists exemptions, for example cross-border HR management under labour rules, and personal data supplied for logistics, payment, hotel or visa purposes. As published, Article 10 treats identifiable AI inference output as personal data, and personal data may be used to research and develop AI if data-protection rules are followed. A separate AI law is reported in force from 1 March 2026; this page does not cover it.
What stays with you and the authority
The legal decision whether a flow needs a dossier or is exempt, the filing with the Ministry of Public Security, the recipient contract, and your own data-protection policies stay with you and your legal adviser. We organise the facts; we do not decide or file.
What needs API support or custom scope
Vendor processing-location details come from the vendor's own documents. Self-hosted or in-country options are scoped per project after technical review. LATYNEX claims no Vietnamese authority approval or integration.
What we do not do, and where LATYNEX is not the right fit
LATYNEX does not file dossiers, gives no legal advice, does not draft the transfer contract or impact assessment as a legal document, holds no credentials on your behalf, and does not certify compliance. It has no Ho Chi Minh City office or named clients, and delivery is in English only. If your legal team already has a full data-flow inventory, this page is not for you.
How delivery actually works
LATYNEX Digital has no office in Ho Chi Minh City and does not claim one. We work with Ho Chi Minh City businesses remotely, over video calls and written updates, in English, with the same team and process as in every other market.
Questions
Do you have an office in Ho Chi Minh City?+
No. We work with businesses in Ho Chi Minh City remotely, over video calls and written updates, in English, and we do not imply a local presence.
Does using an offshore AI tool count as a cross-border transfer?+
As published, Article 17(1) of Decree 356/2025/ND-CP includes processing data collected in Vietnam on a platform outside Vietnam. Whether your particular flow is caught, or exempt, is a legal decision for your adviser.
What is the 60-day deadline?+
As published, the dossier (impact assessment report, transfer contract and data-protection policies) must be kept available and submitted within 60 days from the date the transfer starts. Confirm the current rule with your adviser.
Do you file the dossier or say we are compliant?+
No. We give no legal advice, do not file, and claim no approval from any Vietnamese authority. We map the data flow and organise the documents your adviser needs.
How are you invoiced, and in what currency?+
In EUR, by Latynex Trade OÜ, a company registered in Estonia (EU). Tax treatment for a client in Vietnam is confirmed on the quote, and we do not give tax advice.
What happens next
- 01
We review your current setup
What you have today, who uses it and where work leaks — read-only where the system allows it.
- 02
We find the practical path
The smallest set of changes that fixes the real problem, and what should be left alone.
- 03
Scope and price in writing
One scope and one price for you to approve. Nothing starts before you agree.
- 04
We configure it in your accounts
Through access you grant and can withdraw. Changes that touch people, money or customer data wait for your approval.
- 05
Test, hand over, document
A walkthrough for the people who will run it and written documentation of what was set up and why.
Who you would be working with
- Company · Who you would be working with
- LATYNEX Digital is a service line of Latynex Trade OÜ, a company registered in Estonia (EU). Contact: info@latynexdigital.com.
- How we work · Delivery
- Remote, in English, with the person who would run the project. No local office is implied in any market.
- How we work · Commercial terms
- One scope and one price, agreed in writing before work starts. Your accounts, code and domain stay yours; any access we use is granted by you and can be withdrawn.
There are no client case studies on this page, and none are implied. What LATYNEX has built and runs itself is on the portfolio, each system labelled by stage. Published prices are on the pricing page; anything not listed there is scoped and quoted after review.