Technology Law Vietnam — Blockchain, FinTech, EdTech | ECOVIS Vietnam Law

Vietnam’s digital economy is expanding faster than most Southeast Asian markets, but the regulatory perimeter around it is dense and still moving. Blockchain ventures, payment platforms, e-wallets, and education technology businesses each answer to different licensing authorities, different foreign ownership ceilings, and different enforcement postures — and a structure that works for one vertical can be non-compliant for another. ECOVIS Vietnam Law works through these distinctions at the entity-structuring stage, before a technology investor has committed capital to a model that regulators will not approve.

Data localization and cybersecurity compliance

The Cybersecurity Law 2018 is the anchor point for most technology compliance work in Vietnam, and its practical effect on a business is rarely obvious from the statute text alone. Depending on the nature of the platform — whether it collects user account data, processes payments, or operates services deemed to touch national security or public order — a company may face requirements to store certain categories of data within Vietnam and, in some cases, to establish a local representative office or branch capable of responding to regulatory requests. The classification question is the one investors get wrong most often: assuming a data localization obligation does not apply because the company is “just an app” or “just a platform,” without a formal assessment of what data it actually handles and how. We work through this classification exercise early, map which data flows trigger local storage or reporting obligations, and build the technical and contractual arrangements — hosting location, data processing agreements, incident response protocols — around that answer rather than around assumption.

Licensing payment and e-wallet businesses

Fintech-adjacent businesses in Vietnam almost always intersect with State Bank of Vietnam oversight in some form, even when the founding team’s mental model is “we’re a software company, not a bank.” Intermediary payment services and e-wallet operations sit inside a licensing regime that is tightly held, foreign ownership in this specific segment is constrained more heavily than in general technology services, and the practical path for many international platforms is a partnership or agency arrangement with an already-licensed local payment institution rather than a standalone license application. The structuring question we help investors answer is not only “can we get licensed” but “should we be the licensee at all, or should the licensed function sit with a local partner while our technology and commercial value sit elsewhere in the group.” Getting that allocation wrong tends to surface later, at the point a bank or payment partner conducts its own compliance review and finds the foreign entity is functionally operating a regulated activity it was never authorized to hold.

Blockchain and digital assets: a cautious regulatory environment

Vietnam has not adopted a comprehensive licensing framework for cryptocurrency or digital asset businesses in the way some regional peers have, which creates ambiguity that cuts both ways: there is no clear “yes,” but there is also no blanket “no” for every activity in this space. What this means in practice is that structure and framing carry more weight here than almost anywhere else in the technology sector. A blockchain venture built around software development, technology licensing, or enterprise infrastructure services reads very differently to regulators than one built around token issuance, exchange operation, or payment settlement using digital assets — and foreign exchange control rules add a further layer, since any structure that resembles moving value across borders through a digital asset attracts scrutiny under Vietnam’s foreign exchange management regime. Our advice in this area is deliberately conservative: we help clients choose business structures that keep the regulated-activity exposure low, document the compliance reasoning behind those choices, and revisit the posture as enforcement patterns become clearer, rather than betting a market-entry strategy on a permissive interpretation that current guidance does not actually support.

Foreign ownership limits for EdTech and digital services

EdTech is deceptively straightforward on the surface — a learning app looks like any other software product — until the service delivery model is examined against Vietnam’s education-sector foreign ownership rules. A platform offering pure digital content or software tools sits in a different regulatory bucket than one offering structured instruction, certification, or anything that resembles operating an educational institution, and the foreign ownership ceiling can shift materially between those two characterizations. Investors frequently design the product first and ask the licensing question second, which leaves them holding a business model that cannot be operated at the ownership percentage they planned for. We map the actual service delivery mechanics — content-only versus instructional, self-paced versus live teaching, B2C versus B2B — against the applicable ownership restrictions at the term sheet stage, so the corporate structure is built around what is achievable rather than retrofitted after a licensing rejection.

Across all three verticals, the businesses that scale in Vietnam without incident are the ones that treat compliance as part of the product architecture rather than a filing exercise handled after launch. If you are evaluating a technology venture in Vietnam and want the regulatory map drawn before you commit to a structure, our team can walk through your specific model.

Talk to our team about your technology venture →