Vietnam's Decree 13/2023/ND-CP on personal data protection (effective 1 July 2023) creates new obligations for every organization that collects and processes personal data — from customer information to employee records. What should your business prepare?

What does Decree 13/2023 cover?

It is Vietnam's first comprehensive legal framework on personal data protection. In essence, it requires businesses to have a lawful basis (usually the data subject's consent) when collecting and processing personal data, to respect data-subject rights, and to apply appropriate data-protection measures.

Which businesses are affected?

Almost all of them. If your business stores customer lists, sends marketing email, manages HR records, or collects information via a website — you are processing personal data and fall within scope.

6 things a business should do

1. Map your data: know what personal data you collect and store, and where.
2. Obtain & keep proof of consent: when collecting data (forms, contracts, sign-ups).
3. Secure the data: encryption, access permissions, multi-factor authentication (MFA).
4. Access control & logging: who views/edits data, and when.
5. A process for data-subject requests: access, correction, deletion of their data.
6. An incident response plan: a procedure for when a data breach occurs.

The role of the cloud platform

Platforms like Google Workspace and Microsoft 365 support compliance in many ways: data encryption, multi-factor authentication, granular permissions, access logs and centralized data-governance tools. Using a reputable business platform instead of free email/storage is a foundational step for protecting personal data.

Standardize your security & data governance

Viet Nis deploys cloud platforms with encryption, MFA, permissions & logging — a foundation for compliance.

Contact us View services

When employees work from home, cafes and personal phones, the line between "inside and outside the company" loses meaning. Zero Trust — "never trust by default, always verify" — is the security model replacing traditional firewall-based defense.

What is Zero Trust?

Zero Trust is a security philosophy built on one principle: never automatically trust any user or device, whether inside or outside the company network. Every access request must verify identity, check the device and grant the minimum privileges needed.

Why isn't the old model enough?

The old "castle-and-moat" model assumed everything inside the company network was safe. But when data lives in the cloud and staff connect from everywhere, one compromised account lets an attacker inside to move freely. Zero Trust fixes this by verifying every access request.

The 5 pillars of Zero Trust

Starting Zero Trust for an SME

SMEs don't need a huge project to begin. The first three steps are simple with high impact:

1. Enable MFA org-wide — the single most important step, blocking most account-takeover attacks.
2. Role-based permissions — remove excess admin rights, apply least privilege.
3. Use a platform with built-in Zero Trust tools — Google Workspace and Microsoft 365 include authentication, device control and access logs.

Secure your business the Zero Trust way

Viet Nis advises & configures MFA, permissions and access control on Google Workspace / Microsoft 365.

Contact us View services

AI is no longer a future technology — it is already inside the Gmail, Google Docs, Outlook and Excel you use every day. Google Gemini and Microsoft Copilot are the "AI assistants" changing how office workers get things done, saving hours every week.

How AI entered the office suite

Instead of opening a separate AI tool, AI is now built right into where you work: suggesting email replies, drafting documents, summarizing long meetings, creating formulas and charts in spreadsheets, and designing slides from a short description.

Google Gemini in Google Workspace

• Draft & reply to email in Gmail, write drafts in Docs.
• Build tables, formulas and analysis in Sheets.
• Automatic notes & summaries for Google Meet.
• Generate images and slides in Slides from a short prompt.

Microsoft Copilot in Microsoft 365

• Write & edit in Word, create drafts from ideas.
• Analyze and visualize data in Excel.
• Summarize meetings and action items in Teams.
• Auto-generate PowerPoint presentations.

Gemini vs Copilot at a glance

How should Vietnamese businesses start?

1. Pick a primary platform (Workspace or 365).
2. Pilot with a small team, choosing 2–3 repetitive tasks (drafting email, summarizing meetings).
3. Train clear prompting so the AI produces good results.
4. Measure impact, then expand gradually to the whole company.

Frequently asked questions

Is using AI at work safe for our data?

With the business tiers of Google Workspace and Microsoft 365, your data is not used to train public models and is protected under enterprise security commitments — a major difference from free AI tools.

Is AI expensive?

AI features are usually an add-on per user. Start with a small team to evaluate impact before rolling out widely. Viet Nis advises on the plan that fits your budget.

Bring AI into your work with Viet Nis

We advise on the right platform & AI plan — 5% below list, VND billing, VAT invoices.

Contact us View services

Cloud computing is no longer optional — it is the default infrastructure of the modern business. In 2026, the five trends below will shape how Vietnamese companies invest in and operate technology.

1. SaaS-first: software as a service

Instead of buying installed software and maintaining your own servers, businesses rent software monthly (SaaS): email, collaboration, accounting and CRM all live "in the cloud". Benefits: low upfront cost, always updated, and flexible scaling with your headcount.

2. AI built into work tools

Artificial intelligence is now inside the office suite: drafting, summarizing meetings, analyzing spreadsheets, replying to email. Google Gemini and Microsoft Copilot are the leading examples — see AI at Work 2026.

3. Zero Trust security

"Never trust by default" — every access request must be authenticated, whether inside or outside the company network. Multi-factor authentication (MFA), least-privilege access and continuous monitoring are becoming the standard, especially with remote work. Read more in What is Zero Trust?

4. Cloud cost optimization (FinOps)

Once you're "in the cloud", managing costs matters. Businesses review the licenses actually used, pick the right plans and remove unused accounts. This is where a knowledgeable partner helps you choose the optimal plan — for example buying through a reseller for a better price and VAT invoices.

5. Data sovereignty & compliance

Data protection rules keep tightening. Businesses need to know where data is stored, who accesses it, and whether the platform supports compliance. Major platforms such as Google Workspace and Microsoft 365 provide full control tools and access logs.

Stay ahead of the trends with Viet Nis

We advise on the right cloud platform and optimize costs — 5% below list, VND billing, VAT invoices.

Contact us View services