Skip to main content
CyberOS was designed for the Vietnamese market first. Every regulation below is a first-class platform feature, not a plugin or afterthought — from PDPL data residency enforced at the tenancy layer to Decree 145 overtime caps hard-coded into TIME’s write path.
All Vietnamese compliance features are on by default for vn-1 residency tenants. No additional configuration required.

​
Vietnamese data privacy (PDPL)

Vietnam’s Personal Data Protection Law (Decree 13/2023/NĐ-CP) — commonly called the PDPL — is the primary framework governing how CyberOS handles personal data for Vietnamese-market tenants. CyberOS targets the vn-1 residency tier, which activates the PDPL’s data-localisation rules (Decree 53/2022) as part of the vn-1 compliance package.

PDPL Art. 38 — Cross-border Transfer

Article 38 restricts transferring personal data outside Vietnam without meeting one of the approved legal bases. For vn-1 tenants, CyberOS stores personal data in the hanoi-1 region by default. Any cross-border transfer is surfaced to the designated DPO for sign-off before it proceeds.

SME Grace-Period Flag

Small and medium enterprises qualify for a transitional grace period under PDPL implementing regulations. Set pdpl_sme_grace: true on your tenant settings to enable the grace-period flag. CyberOS tracks the expiry date and notifies the DPO 90 days before it lapses.

DSAR APIs

Data Subject Access Request (DSAR) APIs are available on every module that holds personal data — CRM contacts, TIME entries and expenses, HR records, and REW compensation records. Call GET /dsar/export?subject=<email> to receive a structured ZIP bundle fulfilling PDPL Art. 14.

DPO Designation

PDPL Art. 28 requires a Data Protection Officer for high-risk processing. CyberOS allows you to designate any tenant admin as DPO in TEN → Compliance → DPO Designation. During onboarding, the platform defaults to designating the founding account holder as DPO.

​
Labour law compliance

CyberOS enforces Vietnamese labour law at the data layer — constraints are written into the TIME module’s write path, not bolted on as reporting checks after the fact.

​
Decree 145/2020 working-hour caps

Decree 145/2020 implements Labour Code 2019 Article 107. TIME enforces the following as hard rules:
1

Regular hours tracked

CyberOS tracks regular working hours per member per ISO week. The cap is 40 hours of regular time per week. Entries that would push a member past 40 hours in a week are flagged as overtime automatically — no manual categorisation required.
2

Standard overtime ceiling

The default annual overtime ceiling is 200 hours per year (Labour Code Art. 107 standard limit). TIME evaluates each new overtime entry against the running annual total. Entries that would exceed 200 hours are blocked at the API and page the CHRO.
3

Extended overtime with consent

Up to 300 hours of overtime per year is permitted with documented employee consent and a MoLISA notification on file. In TIME, the 200–300 hour band is gated: the member must have a signed consent record in HR and a MoLISA notification must be logged before the TIME write path allows entries in this band. Attempting to log overtime above 300 hours is a hard-block regardless of consent.
Overtime cap enforcement is a non-negotiable hard rule. Entries that violate Labour Code Art. 107 are rejected at the API and trigger an automatic CHRO notification. There is no override path short of filing the correct HR consent and MoLISA notification records first.

​
Leave types — Decree 145 and Labour Code 2019

HR tracks eight statutory leave types, each tagged with its legal basis so your records are audit-ready for MoLISA inspection.
Maternity and paternity leave entitlements are governed by Labour Code 2019 and implemented under Decree 145/2020. CyberOS tags leave records with both the Labour Code article and the relevant Decree so downstream payroll reporting in REW can distinguish BHXH-funded leave from employer-funded leave.

​
Tax and invoicing

​
MST validation

Every time you write or update an account in CRM with an MST (Mã số thuế — Vietnamese business tax code) field, CyberOS invokes the vietnam-mst-validate skill. The skill queries the General Department of Taxation (GDT) registry in real time and:
  • Confirms the code is valid and active
  • Returns the GDT-canonical company name and address
  • Flags any mismatch between the name you entered and the GDT canonical name
Validation results are cached for 7 days to handle GDT registry outages gracefully. If the registry is unreachable, the write is permitted but the account is marked vn_mst_validated: false and a warning is surfaced to the AM.

​
Hóa Đơn (VAT invoice) — Decree 123/2020

When a CRM deal moves to closed_won, CyberOS automatically triggers the vietnam-vat-invoice skill via the INV module. The resulting hóa đơn (electronic VAT invoice) conforms to Decree 123/2020/NĐ-CP and Circular 78/2021/TT-BTC. The account manager must confirm the amount and recipient before the invoice is issued — this is a mandatory human-confirm gate. Invoice data includes seller information, buyer MST, line items, and a VAT split computed per item type (standard 10%, reduced 5%, or 0% for exports). Issued invoices are stored in INV with a link to the CRM deal and retained for 10 years per Decree 123 requirements.

​
PIT and payroll deductions in REW

REW computes the following statutory deductions on every payroll run for Vietnamese employees:
The employer-side contributions (BHXH 17.5%, BHYT 3%, BHTN 1%) are computed in REW and surfaced on the payroll summary but are not deducted from the employee’s net pay.

​
Expense OCR — Vietnamese Hóa Đơn receipts

Upload a Vietnamese hóa đơn receipt image in TIME and the OCR pipeline extracts the MST, seller name, line items, and VAT split automatically. Extracted fields are editable before you save the expense, and the vietnam-mst-validate skill cross-checks the vendor MST against the GDT registry as part of the OCR flow. CRM maps Vietnamese legal entity types to the account_type field. Each type controls the hóa đơn template used on deal close:

​
Language and localisation

CyberOS ships with full Vietnamese and English UI for vn-1 tenants. The following Vietnamese-specific features are active by default:
  • Vietnamese bigram search (PGroonga) in the KB module for accurate full-text search across Vietnamese content without requiring word-boundary tokenisation
  • Salutation logic (Anh/Chị/Em) in CRM contact fields — the platform derives the correct Vietnamese salutation from gender and seniority signals and renders it on every contact card and outbound email template
  • Vietnamese address parsing on CRM accounts — ward (phường/xã), district (quận/huyện), and province (tỉnh/thành phố) are parsed into structured fields

​
Compliance feature summary