Compilation of Essential Information Regarding Civil Cryptography Licenses in Vietnam

Civil Cryptography Licenses in Vietnam are mandatory documents for organizations and enterprises involved in activities related to products using encryption techniques that do not fall under the scope of state secrets. This is a crucial legal document to ensure lawful business operations in Vietnam. The article below summarizes the latest regulations on Civil Cryptography, licensing conditions, the list of products subject to management, and important notes for enterprises.

See more: Capacity Profile Of Phuc Gia Laboratory Corporation

Table of contents

1. What is Civil Cryptography?

According to the Law on Network Information Security 2015 (No. 86/2015/QH13), “Civil cryptography refers to cryptographic techniques and products used to secure or authenticate information that does not fall under the scope of state secrets.”

Simply put, “Civil Cryptography” includes techniques or products used to protect information that does NOT belong to state secrets. For example, encrypting data during online banking transactions or securing personal information on applications are applications of civil cryptography.

According to Clause 1, Article 30 of the Law on Network Information Security 2015, “Civil cryptographic products are cryptographic documents, technical equipment, and professional tools used to protect information that does not fall under the scope of state secrets.”

It can be understood that “Civil cryptographic products” are devices, software, or documents designed to encrypt or authenticate information to protect data in information systems more securely. Once data is encrypted, only those with the “decryption key” can read its content.

Important note: Not all products with encryption are civil cryptographic products requiring licenses. For example, smartphones, laptops, or common operating systems, even if they have integrated encryption, are NOT considered civil cryptographic products under the regulations for business license applications (according to Note 2 – Appendix 1 of Decree No. 58/2016/NĐ-CP).

2. Why is it necessary to apply for Civil Cryptography Licenses in Vietnam?

Civil Cryptography Licenses in Vietnam are a mandatory condition if an enterprise trades in civil cryptographic products or services. These licenses are issued by the Government Cipher Committee (National Agency for Civil Cryptography Management and Product Cryptographic Testing – NACIS) to strictly manage these activities and ensure general information security.

3. List of products requiring Civil Cryptography Licensing

Civil cryptographic products requiring a license are divided into two main groups:

Group 1: Products subject to business licensing (regulated in Appendix 1 of Decree No. 58/2016/NĐ-CP, as amended and supplemented by Decree No. 53/2018/NĐ-CP).
Group 2: Products subject to both business licensing and import-export licensing (regulated in Decree No. 32/2023/NĐ-CP).

Specifically, civil cryptographic products for export and import under licenses include:

84.43: Printers using printing components such as printing blocks (type blocks), printing cylinders, and other printing components of heading 84.42; other printers, copying machines, and facsimile machines, whether or not combined; parts and accessories thereof.
84.71: Automatic data processing machines and units thereof; magnetic or optical readers, machines for transcribing data onto data media in coded form and machines for processing such data, not elsewhere specified or included.
84.73: Parts and accessories (other than covers, carrying cases, and the like) suitable for use solely or principally with machines of headings 84.70 to 84.72.
85.17: Telephone sets, including smartphones and other telephones for cellular networks or for other wireless networks; other apparatus for the transmission or reception of voice, images, or other data, including apparatus for communication in a wired or wireless network (such as a local or wide area network), other than transmission or reception apparatus of heading 84.43, 85.25, 85.27, or 85.28.
85.23: Discs, tapes, solid-state non-volatile storage devices, “smart cards,” and other media for the recording of sound or of other phenomena, whether or not recorded, including matrices and masters for the production of discs, but excluding products of Chapter 37.
85.25: Transmission apparatus for radio-broadcasting or television, whether or not incorporating reception apparatus or sound recording or reproducing apparatus; television cameras, digital cameras, and video camera recorders.
85.26: Radar apparatus, radio navigational aid apparatus, and radio remote control apparatus.
85.28: Monitors and projectors, not incorporating television reception apparatus; reception apparatus for television, whether or not incorporating radio-broadcast receivers or sound or video recording or reproducing apparatus.
85.29: Parts suitable for use solely or principally with the apparatus of headings 85.24 to 85.28.
85.42: Electronic integrated circuits.
85.43: Electrical machines and apparatus, having individual functions, not specified or included elsewhere in this Chapter.

On July 25, 2025, the Government issued Decree No. 211/2025/NĐ-CP on civil cryptography activities and amending Decree No. 15/2020/NĐ-CP regulating administrative sanctions in the fields of post, telecommunications, radio frequencies, information technology, and electronic transactions, as amended by Decree No. 14/2022/NĐ-CP. This Decree will replace Decree No. 58/2016/NĐ-CP, Decree No. 53/2018/NĐ-CP, Decree No. 32/2023/NĐ-CP, and Decree No. 53/2018/NĐ-CP starting from September 9, 2025.

4. Conditions for granting a Business License for civil cryptographic products and services

Based on Article 4, Decree No. 58/2016/NĐ-CP and related guiding documents, to be granted Civil Cryptography Licenses in Vietnam, an enterprise must meet the following requirements:

Technical Personnel: Have at least 02 technical staff with a university degree or higher in one of the following fields: electronics and telecommunications, information technology, mathematics, or information security.
Management Personnel: Executive management staff must meet professional requirements regarding security and information safety.
Facilities: Have physical facilities and equipment suitable for the business scale.
Clear Plans: Have a customer service system and technical assurance appropriate for the scope, target audience, and quantity of products; a business plan for products and services; a network information security plan; and a product warranty and maintenance plan.

5. Dossier and procedures for applying for Civil Cryptography Licenses in Vietnam

The application process has been simplified; enterprises can now submit dossiers online through the Single Window Information Portal of the National Agency for Civil Cryptography Management and Product Cryptographic Testing (NACIS).

5.1. Dossier for Civil Cryptography Licenses in Vietnam (Business License)

Based on Article 32 of the Law on Network Information Security 2015, the application dossier for a Business License for civil cryptographic products and services must be prepared in two sets, including:

Application form (according to the template regulated in Decree No. 58/2016/NĐ-CP).
Copy of the Business Registration Certificate, Investment Registration Certificate, or other documents of equivalent value;
Copies of diplomas or professional certificates in security and information safety for the management, executive, and technical teams;
Technical plan including documents on technical characteristics and parameters of the product; technical standards and regulations of the product; service quality standards; technical measures and solutions; and a product warranty and maintenance plan;
Network information security and confidentiality plan during the management and provision of civil cryptographic products and services;
Business plan including the scope, target audience, quantity of products and services, customer service system, and technical assurance.

5.2. Application Process

Step 1: Account Registration: Enterprises register an account on the NACIS public service portal using their business identification number.
Step 2: Dossier Preparation: Sign and seal the necessary documents, then digitally sign (using an electronic digital signature) the scanned copies of the dossier.
Step 3: Online Submission: Upload the digitally signed documents to the information portal.
Step 4: Monitoring and Supplementation: NACIS will send a confirmation email and notification of the dossier status. Enterprises must monitor and provide supplements if requested.
Step 5: Fee Payment: Once the dossier is approved, the enterprise will pay the licensing fees.

5.3. Receiving Agency and Processing Time

Receiving Agency: National Agency for Civil Cryptography Management and Product Cryptographic Testing (NACIS) – Government Cipher Committee.
Processing Time: Typically, the dossier appraisal process lasts approximately 30 working days from the date of receipt of a complete dossier. In case of refusal to grant the license, a written notification stating the reasons must be provided.
License Validity: Civil Cryptography Licenses in Vietnam for business products and services have a validity period of 10 years.

5.4. Costs and Fees

Under Circular No. 64/2025/TT-BTC, the appraisal fees for granting business licenses for civil cryptographic products and services; certificates of conformity for civil cryptographic products; and certificates of technical standard compliance for civil cryptographic products are regulated as follows:

“Equivalent to 50% of the fee rates prescribed in Section I and Section II of the Fee and Charge Schedule issued with Circular No. 249/2016/TT-BTC dated November 11, 2016, of the Minister of Finance… regarding the appraisal for granting business licenses for civil cryptographic products and services; certificates of conformity; certificates of technical standard compliance; and the fee for granting import licenses for civil cryptographic products.”

Accordingly, the costs and fees for the issuance of Civil Cryptography Licenses in Vietnam for business products and services are prescribed as follows:

ORD	Fee and Charge Content	Fee
I	Issuing Civil Cryptography Licenses in Vietnam (Business License)
1	Appraisal fee for new license issuance
	One product or service group	4.000.000 VND/Appraisal
	Each additional product or service group	1.000.000 VND/Appraisal
2	Appraisal fee for license amendment or supplement due to changes or additions of civil cryptographic products or services
	One product or service group	1.500.000 VND/Appraisal
	Each additional product or service group	500.000 VND/Appraisal
3	Appraisal fee for license amendment or supplement due to change of name or legal representative	500.000 VND/Appraisal
4	Appraisal fee for license re-issuance due to lost or damaged license	250.000 VND/Appraisal
5	Appraisal fee for license extension	250.000 VND/Appraisal
II	Issuing Certificates of Conformity and Certificates of Standard Compliance for civil cryptographic products
1	Appraisal fee for Certificate of Standard Compliance issuance	1.500.000 VND/Product/Appraisal
2	Appraisal fee for Certificate of Conformity issuance	1.500.000 VND/Product/Appraisal
III	Issuing export and import licenses for civil cryptographic products and services
	Fee for granting an import license for civil cryptographic products	200.000 VND/Certificate

6. Conformity Certification for Civil Cryptographic Products

According to the Law on Network Information Security 2015, “civil cryptographic products must be tested and granted conformity certification before being circulated on the market.” Accordingly, the Certificate of Conformity for civil cryptographic products is a mandatory document for applying for Import and Export Licenses for products in the managed catalog. Certification aims to ensure that products meet technical and safety requirements as prescribed by current laws.

The order and procedures for granting Business Licenses for civil cryptographic products and services, as well as granting Certificates of Standard Compliance and Certificates of Conformity for civil cryptographic products, are specifically regulated in Circular No. 08/2008/TT-BNV issued on November 17, 2008. Additionally, Declaration of Conformity, conformity certification, product quality inspection, and remedial measures for administrative violations are also regulated in Circular No. 28/2012/TT-BKHCN, Circular No. 02/2017/TT-BKHCN (amending and supplementing several articles of Circular No. 28/2012/TT-BKHCN), and Circular No. 06/2020/TT-BKHCN.

Important notes:

If a device features both civil cryptography and network information security functions (as regulated in Circular No. 10/2020/TT-BTTTT of the Ministry of Information and Communications), the enterprise only needs to apply for one type of business license (and import license) for civil cryptography; these two types of licenses are not applied simultaneously to the same product.
There are many civil cryptographic products subject to Business Licenses for civil cryptography in Appendix 1 of Decree No. 58/2016/NĐ-CP (as amended and supplemented by Decree No. 53/2018/NĐ-CP). Even when importing civil cryptographic products for production or internal use, a business license may still be required depending on the regulations.

Applying for Civil Cryptography Licenses in Vietnam is a complex legal process that requires thorough preparation. If you need support or specialized consultation, please contact Phuc Gia for detailed advice to ensure a smooth process.

In conclusion, securing the necessary Civil Cryptography Licenses in Vietnam is the final and most critical step for any company dealing with encrypted data or hardware. These Civil Cryptography Licenses in Vietnam are strictly regulated by the Government Cipher Committee to protect national security while facilitating digital commerce. By obtaining the required Civil Cryptography Licenses in Vietnam, businesses ensure their products—from secure storage servers to specialized software—comply with the updated requirements of Decree 211/2025/ND-CP, which recently streamlined the application process.

Ultimately, current Civil Cryptography Licenses in Vietnam act as a mandatory gateway for both domestic distribution and international trade. Under the Law on Cyber Information Security, failing to maintain valid Civil Cryptography Licenses in Vietnam can lead to severe administrative fines and the seizure of non-compliant goods. As Vietnam transitions to more robust digital technology laws in 2026, staying ahead with verified Civil Cryptography Licenses in Vietnam ensures your operations remain transparent, secure, and fully authorized by the Ministry of Defense.

RELATED POSTS