# CompliScan — Vietnam Google Workspace Compliance Audit

> CompliScan helps companies in Vietnam identify and fix personal data compliance risks in their Google Workspace.

## What We Do

CompliScan is a B2B compliance audit service for Vietnamese SMEs and foreign-invested companies using Google Workspace. We scan Drive, Gmail, Sheets, and Docs for exposed personal data (PII) under Vietnam's data protection laws.

## Key Services

- **Google Workspace PII Scan**: Read-only scan of Drive, Gmail, Sheets, and Docs for Vietnamese PII patterns (CCCD/CMND numbers, phone numbers, tax IDs, bank accounts, social insurance numbers)
- **Compliance Risk Report**: Detailed findings with severity ratings and regulatory references
- **Remediation Roadmap**: Prioritized action plan with specific steps
- **Decree 337 Readiness Assessment**: Preparation for the July 1, 2026 electronic labor contract deadline

## Relevant Vietnamese Regulations

- **PDPL (Law 91/2025/QH15)**: Vietnam's Personal Data Protection Law, effective January 1, 2026
- **Decree 356**: Implementing decree for PDPL, defines personal data categories and protection requirements
- **Decree 337**: Requires all companies with employees in Vietnam to register electronic labor contracts by July 1, 2026

## Key Facts

- Audits completed within 48 hours
- Read-only API access — no files downloaded or stored
- Pricing starts from $299 per audit
- Based in Ho Chi Minh City, Vietnam
- Bilingual service: English and Vietnamese
- Contact: hello@compliscan.co

## Who This Is For

- Vietnamese SMEs using Google Workspace
- Foreign-invested companies (FDI) operating in Vietnam
- Companies that are GDPR-compliant but need Vietnam-specific compliance
- Any company with employees in Vietnam facing the July 1, 2026 deadline

## FAQ

### What data do you scan for?
We scan for Vietnamese PII including Citizen Identity Card numbers (CCCD/CMND), phone numbers in Vietnamese formats, tax identification numbers, bank account numbers, social insurance numbers, and other patterns defined under Decree 356.

### Do you access or store files?
No. We use Google Workspace's read-only API. We never download, copy, or store your actual files. Access is granted through Google's standard OAuth flow and can be revoked at any time.

### What is the July 1, 2026 deadline?
Decree 337 requires all companies with employees in Vietnam to register their labor contracts on the national electronic labor contract platform by July 1, 2026. Both Vietnamese and foreign-invested companies must comply.

### We're already GDPR-compliant. Do we still need this?
Yes. Vietnam's PDPL has requirements beyond GDPR, including mandatory registration with the Ministry of Public Security for cross-border data transfers, Vietnamese-format DPIAs, and specific local data categories not covered by GDPR.

### How long does the audit take?
Most audits complete within 48 hours. Larger organizations may take 3–5 business days.

### What do we get at the end?
A comprehensive risk report with all PII exposures found, severity ratings, regulatory references, a prioritized remediation plan, and a Decree 337 readiness assessment.

## Links

- Website: https://compliscan.co
- Blog: https://compliscan.co/en/blog
- Case Studies: https://compliscan.co/en/case-studies
- Contact: https://compliscan.co/en#contact
- Privacy Policy: https://compliscan.co/en/privacy
- Terms of Service: https://compliscan.co/en/terms