Regulatory Sandboxes offer Opportunities for Innovators and Investors in Vietnam
10 September, 2025
Vietnam is moving quickly to position itself as a regional hub for digital innovation. Recently, Vietnam has been actively developing and implementing “controlled testing mechanisms”, also known as regulatory sandboxes. A sandbox lets businesses test emerging technologies, products or business models within a defined scope and timeframe, under regulatory oversight. The aim is to foster innovation while ensuring risk control and protecting the participants’ legitimate rights and interests.
For financial services, fintech players, and investors, sandboxes provide both a structured way to experiment and signal where Vietnam’s policy environment is heading.
Current framework
The current legal framework for sandboxes in Vietnam consists of the following key regulations:
Decree No. 94/2025/ND-CP, issued on April 29, 2025, and effective as of July 1, 2025, which provides a regulatory sandbox for fintech solutions in the banking sector.
The Law on Digital Technology Industry (DTI Law), passed on June 14, 2025, and effective as of January 1, 2026. The DTI Law acknowledges regulatory sandboxes as a state policy to accelerate innovation and digital transformation in Vietnam.
The Law on Science, Technology and Innovation (STI Law), passed on June 27, 2025, and effective as of October 1, 2025. The STI Law introduces a definition of “regulatory sandbox”. It devotes a separate section on the major principles and features of sandboxes, liability waivers and measures for the protection of the participants’ legitimate rights and interests.
Resolution No. 222/2025/QH15 on International Financial Centers (IFC), and Draft Decree on IFC, both effective as of September 1, 2025, providing a policy and regulatory framework for fintech sandboxes in IFCs to be established in Ho Chi Minh City and Da Nang.
Resolution No. 5/2025/ND-CP on piloting crypto asset market in Vietnam. It was issued on September 9, 2025 and will be effective for 5 years. The resolution creates a sandbox for crypto asset service providers and sets requirements for technical conditions, operations, financial capacity and expertise criteria.
Main features of Vietnam’s sandbox framework
General principles and requirements: A sandbox must follow the principles of transparency, equality, responsibility, security, safety and public interest. Sandboxes apply to digital products and services, including hardware, software, digital content. Participants receive exemptions from civil, administrative and penal liabilities provided that they fully comply with the law and act for the common good. These also include involved government bodies and licensed entities. These entities must take measures to protect the legitimate rights and interests of the concerned stakeholders. This includes warning and regularly assessing risks, providing accurate information, having mechanisms to ensure data privacy and security, addressing relevant requests and complaints, and paying damages when required. There is an exception in cases where they’re exempt from such liability. Sandbox periods last up to three years, with a possible one-time extension of another three years. Participation does not automatically qualify a company under future licensing or investment conditions.
Fintech sandbox in banking sector: Three categories of fintech solutions are eligible for the sandbox mechanism in the banking sector. These include credit scoring, data sharing via open application programming interfaces (APIs), and peer-to-peer (P2P) lending solutions. Eligible entities cover credit institutions, foreign bank branches and fintech companies legally established in Vietnam. Those that wish to participate in the sandbox have to submit an application to the State Bank of Vietnam (SBV) for review and approval. They must acquire a Certificate of Participation from the SBV. Credit institutions cannot engage in P2P lending solutions is important note. Their testing is restricted within the territory of Vietnam, i.e. cross-border testing is prohibited. Each solution’s maximum testing period is two years and the SBV may allow up to two one-year extensions.
Sandbox in IFC: Sandbox participants, including licensed entities, are allowed not to apply certain technical regulations and standards. Sandbox participants may skip business conditions and licensing procedures that do not fit the new technologies, products, or business models they are testing. They can also enjoy exemption from liability for damage to the state in force majeure circumstances, provided that they have fully adhered to the testing procedures. Local budgets may provide fintech enterprises with non-refundable funding support for sandbox projects in fintech and innovation. Ho Chi Minh City is expected to be the hub of fintech sandboxes.
Sandbox for digital assets: According to the newly-issued regulations, any entity that wants to operate a crypto asset exchange must be a Vietnamese limited liability or joint stock company with a minimum charter capital of VND10 trillion. Crypto assets are only offered and issued to foreign investors and may only be traded between foreign investors through crypto asset service providers licensed by the Ministry of Finance. The sandbox participants are subject to stringent requirements, particularly on information technology infrastructure and the highest cybersecurity standards.
Why it matters
Vietnam has been recognized as one of the fastest movers in innovation globally and also one of the best performers in the Association of Southeast Asian Nations (ASEAN). By adopting regulatory sandboxes, the country aims to further accelerate innovation and digital transformation. Its approach to the sandbox framework aligns with international and regional trend. It is based on the study of other countries’ experiences, especially the United Kingdom and Singapore. Similar to these models, Vietnam’s sandbox mechanism focuses on a specific sector, i.e. fintech. The mechanism aims to balance innovation with consumer protection. However, it may differ from the others in eligibility criteria, testing duration and regulatory exemptions for participants.
Sandboxes will offer companies in Vietnam, especially start-ups, a safe and flexible environment to test new technologies, such as AI or blockchain, and to access new funding sources. They will also offer investors a way to evaluate risks and identify potential projects for investment.
As Vietnam’s regulatory environment is evolving. It’s important for businesses to closely monitor regulatory developments and work with the government, particularly the Ministry of Finance and the State Bank of Vietnam. Such engagement helps shape an enabling environment for the digital economy in general and fintech in particular.
The rapid growth of digital platforms has reshaped how children learn, communicate, and entertain themselves. While the internet offers unprecedented opportunities, it also exposes children to serious risks such as harmful content, cyberbullying, online grooming, and the exploitation of personal data. Recognizing these challenges, the Indonesian government introduced PP Tunas, a landmark regulation designed to […]
When Instacart charged some U.S. customers up to 23% more than others for identical groceries based on AI algorithms, the backlash was swift and fierce. A box of crackers cost $3.99 for some shoppers but $4.89 for others; eggs ranged from $3.99 to $4.79- all determined by machine-learning models testing consumers’ price sensitivity. The controversy […]
In five months, hackers quietly siphoned personal data from 33.7 million Coupang customers—virtually the platform’s entire user base in South Korea. Nobody noticed. Not the e-commerce giant. Not regulators. Not the security systems supposedly guarding against exactly this kind of breach. When the theft finally came to light on December 1, it marked South Korea’s worst data breach in over […]
jQuery(function(jQuery){jQuery.datepicker.setDefaults({"closeText":"Close","currentText":"Today","monthNames":["January","February","March","April","May","June","July","August","September","October","November","December"],"monthNamesShort":["Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"],"nextText":"Next","prevText":"Previous","dayNames":["Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"],"dayNamesShort":["Sun","Mon","Tue","Wed","Thu","Fri","Sat"],"dayNamesMin":["S","M","T","W","T","F","S"],"dateFormat":"d MM, yy","firstDay":1,"isRTL":false});});
var gform_i18n = {"datepicker":{"days":{"monday":"Mo","tuesday":"Tu","wednesday":"We","thursday":"Th","friday":"Fr","saturday":"Sa","sunday":"Su"},"months":{"january":"January","february":"February","march":"March","april":"April","may":"May","june":"June","july":"July","august":"August","september":"September","october":"October","november":"November","december":"December"},"firstDay":1,"iconText":"Select date"}};
var gf_legacy_multi = [];
var gform_gravityforms = {"strings":{"invalid_file_extension":"This type of file is not allowed. Must be one of the following:","delete_file":"Delete this file","in_progress":"in progress","file_exceeds_limit":"File exceeds size limit","illegal_extension":"This type of file is not allowed.","max_reached":"Maximum number of files reached","unknown_error":"There was a problem while saving the file on the server","currently_uploading":"Please wait for the uploading to complete","cancel":"Cancel","cancel_upload":"Cancel this upload","cancelled":"Cancelled"},"vars":{"images_url":"https:\/\/ps-engage.com\/wp-content\/plugins\/gravityforms\/images"}};
var gf_global = {"gf_currency_config":{"name":"U.S. Dollar","symbol_left":"$","symbol_right":"","symbol_padding":"","thousand_separator":",","decimal_separator":".","decimals":2,"code":"USD"},"base_url":"https:\/\/ps-engage.com\/wp-content\/plugins\/gravityforms","number_formats":[],"spinnerUrl":"https:\/\/ps-engage.com\/wp-content\/plugins\/gravityforms\/images\/spinner.svg","version_hash":"c8e6739cc393d67db1a2db79d11eb8af","strings":{"newRowAdded":"New row added.","rowRemoved":"Row removed","formSaved":"The form has been saved. The content contains the link to return and complete the form."}};
var gform_theme_config = {"common":{"form":{"honeypot":{"version_hash":"c8e6739cc393d67db1a2db79d11eb8af"}}},"hmr_dev":"","public_path":"https:\/\/ps-engage.com\/wp-content\/plugins\/gravityforms\/assets\/js\/dist\/"};
