Why DCS
Enterprises need to protect data at the file itself!
Firewalls and antivirus cannot hold on to a document once it has been copied out. DCS encrypts the file itself, so the rules on who may open, edit, print or share it travel with the file wherever it goes.
Protecting the enterprise's assets
Data law compliance
Personal data
Drawings, designs & manufacturing know-how
Data classified by level of importance
Source code & technology documents
Information classified by secrecy attribute
Financial & strategic records
Data by governance & sharing scope
HR records & personal data
Data subject to storage requirements in Vietnam
Value
Benefits the enterprise receives
Below is the value an enterprise receives from the DCS solution, based on real-world risks:
| Protection goal & Risk | Features | Advantage | Enterprise benefit |
|---|---|---|---|
| Intellectual Property (IP) protectionCAD drawings, source code and R&D formulas copied without authorization | Forced kernel-level encryption (Ring 0 Minifilter Driver) | Files taken off a workstation automatically become meaningless strings of characters that cannot be decrypted without a licensed identity. | Keep the competitive edge and keep R&D assets absolutely safe even when a file leaves the company's systems. |
| Insider risk controlEmployees about to leave copy data or share it through personal chat | Block copy-paste, virtual printing and drag-and-drop, and tightly control USB ports | Removes end users' ability to decrypt on their own and stops mass exfiltration of data. | Reduces by 90% the data leaks caused by the deliberate intent of employees who are leaving or changing departments. |
| Secure supply-chain collaborationSending drawings to subcontractors and losing control entirely | Package files locked to the partner's machine ID, limit the number of opens / the validity period, and self-destruct remotely | Partners can only view or edit within the configured scope, and access can be revoked in an emergency. | Share documents with third parties and contractors with peace of mind, without worrying about forwarding or misuse after the project. |
| Safety in the AI eraUploading confidential documents to ChatGPT or Gemini lets the information be learned covertly | Endpoint monitoring, activity logging and security policies tailored per use case | Tightly control the sensitive-data channels at risk of leaking into public AI systems. | Lets the enterprise adopt new technology safely without fear of exposing business secrets. |
| Legal compliance & auditViolations of data security regulations and the Cybersecurity Law | Tamper-resistant audit trail system (Audit Trail) and dynamic watermark | Every access and edit action on a file is transparently recorded in real time. | Fully meet audit standards, with explanation records ready for the competent authorities. |
| Disaster recovery (BCP)Workstation hard drive failure, accidentally deleted documents or a ransomware infection | Automatic multi-version backup synchronized to the central server (FTP/Server) | Restore the original document immediately in just a few steps. | Ensure business continuity and prevent disruption and data loss caused by technical incidents. |
Protection by industry
Each industry has different documents that are easily exposed
Choose your industry to see which documents DCS protects and how their use is controlled.
Manufacturing
Manufacturing data is often shared with factories, subcontractors and contract manufacturers. DCS keeps control of the document even when the file leaves the internal system.
- Limit viewing, printing and copying per supplier
- Set an access period for shared documents
- Logs show who opened which document
- Typical applications: Protect 2D/3D CAD drawings (SolidWorks, AutoCAD, CATIA...), mold specifications, BOM documents and secret manufacturing formulas; control sharing with suppliers.
Engineering
Engineering documents hold the enterprise's core knowledge and are easily copied when personnel change. DCS controls opening, editing, printing and exporting engineering files.
- Block copying to USB or sending out
- Dynamic watermark makes screen capture harder
- Permissions by project and engineering team
- Typical applications: Protect 2D/3D CAD drawings (SolidWorks, AutoCAD, Catia...), mold specifications, BOM documents and secret manufacturing formulas; control sharing with suppliers.
Architecture
An architectural proposal is intellectual work, often sent to the investor, consultants and the construction unit. DCS helps control each copy sent out.
- Grant separate viewing rights to each recipient
- Revoke rights or let them expire when the project ends
- Watermarks identify the recipient of each copy
- Typical applications: Assign permissions and protect bid documents, cost estimates and construction design drawings when sharing with project management boards and subcontractors.
Construction
A construction project involves many contractors, and records are exchanged constantly. DCS ensures each party accesses only the part of the documents assigned to them.
- Permissions by bid package and role
- Control printing and re-sharing of records
- Access traces for cross-checking when disputes arise
- Typical applications: Assign permissions and protect bid documents, cost estimates and construction design drawings when sharing with project management boards and subcontractors.
Legal
Legal records contain confidential information of clients and partners. DCS helps limit who can reach them and tracks document usage.
- Only the assigned people can open case files
- Restrict copying, printing and forwarding
- Logs support internal review
Finance
Financial reports, models and customer records are high-value data subject to strict security requirements. DCS helps control how these files are used and shared.
- Permissions by department and sensitivity level
- Block downloading, copying and screen capture
- Trace who opened or shared a document
- Typical applications: Encrypt and centrally control credit records, transaction statements and customer identification (KYC) data in line with the Personal Data Protection Law; control quotations, commercial contracts, business plans and internal financial reports, with tiered approval before data is exported.
Healthcare
Health information is sensitive personal data that needs tight control in storage and sharing. DCS helps limit who can access it and records its use.
- Only authorized personnel can view records
- Restrict copying, printing and sending out
- Access logs support internal checks
- Typical applications: Protect customer data, medical-record lists, discount price structures and exclusive commercial contracts.
Technology
Source code, system architecture and product roadmaps are core assets, and development teams increasingly use AI tools. DCS helps control these files.
- Control copying of source code outward
- Reduce the risk of putting sensitive data into AI tools
- Controlled sharing with outsourcing partners
- Typical applications: Protect project source code and system-architecture design documents, prevent personnel from copying source code to personal computers; fine-grained permissions by engineering team.
Government
Documents of agencies and organizations need permissions by function and information level. DCS helps apply a consistent policy to each type of document.
- Permissions by unit and information level
- Record who opened, printed or shared a document
- Limit the time and scope of use
Semiconductor
Designs and process technology in the semiconductor industry are extremely valuable and often exchanged among many partners. DCS helps control each shared document.
- Block copying and exporting files outside policy
- Grant separate rights to engineers and partners
- Trace every opening of important documents
- Typical applications: Protect 2D/3D CAD drawings, mold specifications, BOM documents and secret manufacturing formulas; control sharing with suppliers.
Energy
Technical records of energy plants, systems and projects are highly sensitive and involve many contractors. DCS helps ensure each party sees only the part assigned to them.
- Permissions by project, plant and contractor
- Rights expire when the contract ends
- Audit logs support review when needed
Real-world applications
DCS protects the documents of each department
Each department holds different kinds of documents: drawings in engineering, quotations in sales, payroll records in HR. Here is how DCS protects each kind.
Manufacturing, engineering and R&D
Protect 2D/3D CAD drawings (SolidWorks, AutoCAD, Catia...), mold specifications, BOM documents and secret manufacturing formulas; control sharing with suppliers.
Technology and software development
Protect project source code, system-architecture documents and development records; fine-grained permissions by engineering team.
Sales and finance
Control quotations, commercial contracts, business plans and internal financial reports; tiered approval before data is exported.
HR & Customer data
Encrypt employee records, payroll and customer-identification databases in line with the standards of the Personal Data Protection Law.
Three sources of requirements
Enterprises face three kinds of data requirements
Law is mandatory. International standards such as ISO/IEC 27001 are voluntary. Partner requirements sit in contracts. Please check the documents in force at the time of application; this content does not replace legal advice.
Personal data protection
Law 91/2025/QH15: enterprises holding customer and employee information must protect it and report when it is exposed.
Data & cybersecurity
Data Law 60/2024/QH15 and Cybersecurity Law 116/2025/QH15: classify data, protect important data, store certain data in Vietnam.
Standards & partners
ISO/IEC 27001, GDPR, HIPAA and the security clauses in contracts with foreign customers and large partners.
DCS helps enterprises implement control and data protection measures in real operations; it does not automatically certify legal compliance.
Regulations applicable to enterprises
Five groups of regulations enterprises need to comply with
Each group states what the enterprise must do, and how DCS supports it.
Information system protection by level (TCVN 11930:2017)
- What the enterprise must do: determine the safety level of each information system (from Level 1 to Level 5) and apply corresponding protection measures under Decree No. 85/2016/ND-CP, Circular No. 12/2022/TT-BTTTT and National Standard TCVN 11930:2017.
- How DCS supports: helps deploying organizations meet in detail the technical requirements for application safety and data safety from Level 1 to Level 5 under Decree No. 85/2016/ND-CP and Circular No. 12/2022/TT-BTTTT.
Data Law (Law No. 60/2024/QH15) & Decree No. 165/2025/ND-CP
- What the enterprise must do: classify data (core, important, other) and protect each type according to its level of risk, under Data Law 60/2024/QH15 and Decree 165/2025/ND-CP.
- How DCS supports: controls digital data flows by applying strong encryption to core data, important data and the enterprise's intellectual property assets.
- Integrates a mechanism for controlling outward sharing (Outgoing SGD Package), binding to computer/USB hardware and self-destructing on expiry, serving safe data governance and sharing in line with the standard catalog issued by the Ministry of Public Security.
Personal Data Protection Law (Law No. 91/2025/QH15) & Decree No. 356/2025/ND-CP
- What the enterprise must do: apply protection measures for personal data and sensitive personal data, and report incidents to the competent authority, under Law 91/2025/QH15 and Decree 356/2025/ND-CP.
- How DCS supports: applies technical protection measures to personal data (PII) and sensitive personal data throughout creation, storage, transmission and internal use.
- Provides an immutable audit trail chain (Audit Trail) recording 100% of open, edit, delete, copy or forward events on files, helping enterprises trace the root cause of incidents and meet the obligation to notify the competent authority within the statutory 72 hours.
Artificial Intelligence Law (Law No. 134/2025/QH15) & Circular No. 05/2026/TT-BKHCN
- What the enterprise must do: control the data and source code fed into AI systems, and keep internal data from slipping into public AI tools, under AI Law 134/2025/QH15 and Circular 05/2026/TT-BKHCN.
- How DCS supports: encryption keys protect training datasets, augmentation data (RAG) and algorithm source code.
- Monitors, captures screens and logs alerts when users upload internal files to public AI tools (ChatGPT, Gemini, Claude...), preventing leakage of sensitive data and ensuring privacy under the national AI Ethics Framework.
International standards: ISO/IEC 27001, SOC 2, HIPAA, GDPR
- What the enterprise must do: when foreign customers or partners require it, demonstrate control of data under ISO/IEC 27001, SOC 2, HIPAA or GDPR standards.
- How DCS supports: DCS's security architecture, identity-permission matrix and centralized audit capability directly help FDI enterprises, financial and banking institutions and healthcare facilities achieve and maintain the international information-security governance certifications ISO/IEC 27001, GDPR (EU data protection) and HIPAA (health data security).
This content only groups information and does not replace legal advice; assessment results are not a compliance certification. DCS is a strong supporting technical tool; full legal compliance must be combined with the enterprise's internal information-security regulations.
How to start
Three steps to start protecting data
Understand the data
Identify which types of data the enterprise holds and which regulations apply to them.
Assess
Check the current state: who can open which file, where files are sent, and which tools are protecting them.
Complete
List the gaps, then pick what to do first, for example running a DCS trial (POC) on the most important group of documents.
Free assessment
Self-assess your enterprise's level of data protection
Choose the data group you care about, then click the button to take the online assessment right on aisa.vn. Results are for reference only and are not a compliance certification.
Protecting intellectual property & trade secrets
Protect the digital assets that determine competitive advantage: drawings, source code, contracts, reports and manufacturing know-how.
- Objective: keep core digital assets from leaving the enterprise's control, even after the file has been shared.
- Protect CAD drawings, source code, contracts, quotations, R&D data and financial reports right at the file.
- Control sharing with suppliers, partners and contractors: who may view, edit, print, copy and for how long.
- Prevent leaks from insiders, lost devices and AI tools outside control; revoke permissions immediately when needed.
- Complete access logs for incident investigation and audits.
- Best suited to: manufacturing, electronics, semiconductors, technology and enterprises with complex supply chains.
Personal data protection
Protect the personal data of customers, employees and partners in accordance with Vietnamese law.
- Objective: help enterprises meet personal data protection requirements under Law 91/2025/QH15 and Decree 356/2025/ND-CP.
- Encryption and access control are especially strict for sensitive data: financial, biometric, health, location.
- Limit access rights to the proper role; log every access to support incident notification within 72 hours.
- Control the sharing of personal data with third parties and data processors.
- Best suited to: finance – banking, healthcare, government, legal and any enterprise holding customer or employee records.
IP = Intellectual Property · PDP = Personal Data Protection
FAQ
Frequently asked questions
Does DCS help enterprises comply with data protection laws?
Yes. DCS provides technical measures that support compliance:
- Encryption and access control.
- Usage rights management and permission revocation.
- Audit logs and sharing restrictions.
A security solution does not automatically make an enterprise "compliant" — compliance also depends on the accompanying policies, processes, people and data governance.
What is data encryption?
Encryption converts data from a readable form into an unreadable form for anyone without proper rights or the key — reducing the risk of unauthorized use when a file is copied or stolen.
What is data sovereignty?
Data sovereignty is the requirement that data be managed and processed in accordance with the law of the country whose jurisdiction the data falls under. For enterprises in Vietnam, this relates directly to where data is stored, where it is processed and whether it is transferred abroad.
What is data residency?
This is the geographic location where data is stored or processed — important for enterprises required to store data in Vietnam or in an environment the enterprise itself controls.
Does DCS replace ISO 27001?
No. ISO/IEC 27001 is the standard for an Information Security Management System (ISMS) — covering people, processes and technology. DCS is a technology solution that supports some technical controls within that ISMS, and does not replace the whole management system.
What is a data protection impact assessment (DPIA)?
A DPIA is the process of assessing risks to personal data when an enterprise carries out data processing activities, identifying:
- What data is being processed.
- What risks exist.
- What control measures need to be deployed.
