Clear scope, written plans and honest timelines. You always know what we are building, why, and what it will cost.
Led by a seasoned IT professional with more than 30 years’ experience, delivered by senior cloud architects and experienced software engineers.
Privacy is decided at the start, not added at the end: in how we host your data, who can reach it, and how every line of software is written. We monitor every access and detect attempted breaches. Your data is stored in Vietnam, in line with Vietnam’s data sovereignty rules under the Cybersecurity Law 2025 (Law No. 116/2025/QH15) and the Personal Data Protection Law (Law No. 91/2025/QH15).
Our new Vietnamese company, now being established in Da Nang. It will architect and oversee the secure cloud environment where your data is stored, and support clients locally in Vietnamese and English, built on the experience of our established sister company in Australia.
Our established sister company, registered in Australia. It brings more than 30 years of IT experience, including Australian health systems, to Edgecraft Digital Việt Nam, and leads the business analysis, project management and quality assurance on every engagement.
Three ways to work with us. Every one includes secure, monitored cloud storage in Vietnam.
Available now
Bring your own software. Our senior cloud architects design a secure, monitored environment on Amazon Web Services (AWS) in Hanoi, with a high-specification Vietnamese cloud provider for services AWS does not yet offer locally. We supervise the build and the move of your existing software, then actively monitor and report on storage and security compliance, so your patient records stay in Vietnam and protected to the standard the law expects.
We also sit down with you to work through the Personal Data Protection Law: what it asks of your business, where you stand today, and what a breach could cost.
Data stored only in Vietnam, on AWS in Hanoi and a local cloud providerEncrypted in transit and at restAccess limited by role, with every access loggedActive monitoring, regular compliance reports, tested backups and a breach response planPatient consent app (included in hosting package): proof of what each patient agreed to and whenGuidance on consent, impact assessments and breach notificationAvailable now
For hospitals, medical and allied health clinics, home nursing and emergency services. We build on Medplum, an open-source healthcare platform, so you get proven security underneath and software shaped around how your team actually works.
Patient records are kept in HL7 FHIR, the international standard for exchanging health records. With the patient’s permission, they can be shared with hospitals and other providers that use it.
What Medplum gives youFrom 2027
A ready-to-use subscription system that brings your clinic or care business up to current requirements, without a custom build.
Need to be compliant before 2027? Talk to us now. We will set you up securely today and move you to EdgeCare when it launches.
See what EdgeCare includesYour clinic’s tools run on our secure healthcare platform, hosted only in Vietnam on AWS Hanoi and a Tier III certified data centre.
Medplum is a widely used open-source platform for healthcare software. These protections come with it, and we configure them for your organisation.
We deploy Medplum in Vietnam, on cloud infrastructure we design and secure to our own specifications.
Visit medplum.com
Since 1 January 2026, Law No. 91/2025/QH15 on Personal Data Protection governs how organisations in Vietnam handle personal data. Patient health information is sensitive personal data, which carries the strictest rules.
Keeping sensitive patient data stored in Vietnam removes one of the highest-risk areas: sending personal data overseas. We work through the rest with you: what you collect and why, who can see it, how consent is recorded, and what you must do after a breach.
This is general information, not legal advice. For advice on your situation, speak with a Vietnamese lawyer. We are happy to work alongside them.
Under Vietnam’s Personal Data Protection Law, clinics must be able to show exactly what each patient agreed to, and when. Our consent log records it for you, whichever way you work with us.
Free for every secure hosting client, available before the end of 2026.
Ask about the consent logUnder Circular 13/2025/TT-BYT, clinics and other non-hospital facilities are due to move to electronic medical records by 31 December 2026. Not ready yet? Talk to us now.
Edgecraft Digital is led by Robyn Kirk, a seasoned IT professional with more than 30 years’ experience, including health and pharmacy systems in Australia. With every change, the challenges of cyber security, privacy and security controls have grown, and what makes a system safe has changed substantially.
AI is a powerful tool, not a substitute for judgement. Every system we deliver is designed, reviewed and tested by experienced people who understand your obligations. Once it is live, we use both automated tools and people to monitor your system and keep it secure.
Tell us how you store patient records today. We will explain your obligations in plain language and suggest the simplest secure next step.