Edgecraft Digital

Our services

Secure hosting, healthcare software and compliance support for hospitals, clinics, home nursing and emergency services. Every service keeps patient data in Vietnam.

Book a compliance chat

What we do

Three ways to work with us. Every one includes secure, monitored cloud storage in Vietnam.

Available now

Secure Vietnam cloud for your own software

Bring your own software. Our senior cloud architects design a secure, monitored environment on Amazon Web Services (AWS) in Hanoi, with a high-specification Vietnamese cloud provider for services AWS does not yet offer locally. We supervise the build and the move of your existing software, then actively monitor and report on storage and security compliance, so your patient records stay in Vietnam and protected to the standard the law expects.

We also sit down with you to work through the Personal Data Protection Law: what it asks of your business, where you stand today, and what a breach could cost.

  • Data stored only in Vietnam, on AWS in Hanoi and a local cloud provider
  • Encrypted in transit and at rest
  • Access limited by role, with every access logged
  • Active monitoring, regular compliance reports, tested backups and a breach response plan
  • Patient consent app (included in hosting package): proof of what each patient agreed to and when
  • Guidance on consent, impact assessments and breach notification

Available now

Patient records software, built to your specifications

For hospitals, medical and allied health clinics, home nursing and emergency services. We build on Medplum, an open-source healthcare platform, so you get proven security underneath and software shaped around how your team actually works.

Patient records are kept in HL7 FHIR, the international standard for exchanging health records. With the patient’s permission, they can be shared with hospitals and other providers that use it.

What Medplum gives you

From 2027

EdgeCare, our own medical records software

A ready-to-use subscription system that brings your clinic or care business up to current requirements, without a custom build.

Need to be compliant before 2027? Talk to us now. We will set you up securely today and move you to EdgeCare when it launches.

See what EdgeCare includes

How we work

We find pragmatic solutions and deliver them step by step, so you can meet your obligations without disrupting patient care.

01

Understand

We look at how you store and use patient data today, and what the law asks of you.

02

Plan

We agree a written roadmap with clear scope, priorities, costs and timelines.

03

Deliver

We build and migrate step by step, testing at each stage, so daily work carries on.

04

Monitor

We monitor your system, report on storage and security compliance, and keep it up to date.

How the platform fits together

Your clinic’s tools run on our secure healthcare platform, hosted only in Vietnam on AWS Hanoi and a Tier III certified data centre.

Diagram of the Edgecraft Digital healthcare platform in three layers. Your clinic: patient consent, clinic workflows, patient records and appointment scheduling. Edgecraft Digital secure healthcare platform: electronic medical records, HL7 FHIR standard, data encryption, demonstrable consent and audit logs. Our secure infrastructure partners, AWS Hanoi and a Tier III certified data centre within Vietnam: monitored, biometric security, robust security gates and local data storage.

Security built into the platform

Medplum is a widely used open-source platform for healthcare software. These protections come with it, and we configure them for your organisation.

We deploy Medplum in Vietnam, on cloud infrastructure we design and secure to our own specifications.

Visit medplum.com
  • Role-based accessFine-grained access policies, so each person sees only what their role needs.
  • Secure sign-inSMART on FHIR, OpenID Connect and SAML single sign-on.
  • Full audit trailA record of who viewed or changed what, and when.
  • Encryption in transitTLS 1.2 and 1.3 on every connection.
  • Reviewed, open codeAutomatically scanned for vulnerabilities and reviewed before each release.
  • Standard health dataFHIR records that can move between systems, and support for deleting data when required.

The Personal Data Protection Law, in plain terms

Since 1 January 2026, Law No. 91/2025/QH15 on Personal Data Protection governs how organisations in Vietnam handle personal data. Patient health information is sensitive personal data, which carries the strictest rules.

In force
1 January 2026, with detailed rules in Decree 356/2025/ND-CP.
Penalties enforced
From 19 August 2026, under Decree 330/2026/ND-CP. The Ministry of Public Security enforces.
Consent
Required to process health data, with limited exceptions. Pre-ticked or bundled consent can itself be fined. You must also be able to show when and what each patient agreed to.
Fines
Up to 5% of annual revenue for some violations, up to VND 3 billion for most others, and up to ten times the gains for buying or selling personal data.

Keeping sensitive patient data stored in Vietnam removes one of the highest-risk areas: sending personal data overseas. We work through the rest with you: what you collect and why, who can see it, how consent is recorded, and what you must do after a breach.

This is general information, not legal advice. For advice on your situation, speak with a Vietnamese lawyer. We are happy to work alongside them.

Not sure where you stand?

Tell us how you store patient records today. We will explain your obligations in plain language and suggest the simplest secure next step.

Book a compliance chat

Vietnamese words can be typed with or without accents.