PROCEDURE FOR OBTAINING AN EXPORT/IMPORT PERMIT FOR CIVIL CRYPTOGRAPHIC PRODUCTS ON DVCQG
This operational reference is prepared for importers, exporters, logistics teams, procurement, legal, compliance and operations teams that need to review civil cryptographic products before customs declaration, document finalisation and shipment planning. This article places the regulation in the practical context of import-export operations, clarifying its scope, affected parties, and the checks required before it is relied on for a shipment dossier. Before implementation, businesses should verify the effective date, amendments, and relevant official guidance applicable to the transaction, while retaining the source and document version used for later explanation or audit.
QUICK SUMMARY
Issuance of an export/import permit for civil cryptographic products, administrative procedure code: 1.013203.
Department of Civil Cryptography Management and Cryptographic Product Inspection / Government Cipher Committee.
Check the product list, civil cryptography business licence, conformity documents, HS code, model, end-use and e-submission readiness.
PROCEDURE INFORMATION
| Field | Content | Operational note |
|---|---|---|
| Procedure name | Issuance of an export/import permit for civil cryptographic products | Applies when the product falls under the list of civil cryptographic products subject to export/import licensing. |
| Procedure code | 1.013203 | Verify the live status on DVCQG before filing. |
| Administrative level | Ministerial level | This is not a provincial-level sectoral procedure. |
| Field | Civil cryptography | Connected to information security, national defence and specialised cipher management. |
| Handling authority | Department of Civil Cryptography Management and Cryptographic Product Inspection / Government Cipher Committee | Technical documents should be prepared in Vietnamese or supported by a usable translation. |
| Competent authority | Government Cipher Committee | The output is an export/import permit for civil cryptographic products. |
| Filing methods | Online, in person or by post | For online filings, check digital signature and DVCQG/business account readiness. |
| Processing time | DVCQG displays 06 working days; Decree 211/2025/NĐ-CP also provides a validity check mechanism before substantive appraisal. | If a supplementation request is issued, customs planning should be recalculated from the date of a valid dossier. |
| Fees/charges | Check Circular 249/2016/TT-BTC and any applicable fee reduction or exemption at the time of filing. | Do not lock cost assumptions before checking the payment notice on the filing portal. |
KEY POINTS FOR ENTERPRISES
| Issue | Requirement to review | Impact on import-export dossier |
|---|---|---|
| Licensing condition | The enterprise must hold a business licence for civil cryptographic products/services. | If this business licence is absent or outside scope, shipment planning for controlled goods should not be finalised. |
| Conformity for imports | Imported civil cryptographic products must be certified and declared conforming where required. | Review test reports, conformity certificates/declarations, model and firmware/software version. |
| End-use and user | The user and end-use must not harm national defence, national security, social order or safety. | Describe end-user, deployment purpose, project, network system or security solution. |
| Current dossier logic | Under simplification, the core filing document is the application form under Form 07. | Even if data can be queried by authorities, enterprises should prepare supporting documents for contingencies. |
| Product list attachment | The product list generally includes product name, brand, model, HS code, country of manufacture, quantity, standards/regulations, technical features and import/export purpose. | Invoice, Packing List, catalogue, datasheet, contract and customs declaration must align with this data. |
AFFECTED ENTERPRISES AND PRODUCT GROUPS
| Analysis group | Scope | Documents to verify |
|---|---|---|
| Enterprises | Importers, exporters, distributors, system integrators, security-solution providers, IT project companies, EPE/FDI entities where relevant. | Enterprise registration, civil cryptography business licence, contract/PO and declared end-use. |
| Products | Products under the list of civil cryptographic products subject to export/import licensing in Decree 211/2025/NĐ-CP and related appendices. | Catalogue, datasheet, user manual, encryption specifications, firmware/software version and model list. |
| Impacted stage | Pre-clearance, customs declaration, product policy review, post-clearance recordkeeping and market circulation. | Invoice, Packing List, B/L or AWB, C/O if any, permit, conformity documents. |
| Triggering condition | Assessment should be based on encryption/security function, key management or secure data processing, not only commercial names. | Technical description, cryptographic features, target users and actual deployment configuration. |
IMPACT ON IMPORT-EXPORT AND LOGISTICS OPERATIONS
| Operational stage | Risk if permit/data is not ready | Pre-ETA control point |
|---|---|---|
| Product-policy review | Goods may be requested for explanation or licensing documents if they fall under the controlled list. | Review catalogue/datasheet before booking or supplier handover. |
| Customs declaration | Generic descriptions increase the risk of channel escalation or additional-document requests. | Standardise bilingual product names, HS code, model, serial and technical specifications. |
| Logistics timeline | Licensing delays may lead to storage, demurrage/detention or project-delivery delay. | Back-plan from ETA and define submission and expected approval dates. |
| Post-clearance compliance | Business or circulation imports require systematic recordkeeping of permit, conformity and technical documents. | Create a shipment folder containing declaration, permit, product list and technical dossier. |
ENTERPRISE CHECKLIST
| Document group | Documents/data to prepare | Control note |
|---|---|---|
| Enterprise legal status | Civil cryptography business licence; legal entity information; digital signature/DVCQG account. | Check not only existence but also product/service scope. |
| Permit application | Application for export/import permit under Form 07; product list attachment. | Application data must match invoice, packing list, catalogue and actual model. |
| Technical dossier | Catalogue, datasheet, user manual, encryption/security features, firmware/software, test reports if any. | Avoid generic descriptions such as “network device” where cryptographic functions exist. |
| Conformity dossier | Conformity certificate/declaration for imported products where applicable. | Review validity, model coverage, standards/regulations and conformity-assessment body. |
| Trade documents | Commercial Invoice, Packing List, B/L or AWB, contract/PO, C/O if any, HS information, origin, quantity and value. | Product name, model, HS code and quantity must be consistent. |
| Timeline | Supplier ready date, ETD/ETA, filing date, expected approval date and customs declaration date. | Do not bring clearly controlled goods to port/border without a clear licensing status. |
TERMS AND WORKING DEFINITIONS
Cryptographic products/services used outside state-secret protection but still subject to specialised management.
Vietnam National Public Service Portal for administrative procedure lookup and online filing.
Department of Civil Cryptography Management and Cryptographic Product Inspection under the Government Cipher Committee.
Certification/declaration that a product meets applicable technical regulations, reviewed by model and technical dossier.
RELATED LEGAL DOCUMENTS TO REVIEW
| Document group | Document | Issuing authority | Role | Review note |
|---|---|---|---|---|
| Law | Law on Cyberinformation Security No. 86/2015/QH13 | National Assembly | Primary legal basis for civil cryptography management; Articles 34 and 39 should be reviewed. | Check current amendments, if any. |
| Decree | Decree 211/2025/NĐ-CP | Government | Regulates civil cryptography activities, lists, conditions, dossiers, procedures and sanctions. | Effective from 09 September 2025; currently cited by DVCQG/NACIS for this procedure. |
| Resolution | Resolution 66.16/2026/NQ-CP | Government | Cuts and simplifies administrative procedures and business-related requirements; DVCQG lists it as a legal basis for the procedure. | Effective from 15 April 2026; review the appendix relevant to the Ministry of National Defence and live DVCQG data. |
| Resolution | Resolution 24/2026/NQ-CP | Government | Listed by DVCQG as a legal basis; use it to review the simplification/update context where applicable. | Compare against the official PDF and the live DVCQG procedure. |
| Administrative-publication decision | Decision 2505/QĐ-BQP and, if updated, Decision 2863/QĐ-BQP | Ministry of National Defence | Publishes administrative procedures in the civil cryptography field and procedure code 1.013203. | Use the data shown on DVCQG at the filing date. |
| Fee circular | Circular 249/2016/TT-BTC | Ministry of Finance | Fee/charge basis for licensing and conformity-related activities. | Check fee reductions/exemptions at the filing date. |
| Public-service systems | DVCQG and NACIS online service portal | Government Office / Government Cipher Committee | Lookup, e-forms, submission methods and online dossier status. | Portal feedback on the filed account prevails operationally. |
VIEW / DOWNLOAD OFFICIAL SOURCES
Enterprises should rely on official public-service and legal-document sources before filing, especially where the procedure was simplified in 2026.
FULL PROCEDURE / DVCQG LOOKUP FRAME
Display note: The iframe below embeds the digitally signed PDF of Decree 211/2025/ND-CP from the Government legal document portal. The DVCQG/NACIS procedure pages are kept as direct-source buttons so that enterprises can verify the procedure status, forms and dossier requirements at the time of filing.
Priority sources: National Public Service Portal, the specialized online public service portal of the Authority of Civil Cryptography Management and Cryptographic Product Inspection, and the Government legal document portal. The PDF frame shows the underlying legal document; the DVCQG/NACIS procedure page should be opened directly using the buttons above for real-time filing information.
FAQ
1. Do all security devices require this permit?
No. The conclusion depends on the controlled product list and actual cryptographic/security functions, not only the commercial name.
2. Is Form 07 currently the core dossier?
Under the simplification approach and current DVCQG data, Form 07 is the core filing document. The enterprise must still satisfy the business-licence and conformity conditions where applicable.
3. Is a digital signature required for online filing?
Yes. Online dossiers must be submitted through the public service system with a compliant digital signature/account.
4. Can customs declaration be opened before the permit is issued?
For goods clearly subject to licensing, the permit should be completed before customs clearance to avoid storage and delay risks.
5. Does this procedure determine HS code or duty?
No. However, the product list includes HS-code data, so HS, origin and duty treatment should be reviewed consistently.
6. What should be archived after clearance?
Archive the permit, DVCQG filing dossier, product list, conformity documents, trade documents, customs declaration and authority correspondence.
Tiếng Việt
中文 (中国)
NEED TO REVIEW IMPORT PROCEDURES OR A SHIPPING PLAN?
Send us the product name, shipping route, current dossier, or implementation request in advance so we can suggest a suitable approach that is practical, focused, and aligned with your shipment.
Cargo Damage at a Port or Warehouse: An Immediate Response Checklist
What Is General Average? How Cargo Interests Should Respond to a GA Notice
When should businesses photograph or video container stuffing and opening?
When Can Cargo Insurers Reject or Reduce a Claim?
Risks of Failing to Inspect a Container Before Cargo Stuffing
Risks of Failing to Inspect a Container Before Cargo Stuffing
What Documents Are Required for a Cargo Insurance Claim?
What Information Should a Cargo Damage Survey Record Contain?
Total Loss vs Partial Loss in Cargo Insurance: What Is the Difference?
Cargo Dented, Wet or Missing Packages: What Should a Business Do?
Who Must Arrange Insurance under CIF and CIP?
Export Process: From Purchase Order to Final Document Set
How Is Cargo Insurance Value Determined?
How Do ICC-A, ICC-B and ICC-C Cargo Insurance Conditions Differ?
When Should a Business Buy Separate Cargo Insurance?