redCOMPONENT

AesirX is hiring a Country Manager Vietnam to build the partner channel and enterprise customer base for ComplianceOne, our in-market GRC platform for privacy, consent, data governance, audit evidence, and operational compliance. This is a commission-based, sweat-equity role with 1% equity and no base salary for the first 6 months.

https://aesirx.io/careers/country-manager-vietnam

Country Manager - Vietnam AesirX, a privacy-first technology company, is hiring a Country Manager in Vietnam to lead sales and partnerships for privacy and GRC solutions.

Vietnam Economy / VnEconomy has published an article covering our Vietnam Website Privacy Scan 2026, based on privacy scans of the websites of large companies in Vietnam.

The main point is simple:

Personal data compliance is no longer only about having a privacy policy or a cookie banner.

It is about what actually happens when a visitor opens a website.

Are third-party scripts, cookies, pixels, analytics tools, embedded videos, or advertising technologies loaded before the user has made a clear choice?

Can the business prove what was shown, what was accepted, what was refused, and which technologies were blocked or allowed?

Can users withdraw consent as easily as they gave it?

This is where many companies still have a gap.

The positive message is that this is fixable.

With the right governance, technical controls, consent records, and audit trail, companies can move from “banner compliance” to real operational privacy governance.

Thank you to VnEconomy for highlighting this important issue for Vietnam’s digital economy.

https://vneconomy.vn/techconnect/du-lieu-ca-nhan-dang-duoc-quan-tri-den-dau-tren-website-cua-cac-doanh-nghiep-viet.htm

See the full study here: https://aesirx.io/blog/aesirx/vietnams-corporate-websites-and-the-consent-gap-executive-summary

Dữ liệu cá nhân đang được quản trị đến đâu trên website của các doanh nghiệp Việt? Chỉ cần một cú nhấp chuột, người dùng đã đồng ý về các điều khoản dữ liệu mà các website đặt ra, nhưng lại cần đến nhiều bước để từ chối hoặc rút lại lựa chọ...

🔍 We scanned 500 of Vietnam's top company websites.

244 out of 340 were flagged high risk.

Not because of anything exotic. Google Analytics, Meta Pixel, YouTube embeds, Google Tag Manager, the standard toolkit of corporate websites across Vietnam, firing before visitors had seen a consent banner or made any real choice.

Vietnam's PDPL has been in force since 1 January 2026. A banner that appears after the browser has already called Google or Meta isn't compliance. It's decoration. 🇻🇳

Most of these sites were built by agencies. Nobody reviewed the tag stack through a compliance lens. That's the gap.

✔️ Scan what your website actually loads
✔️ Block non-essential scripts before consent, not after
✔️ Name your vendors, “analytics partners” isn't disclosure
✔️ Keep records that prove the user's choice controlled the technology

🔗 Full report https://aesirx.io/blog/aesirx/vietnams-corporate-websites-and-the-consent-gap

🛡️

Vietnam’s Corporate Websites and the Consent Gap A scan of 500 Vietnamese company websites reveals widespread third-party tracking, cookies, beacons, and PDPL consent risks.

When most compliance teams spend 2 days getting a DPIA question answered, Forseti, the AI advisor inside AesirX ComplianceOne, drafts it in 2 minutes; with citations and a full audit trail.

✅ Every answer is grounded in the customer's installed regulatory packs and their own records, not in general model training.

✅ Twenty cross-module workflows draft DPIAs, transfer assessments, vendor evidence collections, contract obligations, consent gaps, breach timelines, remediation plans, and audit walkthroughs.

✅ Forseti drafts; humans accept. Memory is scoped to the customer organisation and cannot leak across tenants.

✅ External tools reach Forseti through MCP, and every write proposal lands in an in-product approval queue that a human reviews before anything runs.

Autonomous AI optimises for speed. Auditable AI optimises for survival under inspection. In regulated compliance work, only one of those passes an inspector's first question.

🔗 Read the full article: https://aesirx.io/blog/aesirx/forseti-the-auditable-ai-legal-advisor

Forseti: The Auditable AI Legal Advisor Forseti inside AesirX ComplianceOne delivers auditable AI for compliance, with grounded answers, human approval flows, and audit lineage.

Sector overlays arrive in Vietnamese GRC

🇻🇳 Vietnam's State Bank has issued Thông tư số 83/2025/TT-NHNN, the new internal control circular for commercial banks and foreign bank branches. It is not a personal data law. It is not a copy of ISO 27001. And it has zero monetary fines: enforcement runs through a supervisory risk model with severity tiers.

➡ AesirX ComplianceOne now ships the first sector overlay in the platform: a Circular 83 pack with the four annual SBV reporting templates, the supporting internal control records, the supervisory risk model, and a phased deadline engine.

What the article covers:
- Why a sector overlay is structurally different from PDPL or ISO 27001.
- How direct mode and reference mode let multi sector groups install a banking overlay without breaking non banking tenants.
- How the phased deadline engine wires the 2028 obligations and the ten day early implementation notice window into the workflow.
- The four annual SBV reports walked end to end.
- Why monetary fines are not the operating currency under Circular 83.

🔗 Read the full article: https://aesirx.io/blog/aesirx/when-a-banking-circular-sits-on-top-of-your-privacy-stack-the-rise-of-sector-overlays-in-vietnamese-grc

The Rise of Sector Overlays in Vietnamese GRC Vietnam’s Circular 83 introduces sector overlays in GRC. Learn how banks handle SBV reporting, layered compliance, and sector-specific workflows.