Quick answer. To vet a Vietnamese software company in 2026, verify it in seven steps: (1) confirm its legal registration and tax code on Vietnam’s National Business Registration Portal, (2) check a real delivery track record through references you can call, (3) test engineering depth with a paid trial task or code review, (4) verify security certifications (ISO 27001, SOC 2) at the source, (5) assess written English and responsiveness, (6) pin down IP ownership and contracts, and (7) gauge team stability and attrition. Portfolios and certifications look alike across vendors — evidence you can independently confirm is what separates a real partner from a good pitch.
Why vetting a Vietnamese software company is hard
The honest problem buyers describe is not a shortage of options — it’s that the options look identical. Most vendors showcase similar certifications, similar logos and similar case studies, so the marketing site tells you almost nothing about who will actually deliver. With dozens of providers to compare, the deciding question becomes: which claims can you independently verify? That is the entire premise of this checklist — and of Vietnam Tech Partners, which verifies teams before listing them rather than relying on anonymous reviews.
The 7-step verification checklist
Step 1 — Verify legal existence and tax status
Start with the public record, not the pitch deck. On Vietnam’s National Business Registration Portal (dangkykinhdoanh.gov.vn) you can search free by company name or enterprise code and see the legal type, incorporation date, registered head-office address, legal representative, business lines and current operational status. Then confirm the tax code is active on the General Department of Taxation portal. Cross-check that the enterprise code and tax code match. Red flags: the company doesn’t appear at all, a mismatched tax code, a suspended or dissolved status, frequent changes of legal representative, or a residential/virtual address used for commercial operations.
Step 2 — Confirm a real delivery track record
Portfolios are curated; references are not. Ask for two or three clients you can actually contact, ideally in a similar industry or stack, and ask them specific questions: how big was the team, how long was the engagement, what went wrong, and how did the vendor handle it? A team that delivers will give you references readily; reluctance is itself a signal.
Step 3 — Test engineering depth
Don’t infer skill from a logo wall. Run a small paid trial task that mirrors your real work, or have a senior engineer review a code sample and conduct a technical interview. Confirm the stack they claim matches what you need in practice — not just the buzzwords listed on the site. A paid pilot is the cheapest insurance you can buy before a long engagement.
Step 4 — Verify security and compliance at the source
If a vendor claims ISO 27001, SOC 2 or similar, ask for the certificate and verify it with the issuing body — certifications are easy to assert and harder to prove. Equally important: ask where your source code and customer data will be stored and processed, and whether they run on audited infrastructure. For regulated work (fintech, health), confirm the specific controls, not just a logo.
Step 5 — Assess communication and English
Most delivery failures are communication failures. During evaluation, judge written English, responsiveness and how clearly they ask clarifying questions — that behaviour predicts the working relationship. Vietnamese engineers who work with international clients typically handle technical documentation, code review and chat well; confirm it for your specific team rather than assuming.
Step 6 — Pin down IP ownership and contracts
Vietnam recognises software copyright automatically under the Berne Convention and WTO/TRIPS, reinforced by a December 2025 round of IP-law amendments. Protect yourself contractually anyway: a clear NDA, explicit IP-assignment and work-made-for-hire clauses, and a written agreement on where code and data live. For high-value IP, register it with Vietnam’s National Office of Intellectual Property.
Step 7 — Gauge team stability
Attrition is the quiet risk. With average IT tenure of about 1.5–2.5 years and annual wage inflation of 15–20%, a team without retention mechanisms can lose the engineers who hold your project’s context. Ask about tenure on the proposed team, how they handle handovers, and whether they offer retention incentives — one firm cut turnover from 25% to 8% with a 12-month retention bonus. Prefer a partner who manages the full lifecycle so one departure doesn’t stall delivery.
Red flags at a glance
| Red flag | Why it matters |
|---|---|
| No record on the National Business Registration Portal | May not be a legally registered entity |
| Quote far below market (e.g. “$8/hour, delivered in weeks”) | Usually means missing requirements and expensive rework later |
| Won’t provide contactable references | Track record can’t be verified |
| Certifications claimed but not verifiable | Security/compliance posture is unproven |
| Vague on where code/data is stored | IP and data-security risk |
| Frequent legal-representative changes / virtual address | Possible instability or shell-entity risk |
“One verification step catches more problem vendors than any other: validating whether the delivery team presented during sales is the same team that will execute the project.”
Or skip the legwork
This checklist is exactly what Vietnam Tech Partners runs before any team appears in our directory: we confirm legal substance, check delivery evidence, and score teams on real capability signals rather than star ratings. Tell us what you’re building and we’ll send a shortlist of verified teams within one business day — free. See also our complete buyer’s guide and 2026 rate guide.
Get matched with verified teams →
Frequently asked questions
How do I check if a Vietnamese company is legally registered?
Search the National Business Registration Portal (dangkykinhdoanh.gov.vn) free by company name or enterprise code to see legal type, address, legal representative and status, then confirm the tax code is active on the General Department of Taxation portal. Make sure the enterprise code and tax code match.
What’s the best way to test a vendor’s technical skill?
Run a small paid trial task that mirrors your real work, or have a senior engineer review a code sample and run a technical interview. A paid pilot is the cheapest way to confirm depth before a long engagement.
How do I protect my IP when working with a Vietnamese team?
Software copyright is automatic under the Berne Convention and TRIPS, strengthened by Vietnam’s December 2025 IP-law amendments. Use a strong NDA plus IP-assignment and work-made-for-hire clauses, agree where code and data are stored, and register high-value IP with the National Office of Intellectual Property.
What are the biggest red flags?
No record on the business registration portal, quotes far below market, refusal to share contactable references, unverifiable certifications, vagueness about where code and data live, and frequent legal-representative changes or a virtual address.
Should I worry about team turnover?
Yes — average IT tenure is about 1.5–2.5 years and wages rise 15–20% a year. Ask about team tenure, handover practices and retention incentives, and prefer a partner that manages the full lifecycle.
How we built this. Verification steps reflect Vietnam’s official registries (Ministry of Planning and Investment; General Department of Taxation) and 2026 market sources (Second Talent). VTPN’s verification process is described as practised in our directory. We never present Vietnam as “cheaper than India” or quote fabricated numbers.