Software Development Service Terms
ARTICLE 1 – SCOPE OF SERVICE
Software design services cover solution consulting, business requirements analysis, system architecture design, programming, testing, deployment and software maintenance according to the Client's specific requirements.
1.1 Types of software developed
| Software type | Description | Platform |
| Enterprise management software | ERP, CRM, HRM, accounting, inventory management | Web, Desktop, Mobile |
| E-commerce systems | B2B/B2C platform, marketplace, online ordering | Web, iOS, Android |
| Mobile applications | Native (iOS/Android), cross-platform (Flutter/React Native) | iOS, Android |
| Embedded software / IoT | Firmware, control systems, IoT dashboards | Embedded, Web |
| API & system integration | REST/GraphQL API, third-party integrations, ETL pipeline | Cloud/On-premise |
| AI / Machine Learning | Classification, recognition, forecasting and chatbot models | Cloud AI, On-premise |
ARTICLE 2 – DEVELOPMENT METHODOLOGY
2.1 Agile Scrum
The Agile Scrum method applies by default, with 2-week sprints. The Client takes part in a Sprint Review every 2 weeks to review progress and adjust the backlog.
2.2 Waterfall (on request)
Waterfall applies to projects whose requirements are fixed from the outset. The Client approves each phase before the next one begins.
2.3 Technical requirements (SRS)
The Company provides a Software Requirements Specification (SRS) document, signed off by the Client before development begins. Changes made after the SRS follow the change request process.
ARTICLE 3 – TESTING AND ACCEPTANCE (UAT)
- Unit Testing: the Company runs unit tests with at least 70% coverage of business logic.
- Integration Testing: integration testing against the Lessee's systems in a staging environment.
- User Acceptance Testing (UAT): the Client has 10 working days for UAT after the Company hands over to staging. The Client records defects in the designated issue tracking system.
- Bug classification: Critical/High (blocking core business functions) must be fixed before go-live. Medium/Low are fixed during the warranty sprint.
- Acceptance: after all Critical/High defects have been resolved and the Client has signed the Acceptance Record.
ARTICLE 4 – INTELLECTUAL PROPERTY AND SOURCE CODE
4.1 Transfer of rights on full payment
Under Article 39 of the Intellectual Property Law 2005 (Luật SHTT 2005): once the Client has paid 100% of the contract value, the economic copyright in the custom source code passes to the Client.
4.2 Pre-existing IP and open-source libraries
- The Company retains ownership of pre-existing IP (internal frameworks, reusable modules).
- Software using open-source libraries: the Company provides a list of the libraries and their licenses (MIT, Apache 2.0, GPL, LGPL, etc.) in the handover documentation. The Client is responsible for complying with those open-source licenses.
- Software integrating third-party APIs (Google, Stripe, etc.): the Client is solely responsible for the API provider's ToS.
4.3 Source code security
Source code is kept in a private Git repository. After handover, the Client is granted Owner rights on the repository. The Company deletes its internal copy 90 days after handover is completed.
ARTICLE 5 – POST-HANDOVER MAINTENANCE AND SUPPORT
5.1 Free warranty package
| Project package | Warranty period | Scope |
| Projects < 100 million VND | 3 months | Fixing bugs originating from the source code |
| Projects of 100–500 million VND | 6 months | Bug fixes + 8×5 technical support |
| Projects > 500 million VND | 12 months | Bug fixes + 24×7 support + minor security updates |
5.2 Paid maintenance services (post-warranty)
- Basic plan: 5 hours/month – technical support and bug fixes.
- Standard plan: 10 hours per month – maintenance plus minor feature updates.
- Premium plan: 20+ hours per month – new feature development and performance tuning.
ARTICLE 6 – INFORMATION SECURITY
The Company develops software in accordance with the OWASP Top 10 standard, applying measures such as: encryption of sensitive data (AES-256), secure transport (TLS 1.2+), access control (RBAC), and audit logging. The Client is provided with a basic Penetration Testing report if subscribed to the Enterprise plan.
ARTICLE 7 - LIMITATION OF LIABILITY
- The Company is not liable for damage caused by the Client modifying the source code contrary to instructions after handover.
- Total compensation shall not exceed the value of the signed contract.
- The Company does not warrant that the software will operate flawlessly in every environment the Lessee configures itself.
ARTICLE 8 - DISPUTE RESOLUTION
Negotiation is attempted first, within 30 days. If it does not succeed, the dispute is resolved by VIAC arbitration or before a court in Ho Chi Minh City under Vietnamese law.
ARTICLE 9 - EFFECT
These terms take effect on the contract signing date. The Company reserves the right to amend them with 30 days' prior notice.
