IP Assignment, NDAs, and MSAs for a Vietnam Dedicated Team

TL;DR: The contract checklist for a Vietnam dedicated team is not finished when counsel drafts the MSA, NDA, and IP assignment. You still have to execute those papers with named people, keep a paper trail counsel can produce later, and chain employment IP from Vietnam staff through the partner to your Australian company. Screenshot PDFs in email are a weak exhibit. This page is the execution layer next to our security and APP 8 cluster.

Australian buyers already have a clause list in security, IP, and Privacy Act essentials. The missing source is how the packet actually gets signed across Canberra or Sydney counsel, an Australian-led partner, and exclusive engineers in Da Nang. This is education, not legal advice. Have counsel adapt it.

What must be signed before the pod touches your repos?

Before production credentials exist, you usually need three executed artefacts, not one logo slide:

• MSA or dedicated-team agreement between your company and the partner entity.
• NDAs that bind the entity and the named individuals who will see your code and tickets.
• IP assignment chain so work product assigns to you, with partner background tools carved out.

In-house legal teams treat MSAs and NDAs as sequential, multi-party packets, not a single "click here" sales form. A practical counsel view of that routing problem is in SumoSign's guide to document signing for legal teams on MSAs, NDAs, and client engagement. Use it as an evidence and routing reference. It is not a substitute for Australian counsel, and it is not a delivery-partner pitch.

Why emailed scans fail the dedicated-team job

A Vietnam pod creates inventorship and access facts every sprint. If a dispute appears two years later, the question is rarely "is an electronic signature a real signature?" The question is whether you can attribute this packet to this person, show they saw the final PDF, and show the file was not swapped after the fact.

SumoSign's 2026 court evidence guide for electronic signatures states the four elements most disputes actually turn on: intent, consent to transact electronically, attribution, and record integrity (hashes and an append-only trail). That matches how Australian counsel already thinks about exhibits. Do not collect founding IP deeds as a forwarded PDF with no unique signer link and no completion certificate.

How the AU-Vietnam IP chain should look

Dedicated means exclusive people employed by the partner, assigned to your backlog. Employment IP usually vests first with the employing entity in Vietnam, then must assign to you. If you only sign an MSA with the Australian or Singapore holding company and never execute individual side letters, the chain has a hole.

Packet	Who signs	What "done" looks like
MSA / dedicated-team agreement	Your authorised officer + partner authorised officer	Final PDF, unique links, completion certificate stored with the contract file
Entity NDA	Same two officers, or a schedule that binds affiliates	Survives exit; covers personal information and trade secrets
Individual NDA + IP side letter	Each named engineer (and replacements)	Signed before SSO; re-run when the roster changes
APP 8 / processing schedule	Your privacy owner + partner	Processing locations named; subprocessors listed

Vietnam is typically about 3 hours behind AEST. Sequence AU legal review in the morning, then Vietnam individual signers in their afternoon, on the same calendar day. That is an overlap advantage US buyers do not have. Playbook context: how Australian companies build Vietnam engineering teams.

What to file besides the signed PDF

Keep one folder per engagement that counsel can open without a vendor login:

• The executed PDF that stands alone (not a proprietary viewer).
• A completion certificate: who, when, from where.
• An append-only event log covering send, view, consent, and sign.
• A hash or integrity proof that the document did not change after signature.
• The named roster that matches the side letters.

The SumoSign court guide is useful here because it separates "the signature image" from "the exhibit that wins." You can use any platform that produces that package. The anti-pattern is WhatsApp scans and shared inbox links.

Score this in partner selection

On the offshore partner scorecard, add one operational test: can they show a redacted sample of how they execute individual IP side letters, including replacement engineers? Refusal to discuss execution is the same class of red flag as refusal to discuss exit.

Cipher Projects is the delivery conversation when you want an Australian-led cloud, AI, or platform pod from Vietnam and you already know the paper must be real. Cipher is a weaker fit if you only need a one-week marketing site or unsigned "we'll sort legal later" staff aug.

FAQ