Legal basis and provision mapping

The full text of every provision SaydiVoice relies on (AI Law 134/2025/QH15, Network Information Security Law 86/2015/QH13, Decree 13/2023/ND-CP) with a table mapping each clause of our legal documents to the provision it implements.

1,000+ AI voices32 languagesMP3 & WAV download50,000 free chars/month

Try it now — free

Mapping of SaydiVoice clauses to statutory provisions

Each clause of our legal documents is mapped to the statutory provision it implements. Follow a provision link to read it in full below.

SaydiVoice clause	Statutory basis
Terms of Service 2. Definitions and data categories	AI Law 134/2025/QH15 — Article 3, clause 4 AI Law 134/2025/QH15 — Article 3, clause 5
Terms of Service 5. Saydi AI's rights and responsibilities	AI Law 134/2025/QH15 — Article 9, clause 1(b) AI Law 134/2025/QH15 — Article 10, clause 3 AI Law 134/2025/QH15 — Article 11, clause 2 AI Law 134/2025/QH15 — Article 35, clause 1(b)
Terms of Service 6. Limitation of liability	AI Law 134/2025/QH15 — Article 29, clause 2 AI Law 134/2025/QH15 — Article 29, clause 3
Terms of Service 7. Your obligations — 7.1. Prohibited content and conduct	AI Law 134/2025/QH15 — Article 7, clause 2(b) AI Law 134/2025/QH15 — Article 7, clause 2(c) AI Law 134/2025/QH15 — Article 7, clause 2(d) AI Law 134/2025/QH15 — Article 7, clause 5 Network Information Security Law 86/2015/QH13 — Article 7, clause 5
Terms of Service 7. Your obligations — 7.2. Other people's personal data	Network Information Security Law 86/2015/QH13 — Article 17, clause 1(a)
Terms of Service 7. Your obligations — 7.3. Indemnity	AI Law 134/2025/QH15 — Article 29, clause 1
Terms of Service 8. Voice cloning, impersonation and AI-generated content	AI Law 134/2025/QH15 — Article 11, clause 3 AI Law 134/2025/QH15 — Article 11, clause 4
Terms of Service 9. Personal data protection	Network Information Security Law 86/2015/QH13 — Article 16, clause 3 Network Information Security Law 86/2015/QH13 — Article 17, clause 1(a) Network Information Security Law 86/2015/QH13 — Article 18, clause 1 Decree 13/2023/ND-CP
Privacy Policy 2. Your role and Saydi AI's role	AI Law 134/2025/QH15 — Article 3, clause 4 AI Law 134/2025/QH15 — Article 3, clause 5
Privacy Policy 3. What data we collect	Network Information Security Law 86/2015/QH13 — Article 17, clause 1(a)
Privacy Policy 5. Audio data and AI training	AI Law 134/2025/QH15 — Article 7, clause 3
Privacy Policy 7. Sharing data with third parties — 7.5. Legal requests and protection of rights	Network Information Security Law 86/2015/QH13 — Article 17, clause 1(c)
Privacy Policy 8. How long we keep data	Network Information Security Law 86/2015/QH13 — Article 18, clause 3
Privacy Policy 9. How we secure data	Network Information Security Law 86/2015/QH13 — Article 19, clause 1
Privacy Policy 10. Your rights as a data subject	Network Information Security Law 86/2015/QH13 — Article 17, clause 3 Network Information Security Law 86/2015/QH13 — Article 18, clause 1 Decree 13/2023/ND-CP
Privacy Policy 11. How to exercise your rights	Network Information Security Law 86/2015/QH13 — Article 18, clause 2
Privacy Policy 15. Responding to data incidents	Network Information Security Law 86/2015/QH13 — Article 19, clause 2 AI Law 134/2025/QH15 — Article 12, clause 2
Voice consent policy 1. Mandatory commitment before uploading or cloning	Network Information Security Law 86/2015/QH13 — Article 17, clause 1(a)
Voice consent policy 2. When is consent required? — 2.2. Someone else's voice	Network Information Security Law 86/2015/QH13 — Article 17, clause 1(a) Decree 13/2023/ND-CP
Voice consent policy 3. What a consent record must contain	Network Information Security Law 86/2015/QH13 — Article 17, clause 1(a) Network Information Security Law 86/2015/QH13 — Article 17, clause 1(b)
Voice consent policy 4. Sensitive and restricted cases	AI Law 134/2025/QH15 — Article 7, clause 2(c)
Voice consent policy 6. Duties when you publish AI-generated content	AI Law 134/2025/QH15 — Article 11, clause 3 AI Law 134/2025/QH15 — Article 11, clause 4
Voice consent policy 7. Prohibited uses of a cloned voice	AI Law 134/2025/QH15 — Article 7, clause 2(b) AI Law 134/2025/QH15 — Article 7, clause 2(d)
Voice consent policy 8. Removal and complaints about unauthorised use	Network Information Security Law 86/2015/QH13 — Article 18, clause 1 Network Information Security Law 86/2015/QH13 — Article 18, clause 2
Voice consent policy 9. Your responsibility and Saydi AI's rights	AI Law 134/2025/QH15 — Article 29, clause 1 AI Law 134/2025/QH15 — Article 29, clause 2
Data Processing Appendix 1. Each party's role over the data	AI Law 134/2025/QH15 — Article 3, clause 4 AI Law 134/2025/QH15 — Article 3, clause 5 Decree 13/2023/ND-CP
Data Processing Appendix 2. Categories of data processed	Network Information Security Law 86/2015/QH13 — Article 17, clause 1(a)
Data Processing Appendix 3. Purposes of processing	Network Information Security Law 86/2015/QH13 — Article 17, clause 1(b)
Data Processing Appendix 5. Security measures	Network Information Security Law 86/2015/QH13 — Article 19, clause 1
Data Processing Appendix 6. Retention and deletion	Network Information Security Law 86/2015/QH13 — Article 18, clause 2 Network Information Security Law 86/2015/QH13 — Article 18, clause 3
Data Processing Appendix 7. Cross-border transfers	Decree 13/2023/ND-CP

Full text of the cited provisions

Quoted from the signed original published on the Government legal portal. The Vietnamese original is the legally effective text; the English rendering below is an unofficial translation.

Law on Artificial Intelligence No. 134/2025/QH15

passed by the National Assembly on 10 December 2025, in force from 1 March 2026 · Government legal portal · Signed original (PDF)

Article 3. Interpretation of termsArticle 3, clause 4

Provider means an organisation or individual that places an artificial-intelligence system on the market or puts it into use under its own name, trade name or brand, regardless of whether that system was developed by them or by a third party.

Article 3. Interpretation of termsArticle 3, clause 5

Deployer means an organisation or individual that uses an artificial-intelligence system within its own scope of control in professional, commercial or service-providing activity; it does not include use for personal, non-commercial purposes.

Article 7. Prohibited actsArticle 7, clause 2(b)

Using impersonation or simulation of real people or events to deceive or manipulate human perception or behaviour deliberately and systematically, causing serious harm to a person's lawful rights and interests.

Article 7. Prohibited actsArticle 7, clause 2(c)

Exploiting the weaknesses of vulnerable groups, including children, older people, persons with disabilities, ethnic minorities, persons who have lost or have limited civil act capacity, and persons with difficulties in perceiving or controlling their behaviour, in order to cause harm to them or to others.

Article 7. Prohibited actsArticle 7, clause 2(d)

Creating or disseminating fabricated content capable of causing serious harm to national security or to public order and safety.

Article 7. Prohibited actsArticle 7, clause 3

Collecting, processing or using data to develop, train, test or operate an artificial-intelligence system contrary to the law on data, personal data protection, intellectual property and cyber security.

Article 7. Prohibited actsArticle 7, clause 5

Concealing information that must be disclosed, made transparent or explained; erasing or falsifying mandatory information, labels or warnings in artificial-intelligence activity.

Article 9. Risk classification of artificial-intelligence systemsArticle 9, clause 1(b)

A medium-risk artificial-intelligence system is one capable of confusing, influencing or manipulating users because the interacting party cannot be identified as an artificial-intelligence system, or the content cannot be identified as generated by the system.

Article 10. Classification and notification of artificial-intelligence systemsArticle 10, clause 3

For a system classified as medium or high risk, the provider must notify the classification result to the Ministry of Science and Technology through the one-stop artificial-intelligence portal before putting it into use.

Article 11. Transparency dutiesArticle 11, clause 2

The provider must ensure that audio, image and video content generated by the artificial-intelligence system is marked in a machine-readable format as prescribed by the Government.

Article 11. Transparency dutiesArticle 11, clause 3

The deployer must give clear notice when supplying to the public text, audio, images or video created or edited by an artificial-intelligence system if that content could mislead as to the authenticity of an event or a person, unless the law provides otherwise.

Article 11. Transparency dutiesArticle 11, clause 4

The deployer must ensure that audio, images or video created or edited by an artificial-intelligence system to simulate or replicate the appearance or voice of a real person, or to recreate real events, are labelled in an easily recognisable way to distinguish them from real content.

Article 12. Management of and response to artificial-intelligence incidentsArticle 12, clause 2

When a serious incident occurs in an artificial-intelligence system, the developer, provider, deployer and user have the following duties: (a) the developer and provider must promptly apply technical measures to remedy the situation, suspend or recall the system, and notify the competent authority; (b) the deployer and user must record and promptly report the incident and cooperate in the remediation.

Article 29. Handling of violations and liability to compensateArticle 29, clause 1

An organisation or individual that violates this Law or other law relating to artificial intelligence is subject, depending on the nature, seriousness and consequences of the violation, to an administrative penalty or criminal prosecution, and must compensate for damage under civil law.

Article 29. Handling of violations and liability to compensateArticle 29, clause 2

Where a high-risk artificial-intelligence system is managed, operated and used in accordance with the rules but damage still arises, the deployer is liable to compensate the injured party. After compensating, the deployer may require the provider, developer or other relevant parties to reimburse the compensation if the parties have so agreed.

Article 29. Handling of violations and liability to compensateArticle 29, clause 3

Liability to compensate under clause 2 of this Article is exempted in the following cases: (a) the damage occurred entirely through the intentional fault of the injured party; (b) the damage occurred in a force majeure event or a situation of necessity, unless the law provides otherwise.

Article 35. Transitional provisionsArticle 35, clause 1(b)

For artificial-intelligence systems already in operation before this Law takes effect, the provider and the deployer must comply with the obligations of this Law within the following periods: … (b) 12 months from the date this Law takes effect for artificial-intelligence systems other than those specified in point (a) of this clause.

Law on Network Information Security No. 86/2015/QH13

passed by the National Assembly on 19 November 2015, in force from 1 July 2016 · Government legal portal · Signed original (PDF)

Article 7. Prohibited actsArticle 7, clause 5

Unlawfully collecting, using, disseminating or trading another person's personal information; exploiting loopholes or weaknesses of an information system to collect or extract personal information.

Article 16. Principles of personal information protection onlineArticle 16, clause 3

An organisation or individual processing personal information must establish and publicly disclose its measures for processing and protecting personal information.

Article 17. Collection and use of personal informationArticle 17, clause 1(a)

Collect personal information only after obtaining the consent of the data subject as to the scope and purpose of collecting and using that information.

Article 17. Collection and use of personal informationArticle 17, clause 1(b)

Use personal information already collected for a purpose other than the original purpose only after obtaining the consent of the data subject.

Article 17. Collection and use of personal informationArticle 17, clause 1(c)

Do not provide, share or disseminate personal information that one has collected, accessed or controlled to a third party, except with the consent of the data subject or at the request of a competent state authority.

Article 17. Collection and use of personal informationArticle 17, clause 3

The data subject has the right to require the organisation or individual processing personal information to provide the personal information about them that it has collected and stored.

Article 18. Updating, amending and deleting personal informationArticle 18, clause 1

The data subject has the right to require the organisation or individual processing personal information to update, amend or delete the personal information about them that it has collected and stored, or to stop providing their personal information to third parties.

Article 18. Updating, amending and deleting personal informationArticle 18, clause 2

Immediately upon receiving a data subject's request to update, amend or delete personal information, or a request to stop providing personal information to third parties, the organisation or individual processing personal information must: (a) carry out the request and notify the data subject, or give the data subject access to update, amend or delete their own personal information; (b) apply appropriate measures to protect the personal information and notify the data subject where the request cannot be carried out for technical or other reasons.

Article 18. Updating, amending and deleting personal informationArticle 18, clause 3

An organisation or individual processing personal information must delete stored personal information once the purpose of use has been fulfilled or the retention period has expired, and must notify the data subject, unless the law provides otherwise.

Article 19. Ensuring the safety of personal information onlineArticle 19, clause 1

An organisation or individual processing personal information must apply appropriate managerial and technical measures to protect the personal information it collects and stores, and must comply with technical standards and regulations on network information security.

Article 19. Ensuring the safety of personal information onlineArticle 19, clause 2

When a network information security incident occurs or is likely to occur, the organisation or individual processing personal information must apply remedial and preventive measures as soon as possible.

Notes on scope

Decree 13/2023/ND-CP is cited by number only; SaydiVoice has not published a link to it because the address on the Government legal portal has not been verified.

This mapping is published for transparency and reference. It does not replace the statutory text and is not legal advice.

Legal centre · Contact