What is CamDX?

CamDX is built on X-Road, an open-source data exchange layer originally developed by Estonia and now maintained by the Nordic Institute for Interoperability Solutions (NIIS). The architecture uses a decentralized model where each participating organization operates its own security server that connects to the CamDX central trust infrastructure. Every data transaction on CamDX is digitally signed, encrypted in transit, and logged with a tamper-proof audit trail. This means no data is stored centrally, and each organization retains sovereignty over its own data. When Agency A requests data from Agency B, the request flows through their respective security servers with full cryptographic verification.

CamDX enables two categories of data exchange: government-to-government (G2G) and government-to-business (G2B). On the G2G side, ministries and agencies share citizen records, business registrations, tax data, and licensing information without manual document transfers. For the private sector, CamDX provides standardized APIs that allow authorized businesses to verify customer identities, check business registration status, validate tax compliance, and access other government datasets. Financial institutions particularly benefit from real-time access to CamDigiKey identity verification and GDT tax compliance data through CamDX connections.

CamDX enforces strict security protocols inherited from the X-Road framework. All data exchanges use TLS encryption, and every transaction is signed with the sending organization's digital certificate. The platform maintains immutable audit logs that satisfy both domestic regulatory requirements and international data protection standards. Access control operates on a consent and authorization model. Private sector participants must register with CamDX, demonstrate a legitimate business need, and receive explicit authorization for each data service they access. This ensures data minimization principles are upheld while still enabling the data fluidity that Cambodia's digital economy requires.

CamFinTech navigates the approval for enterprises to onboard with CamDX, and runs the compliance programme that keeps them approved. Our services cover the regulatory side of the onboarding process: data service scoping, compliance documentation preparation for MEF approval, and ongoing governance to satisfy CamDX data-minimization and consent rules. The technical build itself — security server provisioning, API integration development, data architecture for real-time identity verification, credit assessment, and regulatory reporting — is coordinated with accredited Service Providers. CamFinTech is fee-only, never operates the rail, and never holds client funds. Our position across the GaaP ecosystem (CamDigiKey, Bakong, CamDX, CamInvoice) lets clients sequence integrations efficiently.