Skip to main content
Virtru logo
Risk & ComplianceFounded 2012 · 14 yrs

Virtru

Data-centric encryption and access control for email, files, and SaaS workflows.

By Virtru · HQ Washington, D.C., US · 4.0/5 Value-Position score (estimate)

Positioning guardrails

Best for

  • Regulated organizations that must protect email, files, and SaaS data shared with external partners
  • Public-sector agencies and defense contractors pursuing CMMC, ITAR, or CJIS obligations
  • Healthcare and education teams handling PHI, FERPA, or student data in Google Workspace or Microsoft 365
  • Security teams that need granular, revocable access policies and customer-held encryption keys
  • Buyers who want encryption layered onto existing Gmail, Outlook, and file-sharing workflows

Ideal size: 50–5,000 people · Mid-market to enterprise with a compliance or InfoSec owner

Not for

  • Teams shopping for a broad SIEM, endpoint, or network security suite
  • Organizations without compliance drivers that need only basic TLS email security
  • Consumer email users with no administrative or policy requirements
  • Companies that need deep native connectors for dozens of SaaS applications

Value metrics scorecard

Time-to-Value

Under 2 weeks

~7 days to first production value

Total Cost of Ownership

$2,628/yr

Starts at $1,428 · Per-package subscription billed annually; each package includes 5 users, with additional users purchasable at a lower annual rate

Implementation Friction

2/5

Engineering + admin effort required

Value-Position score

4.0

out of 5 · model estimate

Full cost breakdown

Mandatory implementation fee

None

Seat tiers

Starter $119/mo, Business $219/mo, Compliance $499/mo (each includes 5 users); Enterprise custom pricing

Add-on costs

  • Custom branding (contact sales, optional on Starter)
  • Virtru Private Keystore for Google Workspace CSE or Virtru solutions (optional, contact sales)
  • Zendesk integration (optional, contact sales)
  • Premium support with additional SLAs (contact sales)
  • Additional platform storage beyond included allocation

Company & support

Who is behind Virtru, and how your team gets help once it is live.

Company

Founded
2012 · 14 yrs in business
Headquarters
Washington, D.C., US

How you get support

  • PhonePlan not stated
  • EmailNot listed
  • Live chatNot listed
  • Support portal / ticketsNot listed
  • Community forumNot listed
  • Help centre / docsAll plans
  • Dedicated account managerEnterprise only
  • In person / on-siteNot listed
Hours
Not recorded
Response time
Not stated

Pricing lists Support & Service Add-Ons including Online Assistance, a 99.90% guaranteed uptime SLA, Deployment Support, Phone Support, and a Designated Customer Success Team; a Support Center is linked from the contact page.

“Not listed” means the vendor’s public pages don’t mention that channel, not that it is unavailable. Ask about it during evaluation.

Market position

Where Virtru sits against its closest alternatives. Pick any two of cost, speed, friction and buyer score, and up to 9 companies to compare.

Quadrant view

Typical annual cost × Time-to-value

$2k/yr$4k/yr$6k/yr$17k/yr$49k/yr6d8d11d12d14dAnnual TCO ← betterDays to value better →Quick & CheapQuick & PriceySlow & CheapSlow & PriceyVirtruHYCUKeepitStrike GraphBackblazePassbolt

The lines cross at the median of the solutions shown, so about half sit on each side of each line. A dashed ring marks an outlier pinned to the edge; hover for its value.

Virtru is outlined. Click any dot to open its dossier.

Companies on the chart 6 / 10

  • Virtru
  • HYCU
  • Keepit
  • Strike Graph
  • Backblaze
  • Passbolt
Add or change companies

Up to 10 companies including Virtru. Listed closest first.

Stack fit signal

Compatibility with standard B2B ecosystems.

MCPNot supported

No supported MCP path today, so it cannot be driven from an AI client.

SalesforceIntegration
AWSNot supported
SnowflakeNot supported
HubSpotNot supported
Google WorkspaceNative
Microsoft 365Native
SAPNot supported
SlackNot supported

AI & MCP readiness

What Virtru ships in AI, and what it asks of your ecosystem.

We haven’t recorded AI capabilities for Virtru yet. Nothing here means unverified — not absent.

Compliance attestations

SOC 2 — not listedISO 27001 — not listedGDPR — not listedHIPAA — not listedFedRAMP — not listedISO 42001 — not listedIAPP AIGP* — not listed

* IAPP AIGP certifies individuals, not products. It means named staff hold the credential — not that the platform does.

Bottom line

Virtru is a data-centric security platform that encrypts and controls email, files, and SaaS data using the open Trusted Data Format. It plugs into Gmail, Outlook, Google Drive, SharePoint, and Teams, adding granular, revocable access policies and customer-held encryption keys. Packages start at $119/month for five users and scale to a compliance tier aimed at CMMC, ITAR, CJIS, HIPAA, and FERPA obligations. Strongest fit for regulated mid-market, enterprise, and public-sector teams.

Frequently asked questions

What does Virtru cost?

Published packages are Starter at $119/month, Business at $219/month, and Compliance (CMMC/FedRAMP/ITAR/PCI DSS) at $499/month, each including five users and billed annually. Enterprise is custom priced, and additional users are available at a lower annual rate. Optional add-ons such as private keystore, Zendesk protection, custom branding, and premium support are quoted by sales.

Which applications does Virtru integrate with?

Native products cover Gmail and Google Drive, plus Microsoft Outlook, OneDrive, SharePoint, and Teams, with Google Workspace client-side encryption support. The Enterprise package can also protect data moving through SaaS workflows such as Zendesk and Salesforce via the Data Gateway. Google Vault, SSO, and a SIEM-ready audit log API are listed on higher tiers.

Which compliance frameworks does Virtru help with?

Virtru's compliance pages cover CJIS, CMMC/NIST/DFARS, FERPA, GLBA/FINRA/PCI/SOX, the FTC Safeguards Rule, GDPR, HIPAA, ISO 27001, and ITAR. The Compliance package adds CMMC and DFARS 7012 support, a FedRAMP authorization at moderate impact, FIPS 140-3 validated encryption, and PCI DSS compliant infrastructure. Customers should confirm the exact scope with Virtru rather than assume full certification.

How long does implementation take?

Virtru describes quick, easy installation and positions the platform as integrating into existing email and file workflows rather than replacing them. Most teams start with email protection on Gmail or Outlook and expand to file sharing and SaaS gateways afterwards. Deployment support is available as a service add-on for larger or highly regulated rollouts.

Can we keep control of our encryption keys?

Yes. Virtru Private Keystore lets organizations host private encryption keys in a location of their choice, and supports Google Workspace client-side encryption. The platform also offers split-knowledge key management and self-managed, air-gapped, or VPC deployment options. Private keystore is an optional add-on sold on Business and Enterprise packages.

What support is available?

The pricing page lists online assistance across packages, along with a 99.90% guaranteed uptime SLA, deployment support, phone support, and a designated customer success team on higher tiers. Premium support with additional SLAs is an optional, separately priced service. A self-serve Support Center is linked from Virtru's contact page.