Virtru review

Virtru is a data security platform for controlling access to sensitive information shared by email, file, SaaS, and partner workflows. It applies encryption and access policies to shared data, including data sent to people outside an organization.

The product is broader than an email-encryption add-on. Its feature set includes encrypted email and attachments, secure file sending and receiving, and workflow protection for SaaS apps and mission partners. Attribute-based policies can determine who gets access and when; users can also set expiration dates and revoke access.

Virtru lists AES-256 encryption for data in transit and at rest, plus data loss prevention policies. Organizations can choose self-managed, air-gapped, VPC, or managed commercial-cloud deployment options. Which deployment and controls are included depends on the package: for example, the pricing page lists FedRAMP authorization and FIPS-validated encryption in its Compliance plan, not as universal features across every tier.

Virtru’s main advantage is that it covers more than one sharing channel. Organizations can protect email, attachments, files, SaaS workflows, and partner exchanges while applying access policies to shared data. That can be useful when a team needs controls after sending, such as expiration dates or the ability to revoke access.

The pricing page lists Microsoft 365 and Google Workspace support in Starter, and encrypted file sending and receiving plus Google Vault integration in Business. Business also includes audit data for SIEM/SOAR tools. That gives buyers a clearer path from basic email protection to file workflows and audit integrations, though the page does not publish a detailed feature-by-feature comparison beyond those inclusions.

For regulated buyers, the Compliance plan lists 450 GB of pooled storage, 75 GB per seat beyond the first five, FedRAMP ATO (moderate), and FIPS 140-3 validated encryption. Deployment choices also extend beyond a standard hosted service: Virtru describes self-managed, fully air-gapped, VPC, and managed commercial-cloud options. The mix of access controls and deployment models may suit organizations with varied data flows, but buyers should confirm which options are available in their chosen package.

The entry price is high for a small team: according to the pricing page, Starter is $119 per month and includes five users, billed annually. Business is $219 per month for five users; Compliance is $499 per month for five. Monthly billing rates are not published, and the cost of additional users and storage is also not published. Custom pricing applies to Enterprise, listed for organizations with over 50 employees.

The storage allowance is specific to Compliance: 450 GB pooled, then 75 GB per seat beyond the first five. The pricing page does not list a storage cap for the other plans. Several features carry unclear extra costs: Data Gateway is optional, while pricing for it, private keystore, custom branding, Zendesk, and premium support is not published. A free plan is not offered, and trial availability is not published.

There is also a switching risk for existing customers. In one Reddit thread, a user said Virtru was ending their legacy plan and moving five users from just under $200 per year to $118 per month. That is one customer’s account, not a general pricing policy, but it shows why legacy-plan terms deserve confirmation. A separate Reddit commenter questioned how recipient authentication worked in their email example; teams should verify recipient access options against their security requirements.

Virtru has no free plan. The listed rates are per month with annual billing: Starter is $119 for five users, Business is $219 for five, and Compliance is $499 for five. Monthly billing rates are not published.

The jump from Starter to Business is $100 per month; Business to Compliance adds another $280. Starter covers encrypted email and attachments, while Business adds encrypted file workflows, Google Vault integration, and audit data for SIEM/SOAR tools. Compliance includes 450 GB of pooled storage and lists FedRAMP ATO (moderate) and FIPS 140-3 validated encryption. Enterprise pricing is custom for organizations with over 50 employees.

Budget for extras, too. Additional users and storage cost extra, but prices are not published. Custom branding, private keystore, Zendesk, premium support, and Data Gateway may also add cost; contact sales for some of those prices. If you need monthly billing or a fully itemized quote before talking to sales, Virtru does not publish enough to confirm the total.

Virtru is designed to protect data shared through email, files, SaaS apps, and partner environments, with support listed for Microsoft 365 and Google Workspace. Before switching, map which workflows need encryption and access policies, then confirm with Virtru how those policies apply to your existing accounts and integrations. The published material does not explain migration steps, supported import tools, or how to export protected data and policy records.

That matters if you later leave: data export and decryption procedures are not published on the vendor's site. Ask about export formats, who can decrypt content after cancellation, and whether private encryption keys or Data Gateway affect an exit plan. We also don’t have Reddit posts in the published material, so we can’t attribute a common reason for leaving to users. The clearest buying risks here are the annual billing commitment, steep tier jumps, and add-on prices that are not listed.