At Brown University, the awkward part of protecting a secret was getting it to the person who needed it. Faculty and staff used mail, faxes, couriers, and password-protected file servers. There was also experience with an encryption portal. The portal was cumbersome. The university could satisfy compliance requirements while making ordinary communication feel like a small expedition.
- Virtru protects emails and files, then lets senders change access after sharing.
- Its foundation is the Trusted Data Format, developed by co-founder Will Ackerly at the NSA.
- Published plans start at $119 a month for five users, billed annually.
“We were compliant, but we lacked standardization, audit, and control,” Brown’s IT leader Mark Dieterich recalled in the university’s customer account. That distinction is the doorway into Virtru. A system can be technically respectable and socially exhausting. When sending information becomes an obstacle course, the obstacle deserves as much attention as the encryption.
A secret needs to leave the room
Virtru’s founders had encountered the problem in a different setting. John Ackerly worked on technology policy in the White House and at the Commerce Department. His brother Will spent eight years at the National Security Agency, specializing in cloud analytics and security architecture. One brother understood the institutional argument; the other understood the machinery.
In their account of the years after 9/11, government information was trapped in silos even as surveillance powers expanded. Secure sharing was difficult; broad collection was increasingly possible. Those two problems could coexist. An organization might know too much about people and still struggle to get the right information to the right colleague.
Will helped develop the Trusted Data Format, or TDF, while at the NSA. The format binds access policy to encrypted content. Imagine a document travelling with an instruction card that cannot simply be peeled off: these identities may open it, under these conditions. Virtru’s current history dates the company’s founding to 2012; its first commercial email product arrived in July 2014.
Put the lock on the thing that travels
Networks have boundaries. Documents have destinations. A medical record may leave a hospital for a specialist; a research file may leave a university for a partner. Protecting only the place where information begins leaves an obvious question about the place where it ends up.
Virtru operates at that smaller unit: the email, attachment, or data object. Its Gmail and Outlook products put encryption and controls inside familiar work. Senders can set expiration dates, restrict forwarding, and revoke access. Audit information helps administrators see access activity. Revocation changes whether protected content can be opened again; it does not unsend a recipient’s memory.
Bind its policy.
crosses the boundary.
before granting access.
This places Virtru in the enterprise data-security market, beside email encryption, file collaboration, and rights-management tools. Buyers may also consider Microsoft Purview, Proofpoint, Mimecast, Egress, or PreVeil, depending on the job. Virtru’s distinguishing argument is persistent policy attached to content, combined with integrations that reduce the need to teach everyone a separate routine.
Brown’s purchase was a vote for less fuss
Brown selected Virtru for security and compliance requirements, usability, and audit and control. Its health services department used the software to share protected health information internally and with hospitals and community clinicians. The case study also describes use by medical-school staff, faculty, and senior personnel. The recipient experience mattered because recipients were not all university employees.
A security purchase has two users: the person sending the secret, and the person trying to open it.The practical lesson from Brown’s account
The lesson is worth copying. Before buying a security tool, watch somebody outside your organization receive a protected file. Count the unfamiliar steps. Decide which access events you need to record and who should be able to withdraw permission. Brown’s experience suggests that the purchase decision gets clearer when the workflow is treated as evidence.
The customer mix explains the breadth of that problem. Virtru’s website reports more than 6,100 customers and features organizations including the Associated Press and the U.S. Department of Defense. Healthcare, finance, education, and government all have reasons to share sensitive information. Keeping every file inside one institution would defeat much of the work those institutions exist to do.
The price of a second decision
Virtru earns money through subscriptions. Its published packages list Starter at $119 monthly, Business at $219, and Compliance at $499, each including five users and billed annually. Starter therefore begins at $1,428 a year. Enterprise pricing is custom; additional users, optional features, and services can change the bill. The posted numbers are a starting point for a purchase, not a complete deployment budget.
5 users · annual billing · $1,428 annual base
The product family extends beyond email. Secure Share handles encrypted file exchange. Private Keystore gives organizations control over encryption keys, including for Google Workspace client-side encryption. Gateway products automate protection in supported workflows. OpenTDF, launched in 2022, gives developers an open-source foundation; Virtru sells commercial products and operational capabilities around the approach.
The file grows a circle of colleagues
The $50 million Series D announced in July 2025 valued Virtru at $500 million. ICONIQ led, with Bessemer, Foundry, and The Chertoff Group participating. In May 2026, Virtru Collaborate launched as a FedRAMP-authorized workspace for sensitive files shared across organizations. July brought a Mattermost partnership for protected mission-critical collaboration; September brought Glasswall, combining file reconstruction with data protection.
The company’s careers materials emphasize flexibility, autonomy, openness, and learning, with professional development support and flexible time off. These are the employer’s stated commitments. Its Washington headquarters, The HUB, opened in 2023 as a meeting place for customers, partners, and the local cybersecurity community. For a company arguing that information should move between institutions, making room for the people from those institutions is a fitting piece of office design.
There are limits worth understanding before the demonstration. Virtru’s own Collaborate walkthrough discusses watermarking as a response to screenshots. A watermark can discourage a leak; it cannot make a camera disappear. Correct identities, sensible policies, and functioning key services still matter. The useful promise is narrower, and practical: sending protected information need not be the last decision its owner gets to make.