<img src="https://ad.doubleclick.net/ddm/activity/src=11631230;type=pagevw0;cat=pw_allpg;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=${GDPR};gdpr_consent=${GDPR_CONSENT_755};ord=1;num=1?" width="1" height="1" alt="">

Virtru Private Keystore for Google Workspace Client-Side Encryption (CSE)

To leverage Google Workspace Client-Side Encryption (CSE), Google requires you to choose a key management partner. Virtru is a Google-recommended key manager with comprehensive data protection across the Google ecosystem. 

Request a Demo
Google Client Side Encryption Workspace

An Essential Layer of Encryption for Google Workspace

If you use Google Workspace, your organization's most critical data likely resides within that platform. To ensure complete control over sensitive data in the cloud, many organizations are adopting Google's Client-Side Encryption (CSE) for Workspace. 
 

Virtru is proud to be a Google recommended data protection partner for Workspace Client Side Encryption (CSE). Virtru has been a longtime Google partner and provides data security solutions across Workspace, including Gmail, Drive, Google Cloud Platform EKM, and more.

Virtru gives you full control of the keys used to encrypt your data, ensuring that your information remains unreadable by Google, Virtru, or any other third party – helping you meet data sovereignty and other data security obligations.

More than 7,000 customers trust Virtru for data-centric security and privacy protection.

verizon-logo
Maryland
better-green-logo
Omada_Horizontal_Color
brown-logo

How It Works: Virtru for Google Workspace CSE

23-CSE-Diagram-UPDATE

Key Exchange Workflow

for Encryption

  1. User creates a new Google Workspace CSE Document.
  2. Document encryption key (DEK) is generated locally within the user's browser.
  3. DEK is sent to customer-hosted CSE server, which creates an access control policy. DEK is then wrapped with a second encryption key (CSE key).
  4. The wrapped DEK is sent to Google for storage alongside the encrypted document. Meanwhile, the CSE key never leaves the customer's server, so Google can never access it.

Key Exchange Workflow

for Decryption

  1. User attempts to open a Google Workspace CSE document, and a wrapped Document Encryption Key (DEK) is sent to the CSE server.
  2. CSE server checks to see if policy is active whether the user is authorized to access the document.
  3. If policy is active and user is authorized, CSE decrypts (unwraps) the DEK.
  4. Decrypted DEK is sent to the browser to decrypt the content for seamless, secure collaboration.

“Virtru is proud to be Google Workspace’s first recommended data protection partner and to have helped architect Google’s Client-Side Encryption capability with Google, in concert with our strategic enterprise partners. We are thrilled that Google Workspace Client-Side Encryption has become generally available for enterprises worldwide, and to include other partners in this open and extensible ecosystem."

John Ackerly, CEO, Virtru

Read the Press Release

Benefits of Choosing Virtru as Your Key Management Partner

No Prying Eyes: Google and other third parties cannot decrypt your data, and therefore can never view your data.

Secure Collaboration: Rest easy knowing your files are protected by end-to-end encryption.

Control Policy Enforcement: A data security policy is automatically created for every object stored in Google Workspace (Docs, Slides, Sheets and all uploaded files).

Implement Zero Trust Security: Zero Trust data control advances your Zero Trust initiatives. 

Control Your Own Keys: Use Virtru's Customer Key Server to manage your own keys on-prem or in a private or public cloud.

Google Ecosystem Expertise: As a longtime Google partner, Virtru is your guide to securing data that flows into and out of Google apps, from Gmail to Workspace, to Google Cloud Platform and beyond. 

Zero Trust Security Across the Google Ecosystem and Beyond

Equip Teams to Collaborate Securely in the Cloud

Virtru's data protection empowers users to encrypt sensitive information with one click, directly within their Google interface: 

View All Products
google-ws

Take Control of Your Data in Google Workspace CSE

Extend Zero Trust data control across your Google SaaS ecosystem. Book a demo with our team to see how simple it can be to get started.
Book a Demo