Resources

Product Support & FAQ

Which features of Virtru Pro support HIPAA privacy and security rules?

Virtru meets the technical standards defined by HIPAA and HITECH, as they relate to the encryption of sensitive information in transit and at rest.

Customers can manage access to information inside and outside of the organization using administrative controls:

  • Strong data encryption technology for files and messages in transit and at rest
  • Explicitly authorize users to access protected information
  • Configure data confidentiality around specific content and content types
  • Set limits on forwarding of messages inside and outside of the organization
  • Revoke protected messages
  • Monitor and track protected information

At the core of Virtru-enabled applications is the Trusted Data Format (TDF), which allows fine-grained access control for all file types and attachments, such as emails, Office files, pdfs, photos, and videos. The TDF format, invented by Virtru co-founder Will Ackerly, wraps and protects content and communicates with Virtru-enabled key stores which maintain access privileges. When you send a Virtru-protected message, your content is encrypted and secured inside a TDF wrapper. When your receiver attempts to open it, the wrapper communicates with the Virtru server to verify that the receiver is eligible to see the information.

On-device encryption: Virtru employs true client-side email encryption. Sensitive information is protected immediately on the device where it is created, before it is distributed.

Identity Management: Virtru users use their existing email address to send and receive secure emails. Virtru’s patented identity management technology uses OpenID and OAuth, open protocols widely adopted throughout the industry, to verify your identity with your existing email provider (Gmail, Microsoft), without the need for new accounts or new passwords.

To learn more about HIPAA compliant email, please download our free guide today.

Virtru meets the technical standards defined by HIPAA and HITECH, as they relate to the encryption of sensitive information in transit and at rest. Please read full article for more details and resources.