Data-Centric Security for the Global Public Sector | ZTDF

Zero Trust Data Sharing at the Speed of the Mission

With Virtru, you can dynamically govern and share sensitive data while maintaining classification and access control.

Robust Security for the Zero Trust Data Pillar

In the DoD Zero Trust Architecture, data is the load-bearing pillar. Unlike other cybersecurity providers that focus on building perimeters and silos, Virtru safeguards sensitive information at the data layer, allowing IL4 and IL5 data to move between partners while remaining governed, tagged, and policy-enforced. Federal office workers collaborate on a project. The simple Virtru toggle is shown.

Federal office workers collaborate on a project. The simple Virtru toggle is shown.

FedRAMP Authorized Products and High-Side Solutions

Our SaaS products are authorized at the FedRAMP Moderate level, and we offer self-managed solutions for use within high-side contexts. Virtru technology is FIPS 140-2 Validated and provides granular, customizable protections that equip agencies with full control over and visibility into their data at all times, no matter where it travels. Virtru for Microsoft Outlook user interface. Deploy the SaaS or self-managed (on-prem) version.

Virtru for Microsoft Outlook user interface. Deploy the SaaS or self-managed (on-prem) version.

Maintain Data Sovereignty and Control

The Virtru Private Keystore enables public-sector organizations to host their own encryption keys, leveraging their preferred cloud or on-premises infrastructure. This allows for heightened control and sovereignty over data, regardless of where it is stored. Product-Page-Images-_VPK3

Quantum Readiness and Crypto-Agility

The Trusted Data Format enables crypto-agility, so agencies can use the cryptographic algorithm of their choice and easily swap methods in the future. We equip agencies with the flexibility to evolve their cryptographic strategy at their own pace. Developer works at terminal

Attribute-Based Access Control

Ensure sensitive data can only be accessed by those with the right credentials and need to know. With Virtru, you can manage access control policies and enforcement, in conjunction with data tagging solutions like Fortra (Titus, Boldon James), for attribute-based access control (ABAC). Virtru Data Protection Audit View

Virtru for NATO and NCI Agency

Virtru has partnered with the NATO Support and Procurement Agency (NSPA) and the NATO Communications and Information (NCI) Agency to provide technological, cyber defense solutions for NATO member states.

With Virtru, our agencies, coalition partners, and combatant commands can securely and rapidly share time-sensitive, mission critical information.

Learn More

A military technologist views a map on a laptop outdoors.

"Given growing market demand for Zero Trust Data Access (ZTDA) solutions and the clear opportunity for Virtru within the government market, we see great things on the horizon for Virtru. We are thrilled to partner with them on this journey and look forward to seeing what Virtru will deliver next to protect our nation and its data."

Michael Chertoff
Secretary of the U.S. Department of Homeland Security ('05-'09), Co-Founder and Executive Chairman of MC2 and The Chertoff Group

Learn More

Federal Compliance Certifications

Virtru's solutions are trusted by federal agencies across the Intelligence, Department of War, and the Defense Industrial Base. For more on Virtru's FedRAMP Authorized, FIPS 140-2 Validated security solutions, visit the Virtru Trust Center.

https://1769758.fs1.hubspotusercontent-na1.net/hubfs/1769758/assets/temporary%20(use%20this%20for%20uploading%20unoptimized%20images%2c%20videos%2c%20etc)/FedRAMP%20Card.webp

FedRAMP

Virtru has a certified Authorization to Operate (ATO) at the moderate level under FedRAMP. As part of our FedRAMP compliance program, we adhere to the security controls defined in the NIST 800-53 and 800-171 publications to ensure the integrity of federal information systems.

Learn More

SOC 2 - Type 2

Virtru’s security operations and processes are validated by third-party assessments for Service Organizations Control (SOC) 2 Type 2 Compliance. This attests that we can be trusted to safeguard sensitive customer data in the cloud.

Learn More

FIPS 140-2

Virtru solutions are FIPS 140-2 Validated. For a cryptographic module to be FIPS validated, it must undergo an independent examination by NIST-accredited lab. Validated modules are issued certificates, which can be viewed on the Cryptographic Modules Validation Program (CMVP) website.

Learn More

Unlocking Value for the Global Public Sector

With Virtru, sensitive and classified data no longer remains confined to a silo. Instead, it can move dynamically and securely between federal agencies, mission partners, and SIs.

Dynamically Share Sensitive Data with Coalition Partners

Because many organizations have numerous levels of access rights, as well as numerous channels and products by which data is disseminated, data tagging and access management have become extremely complex. Powered by the Trusted Data Format (TDF), the Virtru Data Security Platform enables ZTDF and standardizes secure data-sharing for mission partners. Watch the video to see how this takes shape in the Indo-Pacific.

Learn More

A military user views an aerial map on a mobile phone. TDF icon shows that the data is protected by Virtru TDF

Fine-Grained Control and Encryption for Edge Data

Whether relaying data from sensors in remote locations or embedded in medical equipment, the Trusted Data Format (TDF) is flexible and versatile, protecting data on small devices and in low-bandwidth areas. With TDF, you can dynamically protect full-motion video, biometric data, and more.

Learn More

Enable Secure Analytics

Break down data silos and equip mission and business owners to share data securely with external collaborators to unlock greater insights. In the same way that Virtru enables data owners to maintain full lifecycle control over their sensitive information and securely share it for approved analysis, we also empower analytic owners not only to maintain control of the analytic, but also to have a say in how the outputs of analysis are managed and tracked, adding a level of transparency and trust that offers the potential for faster outcomes while ensuring compliance with a wide array of security and privacy requirements, including those derived from FISMA, HIPAA, CJIS, ITAR, and others.

Learn More