Virtru for Google Workspace Client-Side Encryption (CSE) is a software solution that enables organizations to encrypt their data within Google Workspace—such as Gmail and Drive—using their own encryption keys. This ensures that only authorized users within the organization can decrypt and access sensitive information, while Google or any third party cannot access the encrypted data. Virtru’s Private Keystore allows organizations to manage encryption keys on-premises or in the cloud, and to apply automatic access controls and security policies based on custom labels, supporting Zero Trust initiatives and regulatory compliance.

Key Features

Client-Side Encryption Encrypts data within the user's browser before it reaches Google servers.

• Ensures data is encrypted end-to-end.
• Google and third parties cannot decrypt or view the data.

Private Keystore Management Organizations manage their own encryption keys.

• Keys can be stored on-premises or in private/public cloud.
• The CSE key never leaves the customer’s environment.

Automatic Access Controls Policies based on custom labels control data access.

• Automate security policies for all Google Workspace data.
• Access is granted only to authorized users, based on policy.

Seamless Integration with Google Workspace Works directly within Google Workspace apps.

• Users can encrypt documents and emails with one click.
• No disruption to user workflow.

Zero Trust Data Security Supports Zero Trust security frameworks.

• Data-centric security for sensitive information.
• Extends Zero Trust control across Google SaaS ecosystem.

Benefits

Data Sovereignty and Privacy Organizations retain full control over their sensitive data.

• Only authorized users can access or decrypt data.
• Google and third parties cannot access encryption keys or content.

Regulatory Compliance Helps meet strict regulatory and privacy requirements.

• Supports compliance with data protection laws.
• Enables secure collaboration without compromising privacy.

Operational Flexibility Flexible key management options.

• Choose between on-premises or cloud-based key storage.
• Adaptable to diverse IT and security environments