Is Virtru HIPAA compliant?

Yes. Virtru offers a BAA and is built to meet HIPAA requirements for therapists and behavioral-health practices.

Marketing & Website ToolsVerified June 2026

Virtru

Name: Virtru
Brand: Virtru

Email encryption that adds HIPAA-grade protection to Gmail and Outlook.

About Virtru

Virtru is a data-protection platform best known for client-side email encryption that layers onto existing Gmail and Outlook, letting therapists send HIPAA-compliant encrypted email without changing their email address or workflow. It offers a signed BAA, granular controls (revoke access, disable forwarding, set expiration), and secure file sharing. A practical option for solo and small practices that want to keep their current email but make client messages compliant. HIPAA-compliant with a BAA; confirm the appropriate paid plan for BAA coverage.

What Virtru does

The features that actually matter for therapy practice.

Client-side email encryption for Gmail/Outlook

Signed BAA on paid plans

Access revocation and expiration controls

Disable-forwarding controls

Secure file sharing

Works with existing email

Honest assessment

What works and what does not, based on hands-on testing.

What works well

Adds encryption to existing email (no migration)
BAA available
Strong sender controls (revoke/expire)
Easy for clients to receive

Where it falls short

BAA requires the appropriate paid plan
Encryption layer, not a full email host
Recipient experience varies
Confirm plan for HIPAA coverage

FAQ

Common questions about Virtru

Is Virtru HIPAA compliant?: Yes. Virtru offers a BAA and is built to meet HIPAA requirements for therapists and behavioral-health practices.
What is Virtru best for?: Email encryption that adds HIPAA-grade protection to Gmail and Outlook.

Alternatives