Virtru and Pexip Partner to Add Zero Trust Access Control to Video Meetings

Joint solution extends attribute-based access control to meeting scheduling and join time — closing a gap in Zero Trust collaboration for defense and coalition programs

Virtru, the leader in data-centric security, and Pexip, a provider of secure, customizable video collaboration for defense and government organizations, announced a joint solution that enforces continuous, attribute-based access control (ABAC) to scheduling and joining classified video meetings.

The partnership connects Pexip Secure Meetings, built on the self-hosted Pexip Infinity platform, with the Virtru Data Security Platform — extending policy-driven control of classification, releasability, and need-to-know to a meeting layer that has historically run on static invite lists.

Traditional Video Teleconferencing Security (VTC) leaves a critical gap between the moment a meeting invite is sent and the moment a meeting begins. Clearances expire, personnel rotate, and security holds are applied, yet calendar-based invite lists carry no mechanism to honor those changes before participants dial in. Virtru and Pexip together solve this problem by enforcing access policy at both scheduling and join time against real-time entitlements from the customer’s authoritative identity provider, turning static invitations into continuously governed access.

In the joint architecture, Virtru serves as the policy decision point, evaluating identity attributes and access policies held in the systems customers already use and control. Pexip provides the secure video platform and acts as the policy enforcement point, requesting decisions from Virtru and applying them to conferences and participants in real time. This separation of roles aligns with the Federal Zero Trust Architecture (NIST SP 800-207) and the DoW Zero Trust architecture and roadmap.

Also Read: CIO Influence Interview with John Elliott, Cybersecurity Author Fellow at Pluralsight

Ongoing Governance at the Meeting Layer

The joint platform brings Zero Trust and ABAC to the meeting layer through a separation-of-duties architecture that keeps entitlement data outside the video platform itself:

• ABAC for Scheduling Meetings: A Pexip-built Policy Enforcement Point (PEP) queries the Virtru Data Security Platform when an organizer creates a meeting, showing only the classification, releasability, and need-to-know options the meeting organizer is entitled to, while also validating each invitee’s entitlements.
• ABAC for Joining Meetings: The Pexip PEP requests a new policy decision from the Virtru Data Security Platform when a participant joins and enforces the result in real time. Status changes that occurred after the meeting was scheduled, including c******** suspensions, program rotations, and PERSEC holds, can affect whether access is granted.
• One Policy, Enforced Everywhere: The Virtru Data Security Platform acts as the central policy decision point (PDP) for both scheduling and joining meetings. The same policies governing c********, program assignment, and need-to-know across the agency automatically govern VTC access, eliminating per-meeting access rule maintenance.
• Decision-Level Audit Evidence: The Virtru Data Security Platform logs every user’s scheduling authorization, invite validation, join decision, meeting attributes, evaluated entitlements, and timestamps — providing continuous evidence of Zero Trust posture without retrospective reconstruction.

“A classified conversation is data, generated in real time, attended by people with different clearances, coalition affiliations, and need-to-know assignments that can shift hour to hour. In concept, this is no different than any other data object; it needs granular access controls evaluated continuously against users’ entitlements,” said Will Peppo, Senior Vice President of Business Development at Virtru. “Pexip is a great partner to bring that discipline to the meeting layer. The same attribute-based enforcement Virtru customers already trust for documents and messages, now applied where mission decisions actually happen.”

“Defense and government organizations need to collaborate across agencies and coalitions while maintaining strict control over sensitive information,” said Jordan Owens, CTO Americas at Pexip. “Pexip is built for these controlled environments, with a flexible platform that can integrate identity and access policies into the meeting experience. Together with Virtru, we are helping customers collaborate securely while retaining control over who can participate, at all times.”