About

Administrators have the ability to set a maximum expiration date (in days) for protected emails and files that are sent to users outside their organization. If secure content has a mix of both internal and external recipients, the limit will apply to all recipients of that specific content. End-users will not be able to adjust expiration past the set window.

Prerequisites

In order for the setting to properly identify external users, an organization's business domains must be associated with their account in Virtru. This happens automatically when syncing Google or Entra with Virtru or is configured manually by Virtru when deploying an advanced product (Gateway, Private Keystore, etc.).

If the above criteria are not met, then all recipients will be treated as "external."

Setting a Maximum Policy Duration

1. Virtru team admins and single-user account owners can configure Maximum Policy Duration in the Admin Settings section of the Virtru Control Center. Once on the page, navigate to the Features tab, and select the toggle for the Maximum Policy Duration feature:

2. Enter the desired length (in days) and SAVE

Maximum Policy Duration configuration menu

Note: This expiration will not automatically apply to any content sent before the feature is enabled. However, if a user tries to adjust security settings on existing content, the expiration will apply (potentially immediately expiring the content).

Editing Maximum Policy Duration

The Maximum Policy Duration can be disabled at a later date by turning the toggle off.

Alternatively, an admin can select EDIT to configure a new duration (and SAVE).

End User Experience

The Maximum Policy Duration will apply when at least one external recipient is present on the content. That expiration applies to all recipients of that specific email or file.
When viewing security settings for sent content, end-users will see a prompt that "Your organization limits expiration to" the set number of days from policy creation.
Even if a user hits Change, they will not be able to re-authorize expired content past the duration limit.
The file sender (and their admins) will still be able to decrypt expired content.