Virtru and Pexip Partner to Add Zero Trust Access Control to Video Meetings
Joint solution adds real-time access checks to classified video meetings, helping organizations verify permissions when scheduling meetings and admitting participants.
WASHINGTON, D.C. and OSLO, Norway — October 26, 2026 — Virtru and Pexip have announced a partnership to strengthen security for classified video meetings. The Virtru Pexip Zero Trust solution checks participant permissions when organizers schedule meetings and when attendees join.
The partnership addresses a gap in traditional video teleconferencing (VTC) security. Meeting invitations can remain valid even after someone’s security clearance or assignment changes. This creates a risk for defense and government organizations that handle classified information.
The companies are connecting Pexip Secure Meetings, built on the self-hosted Pexip Infinity platform, with the Virtru Data Security Platform. The integration uses attribute-based access control (ABAC) to check permissions against current identity records. This approach reduces reliance on meeting invitations that may no longer reflect someone’s authorization.
According to Virtru and Pexip, the solution extends classification, releasability, and need-to-know policies into video meetings. It targets defense, intelligence, government, and coalition environments where access requirements can change quickly.
Why Classified Video Meetings Need Stronger Access Controls
Traditional video conferencing security often relies on meeting invitations and fixed participant lists. These controls help determine who receives an invitation. However, they may not reflect changes to someone’s security status after scheduling.
For example, security clearances can expire, personnel can change programs, and security holds can restrict access. Someone who had permission when the organizer sent an invitation may no longer qualify when the meeting begins.
This creates a gap between scheduling a meeting and allowing someone to participate. In classified environments, receiving an invitation does not necessarily mean someone should retain access.
The Virtru Pexip Zero Trust approach aims to close this gap through two authorization checks. The system reviews current permissions from the customer’s authoritative identity provider. These checks account for changes in clearance, program assignments, and need-to-know requirements.
Rather than treating an invitation as permanent approval, the integration checks whether participants still meet the requirements when they join.
How Virtru and Pexip Enforce Zero Trust Access
The joint system separates access decisions from the technology that enforces them. This allows organizations to manage security policies centrally while applying them through the video platform.
Virtru acts as the policy decision point (PDP). It checks identity details and access policies stored in systems that customers already use and control. These checks determine whether someone meets the security requirements for a meeting.
Pexip provides the secure video platform and acts as the policy enforcement point (PEP). When someone schedules or joins a meeting, Pexip requests a decision from Virtru. It then applies that decision to the meeting or participant.
This approach keeps entitlement data outside the video platform. Organizations can also use their existing identity and access policies without creating separate rules for every meeting.
The companies state that this design aligns with the Federal Zero Trust Architecture (NIST SP 800-207). It also aligns with the DoW Zero Trust architecture and roadmap.
Virtru Pexip Zero Trust Controls for Scheduling and Joining
The integration introduces four capabilities that bring Zero Trust principles into classified video meetings. These cover meeting scheduling, participant access, central policy management, and audit records.
Together, they help organizations check permissions at important stages of a meeting. They also provide records showing how the system made access decisions.
Access Checks Begin When Organizers Schedule Meetings
When someone creates a meeting, a Pexip-built Policy Enforcement Point queries the Virtru Data Security Platform. The system checks the organizer’s permissions before presenting available security settings.
Organizers only see classification, releasability, and need-to-know options that match their entitlements. The platform also checks whether invited participants have the required permissions.
This allows organizations to apply security requirements before a meeting begins. It also helps ensure that invitations reflect the sensitivity of the planned discussion.
Participant Permissions Are Checked Again at Join Time
The system performs another authorization check when someone attempts to join a meeting. The Pexip PEP requests a new decision from the Virtru Data Security Platform. Pexip then grants or denies access based on that result.
This second check matters because someone’s authorization may change after receiving an invitation. Clearance suspensions, program rotations, and personnel security (PERSEC) holds can all affect access.
Under this approach, an existing invitation does not guarantee entry. The system checks the participant’s current permissions before allowing them to join.
Central Policies Reduce Separate Meeting Rules
The Virtru Data Security Platform manages access decisions for both scheduling and joining meetings. Organizations can apply the same clearance, program assignment, and need-to-know policies across their environments.
According to the companies, this reduces the need to manage separate access rules for individual meetings. Changes in identity and entitlement systems can also affect future meeting decisions.
This approach may help organizations manage classified collaboration across departments, agencies, and coalition partners. It provides a consistent way to apply existing access policies.
Audit Records Track Access Decisions
The joint platform also records access decisions to support security reviews and audits. Virtru logs scheduling authorizations, invitation checks, and meeting join decisions.
These records include meeting attributes, evaluated entitlements, and timestamps. Security teams can review which permissions the system considered when someone scheduled or attempted to join a meeting.
For organizations with strict security requirements, these records provide evidence of how the system applied access policies. They also reduce the need to reconstruct decisions after an event.
Virtru and Pexip Explain Their Approach to Classified Collaboration
Will Peppo, Senior Vice President of Business Development at Virtru, said classified conversations need the same access controls as other sensitive information. He highlighted how clearance levels, coalition memberships, and need-to-know assignments can change over time.
“A classified conversation is data, generated in real time, attended by people with different clearances, coalition affiliations, and need-to-know assignments that can shift hour to hour. In concept, this is no different than any other data object; it needs granular access controls evaluated continuously against users’ entitlements,” said Will Peppo, Senior Vice President of Business Development at Virtru. “Pexip is a great partner to bring that discipline to the meeting layer. The same attribute-based enforcement Virtru customers already trust for documents and messages, now applied where mission decisions actually happen.”
Jordan Owens, CTO Americas at Pexip, also stressed the need for secure collaboration between government agencies and coalition partners. He said organizations must protect sensitive information while controlling who can attend meetings.
“Defense and government organizations need to collaborate across agencies and coalitions while maintaining strict control over sensitive information,” said Jordan Owens, CTO Americas at Pexip. “Pexip is built for these controlled environments, with a flexible platform that can integrate identity and access policies into the meeting experience. Together with Virtru, we are helping customers collaborate securely while retaining control over who can participate, at all times.”
What the Partnership Means for Government Cybersecurity
The partnership tackles a key problem in classified communications. Meeting access should reflect someone’s current authorization, not simply their permissions when the organizer sent an invitation.
This matters when personnel change assignments, clearances expire, or coalition partners face different access restrictions. Organizations need ways to account for these changes without relying on outdated invitation lists.
Virtru and Pexip aim to bring existing Zero Trust policies into the meeting process. Their approach separates access decisions from the video platform that enforces them. It also allows organizations to retain control over their identity and entitlement information.
However, the announcement focuses on access checks during scheduling and when participants join. The companies have not provided independent test results or deployment metrics to demonstrate the integration’s effectiveness.
The broader goal is to apply data-centric security principles to live conversations. Rather than treating meeting access as a one-time decision, the solution checks authorization at two important stages.
Availability of the Virtru and Pexip Solution
Virtru and Pexip say the capability is available for qualifying defense, intelligence, federal civilian, and allied organizations. The integration combines Pexip’s self-hosted video platform with Virtru’s central access policy decisions.
For organizations managing classified meetings, the solution offers another way to apply existing security policies. Its focus is on checking current permissions instead of relying only on fixed invitation lists.
Organizations can learn more about the integration at virtru.com/partners/technology/pexip.