Virto web parts for SharePoint Server: the brief for your IT team

What the products are

Web parts and features for SharePoint Server 2016, 2019 and Subscription Edition; most also have builds for SharePoint 2013. The Virto On-Premises Productivity Kit holds eleven of them: Kanban Board, Calendar, Notifications & Alerts, Form Designer, Workflow Automation, Multiple File Operations, Cross-Site Lookup, Related Items, Slideshow & Image Carousel, Password Reset & Recovery and Active Directory User & Password Manager. Tab Navigation is sold on its own.

Where your data is

• Everything runs inside your farm. Your content stays in your SharePoint and never reaches VirtoSoftware.
• The products keep their settings in the farm’s property bag and in SharePoint lists, and their licence state on your servers.
• The On-Premises EULA says the same: VirtoSoftware does not receive, host, store or process your content, so the Data Processing Agreement does not apply to these products.

What leaves the farm

• That is the complete list for the base products, and all of it is HTTPS: nothing goes out over http://. The calls use the server’s default proxy.
• The products send no telemetry or usage data.
• Without internet: activate offline. The farm shows a machine code; you enter it with the serial number on our offline activation page from any connected computer, and paste the code you get back. A kit subscription is renewed offline through our support by email. The timer jobs that need internet can be switched off.
• Only if an administrator turns them on: the Google Calendar and Salesforce sources of Virto Calendar route their sign-in through VirtoSoftware’s cloud services; SMS gateways in Notifications & Alerts and Workflow Automation reach the provider you set up, and Workflow Automation activities reach the services a workflow names.

Installation and privileges

• Each product is a full-trust farm solution (.wsp) with its assemblies in the global assembly cache, plus an SPFx package for modern pages. A farm administrator runs the setup program or Deploy.ps1.
• The Virto Web License Manager installs with each product: pages in Central Administration and timer jobs for licence checks and update notices.
• Some products change web.config on deployment, for example the maximum request size for file uploads, and some reset IIS. Plan a change window.
• Some operations run with elevated privileges under the application pool account.
• Each build runs only on the SharePoint version it was built for.

Installer integrity

• Every package for SharePoint 2016, 2019 and Subscription Edition has a SHA-256 checksum: in the download window on its product page and as a .SHA256 file next to the ZIP. Builds for SharePoint 2013 have none.
• The setup programs are signed with VirtoSoftware’s own code-signing certificate (CN=Virto Software), which ships in the package. It is not issued by a public certificate authority, so Windows shows an unknown publisher until you trust that certificate.
• The assemblies are strong-named and not obfuscated, so your security tools can scan them.
• A software bill of materials (CycloneDX) is published for Password Reset & Recovery and Active Directory User & Password Manager; for the other products, ask support.

Security testing

The NATO Cyber Security Centre (NCSC) has penetration-tested seven Virto components for SharePoint Server: Kanban Board in March 2024, most of the others in spring 2026. VirtoSoftware holds the NCSC disclosure report for each test, and every finding has been fixed. A test is not a certification. The components and versions tested.

Licences

• A single web part is a perpetual licence per Web Front-End server. The first year of updates and support is included; after that they renew at 50% of the list price. Without renewal you keep the last version released while your support was active; a later build will not run on that licence.
• The Virto On-Premises Productivity Kit is a yearly subscription per WFE server, a special offer for all eleven web parts. It renews at the full kit price; when it ends, the web parts keep working for 45 days and then stop until you renew.
• Development and test servers need a Developer licence.

SharePoint versions

Microsoft ended support for SharePoint Server 2016 and 2019 on July 14, 2026 (Microsoft Learn). Subscription Edition has no fixed end date. Every Virto web part has a download for Subscription Edition.

Certifications, plainly

More for legal and security reviewers, including the EULA terms and how to request our security policies under NDA: Security & Compliance.