Data Security in UO Collaboration Tools


"Where can I store my data?" is a common question asked by researchers, faculty and students. To answer that question, we've created the the table below that shows where data of different sensitivity levels can be stored.

UO's Information Asset Classification & Management Policy is available in the UO Policy Library.

Information Asset Classification and Management

Definitions of low risk (green), moderate risk (amber), and high risk (red) data are available in our data classification quick reference.

Special Notice: You must contact the Information Security Office BEFORE storing HIPAA data in any collaboration tool.
Tool Low Risk (Green) Moderate Risk (Amber) High Risk (Red) Approved For:
Personal Computer *

Personal Email (Gmail, Yahoo, etc.) * N/A
Personal Cloud Services (G Suite - all tools, Amazon Web Services, etc.)  * N/A
Personal Dropbox * N/A
UO Managed Computer FERPA
UOmail*** ** FERPA
UO Dropbox ** FERPA
UO OneDrive ** FERPA, HIPAA**
Qualtrics ** FERPA, HIPAA**
UO Azure (Webservers, CDN, etc.) ** FERPA, HIPAA**
UO Microsoft Teams & Teams Calling ** FERPA, HIPAA**
UO SharePoint **  FERPA, HIPAA**
UO Network File Share ** FERPA, HIPAA**
USB/CD/External Media **
Canvas FERPA
UO Adobe Creative Cloud FERPA
UO Confluence and Jira ** FERPA


 = Approved data storage location for this classification of data

 = This location is unsuitable for this classification of data 

* = If you must use your personal devices for university business, follow these guidelines

** = You must contact the Information Security Office BEFORE storing data in this location for the first time.

*** = Includes Email, Calendar, Contacts, Tasks

Additional resources

A downloadable PDF file of this table can be found here, along with more resources and downloads.


Article ID: 113454
Mon 8/10/20 9:54 AM
Tue 12/13/22 12:51 PM

Related Articles (3)

This article is a quick reference for how to handle, transmit and dispose of sensitive data.
This article is designed to guide instructors to support documentation for various software services that can be used for remote instruction and collaboration.