Where can I store or share my data? UMass Amherst Service Categorizations

How to Use This Page

This page presents UMass Amherst-supported services, with information about what types of data can be stored or shared with each. Use this information to inform your decisions about what services your data can be stored or shared on.

Data with specific compliance requirements will need a risk assessment to help determine the appropriate business processes and IT services for the data. If you have questions, or to coordinate a risk assessment, please contact it@umass.edu.

Glossary of Terms

Confidentiality - "How bad would it be if someone who is not supposed to have access gets access?"
Integrity - "How bad would it be if the data was accidently changed or corrupted?"
Availability - "How bad would it be if the data was not available when you needed it?"

More information about data categorization

Key

Green = High/Yes

Yellow = Moderate/Varies

Red = Low/No

More information about categorization

High, Moderate, and Low indicate the maximum level of data confidentiality/integrity/availability offered by a service. Data can be stored/shared on a service that offers an equal or higher level than what is required for that data.

For example, Microsoft OneDrive at UMass Amherst offers high confidentiality - but data which only requires low confidentiality can still be stored in OneDrive.

⚠ We discourage the use of SSN unless required by law. If you need a unique identifier, contact IT at it@umass.edu

Online File Storage

ℹ See the Research Computing and Storage Environments sections below for more mass data storage options.

	Confidentiality	Integrity	Availability	FERPA	Health Records (HIPAA ePHI)	Health Records (non-HIPAA)	SSN	PCI	Research CUI	Human Subject Research Data	Operational/Internal Use	Export Controlled (ITAR/EAR)	Notes
UMass Amherst Microsoft OneDrive	High	High	High	Yes	Yes	Yes	Yes	No	Yes	Yes	Yes	No*	*Contact Research Compliance/IT to develop compliant solution.
UMass Amherst Microsoft Teams	High	High	High	Yes	Yes	Yes	No	No	Yes	Yes	Yes	No*	*Contact Research Compliance/IT to develop compliant solution.
UMass Amherst Google Drive	High	High	High	Yes	Yes	Yes	Yes	No	Yes	Yes	Yes	No*	*Contact Research Compliance/IT to develop compliant solution.

Email & Calendar

⚠ Email across the internet is unencrypted and not secure.

	Confidentiality	Integrity	Availability	FERPA	Health Records (HIPAA ePHI)	Health Records (non-HIPAA)	SSN	PCI	Research CUI	Human Subject Research Data	Operational/Internal Use	Export Controlled (ITAR/EAR)
UMass Amherst Microsoft Office 365 Email	Moderate	High	High	Yes	No	No	No	No	No	No	Yes	No
UMass Amherst Microsoft Office 365 Calendar	Moderate	High	High	Yes	No	No	No	No	No	No	Yes	No
UMass Amherst Google Mail	Moderate	High	High	Yes	No	No	No	No	No	No	Yes	No
UMass Amherst Google Calendar	Moderate	High	High	Yes	No	No	No	No	No	No	Yes	No

Video Conferencing

	Confidentiality	Integrity	Availability	FERPA	Health Records (HIPAA ePHI)	Health Records (non-HIPAA)	SSN	PCI	Research CUI	Human Subject Research Data	Operational/Internal Use	Export Controlled (ITAR/EAR)	Notes
UMass Amherst Zoom	High	High	High	Yes	Yes	Yes	No	No	Yes	Yes	Yes	No
UMass Amherst Microsoft Teams	High	High	High	Yes	Yes	Yes	No	No	Yes	Yes	Yes	No

Electronic Signature

	Confidentiality	Integrity	Availability	FERPA	Health Records (HIPAA ePHI)	Health Records (non-HIPAA)	SSN	PCI	Research CUI	Human Subject Research Data	Operational/Internal Use	Export Controlled (ITAR/EAR)	Notes
UMass Amherst DocuSign	High	High	High	Yes	No	No	Yes	No	Yes	Yes	Yes	No

Web Services

	Confidentiality	Integrity	Availability	FERPA	Health Records (HIPAA ePHI)	Health Records (non-HIPAA)	SSN	PCI	Research CUI	Human Subject Research Data	Operational/Internal Use	Export Controlled (ITAR/EAR)	Notes
UMass Amherst public facing websites & blogs	N/A	Moderate	High	No	No	No	No	No	No	No	No	No

Research Computing Environments (UMass Amherst)

ℹ Services marked as Storage Capable may be used for data storage.

	Storage Capable	Confidentiality	Integrity	Availability	FERPA	Health Records (HIPAA ePHI)	Health Records (non-HIPAA)	SSN	PCI	Research CUI	Human Subject Research Data	Operational/Internal Use	Export Controlled (ITAR/EAR)	Notes
Unity Cluster	No	High	High	High	Yes	No	Yes	No	No	Yes	Yes*	No	No	*With IRB approval
Northeast Storage Exchange	Yes	High	High	High	No	No	No	No	No	No	No	No	No
SPHHS "Big Data" Cluster	Yes	High	High	High	Yes	No	Yes	Yes	No	Yes	Yes	No	No	Use of this resource is subject to approval by SPHHS.
MGHPCC Supercloud	Yes	Moderate	High	Moderate	Yes	No	No	No	No	Yes	No	No	No	Use of this resource is subject to approval by UMass Amherst RC.

Research Computing Environments (External)

More information coming soon.

Research Computing at UMass Amherst

Research Collaboration Tools