Storage Locations for WashU Data

Before using external websites or cloud services to store, create or transmit WashU confidential or Protected information the following reviews are needed.

  • Contact the data owner to verify data classification.
  • Please request an Information Security Risk review.
  • Storage of ePHI may require a signed Business Associates Agreement (BAA). Please work with the HIPAA Privacy Office and Resource Management to discuss.
    • Please note this is not the original record.

Protected Confidential Public
External Vendor ePHI ITAR FISMA (CUI) PCI PII HR Legal Financial Intellectual Property De-identified Research Data
Amazon Web Services Contact data owner
Amazon Web Services – Government Contact data owner
Azure (WashU Instance) Under Review Contact data owner
Azure – Government Contact data owner
Commercial Email (i.e, Gmail, Yahoo) Contact data owner
Crash Plan Contact data owner
DropBox Contact data owner
Google Drive Contact data owner
iCloud Contact data owner
Microsoft OneDrive (WashU Instance) Under Review Contact data owner
Skype for Business (WashU Instance) Under Review Under Review Under Review Under Review Under Review Contact data owner
Skype – Commercial Contact data owner
Slack Contact data owner
Wustl Box Contact data owner