CMC ITS Policy · Companion Page

Data Classification per Solution

Companion to the Data Classification Standard (effective May 1, 2026)  ·  Updated November 2026  ·  Preliminary — subject to change

Claremont McKenna College · ITS — Data Classification per Solution · as of November 2026 · Preliminary, subject to change

Every platform in the ITS Solutions catalog, alphabetically, with the highest data classification it is currently approved to hold under the Data Classification Standard. A tool’s own solution page (linked below) is authoritative when it is stricter than the level shown here.

4P4 Highly Restricted
17P3 Confidential
8P2 Internal
1P1 Public
4Local tools
Current but preliminary. This register reflects approvals completed to date; levels may be revised as further vendor reviews and UISL classifications conclude. Check back before relying on a level.
P1 Public freely shareable P2 Internal CMC community P3 Confidential need-to-know P4 Highly Restricted authorized only Local Tool no vendor-hosted data
Solution (A–Z) Approved up to Handling in brief
Adobe Acrobat ProDesign & Docs P2 Internal Cloud features P2 only; on-device features up to P4.
Adobe Creative CloudDesign & Media P2 Internal Creative work; no P3 records in shared libraries.
Boomi IntegrationsIntegration P3 Confidential ITS pipelines carry P3 between institutional systems.
Box AIAI / LLM P3 Confidential Works within your Box files; same ceiling as Box.
Box Cloud StorageStorage P3 Confidential PHI never in standard Box — use HIPAA workstations.
CanvaDesign & Media P2 Internal Event & marketing graphics; internal P2 content.
Canvas LMSStudent Ops P3 Confidential Rosters, grades, submissions; need-to-know sharing.
ClaudeAI / LLM P3 Confidential No SSNs, PHI, or card numbers in prompts.
EMS (Event Management)Enterprise Ops P2 Internal Scheduling & logistics; internal contacts only.
FreshService ITSMEnterprise Ops P3 Confidential Ticket & asset data up to P3; never include credentials.
Google GeminiAI / LLM P3 Confidential No P4 content in prompts.
Google WorkspaceCollaboration P3 Confidential Drive & Docs up to P3 via CMC SSO; no personal accounts.
HIPAA Secure WorkstationsResearch P4 Highly Restricted Allowlisted apps, signed agreements, named users.
Hopper Cluster (HPC)Research P3 Confidential Research data up to P3; PHI → HIPAA workstations.
Interfolio Faculty LifecycleEnterprise Ops P3 Confidential Faculty review & evaluation data; HR-authorized roles.
LinkedIn LearningLearning P2 Internal Course enrollment & completion records; internal.
Local AI ModelsAI / LLM P4 Highly Restricted Sole CMC AI pathway approved for P4.
MapleResearch Local Tool No vendor-hosted data; files keep their own level.
MathematicaResearch Local Tool No vendor-hosted data; files keep their own level.
MATLABResearch Local Tool No vendor-hosted data; files keep their own level.
Microsoft 365Collaboration P3 Confidential OneDrive & SharePoint approved for P3; MFA enforced.
Microsoft CopilotAI / LLM P3 Confidential Inherits M365 permissions; no P4 content in prompts.
OverleafAcademic P2 Internal LaTeX collaboration; no P3/P4 via third-party features.
Pathify Student PortalStudent Ops P2 Internal Student program portal; P2 content only.
SiteimproveAccessibility P1 Public Crawls public CMC web properties only.
Slack Enterprise GridCollaboration P3 Confidential Cleared for P3; P4 (SSNs, PHI, cards) stays out of channels.
StarRez HousingStudent Ops P3 Confidential Housing & RA records; role-based access.
Student Information SystemStudent Ops P4 Highly Restricted Full student records; no extracts to unapproved tools.
think-cellDesign & Docs Local Tool No vendor-hosted data; files keep their own level.
Trello Project ManagementCollaboration P2 Internal P2 planning content on boards only.
VIA CRMStudent Ops P3 Confidential Visa & immigration records; ISS staff only.
Workday ERPEnterprise Ops P4 Highly Restricted Never share credentials or export to unsecured systems.
Zoom AI CompanionAI / LLM P3 Confidential CMC tenant AI; transcripts & summaries up to P3.
Zoom WorkplaceCollaboration P3 Confidential Meetings, recordings, transcripts up to P3.
  1. Locally installed tools (Maple, Mathematica, MATLAB, think-cell) hold no institutional data with the vendor; files you open keep their own classification wherever they live.
  2. Missing a tool? New vendors pass a security review before receiving a level; conflicts with the standard go through the Security Exception Policy.