Overview
The following classification table serves as a quick-reference guide for evaluating IT services at F&M.
It aligns specific tools with the appropriate handling requirements for the College's sensitive and confidential information.
If a service or application is not explicitly listed below, you must contact Information Technology Services (ITS) for review
before using it to store, process, or transmit any sensitive or confidential data as defined by this policy.
Data container classifications:
| Category |
Service |
Public |
Sensitive |
Confidential |
| Internally-Hosted Services |
Shared personal folders |
Yes |
Yes |
Yes |
| Shared public folders |
Yes |
Yes |
No |
| Shared departmental folders (secured via group) |
Yes |
Yes |
Yes |
| Voicemail |
Yes |
Yes |
No |
| Cloud Services |
Institution-provided Google Drive |
Yes |
Yes |
Yes |
| Other personally-provisioned cloud services |
Yes |
No |
No |
| Artificial Intelligence family of multimodal large language model interfaces |
F&M licensed AI services used with your F&M account, such as Google Gemini, Zoom AI Companion, Canvas AI, Slate AI, etc. |
Yes |
Yes |
Yes |
| Free or personal account AI related services |
Yes |
No |
No |
| Any other AI related services |
Yes |
No |
No |
Important Notes
- Regardless of a service's approval status for specific data sensitivity tiers, users must follow data minimization and least privilege principles. Access does not permit broad distribution; sensitive institutional data must be restricted to the minimum personnel necessary for legitimate business functions and stored in as few repositories as possible to reduce risk and ensure compliance.
- This is the data container classification, see College Data Classification Policy and Acceptable Use Policy and User Agreement to understand the scope of data container classification..