Audio and Video Conferencing: Zoom and WebEx, Microsoft Teams
IMPORTANT: Teams is only approved for PHI data with Cardinal Key.Approved for low risk dataApproved for moderate risk dataApproved for general high risk dataApproved for PHI dataBackups: Backup and Recovery Service for Servers (BaRS)Approved for low risk dataApproved for moderate risk dataApproved for general high risk dataApproved for PHI dataBackups: CrashPlanPROeApproved for low risk dataApproved for moderate risk dataApproved for general high risk dataApproved for PHI dataCalendar: Office 365Approved for low risk dataApproved for moderate risk dataNot approved for general high risk dataNot approved for PHI dataCardinal FaxApproved for low risk dataApproved for moderate risk dataApproved for general high risk dataApproved for PHI dataCardinal PrintApproved for low risk dataApproved for moderate risk dataApproved for general high risk dataApproved for PHI dataCloud Infrastructure: Amazon Web Services, Microsoft Azure, Google Cloud Platform
IMPORTANT: Only approved for High-Risk & PHI data with the provision set up by UIT, and configured and managed by a Stanford professional services team. (e.g. Stanford Research Computing or TCG)  Only HIPAA-approved services allowed for PHI-containing cloud accounts. See GCP and AWS.Approved for low risk dataApproved for moderate risk dataApproved for general high risk dataApproved for PHI dataContent Management: Stanford DomainsApproved for low risk dataNot approved for moderate risk dataNot approved for general high risk dataNot approved for PHI dataContent Management: Drupal (Stanford Sites), WordPressApproved for low risk dataApproved for moderate risk dataNot approved for general high risk dataNot approved for PHI dataContent Management: OpenTextApproved for low risk dataApproved for moderate risk dataApproved for general high risk dataNot approved for high risk dataDatabase Hosting: MySQLApproved for low risk dataApproved for moderate risk dataNot approved for general high risk dataNot approved for PHI dataDocument Management: Office 365 OneDrive, SharePoint, OneNote
IMPORTANT: Only approved for PHI data with Cardinal Key.Approved for low risk dataApproved for moderate risk dataApproved for general high risk dataApproved for PHI dataDocument Management: Medicine BoxApproved for low risk dataApproved for moderate risk dataApproved for general high risk dataApproved for PHI dataDocument Management: Google Drive (including Shared Drives, Docs, Sheets, Slides, and Forms)
IMPORTANT: Only approved for PHI data with Cardinal Key with Google Drive.Approved for low risk dataApproved for moderate risk dataApproved for general high risk dataApproved for PHI dataDocument Management: Google G Suite: All others (Photos, Jamboard, Sites, etc...)Approved for low risk dataApproved for moderate risk dataNot approved for general high risk dataNot approved for PHI dataElectronic Data Capture (EDC): REDCap, Forte, REDCap Cloud
Note: Compliant with Title 21 CFR Part 11.Approved for low risk dataApproved for moderate risk dataApproved for general high risk dataApproved for PHI dataElectronic Signature: AdobeSign
IMPORTANT: Only approved for PHI data with the system configuration set up by UIT.Approved for low risk dataApproved for moderate risk dataApproved for general high risk dataApproved for PHI dataElectronic Signature: DocuSignApproved for low risk dataApproved for moderate risk dataNot approved for general high risk dataNot approved for PHI dataEmail: Google Mail, Office365 (with “Secure:” in subject line)Approved for low risk dataApproved for moderate risk dataApproved for general high risk dataApproved for PHI dataEmail: Google Mail, Office365 (without “Secure:” in subject line)Approved for low risk dataApproved for moderate risk dataNot approved for general high risk dataNot approved for PHI dataEmail: Other Departmental SystemsApproved for low risk dataApproved for moderate risk dataNot approved for general high risk dataNot approved for PHI dataEncryption: MDM Compliant Device, Stanford Device Registration Compliant DeviceApproved for low risk dataApproved for moderate risk dataApproved for general high risk dataApproved for PHI dataEncryption: VLRE Compliant DeviceApproved for low risk dataApproved for moderate risk dataNot approved for general high risk dataNot approved for PHI dataFile Storage: AFS, CIFS, NFSApproved for low risk dataApproved for moderate risk dataNot approved for general high risk dataNot approved for PHI dataFile Storage: Secure AFS, Secure File Storage, Wasabi Cloud StorageApproved for low risk dataApproved for moderate risk dataApproved for general high risk dataApproved for PHI dataFile Transfer: GlobusApproved for low risk dataApproved for moderate risk dataNot approved for general high risk dataNot approved for PHI dataCardinal Voice SoftphoneApproved for low risk dataApproved for moderate risk dataApproved for general high risk dataApproved for PHI dataSlack Messaging: Public ChannelsApproved for low risk dataApproved for moderate risk dataNot approved for general high risk dataNot approved for PHI dataSlack Messaging: Direct Messages and invite-only (private) channelsApproved for low risk dataApproved for moderate risk dataApproved for general high risk dataNot approved for PHI dataIssue Tracking: JIRAApproved for low risk dataApproved for moderate risk dataApproved for general high risk dataNot approved for PHI dataNetwork Access Control: SUNACApproved for low risk dataApproved for moderate risk dataApproved for general high risk dataApproved for PHI dataProject Management: M365 Planner
IMPORTANT: Only approved for PHI data with Cardinal Key.Approved for low risk dataApproved for moderate risk dataApproved for general high risk dataApproved for PHI dataServiceNowApproved for low risk dataApproved for moderate risk dataApproved for general high risk dataApproved for PHI data

Smartsheet: Collaboration and Project Management

Statement from Stanford CISO October 2025

Approved for low risk dataApproved for moderate risk dataApproved for general high risk dataApproved for PHI dataStanford Profiles: CAPApproved for low risk dataNot approved for moderate risk dataNot approved for general high risk dataNot approved for PHI dataSurvey Tool: Qualtrics - University, SoM, and GSB instancesApproved for low risk dataApproved for moderate risk dataApproved for general high risk dataApproved for PHI dataSurvey Tool: Qualtrics - All other instances, M365 FormsApproved for low risk dataApproved for moderate risk dataNot approved for general high risk dataNot approved for PHI dataTask Tracking: M365 To-DoApproved for low risk dataApproved for moderate risk data  Voice MessagingApproved for low risk dataApproved for moderate risk dataNot approved for general high risk dataNot approved for PHI dataVPNApproved for low risk dataApproved for moderate risk dataApproved for general high risk dataApproved for PHI dataWeb Programming: CGIApproved for low risk dataApproved for moderate risk dataNot approved for general high risk dataNot approved for PHI dataWiki: ConfluenceApproved for low risk dataApproved for moderate risk dataNot approved for general high risk dataNot approved for PHI data