Reviewed Tools - OneDrive

The guide is designed to help you make informed decisions about where to safely store and share university data. This guide is not intended to be a complete or comprehensive catalog of storage services available at UW-Madison.

You are responsible for ensuring that your use of this service complies with laws, policies, and regulations where applicable. See Compliance below for details.


Permitted with Cybersecurity Consultation

Not Permitted

  • 2020-12-07_10-28-42.pngProtected Health Information (HIPAA)
  • 2020-12-07_10-28-42.pngSensitive Identifiable Human Subject Research
  • 2020-12-07_10-28-42.pngSocial Security Numbers
  • 2020-12-07_10-28-42.pngStudent Loan Application Information (GLBA)
  • 2020-12-07_10-28-42.pngAttorney - Client Privileged Information
  • 2020-12-07_10-28-42.pngControlled Unclassified Information (CUI)
  • 2020-12-07_10-28-42.pngCredit Card or Payment Card Industry (PCI) Information
  • 2020-12-07_10-28-42.pngExport Controlled Research (ITAR, EAR)
  • 2020-12-07_10-28-42.pngFederal Information Security Management Act (FISMA) Data
  • 2020-12-07_10-28-42.pngOther Sensitive Institutional Data

Service Description 

Microsoft OneDrive, or simply OneDrive, is a file hosting service and synchronization service operated by Microsoft as part of its web version of Office.

OneDrive storage is provisioned on a per user basis and is designed to serve the needs of individual users.

Storage of data other than an individual user's work files, including system back-ups and departmental and organizational level data, is not supported, nor is the assignment of a per user license to a bot, department, or other non-human entity. SharePoint is the best solution for more advanced content management and collaboration, including storing and managing files, communications, and intranet sites across a team or organization.


HIPAA beholden entities such as the UW-Madison Health Care Component must conduct a security risk assessment to evaluate software, and identify any gaps in security. This has not been completed for OneDrive. As such it is not approved for use with Protected Health Information.

Keywordscybersecurity, risk, assessment, tools, storage, PHI, OneDrive   Doc ID109085
OwnerPeter V.GroupCybersecurity
Created2021-02-16 10:19:06Updated2021-02-16 11:36:20
SitesOffice of Cybersecurity
Feedback  1   0