Student Education Records (FERPA)

Key: Permission Levels

  • Permitted
  • Permitted with Information Assurance (IA) Consultation
  • Not Permitted

For IA consultation, please contact the ITS Service Center

Protecting sensitive data is a shared responsibility. You are responsible for ensuring that your use of permitted services complies with laws, regulations, and policies where applicable.

Permitted

Permitted with IA Consultation

Not Permitted

Data Type Description 

Records that contain information directly related to a student and that are maintained by the University of Michigan or by a person acting for the university. The Family Educational Rights and Privacy Act (FERPA) governs release of, and access to, student education records. Directory information about a student is not regulated by FERPA and can be released by the university without the student's permission. Students can request non-disclosure from the U-M Registrar's Office.

Data Steward: University Registrar: RO.Compliance@umich.edu

Examples 

  • Student transcripts and grades
  • Degree information
  • Class schedule
  • Advising records
  • Disciplinary records
  • Athletics or department recruiting information
  • Wire transfer information
  • Student tuition bills
  • Advising records
  • Other non-directory information
Andrew File System (AFS): 
With Approval
BlueJeans Video Conferencing: 
Permitted
Canvas: 
Permitted
Cloud Storage Included with Software: 
Not Permitted
CTools: 
Permitted
Data Warehouse: 
Permitted
Desktop Backup (Powered by CrashPlan): 
Permitted
MiDesktop: 
Permitted
Digital Signage: 
Not Permitted
Echo360 - Lecture Capture and LectureTools: 
Permitted
eResearch: 
Permitted
Flux: 
Permitted
Globus: 
Permitted
ITS Exchange Email and Calendar: 
Permitted
Amazon Web Services GovCloud at U-M: 
Permitted
Amazon Web Services (AWS) at U-M: 
Permitted
Box Additional Apps (Non-Core): 
Not Permitted
Box at U-M Core Apps: 
Permitted
Google Non-Core Services: 
Not Permitted
Google Drive at U-M: 
Permitted
Google Mail and Calendar at U-M: 
Permitted
Google at U-M Core Services: 
Permitted
MiDatabase: 
Permitted
MiServer: 
Permitted
MiShare: 
Permitted
MiStorage CIFS with AWS S3 Cloud Storage Integration: 
Permitted
MiStorage (NFS): 
Not Permitted
MiVideo: 
Permitted
MiWorkspace: 
Permitted
Personal Accounts (Dropbox, Slack, etc.): 
Not Permitted
Personally Owned Devices (phone, tablet, laptop, etc.): 
Permitted
Qualtrics: 
Permitted
ServiceNow: 
Permitted
Statistics and Computation Service: 
Permitted
MiBackup: 
Permitted
Turbo Research Storage (NFS): 
Not Permitted
Turbo Research Storage (NFSv4+Kerberos or CIFS): 
Permitted
Michigan Medicine Exchange/Outlook Email and Calendar: 
Permitted
Armis: 
Permitted
Document Imaging System: 
Permitted
SignNow at U-M (E-Signature): 
Permitted
Piazza Q&A: 
Permitted
Dedoose: 
Permitted
Gradescope: 
Permitted
Electronic Research Notebook at U-M: 
Not Permitted
Microsoft Azure at U-M: 
Permitted
Google Cloud Platform at U-M: 
Permitted
Perusall: 
Permitted
Yottabyte Research Cloud: 
Permitted
Microsoft Office 365 at U-M: 
Permitted
LastPass at Michigan Medicine: 
Not Permitted