This listing is not intended to be exhaustive and is meant to serve as a point-in-time list of approved or disapproved public cloud services as of the revision date in this appendix. Any cloud service not explicitly listed as approved should be assumed to be not approved until documented otherwise. 

Services Approved: 

• Box (Restricted*, Contact IT for access) 
• Evernote (Sync, restricted*) 
• Microsoft Azure (Hosted Office365) 
• Microsoft OneNote (Sync, restricted*) 
• Vendor Due Diligence approved and documented point solutions currently in use and subject to restrictions* 
• Wrike (SaaS, IT project management, restricted*) 

Services Not Approved:

• Amazon Cloud Drive 
• Apple iCloud 
• AWS 
• Citrix Sharefile** 
• Dropbox 
• Google Drive 
• Microsoft OneDrive 
• Mimecast** 
• Samanage** 
• Sophos Central** 
• Text Concierge (MEA Financial)** 
• Other public cloud compute, storage, and sharing platforms 

* Limited by user and intended use. See restrictions on data classification use in the main policy body 

**Approval under review as of the date of this revision