The SharePoint for Harvard service can house Harvard related confidential data that strictly abides by Harvard's security policies. Please refer to the following IT Security website for comprehensive information: http://security.harvard.edu/enterprise-security-policy. Please note that any collaboration involving non-Harvard related confidential information should not be conducted in SharePoint.
In terms of high-risk confidential data (HRCI), SharePoint for Harvard is certified for Level Four HRCI data on dedicated HRCI labelled site collections. For more information on HRCI, please refer to the following IT Security policy: http://policy.security.harvard.edu/ .