In cases where Harvard is outsourcing management or processing of confidential information to an external service provider, the University contracting agent is required to choose an external service provider capable of maintaining appropriate safeguards for covered data. All vendors having access to Harvard confidential information or performing functions such as credit card processing must agree to protect this information. Service providers under contract with Harvard to handle, maintain, process or otherwise have access to confidential data are required to use the contract riders suited to the purposes described herein.

• Contract Rider - Hosting (doc 26K)
• Contract Rider for Protecting Credit Card Information (doc 23.5K)