Does aggregation preserve security classifications from source systems?

Yes. Source-system permissions, classification labels, and audience restrictions are carried into Centralpoint and combined with Centralpoint's own audience and role model. A record marked confidential in SharePoint stays confidential after aggregation and is only visible to users with matching audience membership.