Last Updated: June 26, 2020
To support Box, Inc. (“Box” or “we”), in delivering the Box Service, we may engage third party service providers (“Subprocessors”) to assist with its data processing activities. Subprocessors and Box’s affiliates and subsidiaries (“Box Group Companies”) may process, store or otherwise access certain customer information or personal data found in customer Content in order to support and/or improve the Box Service. Unless otherwise specified, capitalized terms that are used on this page have the meaning set forth in the Box Terms of Service or in a superseding written agreement between Box and a particular Box customer. This information is provided in compliance with Box's General Data Protection Regulation (GDPR) obligations as a Processor, pursuant to its Processor Binding Corporate Rules Policy and other applicable legal and/or contractual obligations.
Before engaging any Subprocessor, we perform due diligence of such Subprocessor's privacy, information security, and data protection practices. We enter into written agreements with Subprocessors that enforce compliance with applicable data protection laws, security controls, confidentiality and international data transfer requirements. We also restrict Subprocessor access to only what is necessary to maintain and provide the Box Service to our customers. Subprocessors are strictly prohibited from using customer data, Content or personal data for any purpose other than to support Box in providing the Service to its customers.
The following table identifies the Subprocessors used by Box, the type of services that may be provided, and the location where such subprocessing activities are performed.
|Subprocessor||Category of Services||Location|
|Amazon Web Services, Inc.||Analytics, compute, database, machine learning, networking, and storage||United States of America*|
|Google, LLC.||Analytics, compute, database, machine learning, networking, and storage||United States of America*|
|International Business Machines ("IBM") Corporation||Analytics, compute, database, machine learning, networking, and storage||United States of America*|
|Microsoft Corporation||Analytics, compute, database, machine learning, networking, and storage||United States of America*|
|TaskUs, LLC.||Billing, technical, and customer support||Philippines|
|Zendesk, Inc.||User relationship management, customer and user support||United States of America|
*And other regions if selected by the respective customer
As our business and technical requirements change, we may from time to time remove or add Subprocessors, or we may engage an existing Subprocessor to perform additional services for us, if we believe that doing so will enhance our ability to deliver the Box Service. We will periodically update this page to reflect changes to our Subprocessors. If you wish to receive notifications of updates to this Box Subprocessors Page, please click here. If you have any questions about our subprocessing activities, please contact email@example.com.
The following entities are members of Box Group Companies:
|Box Group Member Name||Country|
|KK Box Japan||Japan|
|Box Intl. Holdings Ltd.||United Kingdom|
|Box Intl. Technology Ltd.||United Kingdom|
|Box.com (UK) Ltd.||United Kingdom|
|Box France SARL||France|
|Box Deutschland GmbH||Germany|
|Box Canada, Inc.||Canada|
|Box.com Australia Pty Ltd.||Australia|
|Secure Cloud Collaboration Sweden AB||Sweden|
|Box Netherlands BV||Netherlands|
|Box, Inc.||United States of America|
|Box Poland Spółka z ograniczoną odpowiedzialnością||Poland|