Box Security

Protect your files anywhere

security foreground

Enabling the cloud, a safer place for all your content

At Box, we're committed to delivering secure, centralized and cloud-native content services to our customers worldwide. We embed security and resilience not only into our products, but into the very fabric of our enterprise.

Visibility and control

Easily manage access and sharing policies and effectively govern your corporate data, all while minimizing the risk of data loss through full visibility and central management of content, security, policy and provisioning. 

Explore the IT & Admin Controls and learn more about Box Governance to understand how we help you take control of your content security. Plus, you'll learn how Box helps you place legal holds, apply security classifications and manage the entire lifecycle of your documents with retention policies — all without impacting productivity.


Explore our Compliance landscape and learn how Box helps you seamlessly comply with international regulatory standards including ISO 27001, ISO 27018, SOC 1 (SSAE 16), PCI DSS, FedRAMP and HIPAA. Box also provides in-region data storage capabilities, whether you're in Europe, Asia, Canada or Australia, with Box Zones.



Box effectuates EU personal data transfers pursuant to our Processor Global Binding Corporate Rules and Controller Global Binding Corporate Rules (BCRs) approved in August 2016 by the European Data Protection Authorities. Our BCRs FAQs help address common queries and answers. We are certified under the Asia-Pacific Economic Cooperation (APEC) Cross-Border Privacy Rules (CBPR) System and help our customers meet new global privacy obligations such as those relating to the upcoming Global Data Protection Regulation(GDPR). Please review our privacy policy here.

Box also provides you with cost-effective, independent encryption key control and unchangeable audit logs with Box KeySafe, making it easy for you to secure your sensitive content in the cloud.


Box delivers a secure, resilient and highly available service at scale, with over one billion files processed every single day. We use multiple data centers with reliable power sources and backup systems to offer 99.9% SLAs and redundancy.

security partnerships

Security partnerships

An ecosystem of trusted security partners that extend your security controls into the cloud for identity and authentication, network controls, Secure Information and Event Management (SIEM) and analytics, as well as specific solutions for eDiscovery, mobile security and Data Loss Prevention (DLP). Visit the Trust Ecosystem page for more information about our partners and how we integrate their technologies with Box to ensure our customers are always protected with best-in-class security.

Governance webinar

Learn how Engle Martin & Associates use Box Governance to address their compliance needs.

Securing business information in the cloud

Learn how to secure your business information in the cloud.

Transform how your business secures content