Box AI Trust

Enabling the responsible and secure use of enterprise-grade AI

With the adoption of AI, enterprises face unique security, privacy and compliance challenges that must be carefully addressed as regulations continue to evolve. Learn how we at Box support the responsible and secure use of AI and Box AI.

Box AI Principles

The Box AI Principles outline how we protect our customers’ interests and their content. It’s our framework for responsible use of AI within Box, promoting transparency around how Box will use AI and highlights the need for responsible customer use. By adhering to these guidelines, we can all capitalize on the benefits of AI without compromising the integrity of proprietary data or operations.

Our commitment to promoting transparency in AI

We are committed to being transparent about our AI practices, technology, vendors, and data usage. When you choose to enable Box AI, it’s important to us that you understand how Box AI is powered by integrations with large language models (LLMs) supplied by our trusted AI model providers. We continually monitor our integrations with trusted AI service partners to ensure that outputs generated by Box AI remain valid and reliable.

AI security and visibility

Stay confident with AI capabilities that mitigate security threats — plus robust encryption, access controls, and advanced security measures (all extended to Box AI). Maintain transparency across AI-enabled products and users, and rest assured that we never train on enterprise data used by AI model providers without your prior approval. Leverage the latest AI solutions, like secure RAG, while maintaining peace of mind with our commitment to protecting your sensitive data.

AI privacy

Securing our customers’ content and protecting their privacy rights is at the heart of the Intelligent Content Management platform. That’s why when we created Box AI, we took a privacy-first approach. We apply privacy requirements to our product designs, policies, and third party service provider assessments — and we’re proud to maintain many of the highest standards and certifications in privacy and data protection.

AI compliance

Box prides itself on having a robust compliance program that maintains various certifications across industries and geographies, as reflected on our Trust Center. We work with government agencies, industry associations, and our auditors to incorporate new requirements and controls around AI as they become available. We will continue to drive the same frictionless compliance for Box AI that customers have come to expect across all our solutions.

AI governance

Our AI Governance Program regularly reviews legal, regulatory, technical, compliance, and security considerations as well as requirements specific to industry, sector, and business purposes. Our program incorporates standards such as the National Institute of Standards and Technology AI Risk Management Framework (NIST AI RMF) and the Organization for Economic Co-operation and Development (OECD) AI Principles.

Box AI trusted models

Learn more about supported AI models

Frequently Asked Questions

What is Box’s approach to incorporating AI into its product offering?

Box AI is not a single product but rather a set of capabilities that integrates advanced third-party AI models into Box’s existing products and features. Box AI will allow users to:

• Drive business insights instantly by allowing users to ask questions about a document’s content, pull out insights from a spreadsheet, or summarize a presentation, all with just one click.
• Create content in seconds by allowing users to quickly, for instance, draft emails, newsletters, or blog posts from the ground up in different tones, lengths, and styles, or develop agendas, manuals, and reports that build upon information that is already stored in Box.
• Automate workflows, tasks, metadata generation, and other process to deliver faster business outcomes (coming soon).

What AI models does Box integrate with?

Box AI takes a platform-neutral approach to AI models to allow the best AI models to be applied depending on the need and, therefore, uses of AI foundational models. In March 2024, we announced the general availability of Box AI for Enterprise Plus customers with the integration of Microsoft Azure OpenAI Service’s GPT-3.5/GPT-4.

Currently, Box AI uses AI foundational models from multiple vendors, such as Microsoft Azure, Google, and others. We have a commitment to transparency of AI models, and we will always provide information on which models are used. In our efforts to provide our customers the latest and best in class advanced models, we continue to evaluate other AI service partners.

Does Box permit AI models to train on customer content?

As one of the core pillars of Box’s AI Principles, Box will not train AI models on our customers’ content without their explicit approval.

Who has or will have access to the Box AI prompts and resulting outputs?

Box AI is governed by Box’s built-in permissions and designed to keep customers in control of their data so users can only see and interact with the files and content they are allowed to access.

How has Box implemented responsible AI?

Box evaluates the large language models (LLMs) offered by our trusted AI service partners on a trust and safety basis. Box will only engage with providers that have rigorous controls in place to prevent biased and discriminatory outputs. Additionally, Box has a large suite of use cases that we regularly test all models we integrate with to ensure they meet our high standards of quality and safety.

Does Box have an AI governance program?

Our AI governance team regularly reviews legal, regulatory, technical, compliance and security considerations as well as requirements specific to industry, sector, and business purposes. Representatives from our security, legal, compliance and product departments work closely with our engineering team focused on AI to support efforts to meet our customers’ needs. Our AI governance program incorporates standards such as the National Institute of Standards and Technology AI Risk Management Framework (NIST AI RMF) and the Organization for Economic Co-operation and Development (OECD) AI Principles.