When you add or open a file in Box Drive, Box copies the file into the Drive cache folder, which creates a local copy of the file.
Box has also confirmed that this cache folder is not encrypted.
If you work for an organization that must keep sensitive data off of local machines, what is your work around? We thought using only the Box Online option and restricting Box Drive usage was an option but all files still open locally.
The entire purpose of Box is to eliminate the need for sensitive data to be saved on local machines, but because of how the cache folder operates, that is not possible.