General

What should an organization ask its provider? Scope of residency What exactly is guaranteed to remain in-region: file content, metadata, indexes, thumbnails, previews, logs, encryption keys, backups, and replicas? Does “in-region processing” include AI inference, content extraction, search indexing, malware scanning, and document previews? Are disaster-recovery copies kept in the same region? Access and transfers Can provider employees, support teams, or sub-processors access the content from outside the region? Which legal entity is the customer contracting with? Where are sub-processors incorporated and where do they process data? What onward-transfer mechanisms and contractual safeguards are used?  The ICO specifically recommends reviewing the provider’s legal entity, global processor network, and transfer arrangements. ICO guidanceCollaboration and lifecycle events What happens when users from different regions collaborate? Which Zone governs a file created in someone e

Dear Box Community, as a follow up to our recent community roundtable, I wanted to provide more background on in-region processing and why it is becoming more important. In this post I will cover the following questions, referencing our Box Zones white paper and other sources.  What counts as in-region processing? Which content operations matter? What trade-offs arise between residency and collaboration? What should an organization ask its provider?   If this is helpful or if you have further questions please comment in the replies! What counts as in-region processing? In-region processing means that content is stored and processed within a customer-selected geographic region, or “Boz Zone.” The Box white paper frames this as covering the content lifecycle - not only primary storage, but also routing, upload, download, and cross-Zone collaboration architecture. Box Zones white paper A Zone includes a primary and backup data center. In Box files are stored according to the top-l

As part of our ongoing commitment to transparency and security, Box is helping our customers navigate the recent updates introduced by the Federal Risk and Authorization Management Program (FedRAMP). As part of the FedRAMP 2026 Consolidated Rules, FedRAMP has introduced significant updates, including new terminology, that affect how federal agencies and cloud providers describe and pursue FedRAMP status. If you use Box to secure and manage your regulated content, this article explains what is changing, why these updates are being made, and what they mean for your organization.Why is the Terminology Changing?The FedRAMP Program Management Office (PMO) updated its language to clarify the distinct roles of Cloud Service Providers (CSPs) and federal agencies under federal security guidelines: Avoiding Confusion with Agency ATOs: The law defines a FedRAMP authorization as "a certification that a cloud computing product or service has completed a FedRAMP authorization process." Transitioning

Hi Box Devs 👋 ​Your agent is only as powerful as the information it can reach. Browserbase opens up the web, and Box transforms what it finds into secure, actionable enterprise knowledge. ​Join us on Wednesday, August 26, 9AM PT for a hands-on technical session packed with live demos of Browserbase and Box powering real-world agent workflows.Sign up here: Browserbase + Box: Unlock your agent’s full capabilities ​In this live webinar, you’ll learn how to: ​Give agents secure access to authenticated websites and browser workflows ​Store, search, and reason over the collected content with Box ​Keep agents and humans working from the same shared context ​Featuring:​Chris Kim — Senior Developer Relations Engineer, BoxKyle Jeong — Growth Engineer, Browserbase​📅 Wednesday, August 26⏰ 9:00–10:00 AM PDT📍 Live on Zoom​Hope to see you there, and bring your questions!

Thank you to everyone who joined our Community Roundtable hosted by ​@Ben Weiner from Box , Katia Krasko, and Stuti Tandon, this session brought together for Box community to explore how organizations can transition from uncontrolled “token maxxing” to strategic, high-ROI AI optimization using the new Box AI Insights Dashboard in the Box Admin Console.   1. Summary & Core PillarsAs organizations rapidly deploy generative AI and custom agents across daily workflows, enterprise admins face a common governance challenge: understanding how AI is being utilized, by whom, at what scale, and at what cost.Without centralized visibility, organizations risk:“Token Maxxing” / Waste: Runaway consumption and inefficient prompt designs without clear business alignment. Budget Surprises: Inability to forecast monthly AI Unit allotments accurately. Siloed Innovation: Missing out on powerful custom agents and automations developed by individual teams.To bridge this governance gap, Box introduced th

Hey all - the Box Customer Success team is fortunate to spend time talking with customers across all industries and company sizes, so we again want to share some of the most common themes we're hearing, along with guidance and resources to help you get the most out of Box: What we're hearing: Security and compliance are top of mind, especially for customers in financial services, legal, healthcare, and government contracting. Box Shield, Shield Pro, and Governance are the most common areas of focus for our customers (after Box AI!) For End Users: Understanding how your organization classifies and protects content helps you work more securely. If you see a classification label on a file, it means your admin has applied a security policy to it. For Box Admins: Shield and Governance give you powerful tools to classify content, detect threats, enforce access policies, and meet compliance requirements (like FINRA, eDiscovery, retention, legal holds). You can learn more about these at the re

That question came up during our recent community roundtable - and it gets to the heart of responsible AI adoption. AI agents can do more than retrieve information. Depending on how they are configured, they may read, summarize, create, move, share, or delete content and trigger actions in other systems. That combination of data access and autonomy creates a new governance challenge: organizations must control not only who can access content, but also what an agent is allowed to do with it. A practical starting point is to establish five principles. 1. Start with data governance, not the AI toolBefore enabling an agent, understand the data it may access: Which content is sensitive, regulated, confidential, or subject to legal hold? Who owns and maintains it? Are permissions current and appropriately scoped? Is content classified consistently? Are there outdated, duplicated, or overshared files that an agent could surface? An AI agent can amplify existing permission and classifi

We are excited to announce a new enhancement to our Box for Microsoft 365 integration, designed to boost mobile productivity by introducing real-time co-authoring support on mobile devices.Key CapabilitiesSeamless Real-Time Collaboration: Users can now co-author documents in real time with colleagues directly from their mobile devices using the Microsoft Word, Excel, or PowerPoint apps. Automatic Saving: All edits and updates are automatically saved back to Box in real time, ensuring version control and data integrity. Flexible Access Points: Users can initiate co-authoring sessions seamlessly by opening files either directly from the Box mobile app or from within the respective Microsoft mobile apps.For Admins: Please ensure that the Box for Microsoft Co-Authoring integration is enabled for your users so they can take advantage of this new enhancement. For more details, please refer to this support article.For Users: To learn more about how to use this integration on your mobile devic

System metadata, like signature requests status, recipient name, date and time stamps, and more, are automatically collected and saved to the final signature request filesWe are excited to introduce the first phase of an integration between Box Sign and Box Metadata, connecting your e-signature requests seamlessly with your content ecosystem. By automatically capturing key signature request details as structured, actionable metadata on every signature request, we made agreements easier to find, organize, and build workflows around. This integration enables your organization to track agreements in real time, automate downstream business processes, and maximize your investment in AI.The initial phase of this integration begins with the ability to automatically create a standardized, read-only Box Sign Global Metadata Template for every signature request. As recipients take action, key transaction details are captured as system metadata and updated in real time, including information such

Thanks to ​@Aikokrishna Box ​@bmalhotra  for todays overview and demo of Box Agent Security and Governance, also thanks to our guests who joined and shared in the Q&A.  You can find the recording here and summary below.   ResourcesSlide deck: https://cloud.box.com/s/bubpp82m5ouhzmsaqlt0wwoesgs78p35Box AI Principles: https://www.box.com/legal/boxaiprinciples Main Topics1. The Rise of AI and Associated Risks: ​@bmalhotra highlighted the rapid adoption of AI agents and the significant security risks they introduce. He notes that traditional network security controls are insufficient as AI agents operate within the enterprise environment. He cites a Gartner statistic that 47% of organizations have already experienced a security incident involving an AI agent, often due to a lack of built-in guardrails and audit trails. Key risks discussed include prompt injection, where malicious instructions hidden in documents can cause an agent to perform unauthorized actions.2. Box's Content-Layer

We have some exciting news for everyone who needs to keep projects moving while away from their desk! We are thrilled to announce that Task Creation is now officially available on the Box Mobile app for both iOS and Android! 🚀We know that great ideas and important action items don't only happen when you are sitting at your computer. With this latest update, we are making task management and delegation completely seamless, no matter where you are.Here is a look at what you can do with Task Creation on Mobile:✅ Assign Tasks to Files — Need a colleague to review a contract or approve a presentation while you are on the go? You can now assign tasks directly to specific files right from your mobile device. Just select the file, assign the task, and keep the workflow moving.👍 Request Approvals Anywhere — Need a quick sign-off? You can easily create an Approval Task from your phone, allowing your teammates to quickly Approve or Reject the request from their end. No more project bottlenecks

Two weeks ago, Box, alongside NVIDIA, Microsoft, IBM, and others, formally signed on to support open weights AI. Open Weights Letter For anyone deep in enterprise IT and content workflows, this is a fundamental recalibration of how we think about building intelligent systems. For a long time, the narrative around AI has felt like a zero-sum game: you either go all-in on proprietary frontier models, or you build everything yourself. But the reality on the ground in finance, life sciences, legal, and healthcare looks completely different. Our community members aren't choosing one camp over the other - they're actively blending them.Here is how this actually plays out in enterprise architecture:Frontier models handle the heavy lifting - advanced reasoning, complex multi-step analysis, and cross-domain synthesis where maximum capability is non-negotiable. Open-weights models step in for specialized, high-volume workloads - letting teams adapt, fine-tune, and post-train models specifically

Thanks ​@jrobbins ​@Scott Picanco Box for yesterday’s overview and demo of metadata extract and confidence scores.  Please see below for the recording, summary and deck.  Topics covered included metadata overview, Box extract updates and roadmap. Live demo of metadata extraction, AI guardrails and confidence scoring, and workflow for invoice processing. Plus live polling and Q&A.  Slide deck here     1. The Value of Structured Data in an Unstructured World​@Scott Picanco Box began by highlighting that while content is the lifeblood of modern organizations, 90% of this data is unstructured, making its value difficult to tap into. He explains that metadata (structured data about data) is the missing link that makes AI truly useful. Applying metadata effectively leads to better decision-making, powers smarter agentic workflows with tools like Box Automate, and dramatically accelerates content search and discovery.  2. Challenges with Traditional Data Extraction​@Scott Picanco Box  out

 We have some exciting news to share! Hubs on Mobile is officially rolling out to General Availability! 🚀📱  We began a phased rollout on Thursday, August 6th, and we expect full availability for all users across both iOS and Android by this Thursday, August 13th.With this release, we are bringing the power of Box Hubs—our most requested capability—directly to your smartphone and tablet. You can now view your curated content portals, including project Hubs, and asset libraries on the go without missing a beat.Here is a look at what you can do with Hubs on Mobile:📍 Hubs in the Navigation Bar — We've added a dedicated Hubs tab right in the bottom navigation bar, making it incredibly fast and easy to find them the moment you open the app.🖼️ Hub Gallery View  — Browse through your Hubs in an intuitive, mobile-optimized gallery layout. You can easily toggle between list and tile views to find what works best for you.🤝 Consistent Experience — Access the exact same curated layouts, featur

Admins and co-admins can leverage the power of AI to automatically generate metadata templates, complete with fields, extraction instructions, and more, directly within Box ExtractWe recently introduced the ability to manually create or leverage the power of AI to automatically generate metadata templates directly within Box Extract. This new capability allows admins and co-admins to create metadata templates directly within Custom Extract Agent builder, without leaving Box Extract. Instead of switching over to the admin console manually create templates, configure individual fields within those templates, activate those templates, and then returning to Box Extract to continue setup, teams can now stay in one streamlined experience from start to finish.While configuring a Custom Extract Agent, admins and co-admins can select up to 10 reference files from Box. Box AI then analyzes those files and automatically creates a metadata template based on the content within those 10 files. Admin

We recently released expanded support for additional file types for when using Custom Extract Agents in Box Extract, enabling enterprises to extract structured data from a broader range of file types and more of your organization's content.This is a follow-up to additional file type support in Box Extract that we launched in February 2026, which introduced support for a defined set of file types. This release expands file type support by including all file types available via the Box Extract API introducing parity with what we already provide programmatically.Box Extract now supports extraction from the following files when using Custom Extract Agents:Images: bmp, cr2, crw, dcm, dicm, dicom, dng, gif, heic, jpeg, jpg, nef, png, raf, raw, svg, tga, tif, tiff, webp Design/CAD: ai, dwg, eps, ps, psd, xbd, xdw Documents: boxcanvas, boxnote, doc, docx, gdoc, msg, odt, pages, pdf, rtf, webdoc, wpd Presentations: gslide, gslides, key, odp, ppt, pptx Spreadsheets: csv, gsheet, numbers, ods, ts